[ 559.595737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 559.623940] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 559.641780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 559.649886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 559.670134] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 559.676198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 559.711832] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 559.729901] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 559.736181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 559.747574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 559.796410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.015453] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 560.044812] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 560.063968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 560.072521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 560.163153] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 560.196286] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 560.237773] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 560.255366] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 560.277481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 560.284926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 560.310863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 560.330301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 560.351519] device veth0_vlan entered promiscuous mode [ 560.372812] device veth1_vlan entered promiscuous mode [ 560.391893] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 560.422097] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 560.461512] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 560.483626] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 560.509512] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 560.519700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 560.539998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 560.559852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 560.581604] device veth0_macvtap entered promiscuous mode [ 560.590661] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 560.611904] device veth1_macvtap entered promiscuous mode [ 560.630876] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 560.660797] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 560.693439] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 560.760007] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 560.805608] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 560.820158] CPU: 1 PID: 19936 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 560.828072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.837417] Call Trace: [ 560.839999] dump_stack+0x1b2/0x281 [ 560.843616] dump_header+0x178/0x82f [ 560.847366] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 560.852482] ? ___ratelimit+0x2cd/0x530 [ 560.856443] oom_kill_process.cold+0x10/0xb18 [ 560.860958] out_of_memory+0xe3e/0x1190 [ 560.864954] ? oom_killer_disable+0x1c0/0x1c0 [ 560.869438] ? mutex_trylock+0x152/0x1a0 [ 560.873567] __alloc_pages_nodemask+0x23e1/0x2720 [ 560.878444] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 560.883302] alloc_pages_current+0x155/0x260 [ 560.887704] filemap_fault+0xea3/0x1980 [ 560.891681] ext4_filemap_fault+0x84/0xb0 [ 560.895823] __do_fault+0xfa/0x380 [ 560.899353] __handle_mm_fault+0x2497/0x4620 [ 560.903754] ? vm_insert_page+0x7c0/0x7c0 [ 560.907913] ? task_work_run+0xfd/0x190 [ 560.911884] handle_mm_fault+0x391/0x860 [ 560.915966] __do_page_fault+0x549/0xad0 [ 560.920021] ? spurious_fault+0x640/0x640 [ 560.924158] ? do_page_fault+0x60/0x500 [ 560.928147] ? page_fault+0x2f/0x50 [ 560.931761] page_fault+0x45/0x50 [ 560.935231] RIP: 14a4370:0x3 [ 560.938247] RSP: 14a4320:0000000000000001 EFLAGS: 00000000 [ 560.939557] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 560.955862] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 560.963961] Mem-Info: [ 560.966889] active_anon:13121 inactive_anon:25010 isolated_anon:0 [ 560.966889] active_file:26 inactive_file:0 isolated_file:34 [ 560.966889] unevictable:0 dirty:23 writeback:0 unstable:0 [ 560.966889] slab_reclaimable:12745 slab_unreclaimable:120656 [ 560.966889] mapped:52719 shmem:25362 pagetables:740 bounce:0 [ 560.966889] free:14110 free_pcp:6 free_cma:0 [ 561.002305] Node 0 active_anon:51592kB inactive_anon:74196kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174132kB dirty:0kB writeback:48kB shmem:75508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 561.011355] syz-executor.4: [ 561.030917] Node 1 active_anon:864kB inactive_anon:25844kB active_file:76kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36672kB dirty:0kB writeback:4kB shmem:25940kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 561.035367] page allocation failure: order:0 [ 561.061217] Node 0 [ 561.064809] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 561.065641] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 561.071574] (null) [ 561.076164] lowmem_reserve[]: [ 561.108042] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 561.125838] 0 2717 2718 2718 2718 [ 561.129529] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 561.134661] CPU: 1 PID: 19971 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 561.142548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.143374] syz-executor.4 cpuset= [ 561.151920] Call Trace: [ 561.151944] dump_stack+0x1b2/0x281 [ 561.151957] warn_alloc.cold+0x96/0x1cc [ 561.151968] ? zone_watermark_ok_safe+0x220/0x220 [ 561.151977] ? usleep_range+0x130/0x130 [ 561.151990] ? try_to_free_pages+0x23f/0x6e0 [ 561.155520] / [ 561.158094] ? _find_next_bit+0xdb/0x100 [ 561.161751] mems_allowed=0-1 [ 561.165677] ? run_timer_softirq+0x5a0/0x5a0 [ 561.192130] __alloc_pages_nodemask+0x2127/0x2720 [ 561.196983] ? lock_acquire+0x170/0x3f0 [ 561.200964] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 561.205810] ? ion_page_pool_alloc+0x9e/0x1b0 [ 561.210355] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 561.215826] ? alloc_pages_current+0x84/0x260 [ 561.220328] alloc_pages_current+0x155/0x260 [ 561.224747] ion_page_pool_alloc+0x118/0x1b0 [ 561.229164] ion_system_heap_allocate+0x133/0x8c0 [ 561.234041] ? ion_alloc+0x187/0x810 [ 561.237763] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 561.243221] ? ion_system_contig_heap_create+0x130/0x130 [ 561.248673] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 561.253704] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 561.258557] ion_alloc+0x204/0x810 [ 561.262112] ? ion_dma_buf_release+0x40/0x40 [ 561.266539] ? __might_fault+0x177/0x1b0 [ 561.270626] ion_ioctl+0xea/0x1f0 [ 561.274095] ? ion_query_heaps+0x360/0x360 [ 561.278330] ? ion_query_heaps+0x360/0x360 [ 561.282555] do_vfs_ioctl+0x75a/0xff0 [ 561.286434] ? ioctl_preallocate+0x1a0/0x1a0 [ 561.290835] ? lock_downgrade+0x740/0x740 [ 561.294978] ? __fget+0x225/0x360 [ 561.298422] ? do_vfs_ioctl+0xff0/0xff0 [ 561.302388] ? security_file_ioctl+0x83/0xb0 [ 561.306788] SyS_ioctl+0x7f/0xb0 [ 561.310145] ? do_vfs_ioctl+0xff0/0xff0 [ 561.314131] do_syscall_64+0x1d5/0x640 [ 561.318019] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 561.323211] RIP: 0033:0x466459 [ 561.326402] RSP: 002b:00007f98f1e65188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 561.334105] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 561.341381] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 561.348640] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 561.355901] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 561.363248] R13: 00007ffde3ff81ef R14: 00007f98f1e65300 R15: 0000000000022000 [ 561.370531] CPU: 0 PID: 19968 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 561.379382] Node 0 [ 561.379564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.379585] DMA32 free:17900kB min:36200kB low:45248kB high:54296kB active_anon:51564kB inactive_anon:74196kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7360kB pagetables:2608kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 561.381807] Call Trace: [ 561.393465] lowmem_reserve[]: [ 561.419207] dump_stack+0x1b2/0x281 [ 561.419221] warn_alloc.cold+0x96/0x1cc [ 561.419232] ? zone_watermark_ok_safe+0x220/0x220 [ 561.419242] ? usleep_range+0x130/0x130 [ 561.419250] ? try_to_free_pages+0x23f/0x6e0 [ 561.419258] ? _find_next_bit+0xdb/0x100 [ 561.419268] ? run_timer_softirq+0x5a0/0x5a0 [ 561.419282] __alloc_pages_nodemask+0x2127/0x2720 [ 561.419299] ? lock_acquire+0x170/0x3f0 [ 561.419315] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 561.419326] ? ion_page_pool_alloc+0x9e/0x1b0 [ 561.419339] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 561.419355] ? alloc_pages_current+0xe3/0x260 [ 561.419365] alloc_pages_current+0x155/0x260 [ 561.419377] ion_page_pool_alloc+0x118/0x1b0 [ 561.419388] ion_system_heap_allocate+0x133/0x8c0 [ 561.419398] ? _raw_spin_unlock+0x29/0x40 [ 561.419406] ? _ion_heap_freelist_drain+0x6e/0x410 [ 561.419416] ? ion_system_contig_heap_create+0x130/0x130 [ 561.419425] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 561.419435] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 561.419446] ion_alloc+0x27a/0x810 [ 561.419459] ? ion_dma_buf_release+0x40/0x40 [ 561.419471] ? __might_fault+0x177/0x1b0 [ 561.419484] ion_ioctl+0xea/0x1f0 [ 561.419493] ? ion_query_heaps+0x360/0x360 [ 561.419507] ? ion_query_heaps+0x360/0x360 [ 561.419517] do_vfs_ioctl+0x75a/0xff0 [ 561.419527] ? ioctl_preallocate+0x1a0/0x1a0 [ 561.419535] ? lock_downgrade+0x740/0x740 [ 561.419548] ? __fget+0x225/0x360 [ 561.419559] ? do_vfs_ioctl+0xff0/0xff0 [ 561.427646] 0 [ 561.428877] ? security_file_ioctl+0x83/0xb0 [ 561.432848] 0 [ 561.437677] SyS_ioctl+0x7f/0xb0 [ 561.437686] ? do_vfs_ioctl+0xff0/0xff0 [ 561.437697] do_syscall_64+0x1d5/0x640 [ 561.437713] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 561.437721] RIP: 0033:0x466459 [ 561.437726] RSP: 002b:00007ff90c340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 561.437736] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 561.437741] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 561.437746] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 561.437751] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 561.437756] R13: 00007ffce90c212f R14: 00007ff90c340300 R15: 0000000000022000 [ 561.463370] Mem-Info: [ 561.465823] 0 [ 561.481455] active_anon:13135 inactive_anon:25010 isolated_anon:0 [ 561.481455] active_file:17 inactive_file:16 isolated_file:0 [ 561.481455] unevictable:0 dirty:0 writeback:0 unstable:0 [ 561.481455] slab_reclaimable:12730 slab_unreclaimable:120672 [ 561.481455] mapped:52692 shmem:25361 pagetables:718 bounce:0 [ 561.481455] free:13892 free_pcp:0 free_cma:0 [ 561.485907] 0 [ 561.496153] Node 0 active_anon:51584kB inactive_anon:74196kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:75508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 561.496993] 0 [ 561.505358] Node 1 active_anon:956kB inactive_anon:25844kB active_file:52kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36680kB dirty:0kB writeback:0kB shmem:25936kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 561.519827] Node 0 [ 561.522598] Node 0 [ 561.525106] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 561.529550] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 561.529554] lowmem_reserve[]: 0 0 0 0 0 [ 561.529574] Node 1 Normal free:26712kB min:53696kB low:67120kB high:80544kB active_anon:956kB inactive_anon:25844kB active_file:52kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 561.529593] lowmem_reserve[]: 0 0 [ 561.545735] lowmem_reserve[]: [ 561.551522] 0 [ 561.559382] 0 [ 561.561800] 0 [ 561.565501] 2717 [ 561.569494] 0 [ 561.581739] 2718 [ 561.599929] 2718 [ 561.603147] Node 0 [ 561.620281] 2718 [ 561.625093] DMA: [ 561.677617] 1*4kB [ 561.727338] Node 0 [ 561.777372] (M) [ 561.794681] DMA32 free:26784kB min:36200kB low:45248kB high:54296kB active_anon:51564kB inactive_anon:74196kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7360kB pagetables:2608kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 561.889953] lowmem_reserve[]: 0 0 0 0 0 [ 561.894861] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 561.927524] lowmem_reserve[]: 0 0 0 0 0 [ 561.932115] Node 1 Normal free:186812kB min:53696kB low:67120kB high:80544kB active_anon:956kB inactive_anon:25844kB active_file:52kB inactive_file:3848kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:260kB bounce:0kB free_pcp:780kB local_pcp:48kB free_cma:0kB [ 561.957642] 3*8kB (UME) 3*16kB (ME) 4*32kB (UME) 4*64kB (UME) 4*128kB (UE) 7*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10956kB [ 561.968176] lowmem_reserve[]: 0 0 0 0 0 [ 561.983061] Node 0 DMA: 14*4kB (U) 2*8kB (UE) 3*16kB (UME) 2*32kB (UE) 6*64kB (UME) 4*128kB (UE) 7*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11064kB [ 562.002999] Node 0 DMA32: 1342*4kB (UMEH) 1138*8kB (UMEH) 246*16kB (UMEH) 235*32kB (UMEH) 26*64kB (UMEH) 10*128kB (UMEH) 20*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33992kB [ 562.023950] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 562.027337] Node 0 DMA32: 1342*4kB (UMEH) 1293*8kB (UMEH) 256*16kB (UMEH) 240*32kB (UMEH) 26*64kB (UMEH) 10*128kB (UMEH) 20*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35552kB [ 562.061110] Node 1 Normal: 203*4kB (UM) 6*8kB (UM) 72*16kB (U) 1346*32kB (UM) 1780*64kB (UM) 177*128kB (UM) 43*256kB (UM) 38*512kB (UM) 13*1024kB (UM) 1*2048kB (U) 0*4096kB = 227484kB [ 562.097337] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 562.121789] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 562.127759] Node 1 Normal: 207*4kB (UM) 7*8kB (UM) 5*16kB (U) 1344*32kB (UM) 2062*64kB (UM) 183*128kB (UM) 43*256kB (UM) 38*512kB (UM) 13*1024kB (UM) 1*2048kB (U) 0*4096kB = 245188kB [ 562.147375] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 562.151393] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 562.156218] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 562.173953] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 562.197584] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 562.201053] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 562.206447] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 562.231424] 26430 total pagecache pages [ 562.235436] 0 pages in swap cache [ 562.247462] 26430 total pagecache pages [ 562.251147] Swap cache stats: add 0, delete 0, find 0/0 [ 562.251468] 0 pages in swap cache [ 562.256837] Free swap = 0kB [ 562.277400] Swap cache stats: add 0, delete 0, find 0/0 [ 562.282832] Free swap = 0kB [ 562.285866] Total swap = 0kB [ 562.287342] Total swap = 0kB [ 562.292133] 2097051 pages RAM [ 562.295263] 0 pages HighMem/MovableOnly [ 562.303434] 363841 pages reserved [ 562.306917] 0 pages cma reserved [ 562.307388] 2097051 pages RAM [ 562.314861] 0 pages HighMem/MovableOnly [ 562.327532] 363841 pages reserved [ 562.331042] 0 pages cma reserved [ 562.334408] Out of memory (oom_kill_allocating_task): Kill process 19936 (syz-executor.1) score 0 or sacrifice child [ 562.357394] Killed process 19936 (syz-executor.1) total-vm:93120kB, anon-rss:84kB, file-rss:33688kB, shmem-rss:0kB [ 562.394021] oom_reaper: reaped process 19936 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 05:07:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:07:03 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:07:03 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) msgctl$IPC_STAT(0x0, 0x2, 0x0) 05:07:03 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:07:03 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) [ 563.022709] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 563.040165] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 563.047663] CPU: 0 PID: 19971 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 563.055556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.064907] Call Trace: [ 563.067512] dump_stack+0x1b2/0x281 [ 563.071143] warn_alloc.cold+0x96/0x1cc [ 563.075120] ? zone_watermark_ok_safe+0x220/0x220 [ 563.079976] __alloc_pages_nodemask+0x2127/0x2720 [ 563.084841] ? lock_acquire+0x170/0x3f0 [ 563.088821] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 563.093675] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 563.099128] ? __mutex_unlock_slowpath+0x75/0x770 [ 563.103971] ? alloc_pages_current+0xe3/0x260 [ 563.108469] alloc_pages_current+0x155/0x260 [ 563.112882] ion_page_pool_alloc+0x118/0x1b0 [ 563.117287] ion_system_heap_allocate+0x133/0x8c0 [ 563.122130] ? _raw_spin_unlock+0x29/0x40 [ 563.126274] ? _ion_heap_freelist_drain+0x6e/0x410 [ 563.131199] ? ion_system_contig_heap_create+0x130/0x130 [ 563.136645] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 563.141658] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 563.146501] ion_alloc+0x27a/0x810 [ 563.150061] ? ion_dma_buf_release+0x40/0x40 [ 563.154469] ? __might_fault+0x177/0x1b0 [ 563.158530] ion_ioctl+0xea/0x1f0 [ 563.161982] ? ion_query_heaps+0x360/0x360 [ 563.166220] ? ion_query_heaps+0x360/0x360 [ 563.170455] do_vfs_ioctl+0x75a/0xff0 [ 563.174254] ? ioctl_preallocate+0x1a0/0x1a0 [ 563.178657] ? lock_downgrade+0x740/0x740 [ 563.182805] ? __fget+0x225/0x360 [ 563.186251] ? do_vfs_ioctl+0xff0/0xff0 [ 563.190244] ? security_file_ioctl+0x83/0xb0 [ 563.194651] SyS_ioctl+0x7f/0xb0 [ 563.198011] ? do_vfs_ioctl+0xff0/0xff0 [ 563.201979] do_syscall_64+0x1d5/0x640 [ 563.205869] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 563.211053] RIP: 0033:0x466459 [ 563.214318] RSP: 002b:00007f98f1e65188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.222023] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 563.229290] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 563.236573] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 563.243842] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 563.251112] R13: 00007ffde3ff81ef R14: 00007f98f1e65300 R15: 0000000000022000 [ 563.333735] warn_alloc_show_mem: 1 callbacks suppressed [ 563.333740] Mem-Info: [ 563.362457] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 563.363442] syz-executor.2: [ 563.402489] active_anon:13271 inactive_anon:25009 isolated_anon:0 [ 563.402489] active_file:1385 inactive_file:4921 isolated_file:21 [ 563.402489] unevictable:0 dirty:39 writeback:0 unstable:0 [ 563.402489] slab_reclaimable:12718 slab_unreclaimable:120015 [ 563.402489] mapped:48359 shmem:25359 pagetables:770 bounce:0 [ 563.402489] free:44137 free_pcp:178 free_cma:0 [ 563.411161] syz-executor.4 cpuset= [ 563.449186] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 563.483133] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 563.516893] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 563.517102] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 563.533680] CPU: 1 PID: 20217 Comm: syz-executor.3 Not tainted 4.14.227-syzkaller #0 [ 563.534804] syz-executor.0: [ 563.542626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.542630] Call Trace: [ 563.542651] dump_stack+0x1b2/0x281 [ 563.542665] warn_alloc.cold+0x96/0x1cc [ 563.542677] ? zone_watermark_ok_safe+0x220/0x220 [ 563.542703] __alloc_pages_nodemask+0x2127/0x2720 [ 563.550341] page allocation failure: order:4 [ 563.555065] ? lock_acquire+0x170/0x3f0 [ 563.555082] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 563.565305] Node 0 active_anon:52236kB inactive_anon:74204kB active_file:6472kB inactive_file:10408kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:152952kB dirty:72kB writeback:0kB shmem:75512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 563.570061] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 563.570073] ? __mutex_unlock_slowpath+0x75/0x770 [ 563.570089] alloc_pages_current+0x155/0x260 [ 563.570104] ion_page_pool_alloc+0x118/0x1b0 [ 563.578122] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 563.579355] ion_system_heap_allocate+0x133/0x8c0 [ 563.579369] ? ion_alloc+0x187/0x810 [ 563.588469] (null) [ 563.617223] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 563.617237] ? ion_system_contig_heap_create+0x130/0x130 [ 563.617246] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 563.617258] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 563.617273] ion_alloc+0x204/0x810 [ 563.622818] Node 1 active_anon:748kB inactive_anon:25832kB active_file:1168kB inactive_file:3992kB unevictable:0kB isolated(anon):0kB isolated(file):96kB mapped:41284kB dirty:84kB writeback:0kB shmem:25924kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 563.627569] ? ion_dma_buf_release+0x40/0x40 [ 563.627582] ? __might_fault+0x177/0x1b0 [ 563.627594] ion_ioctl+0xea/0x1f0 [ 563.627604] ? ion_query_heaps+0x360/0x360 [ 563.627617] ? ion_query_heaps+0x360/0x360 [ 563.627632] do_vfs_ioctl+0x75a/0xff0 [ 563.642764] Node 0 [ 563.643530] ? ioctl_preallocate+0x1a0/0x1a0 [ 563.654943] DMA free:11076kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:92kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 563.659627] ? lock_downgrade+0x740/0x740 [ 563.659642] ? __fget+0x225/0x360 [ 563.659656] ? do_vfs_ioctl+0xff0/0xff0 [ 563.671756] lowmem_reserve[]: [ 563.674921] ? security_file_ioctl+0x83/0xb0 [ 563.674934] SyS_ioctl+0x7f/0xb0 [ 563.686113] 0 [ 563.706084] ? do_vfs_ioctl+0xff0/0xff0 [ 563.706097] do_syscall_64+0x1d5/0x640 [ 563.706114] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 563.706123] RIP: 0033:0x466459 [ 563.706127] RSP: 002b:00007f42379f8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.706138] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 563.706147] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 563.723372] syz-executor.0 cpuset= [ 563.726622] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 563.726628] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 563.726633] R13: 00007ffef8958def R14: 00007f42379f8300 R15: 0000000000022000 [ 563.745745] / [ 563.765558] CPU: 0 PID: 20216 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 563.802928] mems_allowed=0-1 [ 563.803489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.873045] Call Trace: [ 563.875632] dump_stack+0x1b2/0x281 [ 563.879263] warn_alloc.cold+0x96/0x1cc [ 563.883235] ? zone_watermark_ok_safe+0x220/0x220 [ 563.888089] __alloc_pages_nodemask+0x2127/0x2720 [ 563.892940] ? lock_acquire+0x170/0x3f0 [ 563.896919] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 563.901795] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 563.907685] ? __mutex_unlock_slowpath+0x75/0x770 [ 563.912529] alloc_pages_current+0x155/0x260 [ 563.916940] ion_page_pool_alloc+0x118/0x1b0 [ 563.921349] ion_system_heap_allocate+0x133/0x8c0 [ 563.926362] ? ion_alloc+0x187/0x810 [ 563.930073] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 563.935518] ? ion_system_contig_heap_create+0x130/0x130 [ 563.940962] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 563.945975] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 563.950823] ion_alloc+0x204/0x810 [ 563.954384] ? ion_dma_buf_release+0x40/0x40 [ 563.958794] ? __might_fault+0x177/0x1b0 [ 563.962875] ion_ioctl+0xea/0x1f0 [ 563.966327] ? ion_query_heaps+0x360/0x360 [ 563.970564] ? ion_query_heaps+0x360/0x360 [ 563.974798] do_vfs_ioctl+0x75a/0xff0 [ 563.978631] ? ioctl_preallocate+0x1a0/0x1a0 [ 563.983034] ? lock_downgrade+0x740/0x740 [ 563.987180] ? __fget+0x225/0x360 [ 563.990630] ? do_vfs_ioctl+0xff0/0xff0 [ 563.994598] ? security_file_ioctl+0x83/0xb0 [ 563.999001] SyS_ioctl+0x7f/0xb0 [ 564.002362] ? do_vfs_ioctl+0xff0/0xff0 [ 564.006333] do_syscall_64+0x1d5/0x640 [ 564.010314] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 564.015493] RIP: 0033:0x466459 [ 564.018695] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 564.025948] / [ 564.026395] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 564.027045] mems_allowed=0-1 [ 564.028101] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 564.028107] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 564.028111] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 564.028117] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 564.055020] 2717 [ 564.060840] CPU: 1 PID: 20215 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 564.072066] 2718 [ 564.077939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.077944] Call Trace: [ 564.077965] dump_stack+0x1b2/0x281 [ 564.077980] warn_alloc.cold+0x96/0x1cc [ 564.077992] ? zone_watermark_ok_safe+0x220/0x220 [ 564.078016] __alloc_pages_nodemask+0x2127/0x2720 [ 564.080167] 2718 [ 564.089417] ? lock_acquire+0x170/0x3f0 [ 564.089434] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 564.089453] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 564.089465] ? __mutex_unlock_slowpath+0x75/0x770 [ 564.089480] alloc_pages_current+0x155/0x260 [ 564.089494] ion_page_pool_alloc+0x118/0x1b0 [ 564.089506] ion_system_heap_allocate+0x133/0x8c0 [ 564.099847] 2718 [ 564.104493] ? ion_alloc+0x187/0x810 [ 564.104505] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 564.104516] ? ion_system_contig_heap_create+0x130/0x130 [ 564.104527] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 564.104538] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 564.104549] ion_alloc+0x204/0x810 [ 564.144128] ? ion_dma_buf_release+0x40/0x40 [ 564.144143] ? __might_fault+0x177/0x1b0 [ 564.144155] ion_ioctl+0xea/0x1f0 [ 564.146281] Node 0 [ 564.149922] ? ion_query_heaps+0x360/0x360 [ 564.149936] ? ion_query_heaps+0x360/0x360 [ 564.149946] do_vfs_ioctl+0x75a/0xff0 [ 564.149959] ? ioctl_preallocate+0x1a0/0x1a0 [ 564.149969] ? lock_downgrade+0x740/0x740 [ 564.149983] ? __fget+0x225/0x360 [ 564.149993] ? do_vfs_ioctl+0xff0/0xff0 [ 564.161126] DMA32 free:218632kB min:36200kB low:45248kB high:54296kB active_anon:52140kB inactive_anon:74204kB active_file:5904kB inactive_file:10528kB unevictable:0kB writepending:164kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7392kB pagetables:2796kB bounce:0kB free_pcp:788kB local_pcp:152kB free_cma:0kB [ 564.165884] ? security_file_ioctl+0x83/0xb0 [ 564.165897] SyS_ioctl+0x7f/0xb0 [ 564.165905] ? do_vfs_ioctl+0xff0/0xff0 [ 564.165917] do_syscall_64+0x1d5/0x640 [ 564.170837] lowmem_reserve[]: [ 564.174297] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 564.174306] RIP: 0033:0x466459 [ 564.174312] RSP: 002b:00007ff90c340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 564.174322] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 564.174330] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 564.183367] 0 [ 564.186202] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 564.186208] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 564.186213] R13: 00007ffce90c212f R14: 00007ff90c340300 R15: 0000000000022000 [ 564.221809] CPU: 1 PID: 20218 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 564.255399] 0 [ 564.257681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.257685] Call Trace: [ 564.257705] dump_stack+0x1b2/0x281 [ 564.257719] warn_alloc.cold+0x96/0x1cc [ 564.257731] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 564.257742] ? zone_watermark_ok_safe+0x220/0x220 [ 564.257762] __alloc_pages_nodemask+0x2127/0x2720 [ 564.261713] 0 [ 564.264741] ? __schedule+0x893/0x1de0 [ 564.264760] ? lock_acquire+0x170/0x3f0 [ 564.264775] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 564.274800] 0 [ 564.280828] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 564.280841] ? __mutex_unlock_slowpath+0x75/0x770 [ 564.280851] ? retint_kernel+0x2d/0x2d [ 564.280866] alloc_pages_current+0x155/0x260 [ 564.280881] ion_page_pool_alloc+0x118/0x1b0 [ 564.280893] ion_system_heap_allocate+0x133/0x8c0 [ 564.291238] 0 [ 564.295421] ? ion_alloc+0x187/0x810 [ 564.295433] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 564.295444] ? ion_system_contig_heap_create+0x130/0x130 [ 564.295457] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 564.304515] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 564.304530] ion_alloc+0x204/0x810 [ 564.304550] ? ion_dma_buf_release+0x40/0x40 [ 564.312057] Node 0 [ 564.319204] ? __might_fault+0x177/0x1b0 [ 564.319220] ion_ioctl+0xea/0x1f0 [ 564.319231] ? ion_query_heaps+0x360/0x360 [ 564.319243] ? lock_downgrade+0x740/0x740 [ 564.319255] ? _raw_spin_unlock_irq+0x24/0x80 [ 564.319263] ? ion_query_heaps+0x360/0x360 [ 564.319274] do_vfs_ioctl+0x75a/0xff0 [ 564.331729] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 564.338285] ? ioctl_preallocate+0x1a0/0x1a0 [ 564.338296] ? lock_downgrade+0x740/0x740 [ 564.338310] ? __fget+0x225/0x360 [ 564.338319] ? do_vfs_ioctl+0xff0/0xff0 [ 564.338331] ? security_file_ioctl+0x83/0xb0 [ 564.340970] lowmem_reserve[]: [ 564.344516] SyS_ioctl+0x7f/0xb0 [ 564.344524] ? do_vfs_ioctl+0xff0/0xff0 [ 564.344536] do_syscall_64+0x1d5/0x640 [ 564.344554] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 564.355681] 0 [ 564.358339] RIP: 0033:0x466459 [ 564.358344] RSP: 002b:00007f5fb7692188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 564.358355] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 564.358361] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 564.358366] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 564.358371] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 564.358377] R13: 00007fff6f6f7f0f R14: 00007f5fb7692300 R15: 0000000000022000 [ 564.443205] Mem-Info: [ 564.464221] 0 [ 564.469588] active_anon:13227 inactive_anon:25009 isolated_anon:0 [ 564.469588] active_file:1912 inactive_file:3608 isolated_file:24 [ 564.469588] unevictable:0 dirty:63 writeback:0 unstable:0 [ 564.469588] slab_reclaimable:12717 slab_unreclaimable:121372 [ 564.469588] mapped:48601 shmem:25359 pagetables:766 bounce:0 [ 564.469588] free:112126 free_pcp:237 free_cma:0 [ 564.478273] 0 [ 564.523980] Node 0 active_anon:52160kB inactive_anon:74204kB active_file:6580kB inactive_file:10840kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:153196kB dirty:164kB writeback:0kB shmem:75512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 564.666258] 0 0 [ 564.679908] Node 1 Normal free:132464kB min:53696kB low:67120kB high:80544kB active_anon:748kB inactive_anon:25832kB active_file:1168kB inactive_file:3992kB unevictable:0kB writepending:88kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:264kB bounce:0kB free_pcp:620kB local_pcp:620kB free_cma:0kB [ 564.820997] lowmem_reserve[]: 0 0 0 0 0 [ 564.830759] Node 0 DMA: 117*4kB (UM) 8*8kB (UME) 11*16kB (UME) 4*32kB (UME) 4*64kB (UE) 4*128kB (UE) 7*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11588kB [ 564.868549] Node 0 DMA32: 1247*4kB (UMEH) 8968*8kB (UMEH) 5914*16kB (UMEH) 3758*32kB (UMEH) 509*64kB (UMH) 9*128kB (UH) 6*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 326876kB [ 564.890914] Node 1 active_anon:748kB inactive_anon:25832kB active_file:1168kB inactive_file:3992kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:41408kB dirty:88kB writeback:0kB shmem:25924kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 564.919215] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 564.944994] Node 1 Normal: 8829*4kB (UM) 1551*8kB (UM) 1648*16kB (U) 2669*32kB (U) 307*64kB (U) 2*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 179916kB [ 564.965695] Node 0 DMA free:11576kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:92kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 565.005351] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 565.026239] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 565.055699] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 565.060701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 565.073644] Node 0 DMA32 free:283956kB min:36200kB low:45248kB high:54296kB active_anon:52192kB inactive_anon:74204kB active_file:6032kB inactive_file:10940kB unevictable:0kB writepending:180kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7456kB pagetables:2960kB bounce:0kB free_pcp:76kB local_pcp:76kB free_cma:0kB [ 565.099531] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 565.131772] 30976 total pagecache pages [ 565.141998] 0 pages in swap cache [ 565.164402] Swap cache stats: add 0, delete 0, find 0/0 [ 565.168795] lowmem_reserve[]: 0 0 0 0 0 [ 565.175369] Free swap = 0kB [ 565.186758] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 565.196116] Total swap = 0kB [ 565.260722] 2097051 pages RAM [ 565.268263] lowmem_reserve[]: 0 0 0 0 0 [ 565.269828] 0 pages HighMem/MovableOnly [ 565.281993] 363841 pages reserved [ 565.283067] Node 1 [ 565.285503] 0 pages cma reserved [ 565.292626] Normal free:283424kB min:53696kB low:67120kB high:80544kB active_anon:748kB inactive_anon:25832kB active_file:1168kB inactive_file:3992kB unevictable:0kB writepending:88kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:264kB bounce:0kB free_pcp:640kB local_pcp:0kB free_cma:0kB [ 565.337369] lowmem_reserve[]: 0 0 0 0 0 [ 565.356131] Node 0 DMA: 117*4kB (UM) 8*8kB (UME) 11*16kB (UME) 4*32kB (UME) 4*64kB (UE) 4*128kB (UE) 7*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11588kB [ 565.406793] Node 0 DMA32: 353*4kB (UMEH) 126*8kB (UMEH) 136*16kB (MEH) 1707*32kB (UMEH) 512*64kB (UMH) 10*128kB (UH) 8*256kB (U) 5*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 97876kB [ 565.457378] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 565.492657] Node 1 Normal: 9561*4kB (UM) 1895*8kB (UM) 1979*16kB (U) 2994*32kB (U) 703*64kB (U) 197*128kB (U) 42*256kB (U) 26*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 275148kB [ 565.541433] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 565.560537] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 565.587130] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 565.624548] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 565.675621] 30926 total pagecache pages [ 565.703514] 0 pages in swap cache [ 565.714887] Swap cache stats: add 0, delete 0, find 0/0 [ 565.761324] Free swap = 0kB [ 565.781847] Total swap = 0kB [ 565.797716] 2097051 pages RAM [ 565.813009] 0 pages HighMem/MovableOnly [ 565.821463] 363841 pages reserved [ 565.828295] 0 pages cma reserved [ 565.993336] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 566.035656] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 566.046447] CPU: 0 PID: 17779 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 566.054349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 566.063700] Call Trace: [ 566.066288] dump_stack+0x1b2/0x281 [ 566.069919] dump_header+0x178/0x82f [ 566.073634] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 566.078733] ? ___ratelimit+0x2cd/0x530 [ 566.082705] oom_kill_process.cold+0x10/0xb18 [ 566.087208] out_of_memory+0xe3e/0x1190 [ 566.091186] ? oom_killer_disable+0x1c0/0x1c0 [ 566.095678] ? mutex_trylock+0x152/0x1a0 [ 566.099741] __alloc_pages_nodemask+0x23e1/0x2720 [ 566.104600] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 566.109455] alloc_pages_current+0x155/0x260 [ 566.113863] filemap_fault+0xea3/0x1980 [ 566.117847] ext4_filemap_fault+0x84/0xb0 [ 566.121993] __do_fault+0xfa/0x380 [ 566.125528] __handle_mm_fault+0x2497/0x4620 [ 566.129938] ? vm_insert_page+0x7c0/0x7c0 [ 566.134106] ? nanosleep_copyout+0x100/0x100 [ 566.137412] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 566.138519] handle_mm_fault+0x391/0x860 [ 566.138532] __do_page_fault+0x549/0xad0 [ 566.157933] ? spurious_fault+0x640/0x640 [ 566.162080] ? do_page_fault+0x60/0x500 [ 566.163990] (null) [ 566.166066] ? page_fault+0x2f/0x50 [ 566.171846] page_fault+0x45/0x50 [ 566.175293] RIP: 89ae9:0x3 [ 566.178126] RSP: 0042:00007ffce90c23ec EFLAGS: 00000032 [ 566.181560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.195649] Mem-Info: [ 566.207374] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 566.212514] CPU: 1 PID: 19971 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 566.215100] active_anon:13296 inactive_anon:25009 isolated_anon:0 [ 566.215100] active_file:13 inactive_file:15 isolated_file:0 [ 566.215100] unevictable:0 dirty:0 writeback:0 unstable:0 [ 566.215100] slab_reclaimable:12713 slab_unreclaimable:121238 [ 566.215100] mapped:52745 shmem:25359 pagetables:818 bounce:0 [ 566.215100] free:13880 free_pcp:83 free_cma:0 [ 566.220408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 566.220413] Call Trace: [ 566.220430] dump_stack+0x1b2/0x281 [ 566.220456] warn_alloc.cold+0x96/0x1cc [ 566.253671] Node 0 active_anon:52404kB inactive_anon:74204kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:75512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 566.270715] ? zone_watermark_ok_safe+0x220/0x220 [ 566.270727] ? usleep_range+0x130/0x130 [ 566.270735] ? try_to_free_pages+0x23f/0x6e0 [ 566.270744] ? _find_next_bit+0xdb/0x100 [ 566.270755] ? run_timer_softirq+0x5a0/0x5a0 [ 566.270770] __alloc_pages_nodemask+0x2127/0x2720 [ 566.273370] Node 1 active_anon:780kB inactive_anon:25832kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36892kB dirty:0kB writeback:0kB shmem:25924kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 566.276974] ? lock_acquire+0x170/0x3f0 [ 566.280954] Node 0 [ 566.308597] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 566.308609] ? ion_page_pool_alloc+0x9e/0x1b0 [ 566.308626] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 566.308643] alloc_pages_current+0x155/0x260 [ 566.313610] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 566.317579] ion_page_pool_alloc+0x118/0x1b0 [ 566.317591] ion_system_heap_allocate+0x133/0x8c0 [ 566.317603] ? _raw_spin_unlock+0x29/0x40 [ 566.317612] ? _ion_heap_freelist_drain+0x6e/0x410 [ 566.317625] ? ion_system_contig_heap_create+0x130/0x130 [ 566.322023] lowmem_reserve[]: [ 566.326078] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 566.330503] 0 [ 566.335297] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 566.362327] 2717 [ 566.366271] ion_alloc+0x27a/0x810 [ 566.368524] 2718 [ 566.373476] ? ion_dma_buf_release+0x40/0x40 [ 566.378003] 2718 [ 566.383399] ? __might_fault+0x177/0x1b0 [ 566.387808] 2718 [ 566.413384] ion_ioctl+0xea/0x1f0 [ 566.413397] ? ion_query_heaps+0x360/0x360 [ 566.413409] ? ion_query_heaps+0x360/0x360 [ 566.413421] do_vfs_ioctl+0x75a/0xff0 [ 566.422648] ? ioctl_preallocate+0x1a0/0x1a0 [ 566.426766] Node 0 [ 566.431698] ? lock_downgrade+0x740/0x740 [ 566.431710] ? __fget+0x225/0x360 [ 566.431719] ? do_vfs_ioctl+0xff0/0xff0 [ 566.431730] ? security_file_ioctl+0x83/0xb0 [ 566.431740] SyS_ioctl+0x7f/0xb0 [ 566.437194] DMA32 free:17924kB min:36200kB low:45248kB high:54296kB active_anon:52384kB inactive_anon:74204kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7456kB pagetables:3004kB bounce:0kB free_pcp:212kB local_pcp:92kB free_cma:0kB [ 566.440271] ? do_vfs_ioctl+0xff0/0xff0 [ 566.440283] do_syscall_64+0x1d5/0x640 [ 566.440306] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 566.440315] RIP: 0033:0x466459 [ 566.445316] lowmem_reserve[]: [ 566.447105] RSP: 002b:00007f98f1e65188 EFLAGS: 00000246 [ 566.451960] 0 [ 566.453967] ORIG_RAX: 0000000000000010 [ 566.457503] 0 [ 566.459531] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 566.463916] 0 [ 566.465967] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 566.470044] 0 [ 566.472058] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 566.475490] 0 [ 566.479710] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 566.479716] R13: 00007ffde3ff81ef R14: 00007f98f1e65300 R15: 0000000000022000 [ 566.491217] warn_alloc_show_mem: 3 callbacks suppressed [ 566.491221] Mem-Info: [ 566.522687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.558774] Node 0 [ 566.571401] active_anon:13296 inactive_anon:25009 isolated_anon:0 [ 566.571401] active_file:13 inactive_file:15 isolated_file:0 [ 566.571401] unevictable:0 dirty:0 writeback:0 unstable:0 [ 566.571401] slab_reclaimable:12713 slab_unreclaimable:121238 [ 566.571401] mapped:52745 shmem:25359 pagetables:818 bounce:0 [ 566.571401] free:13880 free_pcp:83 free_cma:0 [ 566.589600] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 566.597657] Node 0 active_anon:52404kB inactive_anon:74204kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:75512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 566.635470] lowmem_reserve[]: [ 566.670814] device bridge_slave_1 left promiscuous mode [ 566.694948] 0 0 0 0 0 [ 566.746599] Node 1 Normal free:26644kB min:53696kB low:67120kB high:80544kB active_anon:780kB inactive_anon:25832kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:264kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 566.776656] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.794688] lowmem_reserve[]: 0 0 0 0 0 [ 566.805628] Node 1 active_anon:780kB inactive_anon:25832kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36892kB dirty:0kB writeback:0kB shmem:25924kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 566.809694] Node 0 [ 566.866317] Node 0 [ 566.868830] DMA: 2*4kB (UM) 2*8kB (ME) 3*16kB (ME) 4*32kB (UME) 4*64kB (UME) 4*128kB (UE) 7*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10952kB [ 566.885862] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 566.904394] Node 0 DMA32: 1213*4kB (UMEH) 708*8kB (MEH) 177*16kB (MEH) 31*32kB (MEH) 8*64kB (UMH) 2*128kB (H) 1*256kB (M) 5*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17924kB [ 566.964066] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 566.970384] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 566.996370] Node 0 DMA32 free:17924kB min:36200kB low:45248kB high:54296kB active_anon:52384kB inactive_anon:74204kB active_file:116kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7456kB pagetables:3004kB bounce:0kB free_pcp:220kB local_pcp:128kB free_cma:0kB [ 567.000860] Node 1 Normal: 53*4kB (UM) 42*8kB (UM) 35*16kB (M) 38*32kB (M) 26*64kB (UM) 3*128kB (UM) 37*256kB (UM) 25*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26644kB [ 567.073785] lowmem_reserve[]: 0 0 0 0 0 [ 567.079380] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 567.103459] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 567.107547] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 567.156587] lowmem_reserve[]: 0 0 0 0 0 [ 567.186781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 567.206393] Node 1 Normal free:26644kB min:53696kB low:67120kB high:80544kB active_anon:780kB inactive_anon:25832kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:264kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 567.214557] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 567.264756] lowmem_reserve[]: 0 0 0 0 0 [ 567.265592] 25387 total pagecache pages [ 567.285929] Node 0 DMA: 2*4kB (UM) 2*8kB (ME) 3*16kB (ME) 4*32kB (UME) 4*64kB (UME) 4*128kB (UE) 7*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10952kB [ 567.292454] 0 pages in swap cache [ 567.324903] Swap cache stats: add 0, delete 0, find 0/0 [ 567.356656] Free swap = 0kB [ 567.356969] Node 0 [ 567.386196] Total swap = 0kB [ 567.397085] DMA32: 1213*4kB (UMEH) 709*8kB (UMEH) 177*16kB (MEH) 31*32kB (MEH) 8*64kB (UMH) 2*128kB (H) 1*256kB (M) 5*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17932kB [ 567.402122] 2097051 pages RAM [ 567.435447] 0 pages HighMem/MovableOnly [ 567.454596] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 567.458825] 363841 pages reserved [ 567.486863] Node 1 Normal: 53*4kB (UM) 42*8kB (UM) 35*16kB (M) 38*32kB (M) 26*64kB (UM) 3*128kB (UM) 37*256kB (UM) 25*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26644kB [ 567.488141] 0 pages cma reserved [ 567.524871] Out of memory (oom_kill_allocating_task): Kill process 17779 (syz-executor.4) score 0 or sacrifice child [ 567.543768] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 567.554438] Killed process 20215 (syz-executor.4) total-vm:93384kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 567.576133] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 567.598068] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 567.636554] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 567.642798] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 567.645851] CPU: 0 PID: 20215 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 567.659534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 567.668886] Call Trace: [ 567.671487] dump_stack+0x1b2/0x281 [ 567.675109] warn_alloc.cold+0x96/0x1cc [ 567.679078] ? zone_watermark_ok_safe+0x220/0x220 [ 567.683917] ? usleep_range+0x130/0x130 [ 567.687886] ? try_to_free_pages+0x23f/0x6e0 [ 567.692285] ? _find_next_bit+0xdb/0x100 [ 567.696373] ? run_timer_softirq+0x5a0/0x5a0 [ 567.700805] __alloc_pages_nodemask+0x2127/0x2720 [ 567.705680] ? lock_acquire+0x170/0x3f0 [ 567.709658] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 567.714494] ? ion_page_pool_alloc+0x9e/0x1b0 [ 567.718997] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 567.724447] ? retint_kernel+0x2d/0x2d [ 567.728338] alloc_pages_current+0x155/0x260 [ 567.732758] ion_page_pool_alloc+0x118/0x1b0 [ 567.737161] ion_system_heap_allocate+0x133/0x8c0 [ 567.742003] ? ion_alloc+0x187/0x810 [ 567.745741] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 567.751184] ? ion_system_contig_heap_create+0x130/0x130 [ 567.756627] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 567.761637] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 567.766473] ion_alloc+0x204/0x810 [ 567.770010] ? ion_dma_buf_release+0x40/0x40 [ 567.774412] ? __might_fault+0x177/0x1b0 [ 567.778472] ion_ioctl+0xea/0x1f0 [ 567.781917] ? ion_query_heaps+0x360/0x360 [ 567.786146] ? ion_query_heaps+0x360/0x360 [ 567.790399] do_vfs_ioctl+0x75a/0xff0 [ 567.794200] ? ioctl_preallocate+0x1a0/0x1a0 [ 567.798634] ? lock_downgrade+0x740/0x740 [ 567.802785] ? __fget+0x225/0x360 [ 567.806244] ? do_vfs_ioctl+0xff0/0xff0 [ 567.810233] ? security_file_ioctl+0x83/0xb0 [ 567.814655] SyS_ioctl+0x7f/0xb0 [ 567.818044] ? do_vfs_ioctl+0xff0/0xff0 [ 567.822022] do_syscall_64+0x1d5/0x640 [ 567.825915] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 567.831115] RIP: 0033:0x466459 [ 567.834298] RSP: 002b:00007ff90c340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 567.841999] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 567.849261] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 567.856790] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 567.864062] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 567.871329] R13: 00007ffce90c212f R14: 00007ff90c340300 R15: 0000000000022000 [ 567.880934] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 567.889582] 25387 total pagecache pages [ 567.893563] 0 pages in swap cache [ 567.897051] Swap cache stats: add 0, delete 0, find 0/0 [ 567.906904] Free swap = 0kB [ 567.916749] Total swap = 0kB [ 567.924231] 2097051 pages RAM [ 567.933983] 0 pages HighMem/MovableOnly [ 567.942362] 363841 pages reserved [ 567.945824] 0 pages cma reserved [ 567.978707] device bridge_slave_0 left promiscuous mode [ 567.986716] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.057348] device veth1_macvtap left promiscuous mode [ 568.085654] device veth0_macvtap left promiscuous mode [ 568.114059] device veth1_vlan left promiscuous mode [ 568.161686] device veth0_vlan left promiscuous mode [ 568.547341] device hsr_slave_1 left promiscuous mode [ 568.555806] device hsr_slave_0 left promiscuous mode [ 568.590099] oom_reaper: reaped process 20215 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 568.601496] team0 (unregistering): Port device team_slave_1 removed [ 568.622402] team0 (unregistering): Port device team_slave_0 removed 05:07:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) [ 568.670922] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 568.692482] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 568.767404] Mem-Info: [ 568.769916] active_anon:13349 inactive_anon:25009 isolated_anon:0 [ 568.769916] active_file:1039 inactive_file:2218 isolated_file:0 [ 568.769916] unevictable:0 dirty:25 writeback:0 unstable:0 [ 568.769916] slab_reclaimable:12702 slab_unreclaimable:121576 [ 568.769916] mapped:55197 shmem:25359 pagetables:818 bounce:0 [ 568.769916] free:45677 free_pcp:306 free_cma:0 [ 568.863131] bond0 (unregistering): Released all slaves [ 568.898536] Node 0 active_anon:52316kB inactive_anon:74204kB active_file:752kB inactive_file:736kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175536kB dirty:0kB writeback:0kB shmem:75512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 568.957958] Node 1 active_anon:1080kB inactive_anon:25832kB active_file:236kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37252kB dirty:0kB writeback:0kB shmem:25924kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 569.026345] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 569.053219] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 569.058431] Node 0 DMA32 free:36312kB min:36200kB low:45248kB high:54296kB active_anon:52300kB inactive_anon:74204kB active_file:192kB inactive_file:556kB unevictable:0kB writepending:12kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7424kB pagetables:2900kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 569.088174] lowmem_reserve[]: 0 0 0 0 0 [ 569.092242] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 569.117836] lowmem_reserve[]: 0 0 0 0 0 [ 569.121839] Node 1 Normal free:53768kB min:53696kB low:67120kB high:80544kB active_anon:1120kB inactive_anon:25848kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:368kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 569.136569] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 569.152627] syz-executor.5: [ 569.166795] (null), order=0, oom_score_adj=0 [ 569.184228] in:imklog cpuset=/ mems_allowed=0-1 [ 569.207201] lowmem_reserve[]: 0 0 0 0 0 [ 569.209520] CPU: 1 PID: 19903 Comm: in:imklog Not tainted 4.14.227-syzkaller #0 [ 569.213792] Node 0 [ 569.218679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 569.218683] Call Trace: [ 569.218702] dump_stack+0x1b2/0x281 [ 569.218714] dump_header+0x178/0x82f [ 569.218724] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 569.218731] ? ___ratelimit+0x2cd/0x530 [ 569.218740] oom_kill_process.cold+0x10/0xb18 [ 569.218758] out_of_memory+0xe3e/0x1190 [ 569.218770] ? oom_killer_disable+0x1c0/0x1c0 [ 569.218778] ? mutex_trylock+0x152/0x1a0 [ 569.218789] __alloc_pages_nodemask+0x23e1/0x2720 [ 569.218808] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 569.221059] page allocation failure: order:4 [ 569.230385] alloc_pages_current+0x155/0x260 [ 569.230405] filemap_fault+0xea3/0x1980 [ 569.233769] DMA: [ 569.236589] ext4_filemap_fault+0x84/0xb0 [ 569.240311] 2*4kB [ 569.245376] __do_fault+0xfa/0x380 [ 569.249383] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 569.253826] __handle_mm_fault+0x2497/0x4620 [ 569.257815] (UM) [ 569.262265] ? vm_insert_page+0x7c0/0x7c0 [ 569.266304] 3*8kB [ 569.271140] ? lock_downgrade+0x740/0x740 [ 569.271160] handle_mm_fault+0x391/0x860 [ 569.271175] __do_page_fault+0x549/0xad0 [ 569.271187] ? spurious_fault+0x640/0x640 [ 569.276029] (null) [ 569.280415] ? do_page_fault+0x60/0x500 [ 569.280425] ? page_fault+0x2f/0x50 [ 569.280433] page_fault+0x45/0x50 [ 569.280443] RIP: 0000:0x1f9f [ 569.284836] syz-executor.5 cpuset= [ 569.288810] RSP: f0002188:0000000000000000 EFLAGS: 7feeff50e430 [ 569.374901] (UME) 3*16kB (ME) 3*32kB (ME) 6*64kB (UME) 4*128kB (UE) 7*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11056kB [ 569.391714] Mem-Info: [ 569.400328] active_anon:13341 inactive_anon:25013 isolated_anon:0 [ 569.400328] active_file:29 inactive_file:40 isolated_file:0 [ 569.400328] unevictable:0 dirty:0 writeback:0 unstable:0 [ 569.400328] slab_reclaimable:12701 slab_unreclaimable:120736 [ 569.400328] mapped:52798 shmem:25364 pagetables:818 bounce:0 [ 569.400328] free:25078 free_pcp:0 free_cma:0 [ 569.409694] Node 0 DMA32: 1225*4kB (UMEH) 740*8kB (MEH) 178*16kB (MEH) 32*32kB (UMEH) 23*64kB (MEH) 29*128kB (UMEH) 54*256kB (UM) 5*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36260kB [ 569.463958] / mems_allowed=0-1 [ 569.467237] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 569.484700] CPU: 0 PID: 20233 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 569.493565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 569.502950] Call Trace: [ 569.505551] dump_stack+0x1b2/0x281 [ 569.509185] warn_alloc.cold+0x96/0x1cc [ 569.513164] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 569.518285] ? zone_watermark_ok_safe+0x220/0x220 [ 569.523141] __alloc_pages_nodemask+0x2127/0x2720 [ 569.524696] Node 0 active_anon:52244kB inactive_anon:74204kB active_file:0kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174204kB dirty:0kB writeback:0kB shmem:75512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 569.527985] ? lock_acquire+0x170/0x3f0 [ 569.528001] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 569.528019] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 569.528030] ? __mutex_unlock_slowpath+0x75/0x770 [ 569.528044] alloc_pages_current+0x155/0x260 [ 569.528058] ion_page_pool_alloc+0x118/0x1b0 [ 569.528070] ion_system_heap_allocate+0x133/0x8c0 [ 569.588401] ? ion_alloc+0x187/0x810 [ 569.592119] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 569.597573] ? ion_system_contig_heap_create+0x130/0x130 [ 569.603025] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 569.608046] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 569.612902] ion_alloc+0x204/0x810 [ 569.616464] ? ion_dma_buf_release+0x40/0x40 [ 569.621001] ? __might_fault+0x177/0x1b0 [ 569.625075] ion_ioctl+0xea/0x1f0 [ 569.627022] Node 1 active_anon:1120kB inactive_anon:25848kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36988kB dirty:0kB writeback:0kB shmem:25944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 569.628527] ? ion_query_heaps+0x360/0x360 [ 569.628539] ? ion_query_heaps+0x360/0x360 [ 569.628549] do_vfs_ioctl+0x75a/0xff0 [ 569.628561] ? ioctl_preallocate+0x1a0/0x1a0 [ 569.628570] ? lock_downgrade+0x740/0x740 [ 569.628583] ? __fget+0x225/0x360 [ 569.628591] ? do_vfs_ioctl+0xff0/0xff0 [ 569.628601] ? security_file_ioctl+0x83/0xb0 [ 569.628611] SyS_ioctl+0x7f/0xb0 [ 569.691708] ? do_vfs_ioctl+0xff0/0xff0 [ 569.695685] do_syscall_64+0x1d5/0x640 [ 569.699579] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 569.704785] RIP: 0033:0x466459 [ 569.707966] RSP: 002b:00007f98f1e65188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 569.715674] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 569.722947] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 569.726884] Node 0 [ 569.730212] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 569.730217] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 569.730222] R13: 00007ffde3ff81ef R14: 00007f98f1e65300 R15: 0000000000022000 [ 569.737215] Node 1 Normal: 86*4kB (M) 77*8kB (UM) 51*16kB (M) 45*32kB (UM) 32*64kB (UM) 15*128kB (M) 10*256kB (UM) 85*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53264kB [ 569.764906] DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 569.778410] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 569.817346] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 569.826636] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 569.846389] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 569.855037] 25411 total pagecache pages [ 569.868514] 0 pages in swap cache [ 569.871982] Swap cache stats: add 0, delete 0, find 0/0 [ 569.883933] Free swap = 0kB [ 569.886964] Total swap = 0kB [ 569.892167] 2097051 pages RAM [ 569.895277] 0 pages HighMem/MovableOnly [ 569.903896] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 569.905740] 363841 pages reserved [ 569.914619] 0 pages cma reserved [ 569.924030] Node 0 DMA32 free:36012kB min:36200kB low:45248kB high:54296kB active_anon:52224kB inactive_anon:74204kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7424kB pagetables:2900kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 570.122401] lowmem_reserve[]: 0 0 0 0 0 [ 570.126442] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 570.283016] lowmem_reserve[]: 0 0 0 0 0 [ 570.287055] Node 1 Normal free:60368kB min:53696kB low:67120kB high:80544kB active_anon:1120kB inactive_anon:25848kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:368kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 570.287370] Mem-Info: [ 570.357398] Bluetooth: hci3 command 0x0409 tx timeout [ 570.408725] active_anon:13341 inactive_anon:25013 isolated_anon:0 [ 570.408725] active_file:14 inactive_file:1104 isolated_file:0 [ 570.408725] unevictable:0 dirty:0 writeback:0 unstable:0 [ 570.408725] slab_reclaimable:12704 slab_unreclaimable:120906 [ 570.408725] mapped:53589 shmem:25364 pagetables:818 bounce:0 [ 570.408725] free:56450 free_pcp:186 free_cma:0 [ 570.444597] lowmem_reserve[]: 0 0 0 0 0 [ 570.467641] Node 0 DMA: 2*4kB (UM) 3*8kB (UME) 3*16kB (ME) 3*32kB (ME) 6*64kB (UME) 4*128kB (UE) 7*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11056kB [ 570.547382] Node 0 active_anon:52244kB inactive_anon:74204kB active_file:16kB inactive_file:6676kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:179568kB dirty:0kB writeback:0kB shmem:75512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 570.570506] Node 0 DMA32: 801*4kB (UMEH) 677*8kB (UMEH) 281*16kB (UMEH) 1580*32kB (UMEH) 1168*64kB (UMEH) 65*128kB (UMEH) 54*256kB (UM) 5*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 163132kB [ 570.677365] Node 1 active_anon:1120kB inactive_anon:25848kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36988kB dirty:0kB writeback:0kB shmem:25944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 570.681386] Node 0 [ 570.757410] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 570.780556] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 570.807482] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 570.812554] Node 0 DMA32 free:104068kB min:36200kB low:45248kB high:54296kB active_anon:52224kB inactive_anon:74204kB active_file:16kB inactive_file:6676kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7424kB pagetables:2900kB bounce:0kB free_pcp:604kB local_pcp:104kB free_cma:0kB [ 570.860576] Node 1 Normal: 3305*4kB (UM) 3353*8kB (UM) 63*16kB (UM) 46*32kB (UM) 143*64kB (UM) 15*128kB (M) 10*256kB (UM) 85*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 99676kB [ 570.927342] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 570.936199] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 570.947357] lowmem_reserve[]: 0 0 0 0 0 [ 570.951367] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 571.009219] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 571.049267] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 571.057332] lowmem_reserve[]: 0 0 0 0 0 [ 571.070327] Node 1 Normal free:168036kB min:53696kB low:67120kB high:80544kB active_anon:1120kB inactive_anon:25848kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:368kB bounce:0kB free_pcp:1348kB local_pcp:720kB free_cma:0kB [ 571.077442] 27127 total pagecache pages [ 571.167338] 0 pages in swap cache [ 571.170827] Swap cache stats: add 0, delete 0, find 0/0 [ 571.176182] Free swap = 0kB [ 571.217357] Total swap = 0kB [ 571.217781] lowmem_reserve[]: 0 [ 571.220401] 2097051 pages RAM [ 571.220407] 0 pages HighMem/MovableOnly [ 571.223676] 0 [ 571.226759] 363841 pages reserved [ 571.257394] 0 pages cma reserved [ 571.260785] Out of memory (oom_kill_allocating_task): Kill process 19903 (in:imklog) score 0 or sacrifice child [ 571.307374] 0 0 0 [ 571.309589] Node 0 DMA: 2*4kB (UM) 3*8kB (UME) 3*16kB (ME) 3*32kB (ME) 6*64kB (UME) 4*128kB (UE) 7*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11056kB [ 571.347392] Killed process 19901 (rsyslogd) total-vm:254332kB, anon-rss:1008kB, file-rss:0kB, shmem-rss:0kB [ 571.368992] oom_reaper: reaped process 19901 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 571.397325] Node 0 DMA32: 707*4kB (UMEH) 474*8kB (UMEH) 134*16kB (UMEH) 23*32kB (UMEH) 50*64kB (UMEH) 121*128kB (UMEH) 57*256kB (UM) 5*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 45340kB [ 571.457678] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 571.503243] Node 1 Normal: 12*4kB (UM) 82*8kB (UM) 61*16kB (UM) 1258*32kB (UM) 2551*64kB (UM) 66*128kB (UM) 10*256kB (UM) 85*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 259728kB [ 571.521506] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 571.532390] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 571.541976] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 571.552181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 571.562875] 27413 total pagecache pages [ 571.568463] 0 pages in swap cache [ 571.572532] Swap cache stats: add 0, delete 0, find 0/0 [ 571.579786] Free swap = 0kB [ 571.583255] Total swap = 0kB [ 571.586791] 2097051 pages RAM [ 571.591875] 0 pages HighMem/MovableOnly [ 571.596234] 363841 pages reserved [ 571.601340] 0 pages cma reserved [ 572.048225] IPVS: ftp: loaded support on port[0] = 21 [ 572.171070] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 572.194608] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 572.200533] CPU: 1 PID: 20215 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 572.208423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.217781] Call Trace: [ 572.220374] dump_stack+0x1b2/0x281 [ 572.224006] warn_alloc.cold+0x96/0x1cc [ 572.228004] ? zone_watermark_ok_safe+0x220/0x220 [ 572.232865] __alloc_pages_nodemask+0x2127/0x2720 [ 572.237719] ? lock_acquire+0x170/0x3f0 [ 572.241791] ? lock_acquire+0x170/0x3f0 [ 572.245777] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 572.250639] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 572.256113] ? __mutex_unlock_slowpath+0x75/0x770 [ 572.260975] alloc_pages_current+0x155/0x260 [ 572.265403] ion_page_pool_alloc+0x118/0x1b0 [ 572.269824] ion_system_heap_allocate+0x133/0x8c0 [ 572.274679] ? _raw_spin_unlock+0x29/0x40 [ 572.278835] ? _ion_heap_freelist_drain+0x6e/0x410 [ 572.283772] ? ion_system_contig_heap_create+0x130/0x130 [ 572.289249] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 572.294276] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 572.299133] ion_alloc+0x27a/0x810 [ 572.302683] ? ion_dma_buf_release+0x40/0x40 [ 572.307102] ? __might_fault+0x177/0x1b0 [ 572.311174] ion_ioctl+0xea/0x1f0 [ 572.314632] ? ion_query_heaps+0x360/0x360 [ 572.318877] ? ion_query_heaps+0x360/0x360 [ 572.323119] do_vfs_ioctl+0x75a/0xff0 [ 572.326935] ? ioctl_preallocate+0x1a0/0x1a0 [ 572.331353] ? lock_downgrade+0x740/0x740 [ 572.335511] ? __fget+0x225/0x360 [ 572.338968] ? do_vfs_ioctl+0xff0/0xff0 [ 572.342969] ? security_file_ioctl+0x83/0xb0 [ 572.347381] SyS_ioctl+0x7f/0xb0 [ 572.350757] ? do_vfs_ioctl+0xff0/0xff0 [ 572.354735] do_syscall_64+0x1d5/0x640 [ 572.358650] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 572.363850] RIP: 0033:0x466459 [ 572.367041] RSP: 002b:00007ff90c340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 572.374765] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 572.382047] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 572.389318] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 572.396590] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 572.403863] R13: 00007ffce90c212f R14: 00007ff90c340300 R15: 0000000000022000 [ 572.437378] Bluetooth: hci3 command 0x041b tx timeout [ 572.442922] Mem-Info: [ 572.445993] active_anon:13243 inactive_anon:25013 isolated_anon:0 [ 572.445993] active_file:21 inactive_file:40 isolated_file:0 [ 572.445993] unevictable:0 dirty:0 writeback:0 unstable:0 [ 572.445993] slab_reclaimable:12681 slab_unreclaimable:120330 [ 572.445993] mapped:52831 shmem:25364 pagetables:814 bounce:0 [ 572.445993] free:25118 free_pcp:85 free_cma:0 [ 572.487395] Node 0 active_anon:50936kB inactive_anon:74204kB active_file:4kB inactive_file:240kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174192kB dirty:0kB writeback:0kB shmem:75512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 572.600805] oom_reaper: reaped process 20233 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 572.658379] Node 1 active_anon:2036kB inactive_anon:25848kB active_file:180kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37132kB dirty:0kB writeback:0kB shmem:25944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 572.695522] oom_reaper: reaped process 20216 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 572.739612] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 572.757339] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 572.786831] systemd-journal cpuset=/ mems_allowed=0-1 [ 572.812882] CPU: 1 PID: 19983 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 572.820955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.830306] Call Trace: [ 572.831797] lowmem_reserve[]: 0 2717 [ 572.832894] dump_stack+0x1b2/0x281 [ 572.832906] dump_header+0x178/0x82f [ 572.843935] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 572.848952] 2718 [ 572.849035] ? ___ratelimit+0x2cd/0x530 [ 572.849036] 2718 2718 [ 572.851091] oom_kill_process.cold+0x10/0xb18 [ 572.857535] out_of_memory+0xe3e/0x1190 [ 572.857549] ? oom_killer_disable+0x1c0/0x1c0 [ 572.857559] ? mutex_trylock+0x152/0x1a0 [ 572.862043] Node 0 [ 572.866029] __alloc_pages_nodemask+0x23e1/0x2720 [ 572.870538] DMA32 free:17660kB min:36200kB low:45248kB high:54296kB active_anon:50916kB inactive_anon:74204kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7296kB pagetables:2780kB bounce:0kB free_pcp:192kB local_pcp:192kB free_cma:0kB [ 572.874552] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 572.876755] lowmem_reserve[]: [ 572.881597] alloc_pages_current+0x155/0x260 [ 572.881609] filemap_fault+0xea3/0x1980 [ 572.909826] 0 [ 572.914633] ext4_filemap_fault+0x84/0xb0 [ 572.917720] 0 [ 572.922093] __do_fault+0xfa/0x380 [ 572.926040] 0 [ 572.927826] __handle_mm_fault+0x2497/0x4620 [ 572.927837] ? vm_insert_page+0x7c0/0x7c0 [ 572.927846] ? lock_downgrade+0x740/0x740 [ 572.927866] handle_mm_fault+0x391/0x860 [ 572.931995] 0 [ 572.933786] __do_page_fault+0x549/0xad0 [ 572.937327] 0 [ 572.939103] ? spurious_fault+0x640/0x640 [ 572.947626] ? do_page_fault+0x60/0x500 [ 572.947636] ? page_fault+0x2f/0x50 [ 572.947642] page_fault+0x45/0x50 [ 572.947651] RIP: 0001:0x7ffc5c2130bc [ 572.947655] RSP: 12f2a1e0:00007ffc5c2132a0 EFLAGS: 564e12f2a250 [ 572.959419] Mem-Info: [ 572.963260] syz-executor.2: [ 572.965049] active_anon:13243 inactive_anon:25013 isolated_anon:0 [ 572.965049] active_file:13 inactive_file:21 isolated_file:0 [ 572.965049] unevictable:0 dirty:0 writeback:0 unstable:0 [ 572.965049] slab_reclaimable:12681 slab_unreclaimable:120330 [ 572.965049] mapped:52831 shmem:25364 pagetables:814 bounce:0 [ 572.965049] free:13841 free_pcp:82 free_cma:0 [ 572.969300] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 572.969322] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 572.969344] CPU: 0 PID: 20233 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 572.969350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 572.969353] Call Trace: [ 572.969373] dump_stack+0x1b2/0x281 [ 572.980671] Node 0 active_anon:50936kB inactive_anon:74204kB active_file:4kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174192kB dirty:0kB writeback:0kB shmem:75512kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 572.984109] warn_alloc.cold+0x96/0x1cc [ 572.993331] Node 1 active_anon:2036kB inactive_anon:25848kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37132kB dirty:0kB writeback:0kB shmem:25944kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 572.995639] ? dsmark_init+0x2a0/0x600 [ 573.036807] Node 0 [ 573.040592] ? zone_watermark_ok_safe+0x220/0x220 [ 573.040603] ? usleep_range+0x130/0x130 [ 573.040611] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 573.040624] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 573.040633] ? run_timer_softirq+0x5a0/0x5a0 [ 573.040649] __alloc_pages_nodemask+0x2127/0x2720 [ 573.040666] ? lock_acquire+0x170/0x3f0 [ 573.045804] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 573.053647] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 573.053659] ? ion_page_pool_alloc+0x9e/0x1b0 [ 573.053674] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 573.053692] alloc_pages_current+0x155/0x260 [ 573.053705] ion_page_pool_alloc+0x118/0x1b0 [ 573.053716] ion_system_heap_allocate+0x133/0x8c0 [ 573.053727] ? ion_alloc+0x187/0x810 [ 573.053737] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 573.053747] ? ion_system_contig_heap_create+0x130/0x130 [ 573.053757] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 573.053768] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 573.053779] ion_alloc+0x204/0x810 [ 573.053793] ? ion_dma_buf_release+0x40/0x40 [ 573.070590] lowmem_reserve[]: [ 573.097516] ? __might_fault+0x177/0x1b0 [ 573.097532] ion_ioctl+0xea/0x1f0 [ 573.097543] ? ion_query_heaps+0x360/0x360 [ 573.097555] ? ion_query_heaps+0x360/0x360 [ 573.097564] do_vfs_ioctl+0x75a/0xff0 [ 573.097575] ? ioctl_preallocate+0x1a0/0x1a0 [ 573.097584] ? lock_downgrade+0x740/0x740 [ 573.097597] ? __fget+0x225/0x360 [ 573.097606] ? do_vfs_ioctl+0xff0/0xff0 [ 573.097617] ? security_file_ioctl+0x83/0xb0 [ 573.097627] SyS_ioctl+0x7f/0xb0 [ 573.097635] ? do_vfs_ioctl+0xff0/0xff0 [ 573.097647] do_syscall_64+0x1d5/0x640 [ 573.097664] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 573.097673] RIP: 0033:0x466459 [ 573.097677] RSP: 002b:00007f98f1e65188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.097686] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 573.097692] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 573.097697] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 573.097702] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 573.097707] R13: 00007ffde3ff81ef R14: 00007f98f1e65300 R15: 0000000000022000 [ 573.106723] Node 0 [ 573.160583] page allocation failure: order:0 [ 573.171882] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 573.230729] 0 [ 573.245940] lowmem_reserve[]: [ 573.257980] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 573.274066] 0 [ 573.287366] 2717 [ 573.338088] 0 [ 573.355246] (null) [ 573.395456] 0 [ 573.406666] syz-executor.2 cpuset= [ 573.421134] 2718 [ 573.425233] / [ 573.428808] 2718 [ 573.431875] mems_allowed=0-1 [ 573.438950] 0 0 [ 573.448735] 2718 [ 573.454182] Node 1 Normal free:74836kB min:53696kB low:67120kB high:80544kB active_anon:1976kB inactive_anon:25852kB active_file:1156kB inactive_file:3032kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:492kB bounce:0kB free_pcp:380kB local_pcp:208kB free_cma:0kB [ 573.455539] CPU: 1 PID: 20216 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 573.491613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.500980] Call Trace: [ 573.503583] dump_stack+0x1b2/0x281 [ 573.507216] warn_alloc.cold+0x96/0x1cc [ 573.511196] ? zone_watermark_ok_safe+0x220/0x220 [ 573.516043] ? usleep_range+0x130/0x130 [ 573.517674] syz-executor.5: [ 573.520010] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 573.520018] page allocation failure: order:4 [ 573.523043] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 573.528198] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 573.532543] ? run_timer_softirq+0x5a0/0x5a0 [ 573.537561] lowmem_reserve[]: [ 573.545666] __alloc_pages_nodemask+0x2127/0x2720 [ 573.545685] ? lock_acquire+0x170/0x3f0 [ 573.550133] (null) [ 573.553165] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 573.558031] 0 [ 573.561970] ? ion_page_pool_alloc+0x9e/0x1b0 [ 573.561987] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 573.562006] alloc_pages_current+0x155/0x260 [ 573.564163] 0 [ 573.569347] ion_page_pool_alloc+0x118/0x1b0 [ 573.569359] ion_system_heap_allocate+0x133/0x8c0 [ 573.569369] ? ion_alloc+0x187/0x810 [ 573.569382] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 573.571164] 0 [ 573.575647] ? ion_system_contig_heap_create+0x130/0x130 [ 573.575658] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 573.575670] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 573.575681] ion_alloc+0x204/0x810 [ 573.581185] syz-executor.5 cpuset= [ 573.585525] ? ion_dma_buf_release+0x40/0x40 [ 573.587334] / [ 573.591691] ? __might_fault+0x177/0x1b0 [ 573.596569] mems_allowed=0-1 [ 573.600216] ion_ioctl+0xea/0x1f0 [ 573.600228] ? ion_query_heaps+0x360/0x360 [ 573.600241] ? ion_query_heaps+0x360/0x360 [ 573.606685] 0 [ 573.607471] do_vfs_ioctl+0x75a/0xff0 [ 573.607484] ? ioctl_preallocate+0x1a0/0x1a0 [ 573.607497] ? lock_downgrade+0x740/0x740 [ 573.612923] 0 [ 573.617939] ? __fget+0x225/0x360 [ 573.617954] ? do_vfs_ioctl+0xff0/0xff0 [ 573.617963] ? security_file_ioctl+0x83/0xb0 [ 573.617973] SyS_ioctl+0x7f/0xb0 [ 573.617980] ? do_vfs_ioctl+0xff0/0xff0 [ 573.617997] do_syscall_64+0x1d5/0x640 [ 573.634292] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 573.635984] Node 0 [ 573.640025] RIP: 0033:0x466459 [ 573.640029] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.640039] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 573.640044] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 573.640052] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 573.653278] DMA: [ 573.655016] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 573.656796] 2*4kB [ 573.660575] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 573.677626] Node 0 [ 573.690215] CPU: 0 PID: 20233 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 573.702346] DMA32 free:18120kB min:36200kB low:45248kB high:54296kB active_anon:50832kB inactive_anon:74200kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7296kB pagetables:2780kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 573.704679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.716378] lowmem_reserve[]: [ 573.719763] Call Trace: [ 573.719783] dump_stack+0x1b2/0x281 [ 573.719796] warn_alloc.cold+0x96/0x1cc [ 573.719808] ? zone_watermark_ok_safe+0x220/0x220 [ 573.719830] __alloc_pages_nodemask+0x2127/0x2720 [ 573.719847] ? lock_acquire+0x170/0x3f0 [ 573.719861] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 573.727358] 0 [ 573.734424] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 573.736451] 0 [ 573.743713] ? __mutex_unlock_slowpath+0x75/0x770 [ 573.743727] alloc_pages_current+0x155/0x260 [ 573.743742] ion_page_pool_alloc+0x118/0x1b0 [ 573.743752] ion_system_heap_allocate+0x133/0x8c0 [ 573.743762] ? _raw_spin_unlock+0x29/0x40 [ 573.743772] ? _ion_heap_freelist_drain+0x6e/0x410 [ 573.743783] ? ion_system_contig_heap_create+0x130/0x130 [ 573.752189] 0 [ 573.753177] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 573.755387] 0 [ 573.763270] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 573.763283] ion_alloc+0x27a/0x810 [ 573.763298] ? ion_dma_buf_release+0x40/0x40 [ 573.763309] ? __might_fault+0x177/0x1b0 [ 573.763321] ion_ioctl+0xea/0x1f0 [ 573.763336] ? ion_query_heaps+0x360/0x360 [ 573.763349] ? ion_query_heaps+0x360/0x360 [ 573.763359] do_vfs_ioctl+0x75a/0xff0 [ 573.763373] ? ioctl_preallocate+0x1a0/0x1a0 [ 573.796949] 0 [ 573.801960] ? lock_downgrade+0x740/0x740 [ 573.801975] ? __fget+0x225/0x360 [ 573.801985] ? do_vfs_ioctl+0xff0/0xff0 [ 573.801995] ? security_file_ioctl+0x83/0xb0 [ 573.802011] SyS_ioctl+0x7f/0xb0 [ 573.811288] ? do_vfs_ioctl+0xff0/0xff0 [ 573.815238] Node 0 [ 573.820070] do_syscall_64+0x1d5/0x640 [ 573.820087] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 573.820096] RIP: 0033:0x466459 [ 573.820100] RSP: 002b:00007f98f1e65188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 573.820110] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 573.820115] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 573.820124] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 573.825953] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 573.828973] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 573.828978] R13: 00007ffde3ff81ef R14: 00007f98f1e65300 R15: 0000000000022000 [ 573.849793] (UM) [ 573.866803] lowmem_reserve[]: [ 573.884270] 3*8kB [ 573.900803] 0 [ 573.914712] (UME) [ 573.944805] 0 [ 573.961742] 3*16kB [ 573.969183] 0 [ 573.987999] (ME) [ 574.002359] 0 [ 574.034028] 4*32kB [ 574.045211] warn_alloc_show_mem: 1 callbacks suppressed [ 574.045215] Mem-Info: [ 574.053807] (UME) [ 574.063669] active_anon:13210 inactive_anon:25013 isolated_anon:0 [ 574.063669] active_file:15 inactive_file:16 isolated_file:0 [ 574.063669] unevictable:0 dirty:0 writeback:0 unstable:0 [ 574.063669] slab_reclaimable:12681 slab_unreclaimable:120369 [ 574.063669] mapped:52792 shmem:25364 pagetables:819 bounce:0 [ 574.063669] free:15055 free_pcp:11 free_cma:0 [ 574.072710] 4*64kB [ 574.112869] 0 [ 574.116903] Node 1 Normal free:31148kB min:53696kB low:67120kB high:80544kB active_anon:1988kB inactive_anon:25852kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:492kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 574.136024] (UME) [ 574.170950] lowmem_reserve[]: 0 0 0 0 0 [ 574.186883] Node 0 active_anon:50852kB inactive_anon:74200kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:75508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 574.191407] 4*128kB [ 574.228933] Node 0 DMA: 2*4kB (UM) 3*8kB (UME) 3*16kB (ME) 4*32kB (UME) 4*64kB (UME) 4*128kB (UE) 7*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10960kB [ 574.241554] (UE) 7*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10960kB [ 574.256487] Node 0 DMA32: 1287*4kB (ME) 732*8kB (UME) 172*16kB (UME) 30*32kB (UME) 16*64kB (UM) 17*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17916kB [ 574.263434] syz-executor.5: [ 574.281524] Node 1 active_anon:1988kB inactive_anon:25852kB active_file:24kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37080kB dirty:0kB writeback:0kB shmem:25948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 574.285732] Node 0 [ 574.322399] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 574.327122] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 574.352203] Node 1 Normal: 120*4kB (M) 97*8kB (M) 49*16kB (M) 40*32kB (M) [ 574.354762] syz-executor.5 cpuset=/ [ 574.370932] DMA32: 1287*4kB (ME) 732*8kB (UME) 172*16kB (UME) 30*32kB (UME) 16*64kB (UM) 17*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17916kB [ 574.382387] Node 0 [ 574.397570] mems_allowed=0-1 [ 574.402928] CPU: 0 PID: 20233 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 574.404964] 5*64kB [ 574.411666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 574.411671] Call Trace: [ 574.411692] dump_stack+0x1b2/0x281 [ 574.411706] warn_alloc.cold+0x96/0x1cc [ 574.411715] ? dsmark_init+0x2a0/0x600 [ 574.411726] ? zone_watermark_ok_safe+0x220/0x220 [ 574.411736] ? usleep_range+0x130/0x130 [ 574.411745] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 574.411757] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 574.411767] ? run_timer_softirq+0x5a0/0x5a0 [ 574.411783] __alloc_pages_nodemask+0x2127/0x2720 [ 574.411797] ? lock_acquire+0x170/0x3f0 [ 574.411811] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 574.429677] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 574.433552] ? ion_page_pool_alloc+0x9e/0x1b0 [ 574.453113] (M) [ 574.456287] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 574.476168] lowmem_reserve[]: [ 574.499876] alloc_pages_current+0x155/0x260 [ 574.499893] ion_page_pool_alloc+0x118/0x1b0 [ 574.499905] ion_system_heap_allocate+0x133/0x8c0 [ 574.499916] ? _raw_spin_unlock+0x29/0x40 [ 574.499925] ? _ion_heap_freelist_drain+0x6e/0x410 [ 574.499934] ? ion_system_contig_heap_create+0x130/0x130 [ 574.499944] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 574.499954] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 574.499966] ion_alloc+0x27a/0x810 [ 574.499979] ? ion_dma_buf_release+0x40/0x40 [ 574.499991] ? __might_fault+0x177/0x1b0 [ 574.500003] ion_ioctl+0xea/0x1f0 [ 574.500013] ? ion_query_heaps+0x360/0x360 [ 574.500026] ? ion_query_heaps+0x360/0x360 [ 574.500036] do_vfs_ioctl+0x75a/0xff0 [ 574.500047] ? ioctl_preallocate+0x1a0/0x1a0 [ 574.500057] ? lock_downgrade+0x740/0x740 [ 574.500070] ? __fget+0x225/0x360 [ 574.500084] ? do_vfs_ioctl+0xff0/0xff0 [ 574.519851] 1*128kB [ 574.523958] ? security_file_ioctl+0x83/0xb0 [ 574.543667] (U) 60*256kB [ 574.549205] SyS_ioctl+0x7f/0xb0 [ 574.549214] ? do_vfs_ioctl+0xff0/0xff0 [ 574.549227] do_syscall_64+0x1d5/0x640 [ 574.549243] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 574.549256] RIP: 0033:0x466459 [ 574.549261] RSP: 002b:00007f98f1e65188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 574.549271] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 574.549276] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 574.549281] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 574.549286] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 574.549292] R13: 00007ffde3ff81ef R14: 00007f98f1e65300 R15: 0000000000022000 [ 574.558149] Bluetooth: hci3 command 0x040f tx timeout [ 574.574449] 0 [ 574.591173] Node 0 [ 574.606416] (U) [ 574.619760] Normal: [ 574.632582] 15*512kB [ 574.649770] 0*4kB [ 574.657976] 2717 [ 574.675783] 0*8kB [ 574.693798] 2718 2718 2718 [ 574.700654] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 574.709315] (U) 0*1024kB 0*2048kB 0*4096kB = 26808kB [ 574.714458] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 574.718316] Node 1 Normal: 120*4kB (M) 97*8kB (M) 49*16kB (M) 40*32kB (M) 5*64kB (M) 1*128kB (U) 60*256kB (U) 15*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26808kB [ 574.733585] Node 0 DMA32 free:17916kB min:36200kB low:45248kB high:54296kB active_anon:50832kB inactive_anon:74200kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7296kB pagetables:2780kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 574.746491] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 574.794291] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 574.794994] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 574.820440] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 574.823184] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 574.838419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 574.865886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 574.866666] 26246 total pagecache pages [ 574.878129] lowmem_reserve[]: 0 0 0 0 0 [ 574.882888] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 574.905382] 0 pages in swap cache [ 574.911857] 26018 total pagecache pages [ 574.916059] 0 pages in swap cache [ 574.919867] Swap cache stats: add 0, delete 0, find 0/0 [ 574.925574] Free swap = 0kB [ 574.933955] Total swap = 0kB [ 574.938376] 2097051 pages RAM [ 574.938774] Swap cache stats: add 0, delete 0, find 0/0 [ 574.941479] 0 pages HighMem/MovableOnly [ 574.941483] 363841 pages reserved [ 574.941486] 0 pages cma reserved [ 574.941493] Out of memory (oom_kill_allocating_task): Kill process 19983 (systemd-journal) score 0 or sacrifice child [ 574.941522] Killed process 19983 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:2180kB [ 574.953185] lowmem_reserve[]: 0 0 0 0 0 [ 574.995684] Node 1 Normal free:53252kB min:53696kB low:67120kB high:80544kB active_anon:1484kB inactive_anon:25852kB active_file:1212kB inactive_file:1132kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:492kB bounce:0kB free_pcp:368kB local_pcp:0kB free_cma:0kB [ 575.007944] Free swap = 0kB [ 575.030607] lowmem_reserve[]: 0 0 0 0 0 [ 575.035388] Node 0 DMA: 3*4kB (UM) 4*8kB (UME) 3*16kB (ME) 4*32kB (UME) 4*64kB (UME) 4*128kB (UE) 7*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10972kB [ 575.047340] Total swap = 0kB [ 575.054341] 2097051 pages RAM [ 575.056251] Node 0 DMA32: 1349*4kB (UME) 839*8kB (UME) 189*16kB (UME) 33*32kB (UME) 58*64kB (UM) 17*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 22076kB [ 575.065693] 0 pages HighMem/MovableOnly [ 575.079252] 363841 pages reserved [ 575.079620] Node 0 [ 575.082698] 0 pages cma reserved [ 575.093467] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 575.118055] Node 1 Normal: 88*4kB (M) 95*8kB (M) 55*16kB (M) 44*32kB (M) 13*64kB (UM) 3*128kB (UM) 11*256kB (UM) 15*512kB (U) 31*1024kB (U) 0*2048kB 0*4096kB = 46856kB [ 575.126156] oom_reaper: reaped process 20217 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 575.133468] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 575.154553] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 575.163236] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 575.175171] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 575.194568] 25409 total pagecache pages [ 575.198598] 0 pages in swap cache [ 575.202056] Swap cache stats: add 0, delete 0, find 0/0 [ 575.216215] Free swap = 0kB [ 575.225085] Total swap = 0kB [ 575.246932] 2097051 pages RAM [ 575.264534] 0 pages HighMem/MovableOnly [ 575.270860] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 575.295510] 363841 pages reserved [ 575.301151] 0 pages cma reserved [ 575.322795] in:imklog cpuset=/ mems_allowed=0-1 [ 575.330219] CPU: 0 PID: 20237 Comm: in:imklog Not tainted 4.14.227-syzkaller #0 [ 575.337679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.347037] Call Trace: [ 575.349625] dump_stack+0x1b2/0x281 [ 575.353267] dump_header+0x178/0x82f [ 575.356970] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 575.362060] ? ___ratelimit+0x2cd/0x530 [ 575.366025] oom_kill_process.cold+0x10/0xb18 [ 575.370519] out_of_memory+0xe3e/0x1190 [ 575.374484] ? oom_killer_disable+0x1c0/0x1c0 [ 575.378965] ? mutex_trylock+0x152/0x1a0 [ 575.383016] __alloc_pages_nodemask+0x23e1/0x2720 [ 575.387863] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 575.392712] alloc_pages_current+0x155/0x260 [ 575.397112] filemap_fault+0xea3/0x1980 [ 575.401092] ext4_filemap_fault+0x84/0xb0 [ 575.405227] __do_fault+0xfa/0x380 [ 575.408777] __handle_mm_fault+0x2497/0x4620 [ 575.413175] ? vm_insert_page+0x7c0/0x7c0 [ 575.417325] ? lock_downgrade+0x740/0x740 [ 575.421470] handle_mm_fault+0x391/0x860 [ 575.425520] __do_page_fault+0x549/0xad0 [ 575.429580] ? spurious_fault+0x640/0x640 [ 575.433722] ? do_page_fault+0x60/0x500 [ 575.437895] ? page_fault+0x2f/0x50 [ 575.441532] page_fault+0x45/0x50 [ 575.444973] RIP: 9f41eda3:0x1f9f 05:07:15 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) [ 575.448321] RSP: 98002080:00007f399f41e4b8 EFLAGS: 7f399f41eda0 [ 575.664903] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 575.773336] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 575.793495] CPU: 1 PID: 20269 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 575.801393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.810737] Call Trace: [ 575.813329] dump_stack+0x1b2/0x281 [ 575.816950] warn_alloc.cold+0x96/0x1cc [ 575.820930] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 575.825935] ? zone_watermark_ok_safe+0x220/0x220 [ 575.830779] __alloc_pages_nodemask+0x2127/0x2720 [ 575.835620] ? lock_acquire+0x170/0x3f0 [ 575.839588] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 575.844427] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 575.849893] ? __mutex_unlock_slowpath+0x75/0x770 [ 575.854727] alloc_pages_current+0x155/0x260 [ 575.859142] ion_page_pool_alloc+0x118/0x1b0 [ 575.863557] ion_system_heap_allocate+0x133/0x8c0 [ 575.868388] ? ion_alloc+0x187/0x810 [ 575.872092] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 575.877534] ? ion_system_contig_heap_create+0x130/0x130 [ 575.882974] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 575.887980] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 575.892813] ion_alloc+0x204/0x810 [ 575.896352] ? ion_dma_buf_release+0x40/0x40 [ 575.901359] ? __might_fault+0x177/0x1b0 [ 575.905415] ion_ioctl+0xea/0x1f0 [ 575.908860] ? ion_query_heaps+0x360/0x360 [ 575.913088] ? ion_query_heaps+0x360/0x360 [ 575.917325] do_vfs_ioctl+0x75a/0xff0 [ 575.921117] ? ioctl_preallocate+0x1a0/0x1a0 [ 575.925508] ? lock_downgrade+0x740/0x740 [ 575.929648] ? __fget+0x225/0x360 [ 575.933105] ? do_vfs_ioctl+0xff0/0xff0 [ 575.937083] ? security_file_ioctl+0x83/0xb0 [ 575.941506] SyS_ioctl+0x7f/0xb0 [ 575.944862] ? do_vfs_ioctl+0xff0/0xff0 [ 575.948929] do_syscall_64+0x1d5/0x640 [ 575.952829] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 575.958008] RIP: 0033:0x466459 [ 575.961186] RSP: 002b:00007f98f1e65188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.968908] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 575.976169] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 575.983446] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 575.990966] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 575.998309] R13: 00007ffde3ff81ef R14: 00007f98f1e65300 R15: 0000000000022000 [ 576.061266] warn_alloc_show_mem: 2 callbacks suppressed [ 576.061270] Mem-Info: [ 576.138725] active_anon:13069 inactive_anon:25012 isolated_anon:0 [ 576.138725] active_file:573 inactive_file:573 isolated_file:15 [ 576.138725] unevictable:0 dirty:0 writeback:0 unstable:0 [ 576.138725] slab_reclaimable:12708 slab_unreclaimable:119868 [ 576.138725] mapped:53207 shmem:25364 pagetables:812 bounce:0 [ 576.138725] free:22974 free_pcp:537 free_cma:0 [ 576.147262] Mem-Info: [ 576.254139] active_anon:13044 inactive_anon:25012 isolated_anon:0 [ 576.254139] active_file:264 inactive_file:216 isolated_file:43 [ 576.254139] unevictable:0 dirty:0 writeback:0 unstable:0 [ 576.254139] slab_reclaimable:12708 slab_unreclaimable:119920 [ 576.254139] mapped:52657 shmem:25364 pagetables:812 bounce:0 [ 576.254139] free:16662 free_pcp:258 free_cma:0 [ 576.292607] Node 0 active_anon:50508kB inactive_anon:74200kB active_file:116kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:174084kB dirty:0kB writeback:0kB shmem:75508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 576.377377] Node 0 active_anon:50508kB inactive_anon:74200kB active_file:116kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:174084kB dirty:0kB writeback:0kB shmem:75508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 576.415219] Node 1 active_anon:1668kB inactive_anon:25848kB active_file:100kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35044kB dirty:0kB writeback:0kB shmem:25948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 576.444903] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 576.472567] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 576.478398] Node 0 DMA32 free:69960kB min:36200kB low:45248kB high:54296kB active_anon:50496kB inactive_anon:74200kB active_file:116kB inactive_file:152kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7360kB pagetables:2828kB bounce:0kB free_pcp:1436kB local_pcp:736kB free_cma:0kB [ 576.500666] Node 1 active_anon:1668kB inactive_anon:25848kB active_file:100kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34944kB dirty:0kB writeback:0kB shmem:25948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 576.510191] lowmem_reserve[]: 0 0 0 0 0 [ 576.569495] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 576.617336] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 576.639245] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 576.655631] Node 0 DMA32 free:117936kB min:36200kB low:45248kB high:54296kB active_anon:50496kB inactive_anon:74200kB active_file:116kB inactive_file:152kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7360kB pagetables:2828kB bounce:0kB free_pcp:804kB local_pcp:708kB free_cma:0kB [ 576.677378] Bluetooth: hci3 command 0x0419 tx timeout [ 576.727341] lowmem_reserve[]: 0 0 0 0 0 [ 576.731372] Node 1 Normal free:113016kB min:53696kB low:67120kB high:80544kB active_anon:1668kB inactive_anon:25848kB active_file:188kB inactive_file:224kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:420kB bounce:0kB free_pcp:1408kB local_pcp:668kB free_cma:0kB [ 576.806887] lowmem_reserve[]: 0 0 0 0 0 [ 576.823349] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 576.827888] lowmem_reserve[]: 0 0 0 0 0 [ 576.917476] Node 0 DMA: 40*4kB (UM) 6*8kB (UME) 3*16kB (ME) 4*32kB (UME) 4*64kB (UME) 4*128kB (UE) 7*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11136kB [ 576.931789] lowmem_reserve[]: 0 0 0 0 0 [ 576.957089] Node 0 DMA32: 1100*4kB (ME) 748*8kB (ME) 199*16kB (UME) 664*32kB (UME) 123*64kB (UM) 14*128kB (UM) 3*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45248kB [ 576.958493] Node 1 [ 577.006966] chnl_net:caif_netlink_parms(): no params data found [ 577.023233] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 577.074036] Normal free:54608kB min:53696kB low:67120kB high:80544kB active_anon:1684kB inactive_anon:25848kB active_file:12kB inactive_file:1664kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:424kB bounce:0kB free_pcp:144kB local_pcp:76kB free_cma:0kB [ 577.098316] Node 1 Normal: 130*4kB (UME) 44*8kB (UME) 30*16kB (UME) 286*32kB (UME) 237*64kB (UME) 44*128kB (UME) 29*256kB (UME) 7*512kB (UE) 20*1024kB (UM) 0*2048kB 0*4096kB = 62792kB [ 577.214283] lowmem_reserve[]: 0 0 0 0 0 [ 577.232677] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.232845] Node 0 [ 577.257792] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 577.269309] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 577.278305] DMA: 2*4kB (UM) 5*8kB (UME) 4*16kB (UME) 5*32kB (UME) 3*64kB (ME) 4*128kB (UE) 7*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10960kB [ 577.311069] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.333691] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 577.340091] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 577.351568] 25437 total pagecache pages [ 577.355583] 0 pages in swap cache [ 577.366726] CPU: 1 PID: 20216 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 577.374617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.378056] Swap cache stats: add 0, delete 0, find 0/0 [ 577.383971] Call Trace: [ 577.390275] Free swap = 0kB [ 577.391912] dump_stack+0x1b2/0x281 [ 577.394933] Total swap = 0kB [ 577.398549] warn_alloc.cold+0x96/0x1cc [ 577.398561] ? zone_watermark_ok_safe+0x220/0x220 [ 577.398584] __alloc_pages_nodemask+0x2127/0x2720 [ 577.401576] 2097051 pages RAM [ 577.405534] ? lock_acquire+0x170/0x3f0 [ 577.410370] 0 pages HighMem/MovableOnly [ 577.415179] ? lock_acquire+0x170/0x3f0 [ 577.418273] 363841 pages reserved [ 577.422219] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 577.426157] 0 pages cma reserved [ 577.430118] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 577.430131] ? __mutex_unlock_slowpath+0x75/0x770 [ 577.430146] alloc_pages_current+0x155/0x260 [ 577.433572] Out of memory (oom_kill_allocating_task): Kill process 20237 (in:imklog) score 0 or sacrifice child [ 577.438398] ion_page_pool_alloc+0x118/0x1b0 [ 577.438411] ion_system_heap_allocate+0x133/0x8c0 [ 577.438422] ? _raw_spin_unlock+0x29/0x40 [ 577.442957] Killed process 20235 (rsyslogd) total-vm:254332kB, anon-rss:712kB, file-rss:0kB, shmem-rss:0kB [ 577.448337] ? _ion_heap_freelist_drain+0x6e/0x410 [ 577.448348] ? ion_system_contig_heap_create+0x130/0x130 [ 577.448359] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 577.448372] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 577.489956] in:imklog: [ 577.490927] ion_alloc+0x27a/0x810 [ 577.495826] page allocation failure: order:0 [ 577.501276] ? ion_dma_buf_release+0x40/0x40 [ 577.501290] ? __might_fault+0x177/0x1b0 [ 577.501302] ion_ioctl+0xea/0x1f0 [ 577.501313] ? ion_query_heaps+0x360/0x360 [ 577.506322] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 577.511164] ? ion_query_heaps+0x360/0x360 [ 577.511176] do_vfs_ioctl+0x75a/0xff0 [ 577.511188] ? ioctl_preallocate+0x1a0/0x1a0 [ 577.511200] ? lock_downgrade+0x740/0x740 [ 577.513764] (null) [ 577.517385] ? __fget+0x225/0x360 [ 577.517395] ? do_vfs_ioctl+0xff0/0xff0 [ 577.517408] ? security_file_ioctl+0x83/0xb0 [ 577.521792] in:imklog cpuset= [ 577.526187] SyS_ioctl+0x7f/0xb0 [ 577.530249] / [ 577.533654] ? do_vfs_ioctl+0xff0/0xff0 [ 577.537885] mems_allowed=0-1 [ 577.544704] do_syscall_64+0x1d5/0x640 [ 577.594174] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 577.599359] RIP: 0033:0x466459 [ 577.602538] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 577.610237] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 577.617518] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 577.624789] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 577.632066] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 577.639327] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 577.646607] CPU: 0 PID: 20237 Comm: in:imklog Not tainted 4.14.227-syzkaller #0 [ 577.654053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.663390] Call Trace: [ 577.665971] dump_stack+0x1b2/0x281 [ 577.669589] warn_alloc.cold+0x96/0x1cc [ 577.673556] ? zone_watermark_ok_safe+0x220/0x220 [ 577.678396] ? unreserve_highatomic_pageblock+0x336/0x460 [ 577.683927] ? wait_for_completion_io+0x10/0x10 [ 577.688590] __alloc_pages_nodemask+0x2127/0x2720 [ 577.693431] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 577.698536] alloc_pages_current+0x155/0x260 [ 577.702934] filemap_fault+0xea3/0x1980 [ 577.706930] ext4_filemap_fault+0x84/0xb0 [ 577.711068] __do_fault+0xfa/0x380 [ 577.714596] __handle_mm_fault+0x2497/0x4620 [ 577.718992] ? vm_insert_page+0x7c0/0x7c0 [ 577.723131] ? lock_downgrade+0x740/0x740 [ 577.727285] handle_mm_fault+0x391/0x860 [ 577.731335] __do_page_fault+0x549/0xad0 [ 577.735398] ? spurious_fault+0x640/0x640 [ 577.739533] ? do_page_fault+0x60/0x500 [ 577.743499] ? page_fault+0x2f/0x50 [ 577.747115] page_fault+0x45/0x50 [ 577.750556] RIP: 9f41eda3:0x1f9f [ 577.753908] RSP: 98002080:00007f399f41e4b8 EFLAGS: 7f399f41eda0 [ 577.754137] syz-executor.4: [ 577.756207] Node 0 DMA32: 1151*4kB (ME) 707*8kB (UME) 169*16kB (UME) 163*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18180kB [ 577.766240] page allocation failure: order:0 [ 577.777127] Mem-Info: [ 577.779639] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 577.789248] active_anon:13037 inactive_anon:25012 isolated_anon:0 [ 577.789248] active_file:60 inactive_file:23 isolated_file:0 [ 577.789248] unevictable:0 dirty:4 writeback:0 unstable:0 [ 577.789248] slab_reclaimable:12720 slab_unreclaimable:119466 [ 577.789248] mapped:52240 shmem:25364 pagetables:794 bounce:0 [ 577.789248] free:13865 free_pcp:0 free_cma:0 [ 577.810622] Node 1 [ 577.841431] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 577.854008] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 577.861452] CPU: 0 PID: 20215 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 577.869337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 577.878684] Call Trace: [ 577.881275] dump_stack+0x1b2/0x281 [ 577.884903] warn_alloc.cold+0x96/0x1cc [ 577.887250] Normal: [ 577.888906] ? zone_watermark_ok_safe+0x220/0x220 [ 577.888916] ? usleep_range+0x130/0x130 [ 577.888925] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 577.888936] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 577.888947] ? run_timer_softirq+0x5a0/0x5a0 [ 577.888963] __alloc_pages_nodemask+0x2127/0x2720 [ 577.888980] ? lock_acquire+0x170/0x3f0 [ 577.888995] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 577.889007] ? ion_page_pool_alloc+0x9e/0x1b0 [ 577.889021] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 577.898767] syz-executor.3: [ 577.900134] ? retint_kernel+0x2d/0x2d [ 577.905282] page allocation failure: order:0 [ 577.910312] alloc_pages_current+0x155/0x260 [ 577.910327] ion_page_pool_alloc+0x118/0x1b0 [ 577.910338] ion_system_heap_allocate+0x133/0x8c0 [ 577.910350] ? _raw_spin_unlock+0x29/0x40 [ 577.910358] ? _ion_heap_freelist_drain+0x6e/0x410 [ 577.910368] ? ion_system_contig_heap_create+0x130/0x130 [ 577.910379] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 577.910389] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 577.910400] ion_alloc+0x27a/0x810 [ 577.910414] ? ion_dma_buf_release+0x40/0x40 [ 577.910425] ? __might_fault+0x177/0x1b0 [ 577.910440] ion_ioctl+0xea/0x1f0 [ 577.927966] 180*4kB [ 577.928440] ? ion_query_heaps+0x360/0x360 [ 577.932906] (ME) [ 577.938343] ? ion_query_heaps+0x360/0x360 [ 577.938354] do_vfs_ioctl+0x75a/0xff0 [ 577.938366] ? ioctl_preallocate+0x1a0/0x1a0 [ 577.938376] ? lock_downgrade+0x740/0x740 [ 577.938389] ? __fget+0x225/0x360 [ 577.938398] ? do_vfs_ioctl+0xff0/0xff0 [ 577.938409] ? security_file_ioctl+0x83/0xb0 [ 577.938419] SyS_ioctl+0x7f/0xb0 [ 577.938427] ? do_vfs_ioctl+0xff0/0xff0 [ 577.938439] do_syscall_64+0x1d5/0x640 [ 577.938455] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 577.953988] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 577.954108] RIP: 0033:0x466459 [ 577.962657] (null) [ 577.963337] RSP: 002b:00007ff90c340188 EFLAGS: 00000246 [ 577.982346] 100*8kB [ 577.982829] ORIG_RAX: 0000000000000010 [ 578.002038] syz-executor.3 cpuset= [ 578.003040] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 578.005343] / [ 578.009555] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 578.009563] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 578.026056] (ME) [ 578.029713] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 578.029719] R13: 00007ffce90c212f R14: 00007ff90c340300 R15: 0000000000022000 [ 578.034477] Node 0 active_anon:50508kB inactive_anon:74200kB active_file:28kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174100kB dirty:12kB writeback:0kB shmem:75508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 578.049461] 58*16kB [ 578.057550] Node 1 active_anon:1728kB inactive_anon:25848kB active_file:52kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:25948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 578.072354] mems_allowed=0-1 [ 578.081073] Node 0 [ 578.099792] (ME) [ 578.107258] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 578.125310] CPU: 1 PID: 20217 Comm: syz-executor.3 Not tainted 4.14.227-syzkaller #0 [ 578.129397] lowmem_reserve[]: [ 578.154958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.154963] Call Trace: [ 578.154984] dump_stack+0x1b2/0x281 [ 578.154997] warn_alloc.cold+0x96/0x1cc [ 578.155008] ? zone_watermark_ok_safe+0x220/0x220 [ 578.155023] ? usleep_range+0x130/0x130 [ 578.159450] 0 [ 578.184604] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 578.184618] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 578.184628] ? run_timer_softirq+0x5a0/0x5a0 [ 578.184645] __alloc_pages_nodemask+0x2127/0x2720 [ 578.187778] 2717 [ 578.189992] ? lock_acquire+0x170/0x3f0 [ 578.192021] 2718 [ 578.217614] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 578.217626] ? ion_page_pool_alloc+0x9e/0x1b0 [ 578.217642] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 578.217660] alloc_pages_current+0x155/0x260 [ 578.237338] 2718 [ 578.237971] ion_page_pool_alloc+0x118/0x1b0 [ 578.240553] 2718 [ 578.244171] ion_system_heap_allocate+0x133/0x8c0 [ 578.258735] ? ion_alloc+0x187/0x810 [ 578.263820] Node 0 [ 578.268825] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 578.268838] ? ion_system_contig_heap_create+0x130/0x130 [ 578.268847] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 578.268860] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 578.268871] ion_alloc+0x204/0x810 [ 578.287395] DMA32 free:18180kB min:36200kB low:45248kB high:54296kB active_anon:50496kB inactive_anon:74200kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7360kB pagetables:2828kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 578.291009] ? ion_dma_buf_release+0x40/0x40 [ 578.295501] lowmem_reserve[]: [ 578.300951] ? __might_fault+0x177/0x1b0 [ 578.300966] ion_ioctl+0xea/0x1f0 [ 578.300977] ? ion_query_heaps+0x360/0x360 [ 578.300990] ? ion_query_heaps+0x360/0x360 [ 578.301001] do_vfs_ioctl+0x75a/0xff0 [ 578.327354] 0 [ 578.330105] ? ioctl_preallocate+0x1a0/0x1a0 [ 578.335565] 0 [ 578.340576] ? lock_downgrade+0x740/0x740 [ 578.340590] ? __fget+0x225/0x360 [ 578.340599] ? do_vfs_ioctl+0xff0/0xff0 [ 578.340609] ? security_file_ioctl+0x83/0xb0 [ 578.340620] SyS_ioctl+0x7f/0xb0 [ 578.350892] 0 [ 578.377310] ? do_vfs_ioctl+0xff0/0xff0 [ 578.377324] do_syscall_64+0x1d5/0x640 [ 578.377341] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 578.377350] RIP: 0033:0x466459 [ 578.377359] RSP: 002b:00007f42379f8188 EFLAGS: 00000246 [ 578.397351] 0 [ 578.400806] ORIG_RAX: 0000000000000010 [ 578.404595] 0 [ 578.406391] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 578.428498] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 578.431857] Node 0 [ 578.433643] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 578.447371] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 578.449826] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 578.449836] R13: 00007ffef8958def R14: 00007f42379f8300 R15: 0000000000022000 [ 578.455189] lowmem_reserve[]: [ 578.465199] 196*32kB [ 578.524499] 0 [ 578.534289] Bluetooth: hci0 command 0x0406 tx timeout [ 578.538477] oom_reaper: reaped process 20235 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 578.556669] 0 0 0 0 [ 578.564254] (UME) 17*64kB (ME) 40*128kB (UME) 30*256kB (UME) 8*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 26704kB [ 578.569355] Node 1 Normal free:257872kB min:53696kB low:67120kB high:80544kB active_anon:928kB inactive_anon:25848kB active_file:152kB inactive_file:6548kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:348kB bounce:0kB free_pcp:656kB local_pcp:164kB free_cma:0kB 05:07:18 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) msgctl$IPC_STAT(0x0, 0x2, 0x0) [ 578.591701] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 578.635936] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 578.645770] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 578.663044] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 578.682061] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 578.694024] lowmem_reserve[]: 0 0 0 0 0 [ 578.712301] Node 0 DMA: 2*4kB (UM) 5*8kB (UME) 4*16kB (UME) 5*32kB (UME) 3*64kB (ME) 4*128kB (UE) 7*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10960kB [ 578.713589] 28393 total pagecache pages [ 578.770827] Node 0 DMA32: 1150*4kB (UME) 1005*8kB (UME) 222*16kB (UME) 176*32kB (UME) 90*64kB (UM) 106*128kB (UH) 6*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 42688kB [ 578.773771] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 578.799137] 0 pages in swap cache [ 578.802635] Swap cache stats: add 0, delete 0, find 0/0 [ 578.823940] Free swap = 0kB [ 578.840930] Total swap = 0kB [ 578.845125] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 578.854713] 2097051 pages RAM [ 578.864084] systemd[1]: Stopped Journal Service. [ 578.864794] 0 pages HighMem/MovableOnly [ 578.881094] 363841 pages reserved [ 578.891574] 0 pages cma reserved [ 578.902186] Node 1 Normal: 1*4kB (E) 3*8kB (UME) 1*16kB (E) 2*32kB (ME) 1230*64kB (U) 834*128kB (UM) 70*256kB (UM) 89*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 249068kB [ 578.939151] systemd[1]: Starting Journal Service... [ 578.983997] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 579.016949] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.037949] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 579.055608] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.074322] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 579.086654] device bridge_slave_0 entered promiscuous mode [ 579.108344] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.114754] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 579.136605] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.143964] 28865 total pagecache pages [ 579.157412] 0 pages in swap cache [ 579.161954] device bridge_slave_1 entered promiscuous mode [ 579.179567] Swap cache stats: add 0, delete 0, find 0/0 [ 579.193746] Free swap = 0kB [ 579.208465] Total swap = 0kB [ 579.222542] 2097051 pages RAM [ 579.233428] 0 pages HighMem/MovableOnly [ 579.251817] 363841 pages reserved [ 579.268022] 0 pages cma reserved [ 579.276080] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 579.287424] in:imklog invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=0 [ 579.314256] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 579.327579] in:imklog cpuset=/ mems_allowed=0-1 [ 579.342223] CPU: 0 PID: 20237 Comm: in:imklog Not tainted 4.14.227-syzkaller #0 [ 579.349779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 579.359602] Call Trace: [ 579.363089] dump_stack+0x1b2/0x281 [ 579.366732] dump_header+0x178/0x82f [ 579.370445] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 579.375544] ? ___ratelimit+0x2cd/0x530 [ 579.379522] oom_kill_process.cold+0x10/0xb18 [ 579.384031] out_of_memory+0xe3e/0x1190 [ 579.388005] ? pagefault_out_of_memory+0xaa/0xd0 [ 579.392762] ? oom_killer_disable+0x1c0/0x1c0 [ 579.397277] ? mutex_trylock+0x152/0x1a0 [ 579.401344] ? pagefault_out_of_memory+0xaa/0xd0 [ 579.406109] pagefault_out_of_memory+0xbb/0xd0 [ 579.410690] ? out_of_memory+0x1190/0x1190 [ 579.414928] ? lock_downgrade+0x740/0x740 [ 579.419075] mm_fault_error+0xad/0x2c0 [ 579.422963] __do_page_fault+0x93c/0xad0 [ 579.427033] ? spurious_fault+0x640/0x640 [ 579.431203] ? do_page_fault+0x60/0x500 [ 579.435182] ? page_fault+0x2f/0x50 [ 579.438807] page_fault+0x45/0x50 [ 579.442255] RIP: 9f41eda3:0x1f9f [ 579.445613] RSP: 98002080:00007f399f41e4b8 EFLAGS: 7f399f41eda0 [ 579.581501] warn_alloc_show_mem: 2 callbacks suppressed [ 579.581505] Mem-Info: [ 579.607434] active_anon:12886 inactive_anon:25012 isolated_anon:0 [ 579.607434] active_file:51 inactive_file:50 isolated_file:17 [ 579.607434] unevictable:0 dirty:16 writeback:0 unstable:0 [ 579.607434] slab_reclaimable:12746 slab_unreclaimable:119414 [ 579.607434] mapped:52238 shmem:25364 pagetables:807 bounce:0 [ 579.607434] free:20497 free_pcp:197 free_cma:0 [ 579.617387] Mem-Info: [ 579.641316] Node 0 active_anon:50508kB inactive_anon:74200kB active_file:84kB inactive_file:140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174100kB dirty:0kB writeback:0kB shmem:75508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 579.667375] active_anon:12886 inactive_anon:25012 isolated_anon:0 [ 579.667375] active_file:51 inactive_file:50 isolated_file:17 [ 579.667375] unevictable:0 dirty:16 writeback:0 unstable:0 [ 579.667375] slab_reclaimable:12746 slab_unreclaimable:119414 [ 579.667375] mapped:52238 shmem:25364 pagetables:807 bounce:0 [ 579.667375] free:17570 free_pcp:85 free_cma:0 [ 579.672003] Node 1 active_anon:1036kB inactive_anon:25848kB active_file:120kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):68kB mapped:34852kB dirty:64kB writeback:0kB shmem:25948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 579.737383] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 579.744106] Node 0 active_anon:50508kB inactive_anon:74200kB active_file:84kB inactive_file:140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174100kB dirty:0kB writeback:0kB shmem:75508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 579.769185] lowmem_reserve[]: [ 579.791808] Node 1 active_anon:1036kB inactive_anon:25848kB active_file:120kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):68kB mapped:34852kB dirty:64kB writeback:0kB shmem:25948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 579.795477] 0 [ 579.822875] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 579.826274] 2717 [ 579.852406] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 579.856511] 2718 2718 2718 [ 579.862728] Node 0 DMA32 free:17736kB min:36200kB low:45248kB high:54296kB active_anon:50496kB inactive_anon:74200kB active_file:292kB inactive_file:276kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7328kB pagetables:2764kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 579.875844] Node 0 DMA32 free:17736kB min:36200kB low:45248kB high:54296kB active_anon:50496kB inactive_anon:74200kB active_file:292kB inactive_file:276kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7328kB pagetables:2764kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 579.896069] lowmem_reserve[]: [ 579.922650] lowmem_reserve[]: 0 0 0 0 0 [ 579.926422] 0 [ 579.929771] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 579.931578] 0 0 0 0 [ 579.966512] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 579.967350] lowmem_reserve[]: 0 0 0 0 0 [ 579.997112] Node 1 Normal free:26724kB min:53696kB low:67120kB high:80544kB active_anon:1036kB inactive_anon:25848kB active_file:552kB inactive_file:316kB unevictable:0kB writepending:64kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:464kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 580.009856] lowmem_reserve[]: 0 0 0 0 0 [ 580.034030] Node 1 Normal free:26724kB min:53696kB low:67120kB high:80544kB active_anon:1036kB inactive_anon:25848kB active_file:552kB inactive_file:316kB unevictable:0kB writepending:64kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:464kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 580.037335] lowmem_reserve[]: 0 0 0 0 0 [ 580.070162] lowmem_reserve[]: [ 580.072492] Node 0 [ 580.072495] 0 0 [ 580.075581] DMA: 91*4kB (UM) 3*8kB (ME) 4*16kB (UME) 5*32kB (UME) 4*64kB (UME) 1*128kB (E) 7*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10980kB [ 580.081828] 0 0 0 [ 580.097105] Node 0 DMA: 91*4kB (UM) 3*8kB (ME) 4*16kB (UME) 5*32kB (UME) 4*64kB (UME) 1*128kB (E) 7*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10980kB [ 580.119753] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 580.124401] Node 0 DMA32: 1117*4kB (UME) 712*8kB (MEH) 161*16kB (ME) 160*32kB (UME) 0*64kB 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17988kB [ 580.145028] syz-executor.4 cpuset= [ 580.152348] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 580.165227] Node 0 [ 580.174415] / mems_allowed=0-1 [ 580.180452] Node 0 DMA32: 1117*4kB (UME) 712*8kB (MEH) 161*16kB (ME) 160*32kB (UME) 0*64kB 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17988kB [ 580.187169] Normal: [ 580.194718] CPU: 1 PID: 20352 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 580.204919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 580.214264] Call Trace: [ 580.216908] dump_stack+0x1b2/0x281 [ 580.218635] 0*4kB 0*8kB [ 580.220532] warn_alloc.cold+0x96/0x1cc [ 580.220540] 0*16kB [ 580.223208] ? zone_watermark_ok_safe+0x220/0x220 [ 580.227161] 0*32kB 0*64kB [ 580.229400] __alloc_pages_nodemask+0x2127/0x2720 [ 580.229413] ? io_schedule_timeout+0x140/0x140 [ 580.237024] 0*128kB [ 580.237057] ? lock_acquire+0x170/0x3f0 [ 580.241883] 0*256kB [ 580.246433] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 580.248740] 0*512kB [ 580.252687] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 580.254981] 0*1024kB [ 580.259819] ? __mutex_unlock_slowpath+0x75/0x770 [ 580.259835] alloc_pages_current+0x155/0x260 [ 580.259851] ion_page_pool_alloc+0x118/0x1b0 [ 580.262163] 0*2048kB [ 580.267604] ion_system_heap_allocate+0x133/0x8c0 [ 580.267615] ? ion_alloc+0x187/0x810 [ 580.267627] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 580.270011] 0*4096kB [ 580.274839] ? ion_system_contig_heap_create+0x130/0x130 [ 580.279255] = 0kB [ 580.283624] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 580.286000] Node 1 [ 580.290832] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 580.290845] ion_alloc+0x204/0x810 [ 580.290860] ? ion_dma_buf_release+0x40/0x40 [ 580.290872] ? __might_fault+0x177/0x1b0 [ 580.294563] Normal: [ 580.300011] ion_ioctl+0xea/0x1f0 [ 580.300023] ? ion_query_heaps+0x360/0x360 [ 580.300034] ? ion_query_heaps+0x360/0x360 [ 580.300044] do_vfs_ioctl+0x75a/0xff0 [ 580.300057] ? ioctl_preallocate+0x1a0/0x1a0 [ 580.300067] ? lock_downgrade+0x740/0x740 [ 580.300079] ? __fget+0x225/0x360 [ 580.302525] 59*4kB [ 580.307933] ? do_vfs_ioctl+0xff0/0xff0 [ 580.307944] ? security_file_ioctl+0x83/0xb0 [ 580.307955] SyS_ioctl+0x7f/0xb0 [ 580.307963] ? do_vfs_ioctl+0xff0/0xff0 [ 580.310022] (UM) [ 580.315027] do_syscall_64+0x1d5/0x640 [ 580.317233] 51*8kB [ 580.322072] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 580.322081] RIP: 0033:0x466459 [ 580.322085] RSP: 002b:00007ff90c340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 580.322095] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 580.322103] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 580.325623] (UM) [ 580.330098] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 580.330104] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 580.330109] R13: 00007ffce90c212f R14: 00007ff90c340300 R15: 0000000000022000 [ 580.333235] syz-executor.2 cpuset= [ 580.334187] 33*16kB [ 580.336662] / [ 580.363522] (M) [ 580.366382] Node 0 [ 580.366546] 731*32kB (UM) 26*64kB (UM) 1*128kB (U) 0*256kB 0*512kB [ 580.370575] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 580.370630] Node 1 Normal: 59*4kB (UM) [ 580.397831] 0*1024kB [ 580.401830] mems_allowed=0-1 [ 580.426001] 0*2048kB [ 580.437284] 51*8kB [ 580.461016] 0*4096kB [ 580.466484] (UM) [ 580.493662] = 26356kB [ 580.497190] CPU: 1 PID: 20216 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 580.500254] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 580.505995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 580.506001] Call Trace: [ 580.514849] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 580.524190] dump_stack+0x1b2/0x281 [ 580.524205] warn_alloc.cold+0x96/0x1cc [ 580.526769] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 580.535326] ? zone_watermark_ok_safe+0x220/0x220 [ 580.535337] ? usleep_range+0x130/0x130 [ 580.535346] ? try_to_free_pages+0x23f/0x6e0 [ 580.535357] ? _find_next_bit+0xdb/0x100 [ 580.538981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 580.542932] ? run_timer_softirq+0x5a0/0x5a0 [ 580.551765] 25399 total pagecache pages [ 580.556569] __alloc_pages_nodemask+0x2127/0x2720 [ 580.567357] 0 pages in swap cache [ 580.568956] ? lock_acquire+0x170/0x3f0 [ 580.577536] Swap cache stats: add 0, delete 0, find 0/0 [ 580.581903] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 580.585847] Free swap = 0kB [ 580.590678] ? ion_page_pool_alloc+0x9e/0x1b0 [ 580.590694] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 580.590714] alloc_pages_current+0x155/0x260 [ 580.596547] Total swap = 0kB [ 580.598119] ion_page_pool_alloc+0x118/0x1b0 [ 580.598131] ion_system_heap_allocate+0x133/0x8c0 [ 580.598143] ? _raw_spin_unlock+0x29/0x40 [ 580.603669] 2097051 pages RAM [ 580.608501] ? _ion_heap_freelist_drain+0x6e/0x410 [ 580.608512] ? ion_system_contig_heap_create+0x130/0x130 [ 580.608523] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 580.608538] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 580.611531] 0 pages HighMem/MovableOnly [ 580.616014] ion_alloc+0x27a/0x810 [ 580.621465] 363841 pages reserved [ 580.625844] ? ion_dma_buf_release+0x40/0x40 [ 580.628856] 0 pages cma reserved [ 580.633231] ? __might_fault+0x177/0x1b0 [ 580.638070] Out of memory (oom_kill_allocating_task): Kill process 20237 (in:imklog) score 0 or sacrifice child [ 580.642200] ion_ioctl+0xea/0x1f0 [ 580.645291] Killed process 20237 (in:imklog) total-vm:254332kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 580.650189] ? ion_query_heaps+0x360/0x360 [ 580.650203] ? ion_query_heaps+0x360/0x360 [ 580.650214] do_vfs_ioctl+0x75a/0xff0 [ 580.723849] ? ioctl_preallocate+0x1a0/0x1a0 [ 580.728252] ? lock_downgrade+0x740/0x740 [ 580.732394] ? __fget+0x225/0x360 [ 580.735848] ? do_vfs_ioctl+0xff0/0xff0 [ 580.739817] ? security_file_ioctl+0x83/0xb0 [ 580.744217] SyS_ioctl+0x7f/0xb0 [ 580.747572] ? do_vfs_ioctl+0xff0/0xff0 [ 580.751537] do_syscall_64+0x1d5/0x640 [ 580.755420] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 580.760599] RIP: 0033:0x466459 [ 580.763774] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 580.771472] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 580.778729] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 580.785990] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 580.793269] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 580.800966] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 580.811053] kworker/u4:0 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 580.823070] kworker/u4:0 cpuset=/ mems_allowed=0-1 [ 580.828151] CPU: 1 PID: 20382 Comm: kworker/u4:0 Not tainted 4.14.227-syzkaller #0 [ 580.835851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 580.845195] Call Trace: [ 580.847779] dump_stack+0x1b2/0x281 [ 580.851421] dump_header+0x178/0x82f [ 580.853973] 33*16kB [ 580.855127] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 580.855129] (M) 731*32kB [ 580.857441] ? ___ratelimit+0x2cd/0x530 [ 580.857451] oom_kill_process.cold+0x10/0xb18 [ 580.857462] ? lock_downgrade+0x740/0x740 [ 580.857477] out_of_memory+0x2dc/0x1190 [ 580.862567] (UM) [ 580.865312] ? oom_killer_disable+0x1c0/0x1c0 [ 580.873237] 26*64kB [ 580.873736] ? mutex_trylock+0x152/0x1a0 [ 580.877880] (UM) [ 580.881842] __alloc_pages_nodemask+0x23e1/0x2720 [ 580.883874] 1*128kB [ 580.888365] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 580.888387] ? cache_grow_begin+0x41/0x630 [ 580.890687] (U) [ 580.894747] cache_grow_begin+0x91/0x630 [ 580.896810] 0*256kB [ 580.901656] ? cache_grow_begin+0x91/0x630 [ 580.901669] fallback_alloc+0x207/0x2c0 [ 580.901682] kmem_cache_alloc+0x1e5/0x3c0 [ 580.903988] 0*512kB [ 580.908827] getname_kernel+0x4e/0x340 [ 580.908848] call_usermodehelper_exec_async+0x2df/0x510 [ 580.913080] 0*1024kB [ 580.915040] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 580.919114] 0*2048kB [ 580.921400] ret_from_fork+0x24/0x30 [ 580.925607] 0*4096kB [ 580.929740] Mem-Info: [ 580.934605] = 26356kB [ 580.936045] active_anon:12907 inactive_anon:25012 isolated_anon:0 [ 580.936045] active_file:42 inactive_file:0 isolated_file:0 [ 580.936045] unevictable:0 dirty:0 writeback:0 unstable:0 [ 580.936045] slab_reclaimable:12748 slab_unreclaimable:119457 [ 580.936045] mapped:52225 shmem:25364 pagetables:758 bounce:0 [ 580.936045] free:13823 free_pcp:37 free_cma:0 [ 580.966684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 581.000530] Node 0 active_anon:50560kB inactive_anon:74200kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:75508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 581.036688] Node 1 active_anon:1068kB inactive_anon:25848kB active_file:124kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:25948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 581.036902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 581.063935] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 581.063957] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 581.063976] Node 0 DMA32 free:17988kB min:36200kB low:45248kB high:54296kB active_anon:50548kB inactive_anon:74200kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7328kB pagetables:2712kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 581.063994] lowmem_reserve[]: 0 0 0 0 0 [ 581.064011] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 581.064027] lowmem_reserve[]: 0 0 0 0 0 [ 581.064045] Node 1 Normal free:26356kB min:53696kB low:67120kB high:80544kB active_anon:1068kB inactive_anon:25848kB active_file:124kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:320kB bounce:0kB free_pcp:148kB local_pcp:0kB free_cma:0kB [ 581.064062] lowmem_reserve[]: 0 0 0 0 0 [ 581.064079] Node 0 DMA: [ 581.077342] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 581.172486] 84*4kB [ 581.206302] warn_alloc_show_mem: 1 callbacks suppressed [ 581.206306] Mem-Info: [ 581.230708] active_anon:12907 inactive_anon:25012 isolated_anon:0 [ 581.230708] active_file:19 inactive_file:15 isolated_file:0 [ 581.230708] unevictable:0 dirty:0 writeback:0 unstable:0 [ 581.230708] slab_reclaimable:12748 slab_unreclaimable:119457 [ 581.230708] mapped:52225 shmem:25364 pagetables:764 bounce:0 [ 581.230708] free:13824 free_pcp:40 free_cma:0 [ 581.234975] (UM) [ 581.275066] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 581.283209] 3*8kB (ME) 4*16kB (UME) 5*32kB (UME) 4*64kB (UME) 1*128kB (E) 7*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10952kB [ 581.288009] 25398 total pagecache pages [ 581.314869] Node 0 active_anon:50560kB inactive_anon:74200kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:75508kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 581.317055] Node 0 [ 581.349845] 0 pages in swap cache [ 581.355527] Swap cache stats: add 0, delete 0, find 0/0 [ 581.366170] DMA32: 1117*4kB (UME) 712*8kB (MEH) 161*16kB (ME) 160*32kB (UME) 0*64kB 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17988kB [ 581.367661] Free swap = 0kB [ 581.391865] Node 1 active_anon:1068kB inactive_anon:25848kB active_file:224kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:25948kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 581.400884] Node 0 [ 581.432752] Total swap = 0kB [ 581.434355] Normal: [ 581.435003] 2097051 pages RAM [ 581.445659] 0 pages HighMem/MovableOnly [ 581.456346] 363841 pages reserved [ 581.456966] 0*4kB [ 581.462006] 0 pages cma reserved [ 581.517636] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 581.522239] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 581.642991] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 581.652028] Node 0 DMA32 free:44740kB min:36200kB low:45248kB high:54296kB active_anon:50548kB inactive_anon:74200kB active_file:8kB inactive_file:452kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7328kB pagetables:2712kB bounce:0kB free_pcp:1332kB local_pcp:712kB free_cma:0kB [ 581.654207] Node 1 [ 581.686617] lowmem_reserve[]: 0 0 0 0 0 [ 581.730892] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 581.769676] lowmem_reserve[]: 0 0 0 0 0 [ 581.797768] Node 1 Normal free:83972kB min:53696kB low:67120kB high:80544kB active_anon:1068kB inactive_anon:25848kB active_file:1132kB inactive_file:2000kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:344kB bounce:0kB free_pcp:748kB local_pcp:620kB free_cma:0kB [ 581.805292] Normal: [ 581.840676] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 581.873041] systemd-journald[20364]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 581.884707] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 581.942670] 0*4kB 0*8kB 9*16kB (UM) 285*32kB (UM) 957*64kB (UM) 13*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 72176kB [ 581.946659] team0: Port device team_slave_0 added [ 581.983679] systemd[1]: rsyslog.service: Unit entered failed state. [ 581.990842] lowmem_reserve[]: 0 0 0 0 0 [ 582.016038] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 582.023537] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 582.027472] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 582.055260] Node 0 DMA: 85*4kB (UM) 3*8kB (ME) 6*16kB (UME) 5*32kB (UME) 4*64kB (UME) 1*128kB (E) 7*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10988kB [ 582.092250] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 582.093517] Node 0 DMA32: 762*4kB (UEH) 678*8kB (UMEH) 161*16kB (UME) 28*32kB (UME) 406*64kB (UM) 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38056kB [ 582.129422] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 582.163948] team0: Port device team_slave_1 added [ 582.172579] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 582.189636] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 582.209760] Node 1 Normal: 160*4kB (UM) 83*8kB (UM) 41*16kB (UM) 11*32kB (UM) 831*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 55496kB [ 582.227782] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 582.232043] 28011 total pagecache pages [ 582.254415] 0 pages in swap cache [ 582.277560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 582.285565] Swap cache stats: add 0, delete 0, find 0/0 [ 582.291758] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 582.302133] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 582.312270] Free swap = 0kB [ 582.312298] 27498 total pagecache pages [ 582.315380] Total swap = 0kB [ 582.322395] 2097051 pages RAM [ 582.325563] 0 pages HighMem/MovableOnly [ 582.333803] 0 pages in swap cache [ 582.337818] Swap cache stats: add 0, delete 0, find 0/0 [ 582.354770] Free swap = 0kB [ 582.362398] 363841 pages reserved [ 582.365028] Total swap = 0kB [ 582.368304] 0 pages cma reserved [ 582.387379] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 582.396855] Out of memory: Kill process 20212 (syz-executor.0) score 1004 or sacrifice child [ 582.414761] Killed process 20218 (syz-executor.0) total-vm:93252kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 582.433568] 2097051 pages RAM [ 582.445410] systemd[1]: Stopped System Logging Service. [ 582.459888] 0 pages HighMem/MovableOnly [ 582.465834] 363841 pages reserved [ 582.497880] 0 pages cma reserved [ 582.550143] oom_reaper: reaped process 20218 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 582.572736] systemd[1]: Starting System Logging Service... [ 582.596357] batman_adv: batadv0: Adding interface: batadv_slave_0 05:07:23 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) [ 582.657999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.806262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.884588] batman_adv: batadv0: Adding interface: batadv_slave_1 05:07:23 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) [ 582.931662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.089132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.165034] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 583.207017] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 583.390980] device hsr_slave_0 entered promiscuous mode [ 583.427131] device hsr_slave_1 entered promiscuous mode [ 583.461487] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 583.502698] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 583.593032] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 583.639297] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 583.642757] syz-executor.3: [ 583.677373] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 583.685556] CPU: 0 PID: 20405 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 583.687976] page allocation failure: order:4 [ 583.693444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 583.693448] Call Trace: [ 583.693466] dump_stack+0x1b2/0x281 [ 583.693485] warn_alloc.cold+0x96/0x1cc [ 583.717430] ? zone_watermark_ok_safe+0x220/0x220 [ 583.722294] __alloc_pages_nodemask+0x2127/0x2720 [ 583.726868] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 583.727140] ? _raw_spin_unlock_irq+0x24/0x80 [ 583.727155] ? lock_acquire+0x170/0x3f0 [ 583.743231] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 583.748212] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 583.753765] ? __mutex_unlock_slowpath+0x75/0x770 [ 583.757133] syz-executor.3 cpuset= [ 583.758623] alloc_pages_current+0x155/0x260 [ 583.758639] ion_page_pool_alloc+0x118/0x1b0 [ 583.758651] ion_system_heap_allocate+0x133/0x8c0 [ 583.758663] ? ion_alloc+0x187/0x810 [ 583.758673] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 583.758683] ? ion_system_contig_heap_create+0x130/0x130 [ 583.758694] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 583.758705] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 583.758717] ion_alloc+0x204/0x810 [ 583.758740] ? ion_dma_buf_release+0x40/0x40 [ 583.758753] ? __might_fault+0x177/0x1b0 [ 583.770347] / [ 583.771507] ion_ioctl+0xea/0x1f0 [ 583.793392] syz-executor.2 cpuset= [ 583.795924] ? ion_query_heaps+0x360/0x360 [ 583.795939] ? ion_query_heaps+0x360/0x360 [ 583.795953] do_vfs_ioctl+0x75a/0xff0 [ 583.808221] mems_allowed=0-1 [ 583.808761] ? ioctl_preallocate+0x1a0/0x1a0 [ 583.808772] ? lock_downgrade+0x740/0x740 [ 583.808794] ? __fget+0x225/0x360 [ 583.840857] / [ 583.841253] ? do_vfs_ioctl+0xff0/0xff0 [ 583.854514] ? security_file_ioctl+0x83/0xb0 [ 583.855494] mems_allowed=0-1 [ 583.858918] SyS_ioctl+0x7f/0xb0 [ 583.858928] ? do_vfs_ioctl+0xff0/0xff0 [ 583.858940] do_syscall_64+0x1d5/0x640 [ 583.858956] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 583.858965] RIP: 0033:0x466459 [ 583.858969] RSP: 002b:00007f5fb7692188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 583.858979] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 583.858984] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 583.858989] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 583.858994] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 583.859000] R13: 00007fff6f6f7f0f R14: 00007f5fb7692300 R15: 0000000000022000 [ 583.947379] CPU: 1 PID: 20217 Comm: syz-executor.3 Not tainted 4.14.227-syzkaller #0 [ 583.955329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 583.964684] Call Trace: [ 583.967284] dump_stack+0x1b2/0x281 [ 583.970924] warn_alloc.cold+0x96/0x1cc [ 583.974931] ? zone_watermark_ok_safe+0x220/0x220 [ 583.979790] __alloc_pages_nodemask+0x2127/0x2720 [ 583.984638] ? io_schedule_timeout+0x140/0x140 [ 583.989243] ? lock_acquire+0x170/0x3f0 [ 583.993227] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 583.998102] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 584.003563] ? __mutex_unlock_slowpath+0x75/0x770 [ 584.008417] alloc_pages_current+0x155/0x260 [ 584.012831] ion_page_pool_alloc+0x118/0x1b0 [ 584.017250] ion_system_heap_allocate+0x133/0x8c0 [ 584.022096] ? _raw_spin_unlock+0x29/0x40 [ 584.026247] ? _ion_heap_freelist_drain+0x6e/0x410 [ 584.031266] ? ion_system_contig_heap_create+0x130/0x130 [ 584.036727] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 584.041746] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 584.046608] ion_alloc+0x27a/0x810 [ 584.050160] ? ion_dma_buf_release+0x40/0x40 [ 584.054573] ? __might_fault+0x177/0x1b0 [ 584.058655] ion_ioctl+0xea/0x1f0 [ 584.062137] ? ion_query_heaps+0x360/0x360 [ 584.066380] ? ion_query_heaps+0x360/0x360 [ 584.070635] do_vfs_ioctl+0x75a/0xff0 [ 584.074441] ? ioctl_preallocate+0x1a0/0x1a0 [ 584.078851] ? lock_downgrade+0x740/0x740 [ 584.083006] ? __fget+0x225/0x360 [ 584.086465] ? do_vfs_ioctl+0xff0/0xff0 [ 584.090447] ? security_file_ioctl+0x83/0xb0 [ 584.094883] SyS_ioctl+0x7f/0xb0 [ 584.098252] ? do_vfs_ioctl+0xff0/0xff0 [ 584.102230] do_syscall_64+0x1d5/0x640 [ 584.106134] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 584.111355] RIP: 0033:0x466459 [ 584.114543] RSP: 002b:00007f42379f8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 584.122362] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 584.129654] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 584.136916] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 584.144180] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 584.151446] R13: 00007ffef8958def R14: 00007f42379f8300 R15: 0000000000022000 [ 584.158733] CPU: 0 PID: 20401 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 584.166627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 584.175980] Call Trace: [ 584.178573] dump_stack+0x1b2/0x281 [ 584.182197] warn_alloc.cold+0x96/0x1cc [ 584.186167] ? zone_watermark_ok_safe+0x220/0x220 [ 584.191024] __alloc_pages_nodemask+0x2127/0x2720 [ 584.195867] ? lock_acquire+0x170/0x3f0 [ 584.199839] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 584.204681] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 584.210127] ? __mutex_unlock_slowpath+0x75/0x770 [ 584.214965] alloc_pages_current+0x155/0x260 [ 584.219384] ion_page_pool_alloc+0x118/0x1b0 [ 584.223813] ion_system_heap_allocate+0x133/0x8c0 [ 584.228652] ? ion_alloc+0x187/0x810 [ 584.232381] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 584.237828] ? ion_system_contig_heap_create+0x130/0x130 [ 584.243276] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 584.248296] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 584.253135] ion_alloc+0x204/0x810 [ 584.256670] ? ion_dma_buf_release+0x40/0x40 [ 584.261086] ? __might_fault+0x177/0x1b0 [ 584.265172] ion_ioctl+0xea/0x1f0 [ 584.268618] ? ion_query_heaps+0x360/0x360 [ 584.272850] ? ion_query_heaps+0x360/0x360 [ 584.277076] do_vfs_ioctl+0x75a/0xff0 [ 584.280872] ? ioctl_preallocate+0x1a0/0x1a0 [ 584.285271] ? lock_downgrade+0x740/0x740 [ 584.289412] ? __fget+0x225/0x360 [ 584.292862] ? do_vfs_ioctl+0xff0/0xff0 [ 584.296825] ? security_file_ioctl+0x83/0xb0 [ 584.301235] SyS_ioctl+0x7f/0xb0 [ 584.304616] ? do_vfs_ioctl+0xff0/0xff0 [ 584.308586] do_syscall_64+0x1d5/0x640 [ 584.312492] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 584.317670] RIP: 0033:0x466459 [ 584.320850] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 584.328550] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 584.335920] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 584.343178] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 584.350435] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 584.357698] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 584.445204] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 584.552749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.575590] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 584.601743] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 584.616666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 584.627287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 584.649778] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 584.655872] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.667381] Mem-Info: [ 584.676473] active_anon:13262 inactive_anon:27044 isolated_anon:0 [ 584.676473] active_file:1242 inactive_file:931 isolated_file:32 [ 584.676473] unevictable:0 dirty:13 writeback:0 unstable:0 [ 584.676473] slab_reclaimable:12869 slab_unreclaimable:119017 [ 584.676473] mapped:54125 shmem:27411 pagetables:796 bounce:0 [ 584.676473] free:28942 free_pcp:347 free_cma:0 [ 584.685642] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 584.759737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 584.772202] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 584.795403] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.801818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.823837] Node 0 active_anon:50996kB inactive_anon:79344kB active_file:4552kB inactive_file:3324kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:179872kB dirty:20kB writeback:0kB shmem:80652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 584.833628] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 584.884791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 584.895501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 584.921736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 584.954909] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.961353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.963058] Node 1 active_anon:2052kB inactive_anon:28832kB active_file:92kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36228kB dirty:32kB writeback:0kB shmem:28992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 585.023670] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 585.038597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 585.074503] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 585.121701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 585.125988] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:4kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 585.179148] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 585.186006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 585.198055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 585.228651] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 585.234617] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 585.245473] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 585.268699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 585.286229] Node 0 DMA32 free:24852kB min:36200kB low:45248kB high:54296kB active_anon:50984kB inactive_anon:79344kB active_file:2100kB inactive_file:2624kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7296kB pagetables:2684kB bounce:0kB free_pcp:300kB local_pcp:188kB free_cma:0kB [ 585.328031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 585.349618] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 585.373298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 585.391961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 585.421634] lowmem_reserve[]: 0 0 0 0 0 [ 585.435316] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 585.437798] Node 0 [ 585.453249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 585.462660] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 585.462664] lowmem_reserve[]: 0 0 0 0 0 [ 585.462686] Node 1 Normal free:53584kB min:53696kB low:67120kB high:80544kB active_anon:2052kB inactive_anon:28832kB active_file:36kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:500kB bounce:0kB free_pcp:592kB local_pcp:0kB free_cma:0kB [ 585.462705] lowmem_reserve[]: 0 0 0 0 0 [ 585.462724] Node 0 DMA: 120*4kB (UM) 3*8kB (UME) 8*16kB (UME) 5*32kB (UME) 5*64kB (UME) 2*128kB (UE) 6*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11096kB [ 585.462799] Node 0 DMA32: 777*4kB (UMEH) 551*8kB (UMEH) 145*16kB (UMEH) 26*32kB (UEH) 368*64kB (UMH) 18*128kB (UMH) 4*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37548kB [ 585.462873] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 585.462920] Node 1 Normal: 19*4kB (UM) 4*8kB (UM) 3*16kB (ME) 4*32kB (E) 4*64kB (UM) 295*128kB (UM) 59*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53404kB [ 585.462997] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 585.463004] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 585.463011] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 585.463018] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 585.463022] 28397 total pagecache pages [ 585.463032] 0 pages in swap cache [ 585.463038] Swap cache stats: add 0, delete 0, find 0/0 [ 585.463041] Free swap = 0kB [ 585.463045] Total swap = 0kB [ 585.463051] 2097051 pages RAM [ 585.463054] 0 pages HighMem/MovableOnly [ 585.463058] 363841 pages reserved [ 585.463065] 0 pages cma reserved [ 585.606785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 585.677116] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 585.702286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 585.761925] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 585.792072] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 585.810777] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 585.830564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 585.888285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.186825] oom_reaper: reaped process 20352 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 587.298304] modprobe invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 587.313521] modprobe cpuset=/ mems_allowed=0-1 [ 587.320584] CPU: 1 PID: 20457 Comm: modprobe Not tainted 4.14.227-syzkaller #0 [ 587.327955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 587.337309] Call Trace: [ 587.339904] dump_stack+0x1b2/0x281 [ 587.343626] dump_header+0x178/0x82f [ 587.347342] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 587.352446] ? ___ratelimit+0x2cd/0x530 [ 587.356417] oom_kill_process.cold+0x10/0xb18 [ 587.360928] out_of_memory+0xe3e/0x1190 [ 587.364913] ? oom_killer_disable+0x1c0/0x1c0 [ 587.369424] ? mutex_trylock+0x152/0x1a0 [ 587.373477] __alloc_pages_nodemask+0x23e1/0x2720 [ 587.378326] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 587.383171] ? cache_grow_begin+0x41/0x630 [ 587.387394] cache_grow_begin+0x91/0x630 [ 587.391447] ? cache_grow_begin+0x91/0x630 [ 587.395668] fallback_alloc+0x207/0x2c0 [ 587.399636] kmem_cache_alloc+0x1e5/0x3c0 [ 587.403775] getname_flags+0xc8/0x550 [ 587.407566] do_sys_open+0x1ce/0x410 [ 587.411282] ? filp_open+0x60/0x60 [ 587.414813] ? __do_page_fault+0x159/0xad0 [ 587.419038] ? do_syscall_64+0x4c/0x640 [ 587.423017] ? do_sys_open+0x410/0x410 [ 587.426904] do_syscall_64+0x1d5/0x640 [ 587.430790] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 587.435965] RIP: 0033:0x7f493f50d9b1 [ 587.439676] RSP: 002b:00007ffcc2527768 EFLAGS: 00000202 ORIG_RAX: 0000000000000002 [ 587.447370] RAX: ffffffffffffffda RBX: 000056474f709090 RCX: 00007f493f50d9b1 [ 587.454647] RDX: 0000000000000000 RSI: 0000000000090800 RDI: 000056474e85ce99 [ 587.461905] RBP: 000056474e85ce99 R08: 0000000000000003 R09: 0000000000000020 [ 587.469247] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 587.476619] R13: 0000000000000000 R14: 000056474ea64068 R15: 00054486b145c780 [ 587.504724] Mem-Info: [ 587.507173] active_anon:13258 inactive_anon:27044 isolated_anon:0 [ 587.507173] active_file:52 inactive_file:29 isolated_file:4 [ 587.507173] unevictable:0 dirty:0 writeback:0 unstable:0 [ 587.507173] slab_reclaimable:12803 slab_unreclaimable:120718 [ 587.507173] mapped:52694 shmem:27411 pagetables:803 bounce:0 [ 587.507173] free:13820 free_pcp:30 free_cma:0 [ 587.546326] Node 0 active_anon:51016kB inactive_anon:79344kB active_file:84kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:174600kB dirty:0kB writeback:0kB shmem:80652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 587.577421] Node 1 active_anon:2016kB inactive_anon:28832kB active_file:124kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36176kB dirty:0kB writeback:0kB shmem:28992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 587.604827] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 587.632477] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 587.639776] Node 0 DMA32 free:17920kB min:36200kB low:45248kB high:54296kB active_anon:51004kB inactive_anon:79344kB active_file:476kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7296kB pagetables:2708kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 587.673389] lowmem_reserve[]: 0 0 0 0 0 [ 587.677434] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 587.703000] lowmem_reserve[]: 0 0 0 0 0 [ 587.706998] Node 1 Normal free:26400kB min:53696kB low:67120kB high:80544kB active_anon:2016kB inactive_anon:28832kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:504kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 587.735475] lowmem_reserve[]: 0 0 0 0 0 [ 587.739502] Node 0 DMA: 84*4kB (UM) 4*8kB (UME) 8*16kB (UME) 5*32kB (UME) 5*64kB (UME) 2*128kB (UE) 6*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10960kB [ 587.755753] Node 0 DMA32: 729*4kB (UMEH) 511*8kB (UMEH) 179*16kB (MEH) 35*32kB (UMEH) 16*64kB (MH) 42*128kB (UMH) 4*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18412kB [ 587.773364] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 587.784196] Node 1 Normal: 75*4kB (M) 31*8kB (UM) 8*16kB (UME) 8*32kB (ME) 1*64kB (M) 36*128kB (U) 77*256kB (UM) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26852kB [ 587.803279] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 587.814935] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 587.844955] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 587.860773] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 587.869539] 27467 total pagecache pages [ 587.873539] 0 pages in swap cache [ 587.877002] Swap cache stats: add 0, delete 0, find 0/0 [ 587.882406] Free swap = 0kB [ 587.885436] Total swap = 0kB [ 587.888776] 2097051 pages RAM [ 587.893537] 0 pages HighMem/MovableOnly [ 587.898985] 363841 pages reserved [ 587.902433] 0 pages cma reserved [ 587.905820] Out of memory (oom_kill_allocating_task): Kill process 20457 (modprobe) score 0 or sacrifice child [ 587.920070] Killed process 20457 (modprobe) total-vm:4304kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 587.930630] oom_reaper: reaped process 20457 (modprobe), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 588.033870] oom_reaper: reaped process 20269 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 588.084270] oom_reaper: reaped process 20401 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 588.605379] systemd[1]: Started Journal Service. [ 588.667826] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 588.710019] systemd-journal cpuset=/ mems_allowed=0-1 [ 588.715262] CPU: 0 PID: 20364 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 588.723256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.732613] Call Trace: [ 588.735199] dump_stack+0x1b2/0x281 [ 588.738842] dump_header+0x178/0x82f [ 588.742544] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 588.747639] ? ___ratelimit+0x2cd/0x530 [ 588.751632] oom_kill_process.cold+0x10/0xb18 [ 588.756127] out_of_memory+0xe3e/0x1190 [ 588.760095] ? oom_killer_disable+0x1c0/0x1c0 [ 588.764580] ? mutex_trylock+0x152/0x1a0 [ 588.768662] __alloc_pages_nodemask+0x23e1/0x2720 [ 588.773501] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 588.778370] alloc_pages_current+0x155/0x260 [ 588.782816] filemap_fault+0xea3/0x1980 [ 588.786790] ext4_filemap_fault+0x84/0xb0 [ 588.790952] __do_fault+0xfa/0x380 [ 588.794481] __handle_mm_fault+0x2497/0x4620 [ 588.798882] ? vm_insert_page+0x7c0/0x7c0 [ 588.803020] ? lock_acquire+0x170/0x3f0 [ 588.807009] ? task_work_run+0xfd/0x190 [ 588.810985] handle_mm_fault+0x391/0x860 [ 588.815054] __do_page_fault+0x549/0xad0 [ 588.819109] ? spurious_fault+0x640/0x640 [ 588.827328] ? do_page_fault+0x60/0x500 [ 588.831315] ? page_fault+0x2f/0x50 [ 588.834981] page_fault+0x45/0x50 [ 588.838423] RIP: ffffffff:0xffffffff [ 588.842129] RSP: ffffffff:00007ffc64ade830 EFLAGS: 0000002b [ 588.890140] Mem-Info: [ 588.899423] active_anon:13192 inactive_anon:27044 isolated_anon:0 [ 588.899423] active_file:56 inactive_file:28 isolated_file:16 [ 588.899423] unevictable:0 dirty:0 writeback:0 unstable:0 [ 588.899423] slab_reclaimable:12802 slab_unreclaimable:120065 [ 588.899423] mapped:52713 shmem:27411 pagetables:804 bounce:0 [ 588.899423] free:25914 free_pcp:572 free_cma:0 [ 588.933469] Node 0 active_anon:50904kB inactive_anon:79344kB active_file:124kB inactive_file:292kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174852kB dirty:0kB writeback:44kB shmem:80652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 588.961671] Node 1 active_anon:1888kB inactive_anon:28832kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36196kB dirty:0kB writeback:12kB shmem:28992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 589.007813] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 589.037665] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 589.043819] Node 0 DMA32 free:165328kB min:36200kB low:45248kB high:54296kB active_anon:50896kB inactive_anon:79344kB active_file:376kB inactive_file:1248kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7296kB pagetables:2700kB bounce:0kB free_pcp:1356kB local_pcp:724kB free_cma:0kB [ 589.139986] lowmem_reserve[]: 0 0 0 0 0 [ 589.144132] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 589.249319] lowmem_reserve[]: 0 0 0 0 0 [ 589.253355] Node 1 Normal free:27420kB min:53696kB low:67120kB high:80544kB active_anon:1888kB inactive_anon:28832kB active_file:4kB inactive_file:52kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:500kB bounce:0kB free_pcp:1052kB local_pcp:704kB free_cma:0kB [ 589.314878] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 589.350080] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 589.357120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 589.399427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 589.421169] lowmem_reserve[]: 0 0 0 0 0 [ 589.425190] Node 0 DMA: 84*4kB (UM) 4*8kB (UME) 8*16kB (UME) 5*32kB (UME) 5*64kB (UME) 2*128kB (UE) 6*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10960kB [ 589.447967] Node 0 DMA32: 694*4kB (UMEH) 507*8kB (UMEH) 166*16kB (UMEH) 37*32kB (UMEH) 8*64kB (UMH) 51*128kB (UMH) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18224kB [ 589.468045] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 589.482753] Node 1 Normal: 76*4kB (UM) 36*8kB (UM) 9*16kB (UME) 8*32kB (ME) 1*64kB (M) 1*128kB (M) 1*256kB (M) 30*512kB (UM) 2*1024kB (UM) 4*2048kB (UM) 0*4096kB = 27040kB [ 589.505559] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 589.514551] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 589.540842] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 589.573093] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 589.606653] 27481 total pagecache pages [ 589.626379] 0 pages in swap cache [ 589.648061] Swap cache stats: add 0, delete 0, find 0/0 [ 589.653441] Free swap = 0kB [ 589.656464] Total swap = 0kB [ 589.659585] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 589.667424] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 589.671498] syz-executor.4 cpuset= [ 589.683253] 2097051 pages RAM [ 589.687504] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 589.689917] 0 pages HighMem/MovableOnly [ 589.701795] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 589.705683] / mems_allowed=0-1 [ 589.717792] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 589.725903] CPU: 1 PID: 20401 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 589.733774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.737367] 363841 pages reserved [ 589.743128] Call Trace: [ 589.746598] 0 pages cma reserved [ 589.749178] dump_stack+0x1b2/0x281 [ 589.749192] warn_alloc.cold+0x96/0x1cc [ 589.749204] ? spi_setup+0x3e0/0x5a0 [ 589.763835] ? zone_watermark_ok_safe+0x220/0x220 [ 589.768782] ? usleep_range+0x130/0x130 [ 589.772760] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 589.777856] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 589.782868] ? run_timer_softirq+0x5a0/0x5a0 [ 589.787279] __alloc_pages_nodemask+0x2127/0x2720 [ 589.792125] ? lock_acquire+0x170/0x3f0 [ 589.796102] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 589.797361] Out of memory (oom_kill_allocating_task): Kill process 20364 (systemd-journal) score 0 or sacrifice child [ 589.800942] ? ion_page_pool_alloc+0x9e/0x1b0 [ 589.816197] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 589.821655] alloc_pages_current+0x155/0x260 [ 589.826065] ion_page_pool_alloc+0x118/0x1b0 [ 589.830474] ion_system_heap_allocate+0x133/0x8c0 [ 589.834662] Killed process 20364 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1888kB [ 589.835312] ? ion_alloc+0x187/0x810 [ 589.849594] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 589.855052] ? ion_system_contig_heap_create+0x130/0x130 [ 589.860496] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 589.865534] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 589.870378] ion_alloc+0x204/0x810 [ 589.873923] ? ion_dma_buf_release+0x40/0x40 [ 589.878331] ? __might_fault+0x177/0x1b0 [ 589.882390] ion_ioctl+0xea/0x1f0 [ 589.885868] ? ion_query_heaps+0x360/0x360 [ 589.890100] ? ion_query_heaps+0x360/0x360 [ 589.894325] do_vfs_ioctl+0x75a/0xff0 [ 589.898119] ? ioctl_preallocate+0x1a0/0x1a0 [ 589.902521] ? lock_downgrade+0x740/0x740 [ 589.906683] ? __fget+0x225/0x360 [ 589.910123] ? do_vfs_ioctl+0xff0/0xff0 [ 589.914084] ? security_file_ioctl+0x83/0xb0 [ 589.918482] SyS_ioctl+0x7f/0xb0 [ 589.921836] ? do_vfs_ioctl+0xff0/0xff0 [ 589.925798] do_syscall_64+0x1d5/0x640 [ 589.929681] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 589.934860] RIP: 0033:0x466459 [ 589.938058] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 589.945755] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 589.953016] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 589.960290] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 589.967546] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 589.974804] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 589.982087] CPU: 0 PID: 20352 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 589.989980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.999335] Call Trace: [ 590.001931] dump_stack+0x1b2/0x281 [ 590.005570] warn_alloc.cold+0x96/0x1cc [ 590.007661] syz-executor.3 cpuset= [ 590.009560] ? zone_watermark_ok_safe+0x220/0x220 [ 590.009561] / mems_allowed=0-1 [ 590.013094] ? usleep_range+0x130/0x130 [ 590.013102] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 590.013113] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 590.013126] ? run_timer_softirq+0x5a0/0x5a0 [ 590.013142] __alloc_pages_nodemask+0x2127/0x2720 [ 590.013158] ? lock_acquire+0x170/0x3f0 [ 590.018123] syz-executor.5 cpuset= [ 590.021164] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 590.025109] / [ 590.030217] ? ion_page_pool_alloc+0x9e/0x1b0 [ 590.063033] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 590.067408] mems_allowed=0-1 [ 590.068488] alloc_pages_current+0x155/0x260 [ 590.075979] ion_page_pool_alloc+0x118/0x1b0 [ 590.080393] ion_system_heap_allocate+0x133/0x8c0 [ 590.085229] ? ion_alloc+0x187/0x810 [ 590.088936] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 590.094377] ? ion_system_contig_heap_create+0x130/0x130 [ 590.099818] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 590.105174] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 590.110014] ion_alloc+0x204/0x810 [ 590.113558] ? ion_dma_buf_release+0x40/0x40 [ 590.117975] ? __might_fault+0x177/0x1b0 [ 590.122040] ion_ioctl+0xea/0x1f0 [ 590.125509] ? ion_query_heaps+0x360/0x360 [ 590.129747] ? ion_query_heaps+0x360/0x360 [ 590.133983] do_vfs_ioctl+0x75a/0xff0 [ 590.137807] ? ioctl_preallocate+0x1a0/0x1a0 [ 590.142208] ? lock_downgrade+0x740/0x740 [ 590.146364] ? __fget+0x225/0x360 [ 590.149831] ? do_vfs_ioctl+0xff0/0xff0 [ 590.153804] ? security_file_ioctl+0x83/0xb0 [ 590.158212] SyS_ioctl+0x7f/0xb0 [ 590.161598] ? do_vfs_ioctl+0xff0/0xff0 [ 590.165568] do_syscall_64+0x1d5/0x640 [ 590.169464] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 590.174651] RIP: 0033:0x466459 [ 590.177836] RSP: 002b:00007ff90c340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 590.185541] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 590.192819] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 590.200086] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 590.207346] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 590.214612] R13: 00007ffce90c212f R14: 00007ff90c340300 R15: 0000000000022000 [ 590.221891] CPU: 1 PID: 20217 Comm: syz-executor.3 Not tainted 4.14.227-syzkaller #0 [ 590.229779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.239132] Call Trace: [ 590.241723] dump_stack+0x1b2/0x281 [ 590.245356] warn_alloc.cold+0x96/0x1cc [ 590.246107] warn_alloc_show_mem: 2 callbacks suppressed [ 590.246111] Mem-Info: [ 590.249334] ? zone_watermark_ok_safe+0x220/0x220 [ 590.249346] ? usleep_range+0x130/0x130 [ 590.249358] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 590.254718] active_anon:13080 inactive_anon:27043 isolated_anon:0 [ 590.254718] active_file:58 inactive_file:39 isolated_file:0 [ 590.254718] unevictable:0 dirty:4 writeback:0 unstable:0 [ 590.254718] slab_reclaimable:12799 slab_unreclaimable:119886 [ 590.254718] mapped:52242 shmem:27411 pagetables:772 bounce:0 [ 590.254718] free:25587 free_pcp:162 free_cma:0 [ 590.257136] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 590.261988] Node 0 active_anon:50836kB inactive_anon:79344kB active_file:216kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174092kB dirty:16kB writeback:0kB shmem:80652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 590.265909] ? run_timer_softirq+0x5a0/0x5a0 [ 590.271047] Node 1 active_anon:1484kB inactive_anon:28828kB active_file:16kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34876kB dirty:0kB writeback:0kB shmem:28992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 590.304261] __alloc_pages_nodemask+0x2127/0x2720 [ 590.304280] ? lock_acquire+0x170/0x3f0 [ 590.304294] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 590.309318] Node 0 [ 590.337148] ? ion_page_pool_alloc+0x9e/0x1b0 [ 590.337164] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 590.337184] alloc_pages_current+0x155/0x260 [ 590.341609] DMA free:11072kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:32kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 590.368658] ion_page_pool_alloc+0x118/0x1b0 [ 590.368671] ion_system_heap_allocate+0x133/0x8c0 [ 590.368684] ? _raw_spin_unlock+0x29/0x40 [ 590.368693] ? _ion_heap_freelist_drain+0x6e/0x410 [ 590.368708] ? ion_system_contig_heap_create+0x130/0x130 [ 590.373538] lowmem_reserve[]: [ 590.377502] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 590.377514] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 590.377526] ion_alloc+0x27a/0x810 [ 590.377540] ? ion_dma_buf_release+0x40/0x40 [ 590.382360] 0 [ 590.384587] ? __might_fault+0x177/0x1b0 [ 590.389081] 2717 [ 590.394517] ion_ioctl+0xea/0x1f0 [ 590.398921] 2718 [ 590.424746] ? ion_query_heaps+0x360/0x360 [ 590.424759] ? ion_query_heaps+0x360/0x360 [ 590.424770] do_vfs_ioctl+0x75a/0xff0 [ 590.424783] ? ioctl_preallocate+0x1a0/0x1a0 [ 590.429196] 2718 [ 590.434010] ? lock_downgrade+0x740/0x740 [ 590.438153] 2718 [ 590.443064] ? __fget+0x225/0x360 [ 590.451603] ? do_vfs_ioctl+0xff0/0xff0 [ 590.456593] Node 0 [ 590.461432] ? security_file_ioctl+0x83/0xb0 [ 590.461444] SyS_ioctl+0x7f/0xb0 [ 590.461454] ? do_vfs_ioctl+0xff0/0xff0 [ 590.461466] do_syscall_64+0x1d5/0x640 [ 590.461483] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 590.465018] DMA32 free:36812kB min:36200kB low:45248kB high:54296kB active_anon:50824kB inactive_anon:79344kB active_file:20kB inactive_file:112kB unevictable:0kB writepending:16kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7296kB pagetables:2656kB bounce:0kB free_pcp:176kB local_pcp:168kB free_cma:0kB [ 590.469395] RIP: 0033:0x466459 [ 590.469400] RSP: 002b:00007f42379f8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 590.469410] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 590.469419] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 590.471204] lowmem_reserve[]: [ 590.475246] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 590.477282] 0 [ 590.480712] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 590.480718] R13: 00007ffef8958def R14: 00007f42379f8300 R15: 0000000000022000 [ 590.507381] CPU: 1 PID: 20269 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 590.626852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.636199] Call Trace: [ 590.638817] dump_stack+0x1b2/0x281 [ 590.642486] warn_alloc.cold+0x96/0x1cc [ 590.646468] ? zone_watermark_ok_safe+0x220/0x220 [ 590.651321] ? usleep_range+0x130/0x130 [ 590.655299] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 590.660403] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 590.665420] ? run_timer_softirq+0x5a0/0x5a0 [ 590.669847] __alloc_pages_nodemask+0x2127/0x2720 [ 590.674706] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 590.679570] ? migrate_swap_stop+0x880/0x880 [ 590.683972] ? lock_acquire+0x170/0x3f0 [ 590.687957] ? policy_node+0x13/0x110 [ 590.691756] alloc_pages_current+0x155/0x260 [ 590.696183] ion_page_pool_alloc+0x118/0x1b0 [ 590.700621] ion_system_heap_allocate+0x133/0x8c0 [ 590.705474] ? ion_alloc+0x187/0x810 [ 590.709206] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 590.714657] ? ion_system_contig_heap_create+0x130/0x130 [ 590.720105] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 590.725121] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 590.729965] ion_alloc+0x204/0x810 [ 590.730064] 0 0 0 [ 590.733506] ? ion_dma_buf_release+0x40/0x40 [ 590.733524] ? __might_fault+0x177/0x1b0 [ 590.735660] 0 [ 590.740063] ion_ioctl+0xea/0x1f0 [ 590.740073] ? ion_query_heaps+0x360/0x360 [ 590.740086] ? ion_query_heaps+0x360/0x360 [ 590.740097] do_vfs_ioctl+0x75a/0xff0 [ 590.761690] ? ioctl_preallocate+0x1a0/0x1a0 [ 590.766093] ? lock_downgrade+0x740/0x740 [ 590.767301] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 590.770239] ? __fget+0x225/0x360 [ 590.770249] ? do_vfs_ioctl+0xff0/0xff0 [ 590.770262] ? security_file_ioctl+0x83/0xb0 [ 590.791748] SyS_ioctl+0x7f/0xb0 [ 590.795113] ? do_vfs_ioctl+0xff0/0xff0 [ 590.799087] do_syscall_64+0x1d5/0x640 [ 590.802964] Node 0 [ 590.802977] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 590.802986] RIP: 0033:0x466459 [ 590.805224] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 590.810379] RSP: 002b:00007f98f1e65188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 590.810389] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 590.810394] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 590.810399] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 590.810404] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 590.810409] R13: 00007ffde3ff81ef R14: 00007f98f1e65300 R15: 0000000000022000 [ 590.848547] (null), order=0, oom_score_adj=0 [ 590.963361] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 590.987700] CPU: 1 PID: 7964 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 590.995163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.004543] Call Trace: [ 591.007136] dump_stack+0x1b2/0x281 [ 591.010959] dump_header+0x178/0x82f [ 591.014677] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 591.019778] ? ___ratelimit+0x2cd/0x530 [ 591.020414] lowmem_reserve[]: 0 [ 591.023748] oom_kill_process.cold+0x10/0xb18 [ 591.023765] out_of_memory+0xe3e/0x1190 [ 591.027025] 0 [ 591.031507] ? oom_killer_disable+0x1c0/0x1c0 [ 591.031516] ? mutex_trylock+0x152/0x1a0 [ 591.031527] __alloc_pages_nodemask+0x23e1/0x2720 [ 591.031547] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 591.035494] 0 [ 591.037293] alloc_pages_current+0x155/0x260 [ 591.041780] 0 [ 591.045818] filemap_fault+0xea3/0x1980 [ 591.050662] 0 [ 591.055493] ext4_filemap_fault+0x84/0xb0 [ 591.061656] __do_fault+0xfa/0x380 [ 591.061666] __handle_mm_fault+0x2497/0x4620 [ 591.061675] ? vm_insert_page+0x7c0/0x7c0 [ 591.061685] ? lock_downgrade+0x740/0x740 [ 591.061703] handle_mm_fault+0x391/0x860 [ 591.063504] Node 1 [ 591.067467] __do_page_fault+0x549/0xad0 [ 591.067480] ? spurious_fault+0x640/0x640 [ 591.067489] ? do_page_fault+0x60/0x500 [ 591.069287] Normal free:53224kB min:53696kB low:67120kB high:80544kB active_anon:1484kB inactive_anon:28828kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:432kB bounce:0kB free_pcp:88kB local_pcp:88kB free_cma:0kB [ 591.073403] ? page_fault+0x2f/0x50 [ 591.076913] lowmem_reserve[]: [ 591.081307] page_fault+0x45/0x50 [ 591.081315] RIP: 0000:0x940aec [ 591.081319] RSP: 2e000:000000c00003df00 EFLAGS: 0043b6a0 [ 591.126739] Mem-Info: [ 591.162570] active_anon:13080 inactive_anon:27043 isolated_anon:0 [ 591.162570] active_file:9 inactive_file:8 isolated_file:0 [ 591.162570] unevictable:0 dirty:4 writeback:0 unstable:0 [ 591.162570] slab_reclaimable:12799 slab_unreclaimable:119760 [ 591.162570] mapped:52240 shmem:27411 pagetables:772 bounce:0 [ 591.162570] free:25162 free_pcp:30 free_cma:0 [ 591.294783] Mem-Info: [ 591.297242] active_anon:13080 inactive_anon:27043 isolated_anon:0 [ 591.297242] active_file:9 inactive_file:28 isolated_file:0 [ 591.297242] unevictable:0 dirty:0 writeback:0 unstable:0 [ 591.297242] slab_reclaimable:12799 slab_unreclaimable:119763 [ 591.297242] mapped:52225 shmem:27411 pagetables:772 bounce:0 [ 591.297242] free:25128 free_pcp:0 free_cma:0 [ 591.327463] 0 0 0 0 0 [ 591.333049] Node 0 DMA: 2*4kB (UM) 5*8kB (UME) 26*16kB (UME) 8*32kB (UME) 6*64kB (UME) 2*128kB (UE) 6*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11088kB [ 591.367420] Node 0 active_anon:50836kB inactive_anon:79344kB active_file:36kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:80652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 591.399516] Node 0 active_anon:50836kB inactive_anon:79344kB active_file:36kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:80652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 591.432142] Node 0 DMA32: 762*4kB (UME) 501*8kB (UME) 276*16kB (UME) 202*32kB (UME) 197*64kB (UM) 42*128kB (UM) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36432kB [ 591.447471] Node 1 active_anon:1484kB inactive_anon:28828kB active_file:0kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:28992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 591.505023] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 591.526756] Node 1 Normal: 86*4kB (UM) 40*8kB (M) 11*16kB (ME) 251*32kB (UME) 293*64kB (U) 0*128kB 0*256kB 29*512kB (U) 1*1024kB (U) 5*2048kB (UM) 0*4096kB = 53736kB [ 591.535206] Node 1 active_anon:1484kB inactive_anon:28828kB active_file:0kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:28992kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 591.578741] Node 0 DMA free:11136kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 591.587378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 591.605139] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 591.605165] Node 0 DMA32 free:49992kB min:36200kB low:45248kB high:54296kB active_anon:50824kB inactive_anon:79344kB active_file:36kB inactive_file:96kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7296kB pagetables:2656kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 591.647376] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 591.647966] Node 0 DMA free:11136kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 591.656439] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 591.717416] lowmem_reserve[]: 0 [ 591.717426] lowmem_reserve[]: 0 [ 591.720877] 2717 2718 [ 591.724150] 0 [ 591.724157] 2718 [ 591.726632] 0 [ 591.734563] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 591.737383] 2718 [ 591.744975] 0 [ 591.746994] Node 0 [ 591.746996] 0 [ 591.756845] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 591.757394] DMA32 free:49992kB min:36200kB low:45248kB high:54296kB active_anon:50824kB inactive_anon:79344kB active_file:36kB inactive_file:96kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7296kB pagetables:2656kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 591.786211] 27442 total pagecache pages [ 591.822739] lowmem_reserve[]: 0 0 0 0 0 [ 591.826755] Node 1 Normal free:58672kB min:53696kB low:67120kB high:80544kB active_anon:1484kB inactive_anon:28828kB active_file:112kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:432kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 591.861053] 0 pages in swap cache [ 591.864513] Swap cache stats: add 0, delete 0, find 0/0 [ 591.870585] Free swap = 0kB [ 591.873624] Total swap = 0kB [ 591.876650] 2097051 pages RAM [ 591.877552] lowmem_reserve[]: 0 0 0 0 0 [ 591.883735] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 591.891886] 0 pages HighMem/MovableOnly [ 591.917358] lowmem_reserve[]: 0 0 0 0 0 [ 591.921359] Node 0 DMA: 2*4kB (UM) 5*8kB (UME) 26*16kB (UME) 8*32kB (UME) 5*64kB (UME) 1*128kB (E) 7*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11152kB [ 591.937356] lowmem_reserve[]: 0 0 0 0 0 [ 591.940546] 363841 pages reserved [ 591.941356] Node 1 [ 591.944791] 0 pages cma reserved [ 591.944813] Normal free:58672kB min:53696kB low:67120kB high:80544kB active_anon:1484kB inactive_anon:28828kB active_file:112kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:432kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 591.958025] Node 0 DMA32: 762*4kB (UME) 501*8kB (UME) 276*16kB (UME) 202*32kB (UME) 272*64kB (UM) 111*128kB (UM) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 50064kB [ 592.027381] lowmem_reserve[]: 0 0 0 0 0 [ 592.031405] Node 0 DMA: 2*4kB (UM) 5*8kB (UME) 26*16kB (UME) 8*32kB (UME) 5*64kB (UME) 1*128kB (E) 7*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11152kB [ 592.051444] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 592.067387] Node 0 DMA32: 762*4kB (UME) 501*8kB (UME) 276*16kB (UME) 202*32kB (UME) 272*64kB (UM) 111*128kB (UM) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 50064kB [ 592.081190] Node 1 Normal: 86*4kB (UM) 40*8kB (M) 11*16kB (ME) 251*32kB (UME) 373*64kB (U) 0*128kB 0*256kB 29*512kB (U) 1*1024kB (U) 5*2048kB (UM) 0*4096kB = 58856kB [ 592.097377] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 592.117465] Node 1 Normal: 86*4kB (UM) 40*8kB (M) 11*16kB (ME) 251*32kB (UME) 373*64kB (U) 0*128kB 0*256kB 29*512kB (U) 1*1024kB (U) 5*2048kB (UM) 0*4096kB = 58856kB [ 592.121690] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 592.147375] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 592.156222] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 592.157364] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 592.177392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 592.186232] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 592.201348] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 592.217373] 27444 total pagecache pages [ 592.221097] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 592.221361] 0 pages in swap cache [ 592.241368] 27444 total pagecache pages [ 592.245365] 0 pages in swap cache [ 592.247374] Swap cache stats: add 0, delete 0, find 0/0 [ 592.254156] Free swap = 0kB [ 592.257170] Total swap = 0kB [ 592.257364] Swap cache stats: add 0, delete 0, find 0/0 [ 592.265527] Free swap = 0kB [ 592.277396] 2097051 pages RAM [ 592.280513] 0 pages HighMem/MovableOnly [ 592.284491] 363841 pages reserved [ 592.287374] Total swap = 0kB [ 592.290946] 2097051 pages RAM [ 592.294053] 0 pages HighMem/MovableOnly [ 592.297390] 0 pages cma reserved [ 592.317408] 363841 pages reserved [ 592.320874] 0 pages cma reserved [ 592.324229] Out of memory (oom_kill_allocating_task): Kill process 7964 (syz-fuzzer) score 0 or sacrifice child [ 592.347457] Killed process 20220 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 592.375342] oom_reaper: reaped process 20220 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 593.877993] Bluetooth: hci4 command 0x0406 tx timeout 05:07:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:07:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) [ 597.194105] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 597.196445] syz-executor.3: [ 597.206941] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 597.211808] syz-executor.4: [ 597.237416] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 597.241701] page allocation failure: order:4 [ 597.245597] CPU: 1 PID: 20473 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 597.245603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.245607] Call Trace: [ 597.245632] dump_stack+0x1b2/0x281 [ 597.251241] page allocation failure: order:4 [ 597.257926] warn_alloc.cold+0x96/0x1cc [ 597.257940] ? zone_watermark_ok_safe+0x220/0x220 [ 597.257960] __alloc_pages_nodemask+0x2127/0x2720 [ 597.257977] ? lock_acquire+0x170/0x3f0 [ 597.257991] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 597.258012] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 597.275225] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 597.278030] ? __mutex_unlock_slowpath+0x75/0x770 [ 597.278045] alloc_pages_current+0x155/0x260 [ 597.278062] ion_page_pool_alloc+0x118/0x1b0 [ 597.278074] ion_system_heap_allocate+0x133/0x8c0 [ 597.284312] (null) [ 597.286896] ? ion_alloc+0x187/0x810 [ 597.286908] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 597.286920] ? ion_system_contig_heap_create+0x130/0x130 [ 597.298504] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 597.300570] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 597.300585] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 597.300599] ion_alloc+0x204/0x810 [ 597.307205] syz-executor.3 cpuset= [ 597.313169] ? ion_dma_buf_release+0x40/0x40 [ 597.313182] ? __might_fault+0x177/0x1b0 [ 597.313194] ion_ioctl+0xea/0x1f0 [ 597.313204] ? ion_query_heaps+0x360/0x360 [ 597.313216] ? retint_kernel+0x2d/0x2d [ 597.313231] ? putname+0xcd/0x110 [ 597.319291] (null) [ 597.322484] ? ion_query_heaps+0x360/0x360 [ 597.322496] do_vfs_ioctl+0x75a/0xff0 [ 597.322508] ? ioctl_preallocate+0x1a0/0x1a0 [ 597.330278] syz-executor.4 cpuset= [ 597.331776] ? lock_downgrade+0x740/0x740 [ 597.331793] ? __fget+0x225/0x360 [ 597.331804] ? do_vfs_ioctl+0xff0/0xff0 [ 597.331817] ? security_file_ioctl+0x83/0xb0 [ 597.336235] / [ 597.337680] SyS_ioctl+0x7f/0xb0 [ 597.348738] / [ 597.355652] ? do_vfs_ioctl+0xff0/0xff0 [ 597.362992] mems_allowed=0-1 [ 597.365500] do_syscall_64+0x1d5/0x640 [ 597.365519] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 597.365529] RIP: 0033:0x466459 [ 597.383405] mems_allowed=0-1 [ 597.384466] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.384478] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 597.384484] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 597.384489] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 597.384497] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 597.495911] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 597.503284] CPU: 0 PID: 20474 Comm: syz-executor.3 Not tainted 4.14.227-syzkaller #0 [ 597.504242] syz-executor.5 cpuset= [ 597.511168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.511173] Call Trace: [ 597.511191] dump_stack+0x1b2/0x281 [ 597.511206] warn_alloc.cold+0x96/0x1cc [ 597.511219] ? zone_watermark_ok_safe+0x220/0x220 [ 597.539169] __alloc_pages_nodemask+0x2127/0x2720 [ 597.544027] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 597.549055] ? lock_acquire+0x170/0x3f0 [ 597.553035] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 597.557881] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 597.563354] ? __mutex_unlock_slowpath+0x75/0x770 [ 597.568209] alloc_pages_current+0x155/0x260 [ 597.572616] ion_page_pool_alloc+0x118/0x1b0 [ 597.577018] ion_system_heap_allocate+0x133/0x8c0 [ 597.581863] ? ion_alloc+0x187/0x810 [ 597.585569] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 597.591029] ? ion_system_contig_heap_create+0x130/0x130 [ 597.596473] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 597.601481] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 597.606316] ion_alloc+0x204/0x810 [ 597.609858] ? ion_dma_buf_release+0x40/0x40 [ 597.614277] ? __might_fault+0x177/0x1b0 [ 597.618333] ion_ioctl+0xea/0x1f0 [ 597.621780] ? ion_query_heaps+0x360/0x360 [ 597.626008] ? ion_query_heaps+0x360/0x360 [ 597.630235] do_vfs_ioctl+0x75a/0xff0 [ 597.634027] ? ioctl_preallocate+0x1a0/0x1a0 [ 597.638425] ? lock_downgrade+0x740/0x740 [ 597.642564] ? __fget+0x225/0x360 [ 597.646024] ? do_vfs_ioctl+0xff0/0xff0 [ 597.649994] ? security_file_ioctl+0x83/0xb0 [ 597.654402] SyS_ioctl+0x7f/0xb0 [ 597.657766] ? do_vfs_ioctl+0xff0/0xff0 [ 597.661748] do_syscall_64+0x1d5/0x640 [ 597.665631] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 597.670822] RIP: 0033:0x466459 [ 597.674002] RSP: 002b:00007f42379f8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.681705] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 597.688967] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 597.696227] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 597.703495] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 597.710777] R13: 00007ffef8958def R14: 00007f42379f8300 R15: 0000000000022000 [ 597.722981] / mems_allowed=0-1 [ 597.726294] CPU: 1 PID: 20269 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 597.734191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.743541] Call Trace: [ 597.746133] dump_stack+0x1b2/0x281 [ 597.749787] warn_alloc.cold+0x96/0x1cc [ 597.753764] ? zone_watermark_ok_safe+0x220/0x220 [ 597.758620] __alloc_pages_nodemask+0x2127/0x2720 [ 597.763460] ? __schedule+0x893/0x1de0 [ 597.767355] ? lock_acquire+0x170/0x3f0 [ 597.771337] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 597.776186] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 597.781640] ? __mutex_unlock_slowpath+0x75/0x770 [ 597.786488] alloc_pages_current+0x155/0x260 [ 597.790912] ion_page_pool_alloc+0x118/0x1b0 [ 597.795347] ion_system_heap_allocate+0x133/0x8c0 [ 597.800211] ? _raw_spin_unlock+0x29/0x40 [ 597.804367] ? _ion_heap_freelist_drain+0x6e/0x410 [ 597.809305] ? ion_system_contig_heap_create+0x130/0x130 [ 597.814761] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 597.819793] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 597.825686] ion_alloc+0x27a/0x810 [ 597.829254] ? ion_dma_buf_release+0x40/0x40 [ 597.833691] ? __might_fault+0x177/0x1b0 [ 597.837751] ion_ioctl+0xea/0x1f0 [ 597.841208] ? ion_query_heaps+0x360/0x360 [ 597.845444] ? ion_query_heaps+0x360/0x360 [ 597.849679] do_vfs_ioctl+0x75a/0xff0 [ 597.853480] ? ioctl_preallocate+0x1a0/0x1a0 [ 597.857900] ? lock_downgrade+0x740/0x740 [ 597.862060] ? __fget+0x225/0x360 [ 597.865509] ? do_vfs_ioctl+0xff0/0xff0 [ 597.870546] ? security_file_ioctl+0x83/0xb0 [ 597.874952] SyS_ioctl+0x7f/0xb0 [ 597.878315] ? do_vfs_ioctl+0xff0/0xff0 [ 597.882288] do_syscall_64+0x1d5/0x640 [ 597.886194] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 597.891376] RIP: 0033:0x466459 [ 597.894676] RSP: 002b:00007f98f1e65188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.902384] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 597.909658] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 597.916944] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 597.924205] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 597.931472] R13: 00007ffde3ff81ef R14: 00007f98f1e65300 R15: 0000000000022000 [ 597.938769] CPU: 0 PID: 20352 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 597.946672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.947224] warn_alloc_show_mem: 2 callbacks suppressed [ 597.947227] Mem-Info: [ 597.956021] Call Trace: [ 597.956040] dump_stack+0x1b2/0x281 [ 597.956053] warn_alloc.cold+0x96/0x1cc [ 597.956065] ? zone_watermark_ok_safe+0x220/0x220 [ 597.956086] __alloc_pages_nodemask+0x2127/0x2720 [ 597.956102] ? lock_acquire+0x170/0x3f0 [ 597.956118] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 597.956134] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 597.956146] ? __mutex_unlock_slowpath+0x75/0x770 [ 597.956156] ? alloc_pages_current+0x37/0x260 [ 597.956168] alloc_pages_current+0x155/0x260 [ 597.956183] ion_page_pool_alloc+0x118/0x1b0 [ 597.956194] ion_system_heap_allocate+0x133/0x8c0 [ 597.956206] ? _raw_spin_unlock+0x29/0x40 [ 597.956216] ? _ion_heap_freelist_drain+0x6e/0x410 [ 597.956227] ? ion_system_contig_heap_create+0x130/0x130 [ 597.956237] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 597.956248] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 597.956260] ion_alloc+0x27a/0x810 [ 597.956278] ? ion_dma_buf_release+0x40/0x40 [ 597.962159] active_anon:13128 inactive_anon:27043 isolated_anon:12 [ 597.962159] active_file:874 inactive_file:2329 isolated_file:0 [ 597.962159] unevictable:0 dirty:9 writeback:25 unstable:0 [ 597.962159] slab_reclaimable:12768 slab_unreclaimable:119077 [ 597.962159] mapped:45432 shmem:27411 pagetables:728 bounce:0 [ 597.962159] free:168565 free_pcp:195 free_cma:0 [ 597.964050] ? __might_fault+0x177/0x1b0 [ 597.966639] Node 0 active_anon:51064kB inactive_anon:79348kB active_file:3472kB inactive_file:9296kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:146912kB dirty:32kB writeback:100kB shmem:80656kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 597.970243] ion_ioctl+0xea/0x1f0 [ 597.970253] ? ion_query_heaps+0x360/0x360 [ 597.970266] ? ion_query_heaps+0x360/0x360 [ 597.970276] do_vfs_ioctl+0x75a/0xff0 [ 597.970288] ? ioctl_preallocate+0x1a0/0x1a0 [ 597.970297] ? lock_downgrade+0x740/0x740 [ 597.970309] ? __fget+0x225/0x360 [ 597.974591] Node 1 active_anon:1448kB inactive_anon:28824kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:4kB writeback:0kB shmem:28988kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 597.979094] ? do_vfs_ioctl+0xff0/0xff0 [ 597.979105] ? security_file_ioctl+0x83/0xb0 [ 597.979115] SyS_ioctl+0x7f/0xb0 [ 597.979122] ? do_vfs_ioctl+0xff0/0xff0 [ 597.979133] do_syscall_64+0x1d5/0x640 [ 597.979150] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 597.979159] RIP: 0033:0x466459 [ 597.984017] Node 0 [ 597.987942] RSP: 002b:00007ff90c340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 597.987952] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 597.987957] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 597.987961] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 597.987966] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 597.987971] R13: 00007ffce90c212f R14: 00007ff90c340300 R15: 0000000000022000 [ 598.177174] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 598.266350] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 598.294125] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 598.325491] systemd[1]: Stopped Journal Service. [ 598.367271] syz-executor.1 (20221) used greatest stack depth: 24256 bytes left [ 598.394656] systemd[1]: Starting Journal Service... [ 598.578668] DMA free:11044kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 598.632860] systemd[1]: Started Load/Save RF Kill Switch Status. [ 598.668706] systemd-journald[20485]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 598.768150] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 598.797269] Node 0 DMA32 free:35408kB min:36200kB low:45248kB high:54296kB active_anon:50916kB inactive_anon:79348kB active_file:6060kB inactive_file:5500kB unevictable:0kB writepending:64kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7296kB pagetables:2732kB bounce:0kB free_pcp:292kB local_pcp:176kB free_cma:0kB [ 598.870390] lowmem_reserve[]: 0 0 0 0 0 [ 598.874512] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 598.927254] oom_reaper: reaped process 20405 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 598.933762] lowmem_reserve[]: 0 0 0 0 0 [ 598.945755] Node 1 Normal free:53116kB min:53696kB low:67120kB high:80544kB active_anon:2332kB inactive_anon:28824kB active_file:504kB inactive_file:164kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:476kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 599.046312] lowmem_reserve[]: 0 0 0 0 0 [ 599.081566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.094570] Node 0 DMA: 65*4kB (UM) 11*8kB (UME) 29*16kB (UME) 12*32kB (UME) 4*64kB (UME) 1*128kB (E) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11052kB [ 599.123346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.159393] device bridge_slave_1 left promiscuous mode [ 599.170204] Node 0 DMA32: 860*4kB (UME) 547*8kB (UME) 191*16kB (ME) 50*32kB (ME) 137*64kB (UME) 8*128kB (UME) 51*256kB (UM) 8*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 39416kB [ 599.189360] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.207463] systemd-journald[20485]: /dev/kmsg buffer overrun, some messages lost. [ 599.219976] device bridge_slave_0 left promiscuous mode [ 599.237595] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.269200] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 599.315286] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 4*16kB (UME) 4*32kB (ME) 679*64kB (U) 813*128kB (U) 10*256kB (U) 2*512kB (U) 3*1024kB (U) 0*2048kB 0*4096kB = 154388kB [ 599.377627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 599.386505] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 599.441913] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 599.492437] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 599.543003] 30504 total pagecache pages [ 599.547023] 0 pages in swap cache [ 599.555096] Swap cache stats: add 0, delete 0, find 0/0 [ 599.569738] device hsr_slave_1 left promiscuous mode [ 599.604469] Free swap = 0kB [ 599.608456] device hsr_slave_0 left promiscuous mode [ 599.621334] Total swap = 0kB [ 599.624378] 2097051 pages RAM [ 599.661246] 0 pages HighMem/MovableOnly [ 599.665250] 363841 pages reserved [ 599.681340] 0 pages cma reserved [ 599.688152] team0 (unregistering): Port device team_slave_1 removed [ 599.741854] team0 (unregistering): Port device team_slave_0 removed [ 599.809201] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 599.850056] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 600.018376] bond0 (unregistering): Released all slaves [ 600.975086] systemd[1]: Started Journal Service. 05:07:41 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) [ 601.552916] oom_reaper: reaped process 20473 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 601.625357] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 601.656232] systemd-journal cpuset=/ mems_allowed=0-1 [ 601.661507] CPU: 0 PID: 20485 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 601.669486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.678829] Call Trace: [ 601.681419] dump_stack+0x1b2/0x281 [ 601.685046] dump_header+0x178/0x82f [ 601.688759] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 601.693856] ? ___ratelimit+0x2cd/0x530 [ 601.697833] oom_kill_process.cold+0x10/0xb18 [ 601.702362] out_of_memory+0xe3e/0x1190 [ 601.706333] ? oom_killer_disable+0x1c0/0x1c0 [ 601.710821] ? mutex_trylock+0x152/0x1a0 [ 601.714876] __alloc_pages_nodemask+0x23e1/0x2720 [ 601.719726] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 601.724610] alloc_pages_current+0x155/0x260 [ 601.729017] filemap_fault+0xea3/0x1980 [ 601.732997] ext4_filemap_fault+0x84/0xb0 [ 601.737137] __do_fault+0xfa/0x380 [ 601.740676] __handle_mm_fault+0x2497/0x4620 [ 601.745084] ? ep_poll+0x1ab/0xa50 [ 601.748631] ? vm_insert_page+0x7c0/0x7c0 [ 601.752787] handle_mm_fault+0x391/0x860 [ 601.756843] __do_page_fault+0x549/0xad0 [ 601.760902] ? spurious_fault+0x640/0x640 [ 601.765044] ? do_page_fault+0x60/0x500 [ 601.769012] ? page_fault+0x2f/0x50 [ 601.772631] page_fault+0x45/0x50 [ 601.776082] RIP: 0001:0xffffffffffffffff [ 601.780133] RSP: 46aca1e0:00007ffecf367290 EFLAGS: 7ffecf3670a0 [ 601.781140] syz-executor.5: [ 601.781645] syz-executor.4: [ 601.787201] page allocation failure: order:0 [ 601.801710] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 601.852814] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 601.865203] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 601.875029] CPU: 1 PID: 20490 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 601.876947] syz-executor.5 cpuset= [ 601.882910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.882916] Call Trace: [ 601.882936] dump_stack+0x1b2/0x281 [ 601.882951] warn_alloc.cold+0x96/0x1cc [ 601.882969] ? zone_watermark_ok_safe+0x220/0x220 [ 601.882991] __alloc_pages_nodemask+0x2127/0x2720 [ 601.897216] / [ 601.898432] ? lock_acquire+0x170/0x3f0 [ 601.906462] mems_allowed=0-1 [ 601.910841] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 601.910859] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 601.934703] ? __mutex_unlock_slowpath+0x75/0x770 [ 601.939541] alloc_pages_current+0x155/0x260 [ 601.943946] ion_page_pool_alloc+0x118/0x1b0 [ 601.948353] ion_system_heap_allocate+0x133/0x8c0 [ 601.953186] ? ion_alloc+0x187/0x810 [ 601.956898] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 601.962357] ? ion_system_contig_heap_create+0x130/0x130 [ 601.967799] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 601.972820] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 601.977654] ion_alloc+0x204/0x810 [ 601.981204] ? ion_dma_buf_release+0x40/0x40 [ 601.985608] ? __might_fault+0x177/0x1b0 [ 601.989666] ion_ioctl+0xea/0x1f0 [ 601.993111] ? ion_query_heaps+0x360/0x360 [ 601.997341] ? ion_query_heaps+0x360/0x360 [ 602.001601] do_vfs_ioctl+0x75a/0xff0 [ 602.005398] ? ioctl_preallocate+0x1a0/0x1a0 [ 602.007391] Mem-Info: [ 602.009799] ? lock_downgrade+0x740/0x740 [ 602.009813] ? __fget+0x225/0x360 [ 602.019800] ? do_vfs_ioctl+0xff0/0xff0 [ 602.023777] ? security_file_ioctl+0x83/0xb0 [ 602.027399] active_anon:13378 inactive_anon:29073 isolated_anon:0 [ 602.027399] active_file:42 inactive_file:18 isolated_file:0 [ 602.027399] unevictable:0 dirty:17 writeback:0 unstable:0 [ 602.027399] slab_reclaimable:12750 slab_unreclaimable:117556 [ 602.027399] mapped:52633 shmem:29455 pagetables:830 bounce:0 [ 602.027399] free:13924 free_pcp:0 free_cma:0 [ 602.028190] SyS_ioctl+0x7f/0xb0 [ 602.064778] ? do_vfs_ioctl+0xff0/0xff0 [ 602.068751] do_syscall_64+0x1d5/0x640 [ 602.072640] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 602.077837] RIP: 0033:0x466459 [ 602.081015] RSP: 002b:00007ff90c340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.087391] Node 0 active_anon:50912kB inactive_anon:79348kB active_file:108kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153688kB dirty:48kB writeback:0kB shmem:80656kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 602.088720] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 602.123874] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 602.131143] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 602.138496] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 602.145783] R13: 00007ffce90c212f R14: 00007ff90c340300 R15: 0000000000022000 [ 602.147400] Node 1 active_anon:2600kB inactive_anon:36944kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56844kB dirty:20kB writeback:0kB shmem:37164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 602.187384] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 602.209224] CPU: 0 PID: 20269 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 602.217127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.222734] warn_alloc_show_mem: 3 callbacks suppressed [ 602.222737] Mem-Info: [ 602.226494] Call Trace: [ 602.233981] active_anon:13381 inactive_anon:29073 isolated_anon:0 [ 602.233981] active_file:17 inactive_file:17 isolated_file:0 [ 602.233981] unevictable:0 dirty:0 writeback:0 unstable:0 [ 602.233981] slab_reclaimable:12737 slab_unreclaimable:117502 [ 602.233981] mapped:52610 shmem:29456 pagetables:840 bounce:0 [ 602.233981] free:14058 free_pcp:30 free_cma:0 [ 602.234252] dump_stack+0x1b2/0x281 [ 602.236832] Node 0 active_anon:50844kB inactive_anon:79344kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153608kB dirty:0kB writeback:0kB shmem:80656kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 602.269975] warn_alloc.cold+0x96/0x1cc [ 602.269989] ? zone_watermark_ok_safe+0x220/0x220 [ 602.269998] ? usleep_range+0x130/0x130 [ 602.270007] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 602.270019] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 602.270028] ? run_timer_softirq+0x5a0/0x5a0 [ 602.270042] __alloc_pages_nodemask+0x2127/0x2720 [ 602.270057] ? lock_acquire+0x170/0x3f0 [ 602.270072] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 602.270083] ? ion_page_pool_alloc+0x9e/0x1b0 [ 602.270098] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 602.270116] alloc_pages_current+0x155/0x260 [ 602.270128] ion_page_pool_alloc+0x118/0x1b0 [ 602.270139] ion_system_heap_allocate+0x133/0x8c0 [ 602.270150] ? _raw_spin_unlock+0x29/0x40 [ 602.270159] ? _ion_heap_freelist_drain+0x6e/0x410 [ 602.270173] ? ion_system_contig_heap_create+0x130/0x130 [ 602.317005] Node 1 active_anon:2680kB inactive_anon:36948kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56832kB dirty:0kB writeback:0kB shmem:37168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 602.319331] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 602.319346] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 602.319359] ion_alloc+0x27a/0x810 [ 602.319374] ? ion_dma_buf_release+0x40/0x40 [ 602.319387] ? __might_fault+0x177/0x1b0 [ 602.319400] ion_ioctl+0xea/0x1f0 [ 602.319409] ? ion_query_heaps+0x360/0x360 [ 602.319422] ? ion_query_heaps+0x360/0x360 [ 602.319433] do_vfs_ioctl+0x75a/0xff0 [ 602.344172] Node 0 [ 602.346964] ? ioctl_preallocate+0x1a0/0x1a0 [ 602.367216] syz-executor.0 cpuset= [ 602.370251] ? lock_downgrade+0x740/0x740 [ 602.370266] ? __fget+0x225/0x360 [ 602.370276] ? do_vfs_ioctl+0xff0/0xff0 [ 602.370287] ? security_file_ioctl+0x83/0xb0 [ 602.370297] SyS_ioctl+0x7f/0xb0 [ 602.370306] ? do_vfs_ioctl+0xff0/0xff0 [ 602.370317] do_syscall_64+0x1d5/0x640 [ 602.370334] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 602.370344] RIP: 0033:0x466459 [ 602.395342] / [ 602.407837] RSP: 002b:00007f98f1e65188 EFLAGS: 00000246 [ 602.437314] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 602.437320] lowmem_reserve[]: [ 602.441536] ORIG_RAX: 0000000000000010 [ 602.441542] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 602.441547] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 602.441551] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 602.441556] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 602.441561] R13: 00007ffde3ff81ef R14: 00007f98f1e65300 R15: 0000000000022000 [ 602.625062] mems_allowed=0-1 [ 602.633949] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 602.669502] CPU: 1 PID: 20405 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 602.677490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.686848] Call Trace: [ 602.689443] dump_stack+0x1b2/0x281 [ 602.693093] warn_alloc.cold+0x96/0x1cc [ 602.697069] ? zone_watermark_ok_safe+0x220/0x220 [ 602.701935] ? usleep_range+0x130/0x130 [ 602.705911] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 602.711017] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 602.716029] ? run_timer_softirq+0x5a0/0x5a0 [ 602.720445] __alloc_pages_nodemask+0x2127/0x2720 [ 602.725296] ? lock_acquire+0x170/0x3f0 [ 602.729285] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 602.734143] ? ion_page_pool_alloc+0x9e/0x1b0 [ 602.738661] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 602.744160] alloc_pages_current+0x155/0x260 [ 602.748575] ion_page_pool_alloc+0x118/0x1b0 [ 602.752982] ion_system_heap_allocate+0x133/0x8c0 [ 602.757824] ? ion_alloc+0x187/0x810 [ 602.761537] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 602.767010] ? ion_system_contig_heap_create+0x130/0x130 [ 602.772464] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 602.777509] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 602.782356] ion_alloc+0x204/0x810 [ 602.785900] ? ion_dma_buf_release+0x40/0x40 [ 602.790318] ? __might_fault+0x177/0x1b0 [ 602.794409] ion_ioctl+0xea/0x1f0 [ 602.797878] ? ion_query_heaps+0x360/0x360 [ 602.802116] ? ion_query_heaps+0x360/0x360 [ 602.806351] do_vfs_ioctl+0x75a/0xff0 [ 602.810155] ? ioctl_preallocate+0x1a0/0x1a0 [ 602.814566] ? lock_downgrade+0x740/0x740 [ 602.818718] ? __fget+0x225/0x360 [ 602.822169] ? do_vfs_ioctl+0xff0/0xff0 [ 602.826143] ? security_file_ioctl+0x83/0xb0 [ 602.830551] SyS_ioctl+0x7f/0xb0 [ 602.833937] ? do_vfs_ioctl+0xff0/0xff0 [ 602.837913] do_syscall_64+0x1d5/0x640 [ 602.841804] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 602.846996] RIP: 0033:0x466459 [ 602.850187] RSP: 002b:00007f5fb7692188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.857891] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 602.865157] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 602.872420] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 602.879686] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 602.886959] R13: 00007fff6f6f7f0f R14: 00007f5fb7692300 R15: 0000000000022000 [ 602.945102] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 602.966403] Node 0 DMA32 free:290800kB min:36200kB low:45248kB high:54296kB active_anon:50832kB inactive_anon:79344kB active_file:2012kB inactive_file:5364kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7328kB pagetables:2700kB bounce:0kB free_pcp:1388kB local_pcp:688kB free_cma:0kB [ 603.007441] lowmem_reserve[]: 0 0 0 0 0 [ 603.011462] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 603.067414] lowmem_reserve[]: 0 0 0 0 0 [ 603.071470] Node 1 Normal free:965908kB min:53696kB low:67120kB high:80544kB active_anon:2580kB inactive_anon:36948kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:660kB bounce:0kB free_pcp:1456kB local_pcp:712kB free_cma:0kB [ 603.107472] 0 2717 2718 2718 2718 [ 603.111046] Node 0 DMA32 free:334292kB min:36200kB low:45248kB high:54296kB active_anon:50876kB inactive_anon:79360kB active_file:2060kB inactive_file:5392kB unevictable:0kB writepending:96kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7328kB pagetables:2700kB bounce:0kB free_pcp:1444kB local_pcp:708kB free_cma:0kB [ 603.140685] lowmem_reserve[]: 0 0 0 0 0 [ 603.146573] Node 0 DMA: 5*4kB (UM) 5*8kB (UME) 15*16kB (UME) 12*32kB (UME) 10*64kB (UME) 4*128kB (UE) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11308kB [ 603.162689] Node 0 DMA32: 1535*4kB (UME) 1219*8kB (UME) 699*16kB (UME) 870*32kB (UME) 3294*64kB (UME) 434*128kB (UME) 52*256kB (U) 6*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 337668kB [ 603.197412] lowmem_reserve[]: 0 0 0 0 0 [ 603.201436] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 603.247408] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 603.267610] Node 1 Normal: 1052*4kB (UM) 1878*8kB (UM) 1463*16kB (UME) 1304*32kB (UME) 8542*64kB (UM) 1783*128kB (UM) 415*256kB (UM) 105*512kB (UM) 20*1024kB (U) 0*2048kB 0*4096kB = 1039760kB [ 603.295086] lowmem_reserve[]: 0 0 0 0 0 [ 603.299209] Node 1 Normal free:1039720kB min:53696kB low:67120kB high:80544kB active_anon:2548kB inactive_anon:36948kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:576kB bounce:0kB free_pcp:1280kB local_pcp:620kB free_cma:0kB [ 603.337420] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 603.346282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 603.359026] IPVS: ftp: loaded support on port[0] = 21 [ 603.383461] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 603.407434] lowmem_reserve[]: 0 0 0 0 0 [ 603.411539] Node 0 DMA: 4*4kB (UM) 6*8kB (UME) 20*16kB (UME) 12*32kB (UME) 10*64kB (UME) 4*128kB (UE) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11392kB [ 603.416194] warn_alloc_show_mem: 1 callbacks suppressed [ 603.416197] Mem-Info: [ 603.447159] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 603.454872] active_anon:13359 inactive_anon:29077 isolated_anon:0 [ 603.454872] active_file:579 inactive_file:1377 isolated_file:0 [ 603.454872] unevictable:0 dirty:24 writeback:0 unstable:0 [ 603.454872] slab_reclaimable:12733 slab_unreclaimable:117740 [ 603.454872] mapped:54037 shmem:29460 pagetables:819 bounce:0 [ 603.454872] free:309217 free_pcp:374 free_cma:0 [ 603.457427] 31472 total pagecache pages [ 603.506201] Node 0 DMA32: 607*4kB (ME) 464*8kB (UE) 135*16kB (UME) 17*32kB (UE) 1371*64kB (UME) 436*128kB (UE) 79*256kB (U) 9*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 177228kB [ 603.533505] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 603.555544] 0 pages in swap cache [ 603.564260] Swap cache stats: add 0, delete 0, find 0/0 [ 603.574562] Node 1 Normal: 1052*4kB (UM) 1878*8kB (UM) 1463*16kB (UME) 1304*32kB (UME) 8542*64kB (UM) 1783*128kB (UM) 415*256kB (UM) 105*512kB (UM) 20*1024kB (U) 0*2048kB 0*4096kB = 1039760kB [ 603.576751] Node 0 active_anon:50888kB inactive_anon:79360kB active_file:2260kB inactive_file:5452kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159316kB dirty:96kB writeback:0kB shmem:80672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 603.595902] Free swap = 0kB [ 603.626730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 603.644017] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 603.669246] Total swap = 0kB [ 603.672287] 2097051 pages RAM [ 603.675381] 0 pages HighMem/MovableOnly [ 603.687205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 603.705944] 363841 pages reserved [ 603.714883] 0 pages cma reserved [ 603.715495] Node 1 active_anon:2548kB inactive_anon:36948kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56832kB dirty:0kB writeback:0kB shmem:37168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 603.725865] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 603.772250] Out of memory (oom_kill_allocating_task): Kill process 20485 (systemd-journal) score 0 or sacrifice child [ 603.787918] chnl_net:caif_netlink_parms(): no params data found [ 603.797279] 31472 total pagecache pages [ 603.804284] 0 pages in swap cache [ 603.811694] Killed process 20485 (systemd-journal) total-vm:46096kB, anon-rss:476kB, file-rss:0kB, shmem-rss:1540kB [ 603.815131] Swap cache stats: add 0, delete 0, find 0/0 [ 603.832230] Node 0 DMA free:11124kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 603.862070] oom_reaper: reaped process 20485 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1540kB [ 603.890012] Free swap = 0kB [ 603.893054] Total swap = 0kB [ 603.896069] 2097051 pages RAM [ 603.898133] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 603.912131] Node 0 DMA32 free:45008kB min:36200kB low:45248kB high:54296kB active_anon:50876kB inactive_anon:79360kB active_file:4276kB inactive_file:2588kB unevictable:0kB writepending:96kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7360kB pagetables:2700kB bounce:0kB free_pcp:864kB local_pcp:148kB free_cma:0kB [ 603.941165] 0 pages HighMem/MovableOnly [ 603.945762] 363841 pages reserved [ 603.949450] 0 pages cma reserved [ 604.029778] lowmem_reserve[]: 0 0 0 0 0 [ 604.034725] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 604.082848] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 604.095004] lowmem_reserve[]: 0 0 0 0 0 [ 604.100487] Node 1 Normal free:840140kB min:53696kB low:67120kB high:80544kB active_anon:2200kB inactive_anon:36944kB active_file:1652kB inactive_file:3868kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:520kB bounce:0kB free_pcp:132kB local_pcp:96kB free_cma:0kB [ 604.139207] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 604.165413] systemd[1]: Stopped Journal Service. [ 604.226861] lowmem_reserve[]: 0 0 0 0 0 [ 604.240633] Node 0 DMA: 2*4kB (UM) 3*8kB (ME) 4*16kB (UME) 11*32kB (UME) 10*64kB (UME) 4*128kB (UE) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11072kB [ 604.268680] systemd[1]: Starting Journal Service... [ 604.295882] Node 0 DMA32: 958*4kB (MEH) 613*8kB (UMEH) 218*16kB (UME) 65*32kB (UME) 22*64kB (UME) 42*128kB (UME) 79*256kB (U) 9*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 45920kB [ 604.316920] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 604.345237] Node 1 Normal: 2*4kB (UM) 1*8kB (U) 3*16kB (UE) 4*32kB (ME) 4421*64kB (U) 1767*128kB (UM) 407*256kB (U) 102*512kB (U) 17*1024kB (U) 0*2048kB 0*4096kB = 683136kB [ 604.376861] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 604.405467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 604.435325] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 604.470037] systemd-journald[20609]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 604.489194] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 604.517734] 32566 total pagecache pages [ 604.521738] 0 pages in swap cache [ 604.525185] Swap cache stats: add 0, delete 0, find 0/0 [ 604.548977] Free swap = 0kB [ 604.551554] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.552040] Total swap = 0kB [ 604.577445] 2097051 pages RAM [ 604.580583] 0 pages HighMem/MovableOnly [ 604.584547] 363841 pages reserved [ 604.591633] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.594381] 0 pages cma reserved [ 604.602246] systemd-journald[20609]: /dev/kmsg buffer overrun, some messages lost. [ 604.618498] device bridge_slave_0 entered promiscuous mode [ 604.652335] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.671750] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.697534] Bluetooth: hci3 command 0x0409 tx timeout [ 604.698429] device bridge_slave_1 entered promiscuous mode [ 604.815660] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 604.839891] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 604.906680] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 604.958484] team0: Port device team_slave_0 added [ 604.964277] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 604.975634] team0: Port device team_slave_1 added [ 605.079678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.085943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.115793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.173140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.191412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.267469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.328556] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 605.347475] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 605.416925] systemd[1]: Started Journal Service. [ 605.452846] device hsr_slave_0 entered promiscuous mode [ 605.472236] device hsr_slave_1 entered promiscuous mode [ 605.492238] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 605.512348] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 605.833184] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 605.951972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.965835] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 605.976573] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 606.004247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 606.012785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 606.030787] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 606.036968] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.063067] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 606.081173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 606.089613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 606.107851] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.114228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.148041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 606.168988] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 606.188655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 606.208664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 606.241373] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.247778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.284633] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 606.292555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 606.421718] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 606.481809] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 606.486624] CPU: 0 PID: 7964 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 606.494059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 606.503427] Call Trace: [ 606.506106] dump_stack+0x1b2/0x281 [ 606.509733] dump_header+0x178/0x82f [ 606.513452] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 606.518556] ? ___ratelimit+0x2cd/0x530 [ 606.522529] oom_kill_process.cold+0x10/0xb18 [ 606.527063] out_of_memory+0xe3e/0x1190 [ 606.531036] ? oom_killer_disable+0x1c0/0x1c0 [ 606.535532] ? mutex_trylock+0x152/0x1a0 [ 606.539594] __alloc_pages_nodemask+0x23e1/0x2720 [ 606.544453] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 606.549310] alloc_pages_current+0x155/0x260 [ 606.553727] filemap_fault+0xea3/0x1980 [ 606.557731] ext4_filemap_fault+0x84/0xb0 [ 606.561875] __do_fault+0xfa/0x380 [ 606.565434] __handle_mm_fault+0x2497/0x4620 [ 606.569837] ? vm_insert_page+0x7c0/0x7c0 [ 606.573980] ? lock_downgrade+0x740/0x740 [ 606.578143] handle_mm_fault+0x391/0x860 [ 606.582207] __do_page_fault+0x549/0xad0 [ 606.586266] ? spurious_fault+0x640/0x640 [ 606.590417] ? do_page_fault+0x60/0x500 [ 606.594393] ? page_fault+0x2f/0x50 [ 606.598014] page_fault+0x45/0x50 [ 606.601464] RIP: 0000:0x940aec [ 606.604645] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 606.622186] Mem-Info: [ 606.655701] active_anon:13372 inactive_anon:31108 isolated_anon:0 [ 606.655701] active_file:31 inactive_file:22 isolated_file:0 [ 606.655701] unevictable:0 dirty:25 writeback:0 unstable:0 [ 606.655701] slab_reclaimable:12707 slab_unreclaimable:117404 [ 606.655701] mapped:52632 shmem:31508 pagetables:739 bounce:0 [ 606.655701] free:25114 free_pcp:0 free_cma:0 [ 606.718679] Node 0 active_anon:50788kB inactive_anon:79360kB active_file:60kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153756kB dirty:12kB writeback:0kB shmem:80672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 606.756914] Node 1 active_anon:2700kB inactive_anon:45072kB active_file:164kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56772kB dirty:88kB writeback:0kB shmem:45360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 606.784480] Bluetooth: hci3 command 0x041b tx timeout [ 606.799875] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 606.837290] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 606.843433] Node 0 DMA32 free:36396kB min:36200kB low:45248kB high:54296kB active_anon:50776kB inactive_anon:79360kB active_file:100kB inactive_file:52kB unevictable:0kB writepending:12kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7264kB pagetables:2388kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 606.893045] lowmem_reserve[]: 0 0 0 0 0 [ 606.897068] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 606.946173] lowmem_reserve[]: 0 0 0 0 0 [ 606.952469] Node 1 Normal free:53192kB min:53696kB low:67120kB high:80544kB active_anon:2700kB inactive_anon:45072kB active_file:184kB inactive_file:36kB unevictable:0kB writepending:88kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:568kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 607.002658] lowmem_reserve[]: 0 0 0 0 0 [ 607.006679] Node 0 DMA: 2*4kB (UM) 3*8kB (ME) 4*16kB (UME) 11*32kB (UME) 10*64kB (UME) 4*128kB (UE) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11072kB [ 607.038360] Node 0 DMA32: 895*4kB (ME) 592*8kB (UME) 209*16kB (ME) 62*32kB (UME) 36*64kB (ME) 11*128kB (UME) 55*256kB (UM) 9*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36044kB [ 607.087068] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 607.103789] Node 1 Normal: 161*4kB (M) 106*8kB (M) 61*16kB (ME) 57*32kB (ME) 49*64kB (UM) 33*128kB (UM) 9*256kB (M) 59*512kB (UM) 9*1024kB (U) 0*2048kB 0*4096kB = 53380kB [ 607.125188] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 607.134866] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 607.150269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 607.162901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 607.174535] 31553 total pagecache pages [ 607.181703] 0 pages in swap cache [ 607.185167] Swap cache stats: add 0, delete 0, find 0/0 [ 607.193640] Free swap = 0kB [ 607.196674] Total swap = 0kB [ 607.202773] 2097051 pages RAM [ 607.205889] 0 pages HighMem/MovableOnly [ 607.214375] 363841 pages reserved [ 607.244539] 0 pages cma reserved [ 607.248009] Out of memory (oom_kill_allocating_task): Kill process 7964 (syz-fuzzer) score 0 or sacrifice child [ 607.265607] Killed process 20486 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 607.286025] oom_reaper: reaped process 20486 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 607.321746] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 607.419683] in:imklog cpuset=/ mems_allowed=0-1 [ 607.424492] CPU: 0 PID: 20408 Comm: in:imklog Not tainted 4.14.227-syzkaller #0 [ 607.431929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.441278] Call Trace: [ 607.443867] dump_stack+0x1b2/0x281 [ 607.447497] dump_header+0x178/0x82f [ 607.451215] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 607.456314] ? ___ratelimit+0x2cd/0x530 [ 607.460294] oom_kill_process.cold+0x10/0xb18 [ 607.464794] out_of_memory+0xe3e/0x1190 [ 607.468777] ? oom_killer_disable+0x1c0/0x1c0 [ 607.473296] ? mutex_trylock+0x152/0x1a0 [ 607.477359] __alloc_pages_nodemask+0x23e1/0x2720 [ 607.482219] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 607.487078] alloc_pages_current+0x155/0x260 [ 607.491498] filemap_fault+0xea3/0x1980 [ 607.495499] ext4_filemap_fault+0x84/0xb0 [ 607.499648] __do_fault+0xfa/0x380 [ 607.503184] __handle_mm_fault+0x2497/0x4620 [ 607.507598] ? vm_insert_page+0x7c0/0x7c0 [ 607.511754] ? lock_downgrade+0x740/0x740 [ 607.515913] handle_mm_fault+0x391/0x860 [ 607.519979] __do_page_fault+0x549/0xad0 [ 607.524056] ? spurious_fault+0x640/0x640 [ 607.528231] ? do_page_fault+0x60/0x500 [ 607.532207] ? page_fault+0x2f/0x50 [ 607.535828] page_fault+0x45/0x50 [ 607.539283] RIP: efd83da3:0x1f9f [ 607.542662] RSP: 0000:0000000000000004 EFLAGS: 7f4cefd83da0 [ 607.548033] Mem-Info: [ 607.560052] active_anon:13372 inactive_anon:31108 isolated_anon:0 [ 607.560052] active_file:48 inactive_file:4 isolated_file:0 [ 607.560052] unevictable:0 dirty:0 writeback:0 unstable:0 [ 607.560052] slab_reclaimable:12707 slab_unreclaimable:116626 [ 607.560052] mapped:52590 shmem:31508 pagetables:739 bounce:0 [ 607.560052] free:25052 free_pcp:0 free_cma:0 [ 607.597611] Node 0 active_anon:50788kB inactive_anon:79360kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153684kB dirty:0kB writeback:0kB shmem:80672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 607.629837] Node 1 active_anon:2700kB inactive_anon:45072kB active_file:148kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56676kB dirty:0kB writeback:0kB shmem:45360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 607.661778] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 607.697959] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 607.703028] Node 0 DMA32 free:35756kB min:36200kB low:45248kB high:54296kB active_anon:50776kB inactive_anon:79360kB active_file:48kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7264kB pagetables:2388kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 607.740715] lowmem_reserve[]: 0 0 0 0 0 [ 607.744736] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 607.779003] lowmem_reserve[]: 0 0 0 0 0 [ 607.783012] Node 1 Normal free:53380kB min:53696kB low:67120kB high:80544kB active_anon:2700kB inactive_anon:45072kB active_file:148kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:568kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 607.818499] lowmem_reserve[]: 0 0 0 0 0 [ 607.822520] Node 0 DMA: 2*4kB (UM) 3*8kB (ME) 4*16kB (UME) 11*32kB (UME) 10*64kB (UME) 4*128kB (UE) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11072kB [ 607.844919] Node 0 DMA32: 904*4kB (UME) 589*8kB (ME) 206*16kB (UME) 62*32kB (UME) 40*64kB (UME) 10*128kB (ME) 55*256kB (UM) 9*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36136kB [ 607.867105] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 607.884465] Node 1 Normal: 160*4kB (M) 105*8kB (M) 62*16kB (ME) 57*32kB (ME) 49*64kB (UM) 33*128kB (UM) 9*256kB (M) 59*512kB (UM) 9*1024kB (U) 0*2048kB 0*4096kB = 53384kB [ 607.910773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 607.921928] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 607.936743] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 607.955219] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 607.963855] 31577 total pagecache pages [ 607.976297] 0 pages in swap cache [ 607.979949] Swap cache stats: add 0, delete 0, find 0/0 [ 607.985565] Free swap = 0kB [ 607.996993] Total swap = 0kB [ 608.000058] 2097051 pages RAM [ 608.003152] 0 pages HighMem/MovableOnly [ 608.007110] 363841 pages reserved [ 608.019229] 0 pages cma reserved [ 608.022599] Out of memory (oom_kill_allocating_task): Kill process 20408 (in:imklog) score 0 or sacrifice child [ 608.041602] Killed process 20394 (rsyslogd) total-vm:254332kB, anon-rss:1116kB, file-rss:0kB, shmem-rss:0kB [ 608.058079] oom_reaper: reaped process 20394 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 608.141123] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 608.228398] systemd-journal cpuset=/ mems_allowed=0-1 [ 608.234496] CPU: 0 PID: 20609 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 608.242463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.251912] Call Trace: [ 608.254537] dump_stack+0x1b2/0x281 [ 608.258279] dump_header+0x178/0x82f [ 608.261992] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 608.267120] ? ___ratelimit+0x2cd/0x530 [ 608.271100] oom_kill_process.cold+0x10/0xb18 [ 608.283963] out_of_memory+0xe3e/0x1190 [ 608.287993] ? oom_killer_disable+0x1c0/0x1c0 [ 608.292589] ? mutex_trylock+0x152/0x1a0 [ 608.297280] __alloc_pages_nodemask+0x23e1/0x2720 [ 608.302235] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 608.307183] alloc_pages_current+0x155/0x260 [ 608.311608] filemap_fault+0xea3/0x1980 [ 608.315596] ext4_filemap_fault+0x84/0xb0 [ 608.319750] __do_fault+0xfa/0x380 [ 608.323312] __handle_mm_fault+0x2497/0x4620 [ 608.327722] ? vm_insert_page+0x7c0/0x7c0 [ 608.331882] ? free_uid+0x24d/0x330 [ 608.335515] handle_mm_fault+0x391/0x860 [ 608.339582] __do_page_fault+0x549/0xad0 [ 608.343640] ? spurious_fault+0x640/0x640 [ 608.347793] ? do_page_fault+0x60/0x500 [ 608.351763] ? page_fault+0x2f/0x50 [ 608.355387] page_fault+0x45/0x50 [ 608.358837] RIP: 0000:0x55c0779cf860 [ 608.362630] RSP: 25c74ee0:00007ffc25c72000 EFLAGS: 00000000 [ 608.711161] Mem-Info: [ 608.720090] active_anon:13011 inactive_anon:31108 isolated_anon:0 [ 608.720090] active_file:197 inactive_file:226 isolated_file:0 [ 608.720090] unevictable:0 dirty:0 writeback:0 unstable:0 [ 608.720090] slab_reclaimable:12707 slab_unreclaimable:115959 [ 608.720090] mapped:44071 shmem:31508 pagetables:739 bounce:0 [ 608.720090] free:25778 free_pcp:47 free_cma:0 [ 608.754981] Node 0 active_anon:50548kB inactive_anon:79360kB active_file:776kB inactive_file:1044kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140208kB dirty:0kB writeback:0kB shmem:80672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 608.786930] Node 1 active_anon:1496kB inactive_anon:45072kB active_file:12kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36176kB dirty:0kB writeback:0kB shmem:45360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 608.834219] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 608.918038] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 608.923115] Node 0 DMA32 free:41864kB min:36200kB low:45248kB high:54296kB active_anon:50436kB inactive_anon:79360kB active_file:924kB inactive_file:1972kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7232kB pagetables:2388kB bounce:0kB free_pcp:508kB local_pcp:304kB free_cma:0kB [ 608.997599] lowmem_reserve[]: 0 0 0 0 0 [ 609.002611] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 609.052908] lowmem_reserve[]: 0 0 0 0 0 [ 609.068105] Node 1 Normal free:633072kB min:53696kB low:67120kB high:80544kB active_anon:1652kB inactive_anon:45072kB active_file:132kB inactive_file:5044kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:524kB bounce:0kB free_pcp:256kB local_pcp:220kB free_cma:0kB [ 609.133788] lowmem_reserve[]: 0 0 0 0 0 [ 609.154824] Node 0 DMA: 2*4kB (UM) 3*8kB (ME) 4*16kB (UME) 11*32kB (UME) 12*64kB (UME) 4*128kB (UE) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11200kB [ 609.251830] Node 0 DMA32: 852*4kB (UME) 792*8kB (UMEH) 305*16kB (UEH) 867*32kB (UEH) 507*64kB (UE) 43*128kB (UME) 61*256kB (U) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 97472kB [ 609.297477] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 609.310814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 609.327524] Node 1 Normal: 1785*4kB (UM) 975*8kB (UM) 2001*16kB (UME) 1244*32kB (UME) 5984*64kB (UM) 794*128kB (UM) 240*256kB (UM) 88*512kB (UM) 87*1024kB (U) 4*2048kB (U) 0*4096kB = 775148kB [ 609.353312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 609.367489] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 609.376426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 609.379484] device bridge_slave_1 left promiscuous mode [ 609.415200] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 609.425142] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 609.425890] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.437638] 36336 total pagecache pages [ 609.447547] 0 pages in swap cache [ 609.447554] Swap cache stats: add 0, delete 0, find 0/0 [ 609.447557] Free swap = 0kB [ 609.447560] Total swap = 0kB [ 609.447567] 2097051 pages RAM [ 609.447570] 0 pages HighMem/MovableOnly [ 609.447573] 363841 pages reserved [ 609.447576] 0 pages cma reserved [ 609.447584] Out of memory (oom_kill_allocating_task): Kill process 20609 (systemd-journal) score 0 or sacrifice child [ 609.447611] Killed process 20609 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1236kB [ 609.460190] device bridge_slave_0 left promiscuous mode [ 609.460335] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.545343] oom_reaper: reaped process 20609 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1236kB [ 609.593410] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 609.655786] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 609.700905] systemd[1]: Stopped Journal Service. [ 609.769942] systemd[1]: Starting Journal Service... [ 609.787280] systemd[1]: Started System Logging Service. [ 609.886844] device hsr_slave_1 left promiscuous mode [ 609.907704] device hsr_slave_0 left promiscuous mode [ 609.948311] team0 (unregistering): Port device team_slave_1 removed [ 609.963490] team0 (unregistering): Port device team_slave_0 removed [ 609.973215] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 610.005512] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 610.069903] bond0 (unregistering): Released all slaves [ 610.307420] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 610.337409] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 610.343793] CPU: 0 PID: 20405 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 610.351687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 610.361496] Call Trace: [ 610.364084] dump_stack+0x1b2/0x281 [ 610.367719] warn_alloc.cold+0x96/0x1cc [ 610.371694] ? zone_watermark_ok_safe+0x220/0x220 [ 610.376548] __alloc_pages_nodemask+0x2127/0x2720 [ 610.381396] ? _raw_spin_unlock_irq+0x24/0x80 [ 610.385890] ? lock_acquire+0x170/0x3f0 [ 610.390055] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 610.394906] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 610.401066] ? __mutex_unlock_slowpath+0x75/0x770 [ 610.405913] alloc_pages_current+0x155/0x260 [ 610.410323] ion_page_pool_alloc+0x118/0x1b0 [ 610.414730] ion_system_heap_allocate+0x133/0x8c0 [ 610.419572] ? _raw_spin_unlock+0x29/0x40 [ 610.423716] ? _ion_heap_freelist_drain+0x6e/0x410 [ 610.428642] ? ion_system_contig_heap_create+0x130/0x130 [ 610.434090] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 610.438944] ion_alloc+0x27a/0x810 [ 610.442571] ? ion_dma_buf_release+0x40/0x40 [ 610.447592] ? __might_fault+0x177/0x1b0 [ 610.451662] ion_ioctl+0xea/0x1f0 [ 610.455110] ? ion_query_heaps+0x360/0x360 [ 610.459342] ? ion_query_heaps+0x360/0x360 [ 610.463574] do_vfs_ioctl+0x75a/0xff0 [ 610.467381] ? ioctl_preallocate+0x1a0/0x1a0 [ 610.471783] ? lock_downgrade+0x740/0x740 [ 610.475928] ? __fget+0x225/0x360 [ 610.479381] ? do_vfs_ioctl+0xff0/0xff0 [ 610.483363] ? security_file_ioctl+0x83/0xb0 [ 610.487767] SyS_ioctl+0x7f/0xb0 [ 610.491127] ? do_vfs_ioctl+0xff0/0xff0 [ 610.495103] do_syscall_64+0x1d5/0x640 [ 610.499001] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 610.504187] RIP: 0033:0x466459 [ 610.507383] RSP: 002b:00007f5fb7692188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 610.515085] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 610.522347] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 610.529608] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 610.536873] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 610.544135] R13: 00007fff6f6f7f0f R14: 00007f5fb7692300 R15: 0000000000022000 [ 610.642917] Mem-Info: [ 610.645857] active_anon:13141 inactive_anon:31104 isolated_anon:0 [ 610.645857] active_file:1517 inactive_file:4786 isolated_file:0 [ 610.645857] unevictable:0 dirty:23 writeback:0 unstable:0 [ 610.645857] slab_reclaimable:12762 slab_unreclaimable:113391 [ 610.645857] mapped:56372 shmem:31504 pagetables:744 bounce:0 [ 610.645857] free:124098 free_pcp:554 free_cma:0 [ 610.717662] Node 0 active_anon:51968kB inactive_anon:79352kB active_file:4836kB inactive_file:15172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:187372kB dirty:92kB writeback:0kB shmem:80660kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 610.778747] Node 1 active_anon:596kB inactive_anon:45064kB active_file:1232kB inactive_file:3972kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38116kB dirty:0kB writeback:0kB shmem:45356kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 610.810412] Node 0 DMA free:11840kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 610.840378] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 610.845431] Node 0 DMA32 free:226892kB min:36200kB low:45248kB high:54296kB active_anon:51956kB inactive_anon:79352kB active_file:4836kB inactive_file:15124kB unevictable:0kB writepending:92kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7744kB pagetables:2696kB bounce:0kB free_pcp:984kB local_pcp:240kB free_cma:0kB [ 610.889424] lowmem_reserve[]: 0 0 0 0 0 [ 610.893438] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 610.960789] lowmem_reserve[]: 0 0 0 0 0 [ 610.964809] Node 1 Normal free:535824kB min:53696kB low:67120kB high:80544kB active_anon:696kB inactive_anon:45064kB active_file:1232kB inactive_file:3972kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:280kB bounce:0kB free_pcp:1348kB local_pcp:620kB free_cma:0kB [ 610.998667] lowmem_reserve[]: 0 0 0 0 0 [ 611.002671] Node 0 DMA: 72*4kB (UM) 17*8kB (UME) 9*16kB (UME) 13*32kB (UME) 12*64kB (UME) 5*128kB (UE) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11864kB [ 611.022626] Node 0 DMA32: 14911*4kB (UMEH) 8173*8kB (UMEH) 2220*16kB (UMEH) 4108*32kB (UMEH) 279*64kB (UMH) 16*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 311908kB [ 611.042056] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 611.053231] Node 1 Normal: 9296*4kB (UM) 4271*8kB (UM) 4325*16kB (UME) 3823*32kB (UME) 2853*64kB (UM) 517*128kB (UM) 120*256kB (UM) 1*512kB (U) 7*1024kB (U) 0*2048kB 0*4096kB = 550056kB [ 611.073968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 611.090816] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 611.111180] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 611.131061] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 611.151073] 37765 total pagecache pages [ 611.155054] 0 pages in swap cache [ 611.170805] Swap cache stats: add 0, delete 0, find 0/0 [ 611.176171] Free swap = 0kB [ 611.187424] Total swap = 0kB [ 611.190459] 2097051 pages RAM [ 611.193555] 0 pages HighMem/MovableOnly [ 611.207394] 363841 pages reserved [ 611.210848] 0 pages cma reserved [ 611.472355] systemd-journald[20717]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 612.104526] systemd[1]: Started Journal Service. [ 613.591998] IPVS: ftp: loaded support on port[0] = 21 [ 613.762586] chnl_net:caif_netlink_parms(): no params data found [ 613.856372] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.865678] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.876034] device bridge_slave_0 entered promiscuous mode [ 613.892767] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.899481] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.911724] device bridge_slave_1 entered promiscuous mode [ 613.942380] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 613.956102] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 613.982922] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 613.991028] team0: Port device team_slave_0 added [ 613.996717] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 614.006479] team0: Port device team_slave_1 added [ 614.035746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.042311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.072550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.085008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.091951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.118082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.130609] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 614.138950] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 614.173744] device hsr_slave_0 entered promiscuous mode [ 614.179683] device hsr_slave_1 entered promiscuous mode [ 614.185868] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 614.193098] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 614.299263] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.305659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.312396] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.318836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.362640] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 614.372028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.382166] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 614.391827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 614.399964] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.407200] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.418273] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 614.424350] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.439035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 614.447120] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.453568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.478565] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 614.486256] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.492807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.500915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 614.518624] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 614.525775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 614.533827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 614.541411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 614.551225] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 614.557269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 614.573712] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 614.581709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 614.591768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 614.603260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.696608] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 614.707735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 614.738143] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 614.759393] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 614.766502] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 614.781136] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 614.792642] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 614.803425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 614.812532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 614.825419] device veth0_vlan entered promiscuous mode [ 614.833717] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 614.846943] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 614.857768] device veth1_vlan entered promiscuous mode [ 614.865009] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 614.879937] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 614.893074] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 614.903832] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 614.911023] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 614.918899] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 614.926136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 614.934171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 614.944614] device veth0_macvtap entered promiscuous mode [ 614.952152] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 614.961980] device veth1_macvtap entered promiscuous mode [ 614.968592] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 614.978741] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 614.989818] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 614.999653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 615.009722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.019216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 615.029229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.039286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 615.049253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.058846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 615.068816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.079154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 615.089143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.099769] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 615.106924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.114709] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 615.122565] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 615.132193] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 615.141390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 615.154227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 615.171523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.182233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 615.196720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.211327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 615.221776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.235138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 615.246259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.259855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 615.271113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.286140] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 615.295371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.309816] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 615.321752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 05:07:55 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:07:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:07:55 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:07:55 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:07:55 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:07:55 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:07:55 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:07:55 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) [ 615.637931] Bluetooth: hci3 command 0x0409 tx timeout 05:07:56 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:07:56 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:07:56 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:07:56 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:07:56 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) [ 617.017732] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 617.029749] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 617.035019] CPU: 0 PID: 20987 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 617.042896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.052240] Call Trace: [ 617.054827] dump_stack+0x1b2/0x281 [ 617.058453] warn_alloc.cold+0x96/0x1cc [ 617.062423] ? zone_watermark_ok_safe+0x220/0x220 [ 617.067274] __alloc_pages_nodemask+0x2127/0x2720 [ 617.072110] ? __schedule+0x893/0x1de0 [ 617.075997] ? lock_acquire+0x170/0x3f0 [ 617.079973] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 617.084817] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 617.090264] ? __mutex_unlock_slowpath+0x75/0x770 [ 617.095127] alloc_pages_current+0x155/0x260 [ 617.099537] ion_page_pool_alloc+0x118/0x1b0 [ 617.100640] syz-executor.4: page allocation failure: order:4 [ 617.103943] ion_system_heap_allocate+0x133/0x8c0 [ 617.103953] ? ion_alloc+0x187/0x810 [ 617.116746] syz-executor.2: [ 617.118256] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 617.118267] ? ion_system_contig_heap_create+0x130/0x130 [ 617.118276] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 617.118288] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 617.118300] ion_alloc+0x204/0x810 [ 617.118315] ? ion_dma_buf_release+0x40/0x40 [ 617.118328] ? __might_fault+0x177/0x1b0 [ 617.118347] ion_ioctl+0xea/0x1f0 [ 617.147430] page allocation failure: order:4 [ 617.150128] ? ion_query_heaps+0x360/0x360 [ 617.154168] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 617.157602] ? ion_query_heaps+0x360/0x360 [ 617.157614] do_vfs_ioctl+0x75a/0xff0 [ 617.157626] ? ioctl_preallocate+0x1a0/0x1a0 [ 617.157634] ? lock_downgrade+0x740/0x740 [ 617.157646] ? __fget+0x225/0x360 [ 617.157655] ? do_vfs_ioctl+0xff0/0xff0 [ 617.157665] ? security_file_ioctl+0x83/0xb0 [ 617.157676] SyS_ioctl+0x7f/0xb0 [ 617.157684] ? do_vfs_ioctl+0xff0/0xff0 [ 617.157695] do_syscall_64+0x1d5/0x640 [ 617.157711] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 617.157719] RIP: 0033:0x466459 [ 617.157723] RSP: 002b:00007f5fb7692188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 617.157732] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 617.157737] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 617.157743] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 617.157748] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 617.157753] R13: 00007fff6f6f7f0f R14: 00007f5fb7692300 R15: 0000000000022000 [ 617.185381] Mem-Info: [ 617.186231] syz-executor.3: [ 617.194946] active_anon:13344 inactive_anon:33128 isolated_anon:0 [ 617.194946] active_file:2087 inactive_file:4858 isolated_file:0 [ 617.194946] unevictable:0 dirty:90 writeback:0 unstable:0 [ 617.194946] slab_reclaimable:12815 slab_unreclaimable:114318 [ 617.194946] mapped:57128 shmem:33556 pagetables:818 bounce:0 [ 617.194946] free:172797 free_pcp:202 free_cma:0 [ 617.197763] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 617.197773] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 617.197796] CPU: 1 PID: 20982 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 617.197802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.197805] Call Trace: [ 617.197821] dump_stack+0x1b2/0x281 [ 617.197843] warn_alloc.cold+0x96/0x1cc [ 617.197856] ? zone_watermark_ok_safe+0x220/0x220 [ 617.197880] __alloc_pages_nodemask+0x2127/0x2720 [ 617.197892] ? __schedule+0x893/0x1de0 [ 617.208443] Node 0 active_anon:52768kB inactive_anon:87536kB active_file:7040kB inactive_file:15536kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:190264kB dirty:356kB writeback:0kB shmem:88876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 617.209602] ? lock_acquire+0x170/0x3f0 [ 617.209620] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 617.209638] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 617.209650] ? __mutex_unlock_slowpath+0x75/0x770 [ 617.213637] Node 1 active_anon:608kB inactive_anon:44976kB active_file:1308kB inactive_file:3896kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38248kB dirty:4kB writeback:0kB shmem:45348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 617.218703] alloc_pages_current+0x155/0x260 [ 617.218720] ion_page_pool_alloc+0x118/0x1b0 [ 617.218732] ion_system_heap_allocate+0x133/0x8c0 [ 617.218743] ? ion_alloc+0x187/0x810 [ 617.218753] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 617.218764] ? ion_system_contig_heap_create+0x130/0x130 [ 617.218775] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 617.218787] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 617.227662] Node 0 [ 617.229655] ion_alloc+0x204/0x810 [ 617.229672] ? ion_dma_buf_release+0x40/0x40 [ 617.229685] ? __might_fault+0x177/0x1b0 [ 617.229699] ion_ioctl+0xea/0x1f0 [ 617.237060] DMA free:11092kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 617.244216] ? ion_query_heaps+0x360/0x360 [ 617.244230] ? ion_query_heaps+0x360/0x360 [ 617.244240] do_vfs_ioctl+0x75a/0xff0 [ 617.244253] ? ioctl_preallocate+0x1a0/0x1a0 [ 617.244263] ? lock_downgrade+0x740/0x740 [ 617.244278] ? __fget+0x225/0x360 [ 617.244287] ? do_vfs_ioctl+0xff0/0xff0 [ 617.244299] ? security_file_ioctl+0x83/0xb0 [ 617.257079] lowmem_reserve[]: [ 617.258814] SyS_ioctl+0x7f/0xb0 [ 617.258823] ? do_vfs_ioctl+0xff0/0xff0 [ 617.258841] do_syscall_64+0x1d5/0x640 [ 617.258860] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 617.258868] RIP: 0033:0x466459 [ 617.258873] RSP: 002b:00007ff90c340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 617.258883] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 617.258892] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 617.270640] 0 [ 617.271566] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 617.271572] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 617.271577] R13: 00007ffce90c212f R14: 00007ff90c340300 R15: 0000000000022000 [ 617.272212] page allocation failure: order:4 [ 617.315709] 2717 [ 617.318421] (null) [ 617.318428] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 617.318450] CPU: 1 PID: 20988 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 617.318456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.318460] Call Trace: [ 617.318476] dump_stack+0x1b2/0x281 [ 617.318490] warn_alloc.cold+0x96/0x1cc [ 617.318501] ? zone_watermark_ok_safe+0x220/0x220 [ 617.318522] __alloc_pages_nodemask+0x2127/0x2720 [ 617.318532] ? _raw_spin_unlock_irq+0x5a/0x80 [ 617.318542] ? finish_task_switch+0x178/0x610 [ 617.318550] ? finish_task_switch+0x14d/0x610 [ 617.318565] ? lock_acquire+0x170/0x3f0 [ 617.318581] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 617.318598] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 617.318611] ? __mutex_unlock_slowpath+0x75/0x770 [ 617.318622] ? alloc_pages_current+0x123/0x260 [ 617.318634] alloc_pages_current+0x155/0x260 [ 617.318648] ion_page_pool_alloc+0x118/0x1b0 [ 617.318659] ion_system_heap_allocate+0x133/0x8c0 [ 617.318669] ? ion_alloc+0x187/0x810 [ 617.318679] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 617.318690] ? ion_system_contig_heap_create+0x130/0x130 [ 617.318700] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 617.318711] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 617.318722] ion_alloc+0x204/0x810 [ 617.318737] ? ion_dma_buf_release+0x40/0x40 [ 617.318750] ? __might_fault+0x177/0x1b0 [ 617.318763] ion_ioctl+0xea/0x1f0 [ 617.318773] ? ion_query_heaps+0x360/0x360 [ 617.318787] ? ion_query_heaps+0x360/0x360 [ 617.318798] do_vfs_ioctl+0x75a/0xff0 [ 617.318810] ? ioctl_preallocate+0x1a0/0x1a0 [ 617.318818] ? lock_downgrade+0x740/0x740 [ 617.318832] ? __fget+0x225/0x360 [ 617.318849] ? do_vfs_ioctl+0xff0/0xff0 [ 617.342282] 2718 [ 617.346300] ? security_file_ioctl+0x83/0xb0 [ 617.346313] SyS_ioctl+0x7f/0xb0 [ 617.346321] ? do_vfs_ioctl+0xff0/0xff0 [ 617.346334] do_syscall_64+0x1d5/0x640 [ 617.361314] 2718 [ 617.388188] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 617.388198] RIP: 0033:0x466459 [ 617.388203] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 617.388213] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 617.388219] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 617.388224] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 617.388230] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 617.388235] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 617.388699] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 617.402067] 2718 [ 617.403491] (null) [ 617.435024] syz-executor.3 cpuset=/ [ 617.445472] Node 0 [ 617.448924] mems_allowed=0-1 [ 617.458345] DMA32 free:349320kB min:36200kB low:45248kB high:54296kB active_anon:52756kB inactive_anon:87536kB active_file:7040kB inactive_file:15536kB unevictable:0kB writepending:356kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7904kB pagetables:3096kB bounce:0kB free_pcp:772kB local_pcp:76kB free_cma:0kB [ 617.463755] CPU: 1 PID: 20986 Comm: syz-executor.3 Not tainted 4.14.227-syzkaller #0 [ 617.468813] lowmem_reserve[]: [ 617.473519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 617.473523] Call Trace: [ 617.473542] dump_stack+0x1b2/0x281 [ 617.473564] warn_alloc.cold+0x96/0x1cc [ 617.475834] 0 [ 617.479309] ? zone_watermark_ok_safe+0x220/0x220 [ 617.479332] __alloc_pages_nodemask+0x2127/0x2720 [ 617.479349] ? lock_acquire+0x170/0x3f0 [ 617.479372] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 617.479389] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 617.489672] 0 [ 617.491266] ? __mutex_unlock_slowpath+0x75/0x770 [ 617.491284] alloc_pages_current+0x155/0x260 [ 617.517015] 0 [ 617.521117] ion_page_pool_alloc+0x118/0x1b0 [ 617.521129] ion_system_heap_allocate+0x133/0x8c0 [ 617.521141] ? ion_alloc+0x187/0x810 [ 617.521152] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 617.521163] ? ion_system_contig_heap_create+0x130/0x130 [ 617.521176] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 617.527453] 0 [ 617.529229] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 617.529243] ion_alloc+0x204/0x810 [ 617.529257] ? ion_dma_buf_release+0x40/0x40 [ 617.535903] 0 [ 617.537803] ? __might_fault+0x177/0x1b0 [ 617.537817] ion_ioctl+0xea/0x1f0 [ 617.537827] ? ion_query_heaps+0x360/0x360 [ 617.537844] ? ion_query_heaps+0x360/0x360 [ 617.545239] do_vfs_ioctl+0x75a/0xff0 [ 617.545252] ? ioctl_preallocate+0x1a0/0x1a0 [ 617.545265] ? lock_downgrade+0x740/0x740 [ 617.551868] Node 0 [ 617.552758] ? __fget+0x225/0x360 [ 617.556159] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 617.560057] ? do_vfs_ioctl+0xff0/0xff0 [ 617.560069] ? security_file_ioctl+0x83/0xb0 [ 617.560079] SyS_ioctl+0x7f/0xb0 [ 617.560088] ? do_vfs_ioctl+0xff0/0xff0 [ 617.560099] do_syscall_64+0x1d5/0x640 [ 617.560117] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 617.568241] lowmem_reserve[]: [ 617.569151] RIP: 0033:0x466459 [ 617.569156] RSP: 002b:00007f42379f8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 617.569167] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 617.569175] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 617.572415] 0 [ 617.580061] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 617.580066] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 617.580071] R13: 00007ffef8958def R14: 00007f42379f8300 R15: 0000000000022000 [ 618.167258] Bluetooth: hci3 command 0x041b tx timeout [ 618.168643] syz-executor.5: [ 618.172622] 0 0 0 0 [ 618.177289] page allocation failure: order:4 [ 618.178139] Node 1 Normal free:290372kB min:53696kB low:67120kB high:80544kB active_anon:608kB inactive_anon:44976kB active_file:1308kB inactive_file:3896kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:176kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 618.178160] lowmem_reserve[]: 0 0 0 0 0 [ 618.178181] Node 0 DMA: 19*4kB (UM) 21*8kB (UME) 16*16kB (UME) 5*32kB (UME) 3*64kB (ME) 6*128kB (UE) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11092kB [ 618.178261] Node 0 DMA32: [ 618.185957] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 618.211435] 18742*4kB (UMEH) 10083*8kB (UMEH) 9831*16kB (UEH) 4070*32kB (UEH) 9*64kB (H) 4*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 444256kB [ 618.256064] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 618.267256] Node 1 Normal: 10187*4kB (UM) 4794*8kB (UM) 4369*16kB (UE) 4413*32kB (UE) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 290284kB [ 618.301354] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 618.311215] (null) [ 618.313374] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 618.323588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 618.333190] CPU: 0 PID: 20980 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 618.341105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 618.350461] Call Trace: [ 618.353059] dump_stack+0x1b2/0x281 [ 618.356841] warn_alloc.cold+0x96/0x1cc [ 618.360862] ? zone_watermark_ok_safe+0x220/0x220 [ 618.365740] __alloc_pages_nodemask+0x2127/0x2720 [ 618.370587] ? ___preempt_schedule+0x16/0x18 [ 618.375034] ? lock_acquire+0x170/0x3f0 [ 618.379020] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 618.383872] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 618.389331] ? __mutex_unlock_slowpath+0x75/0x770 [ 618.394202] alloc_pages_current+0x155/0x260 [ 618.398624] ion_page_pool_alloc+0x118/0x1b0 [ 618.403035] ion_system_heap_allocate+0x133/0x8c0 [ 618.408142] ? ion_alloc+0x187/0x810 [ 618.411879] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 618.417337] ? ion_system_contig_heap_create+0x130/0x130 [ 618.422841] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 618.427882] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 618.432783] ion_alloc+0x204/0x810 [ 618.436328] ? ion_dma_buf_release+0x40/0x40 [ 618.440742] ? __might_fault+0x177/0x1b0 [ 618.444540] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 618.444800] ion_ioctl+0xea/0x1f0 [ 618.457074] ? ion_query_heaps+0x360/0x360 [ 618.461317] ? ion_query_heaps+0x360/0x360 [ 618.465551] do_vfs_ioctl+0x75a/0xff0 [ 618.469359] ? ioctl_preallocate+0x1a0/0x1a0 [ 618.473828] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 618.473855] ? lock_downgrade+0x740/0x740 [ 618.486614] ? __fget+0x225/0x360 [ 618.490068] ? do_vfs_ioctl+0xff0/0xff0 [ 618.494053] ? security_file_ioctl+0x83/0xb0 [ 618.498490] SyS_ioctl+0x7f/0xb0 [ 618.501514] 40296 total pagecache pages [ 618.501866] ? do_vfs_ioctl+0xff0/0xff0 [ 618.509812] do_syscall_64+0x1d5/0x640 [ 618.513710] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 618.518169] 0 pages in swap cache [ 618.520546] RIP: 0033:0x466459 [ 618.520551] RSP: 002b:00007f98f1e65188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 618.520562] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 618.520568] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 618.520574] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 618.520578] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 618.520587] R13: 00007ffde3ff81ef R14: 00007f98f1e65300 R15: 0000000000022000 [ 618.528628] Swap cache stats: add 0, delete 0, find 0/0 [ 618.567246] warn_alloc_show_mem: 3 callbacks suppressed [ 618.567249] Mem-Info: [ 618.612995] active_anon:13246 inactive_anon:33135 isolated_anon:12 [ 618.612995] active_file:2087 inactive_file:4705 isolated_file:0 [ 618.612995] unevictable:0 dirty:5 writeback:25 unstable:0 [ 618.612995] slab_reclaimable:12814 slab_unreclaimable:114744 [ 618.612995] mapped:57150 shmem:33556 pagetables:768 bounce:0 [ 618.612995] free:130990 free_pcp:202 free_cma:0 [ 618.662785] Free swap = 0kB [ 618.672445] Total swap = 0kB [ 618.681493] Node 0 active_anon:52376kB inactive_anon:87564kB active_file:7140kB inactive_file:15356kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:190352kB dirty:16kB writeback:100kB shmem:88876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 618.683247] 2097051 pages RAM [ 618.713889] Node 1 active_anon:608kB inactive_anon:44976kB active_file:1308kB inactive_file:3464kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:38248kB dirty:4kB writeback:0kB shmem:45348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 618.749004] 0 pages HighMem/MovableOnly [ 618.750147] Node 0 [ 618.752995] 363841 pages reserved [ 618.752999] 0 pages cma reserved [ 618.765328] DMA free:11092kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 618.795462] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 618.800730] Node 0 DMA32 free:117716kB min:36200kB low:45248kB high:54296kB active_anon:52364kB inactive_anon:87564kB active_file:7140kB inactive_file:15584kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7840kB pagetables:2896kB bounce:0kB free_pcp:800kB local_pcp:628kB free_cma:0kB [ 618.877417] lowmem_reserve[]: 0 0 0 0 0 [ 618.881464] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 618.910865] lowmem_reserve[]: 0 0 0 0 0 [ 618.914877] Node 1 Normal free:631596kB min:53696kB low:67120kB high:80544kB active_anon:608kB inactive_anon:44976kB active_file:1308kB inactive_file:3896kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:176kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 618.950537] lowmem_reserve[]: 0 0 0 0 0 [ 618.954544] Node 0 DMA: 9*4kB (UM) 22*8kB (UME) 16*16kB (UME) 5*32kB (UME) 4*64kB (UME) 6*128kB (UE) 5*256kB (UME) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11124kB [ 618.977494] Node 0 DMA32: 23*4kB (EH) 451*8kB (UMEH) 144*16kB (EH) 21*32kB (UEH) 522*64kB (UH) 28*128kB (UH) 5*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44948kB [ 619.031219] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 619.071207] Node 1 Normal: 3*4kB (UM) 13*8kB (UM) 2657*16kB (UE) 4370*32kB (UE) 4697*64kB (UM) 630*128kB (UM) 176*256kB (U) 7*512kB (U) 3*1024kB (U) 0*2048kB 0*4096kB = 615428kB [ 619.097961] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 619.106823] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 619.140584] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 619.161473] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 619.191401] 40282 total pagecache pages [ 619.195407] 0 pages in swap cache [ 619.199771] Swap cache stats: add 0, delete 0, find 0/0 [ 619.205134] Free swap = 0kB [ 619.227481] Total swap = 0kB [ 619.230535] 2097051 pages RAM [ 619.233631] 0 pages HighMem/MovableOnly [ 619.247575] 363841 pages reserved [ 619.251038] 0 pages cma reserved [ 619.826323] oom_reaper: reaped process 20988 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 620.197468] Bluetooth: hci3 command 0x040f tx timeout [ 620.817004] oom_reaper: reaped process 20980 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 620.857474] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 620.887821] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 620.893819] CPU: 0 PID: 20980 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 620.901700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.911094] Call Trace: [ 620.913703] dump_stack+0x1b2/0x281 [ 620.917359] warn_alloc.cold+0x96/0x1cc [ 620.921332] ? zone_watermark_ok_safe+0x220/0x220 [ 620.926183] ? usleep_range+0x130/0x130 [ 620.930153] ? try_to_free_pages+0x23f/0x6e0 [ 620.934559] ? _find_next_bit+0xdb/0x100 [ 620.938622] ? run_timer_softirq+0x5a0/0x5a0 [ 620.943036] __alloc_pages_nodemask+0x2127/0x2720 [ 620.947884] ? lock_acquire+0x170/0x3f0 [ 620.951862] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 620.956706] ? ion_page_pool_alloc+0x9e/0x1b0 [ 620.961312] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 620.966850] ? check_preemption_disabled+0x35/0x240 [ 620.971876] alloc_pages_current+0x155/0x260 [ 620.976294] ion_page_pool_alloc+0x118/0x1b0 [ 620.980707] ion_system_heap_allocate+0x133/0x8c0 [ 620.985548] ? ion_alloc+0x187/0x810 [ 620.989262] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 620.992749] syz-executor.2 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 620.994706] ? ion_system_contig_heap_create+0x130/0x130 [ 620.994707] (null), order=0, oom_score_adj=1000 [ 621.005010] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 621.005023] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 621.005035] ion_alloc+0x204/0x810 [ 621.005049] ? ion_dma_buf_release+0x40/0x40 [ 621.005061] ? __might_fault+0x177/0x1b0 [ 621.005074] ion_ioctl+0xea/0x1f0 [ 621.005083] ? ion_query_heaps+0x360/0x360 [ 621.005096] ? ion_query_heaps+0x360/0x360 [ 621.005107] do_vfs_ioctl+0x75a/0xff0 [ 621.005118] ? ioctl_preallocate+0x1a0/0x1a0 [ 621.015158] syz-executor.2 cpuset= [ 621.015297] ? lock_downgrade+0x740/0x740 [ 621.020331] / [ 621.025122] ? __fget+0x225/0x360 [ 621.032477] mems_allowed=0-1 [ 621.033132] ? do_vfs_ioctl+0xff0/0xff0 [ 621.077091] ? security_file_ioctl+0x83/0xb0 [ 621.081492] SyS_ioctl+0x7f/0xb0 [ 621.084849] ? do_vfs_ioctl+0xff0/0xff0 [ 621.088844] do_syscall_64+0x1d5/0x640 [ 621.092742] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 621.097925] RIP: 0033:0x466459 [ 621.101111] RSP: 002b:00007f98f1e65188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.108809] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 621.116073] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 621.123337] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 621.130600] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 621.137865] R13: 00007ffde3ff81ef R14: 00007f98f1e65300 R15: 0000000000022000 [ 621.145167] CPU: 1 PID: 20988 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 621.153081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.159157] Mem-Info: [ 621.162462] Call Trace: [ 621.162482] dump_stack+0x1b2/0x281 [ 621.164885] active_anon:13212 inactive_anon:33140 isolated_anon:0 [ 621.164885] active_file:16 inactive_file:25 isolated_file:0 [ 621.164885] unevictable:0 dirty:0 writeback:0 unstable:0 [ 621.164885] slab_reclaimable:12781 slab_unreclaimable:114414 [ 621.164885] mapped:52624 shmem:33555 pagetables:769 bounce:0 [ 621.164885] free:13957 free_pcp:143 free_cma:0 [ 621.167442] dump_header+0x178/0x82f [ 621.167455] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 621.167466] ? ___ratelimit+0x2cd/0x530 [ 621.167480] oom_kill_process.cold+0x10/0xb18 [ 621.171112] Node 0 active_anon:52216kB inactive_anon:87560kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175668kB dirty:0kB writeback:0kB shmem:88872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 621.204336] out_of_memory+0xe3e/0x1190 [ 621.204351] ? oom_killer_disable+0x1c0/0x1c0 [ 621.204360] ? mutex_trylock+0x152/0x1a0 [ 621.204373] __alloc_pages_nodemask+0x23e1/0x2720 [ 621.208125] Node 1 active_anon:632kB inactive_anon:45000kB active_file:20kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34828kB dirty:0kB writeback:0kB shmem:45348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 621.213204] ? lock_acquire+0x170/0x3f0 [ 621.217151] Node 0 [ 621.221660] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 621.221671] ? ion_page_pool_alloc+0x9e/0x1b0 [ 621.221688] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 621.221706] alloc_pages_current+0x155/0x260 [ 621.249412] DMA free:10940kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 621.253337] ion_page_pool_alloc+0x118/0x1b0 [ 621.257834] lowmem_reserve[]: [ 621.261870] ion_system_heap_allocate+0x133/0x8c0 [ 621.266685] 0 [ 621.293669] ? ion_alloc+0x187/0x810 [ 621.293680] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 621.293690] ? ion_system_contig_heap_create+0x130/0x130 [ 621.293699] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 621.293715] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 621.297700] 2717 [ 621.299902] ion_alloc+0x204/0x810 [ 621.304723] 2718 [ 621.309216] ? ion_dma_buf_release+0x40/0x40 [ 621.309228] ? __might_fault+0x177/0x1b0 [ 621.309240] ion_ioctl+0xea/0x1f0 [ 621.309251] ? ion_query_heaps+0x360/0x360 [ 621.314687] 2718 [ 621.319110] ? ion_query_heaps+0x360/0x360 [ 621.319120] do_vfs_ioctl+0x75a/0xff0 [ 621.319132] ? ioctl_preallocate+0x1a0/0x1a0 [ 621.319145] ? lock_downgrade+0x740/0x740 [ 621.344773] 2718 [ 621.349148] ? __fget+0x225/0x360 [ 621.349162] ? do_vfs_ioctl+0xff0/0xff0 [ 621.357082] ? security_file_ioctl+0x83/0xb0 [ 621.358893] Node 0 [ 621.362575] SyS_ioctl+0x7f/0xb0 [ 621.368064] DMA32 free:18296kB min:36200kB low:45248kB high:54296kB active_anon:52204kB inactive_anon:87560kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7840kB pagetables:2900kB bounce:0kB free_pcp:188kB local_pcp:0kB free_cma:0kB [ 621.373455] ? do_vfs_ioctl+0xff0/0xff0 [ 621.378467] lowmem_reserve[]: [ 621.383272] do_syscall_64+0x1d5/0x640 [ 621.385325] 0 [ 621.388857] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 621.388866] RIP: 0033:0x466459 [ 621.388871] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 621.390924] 0 [ 621.395334] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 621.399434] 0 [ 621.402839] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 621.407055] 0 [ 621.409096] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 621.409102] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 621.409107] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 621.436190] Mem-Info: [ 621.462047] 0 [ 621.481720] active_anon:13212 inactive_anon:33140 isolated_anon:0 [ 621.481720] active_file:16 inactive_file:25 isolated_file:0 [ 621.481720] unevictable:0 dirty:0 writeback:0 unstable:0 [ 621.481720] slab_reclaimable:12781 slab_unreclaimable:114414 [ 621.481720] mapped:52624 shmem:33555 pagetables:769 bounce:0 [ 621.481720] free:13957 free_pcp:144 free_cma:0 [ 621.506921] Node 0 active_anon:52216kB inactive_anon:87560kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175668kB dirty:0kB writeback:0kB shmem:88872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 621.524089] Node 0 [ 621.534628] Node 1 active_anon:632kB inactive_anon:45000kB active_file:20kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34828kB dirty:0kB writeback:0kB shmem:45348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 621.541883] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 621.561043] Node 0 [ 621.591198] lowmem_reserve[]: [ 621.632645] DMA free:10940kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 621.647907] 0 [ 621.683883] lowmem_reserve[]: [ 621.703920] 0 0 0 0 [ 621.709992] Node 1 Normal free:26592kB min:53696kB low:67120kB high:80544kB active_anon:632kB inactive_anon:45000kB active_file:20kB inactive_file:52kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:176kB bounce:0kB free_pcp:388kB local_pcp:264kB free_cma:0kB [ 621.715543] 0 [ 621.742916] lowmem_reserve[]: 0 0 0 0 0 [ 621.748760] Node 0 DMA: 1*4kB (M) 3*8kB (ME) 4*16kB (UME) 3*32kB (ME) 4*64kB (UME) 4*128kB (UE) 5*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10940kB [ 621.753955] 2717 [ 621.770984] Node 0 DMA32: 838*4kB (UMEH) 573*8kB (UMEH) 186*16kB (UMEH) 48*32kB (UMEH) 36*64kB (UMEH) 12*128kB (MEH) 6*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18336kB [ 621.776728] 2718 [ 621.797417] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 621.801597] 2718 2718 [ 621.816767] Node 1 Normal: 34*4kB (UM) 96*8kB (UM) 52*16kB (UME) 31*32kB (UME) 139*64kB (UM) 5*128kB (UM) 1*256kB (U) 32*512kB (U) 4*1024kB (U) 0*2048kB 0*4096kB = 33000kB [ 621.825185] Node 0 [ 621.841705] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 621.846982] DMA32 free:18296kB min:36200kB low:45248kB high:54296kB active_anon:52204kB inactive_anon:87560kB active_file:132kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7840kB pagetables:2900kB bounce:0kB free_pcp:188kB local_pcp:188kB free_cma:0kB [ 621.854883] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 621.894524] lowmem_reserve[]: 0 0 0 0 0 [ 621.896214] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 621.902312] Node 0 [ 621.913858] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 621.915934] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 621.916099] 33597 total pagecache pages [ 621.936936] lowmem_reserve[]: [ 621.957423] 0 pages in swap cache [ 621.964006] Swap cache stats: add 0, delete 0, find 0/0 [ 621.965514] 0 0 0 0 0 [ 621.975517] Node 1 Normal free:39016kB min:53696kB low:67120kB high:80544kB active_anon:632kB inactive_anon:45000kB active_file:20kB inactive_file:52kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:176kB bounce:0kB free_pcp:388kB local_pcp:124kB free_cma:0kB [ 621.976268] Free swap = 0kB [ 622.013626] Total swap = 0kB [ 622.016650] 2097051 pages RAM [ 622.019781] 0 pages HighMem/MovableOnly [ 622.020218] lowmem_reserve[]: [ 622.023749] 363841 pages reserved [ 622.023756] 0 [ 622.026843] 0 pages cma reserved [ 622.052024] 0 0 0 0 [ 622.056635] Node 0 DMA: 1*4kB (M) 3*8kB (ME) 4*16kB (UME) 3*32kB (ME) 4*64kB (UME) 4*128kB (UE) 5*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10940kB [ 622.112074] Node 0 DMA32: 838*4kB (UMEH) 573*8kB (UMEH) 186*16kB (UMEH) 48*32kB (UMEH) 36*64kB (UMEH) 12*128kB (MEH) 6*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18336kB [ 622.181398] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 622.207468] Node 1 Normal: 1*4kB (U) 1*8kB (M) 2*16kB (E) 5*32kB (UME) 3330*64kB (UM) 414*128kB (UM) 14*256kB (U) 28*512kB (U) 180*1024kB (U) 10*2048kB (U) 0*4096kB = 489036kB [ 622.277466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 622.277473] Bluetooth: hci3 command 0x0419 tx timeout [ 622.297781] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 622.306382] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 622.347467] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 622.356069] 34702 total pagecache pages [ 622.387462] 0 pages in swap cache [ 622.390946] Swap cache stats: add 0, delete 0, find 0/0 [ 622.396304] Free swap = 0kB [ 622.417478] Total swap = 0kB [ 622.420531] 2097051 pages RAM [ 622.423649] 0 pages HighMem/MovableOnly [ 622.447461] 363841 pages reserved [ 622.450946] 0 pages cma reserved [ 622.454311] Out of memory (oom_kill_allocating_task): Kill process 20988 (syz-executor.2) score 0 or sacrifice child [ 622.497472] Killed process 20988 (syz-executor.2) total-vm:93252kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 622.520471] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 622.536288] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 622.563736] CPU: 1 PID: 20988 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 622.571646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.580996] Call Trace: [ 622.583600] dump_stack+0x1b2/0x281 [ 622.587232] warn_alloc.cold+0x96/0x1cc [ 622.591203] ? zone_watermark_ok_safe+0x220/0x220 [ 622.596054] ? wait_for_completion_io+0x10/0x10 [ 622.600751] __alloc_pages_nodemask+0x2127/0x2720 [ 622.605774] ? lock_acquire+0x170/0x3f0 [ 622.609776] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 622.614619] ? ion_page_pool_alloc+0x9e/0x1b0 [ 622.619121] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 622.624578] alloc_pages_current+0x155/0x260 [ 622.628988] ion_page_pool_alloc+0x118/0x1b0 [ 622.633413] ion_system_heap_allocate+0x133/0x8c0 [ 622.638254] ? ion_alloc+0x187/0x810 [ 622.641965] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 622.647430] ? ion_system_contig_heap_create+0x130/0x130 [ 622.652893] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 622.657907] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 622.662749] ion_alloc+0x204/0x810 [ 622.666290] ? ion_dma_buf_release+0x40/0x40 [ 622.670698] ? __might_fault+0x177/0x1b0 [ 622.674758] ion_ioctl+0xea/0x1f0 [ 622.678210] ? ion_query_heaps+0x360/0x360 [ 622.682444] ? ion_query_heaps+0x360/0x360 [ 622.686694] do_vfs_ioctl+0x75a/0xff0 [ 622.690510] ? ioctl_preallocate+0x1a0/0x1a0 [ 622.694912] ? lock_downgrade+0x740/0x740 [ 622.699060] ? __fget+0x225/0x360 [ 622.702527] ? do_vfs_ioctl+0xff0/0xff0 [ 622.706501] ? security_file_ioctl+0x83/0xb0 [ 622.710925] SyS_ioctl+0x7f/0xb0 [ 622.714286] ? do_vfs_ioctl+0xff0/0xff0 [ 622.718259] do_syscall_64+0x1d5/0x640 [ 622.722152] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 622.727362] RIP: 0033:0x466459 [ 622.730547] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 622.738270] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 622.745537] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 622.752799] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 622.760851] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 622.768130] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 623.005239] Mem-Info: [ 623.012718] oom_reaper: reaped process 20986 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 623.021311] active_anon:13216 inactive_anon:33140 isolated_anon:0 [ 623.021311] active_file:222 inactive_file:232 isolated_file:0 [ 623.021311] unevictable:0 dirty:1 writeback:7 unstable:0 [ 623.021311] slab_reclaimable:12768 slab_unreclaimable:115127 [ 623.021311] mapped:53072 shmem:33555 pagetables:769 bounce:0 [ 623.021311] free:13950 free_pcp:234 free_cma:0 [ 623.060710] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 623.073297] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 623.091287] CPU: 1 PID: 20980 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 623.099179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.100667] oom_reaper: reaped process 20987 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 623.108520] Call Trace: [ 623.108540] dump_stack+0x1b2/0x281 [ 623.108554] warn_alloc.cold+0x96/0x1cc [ 623.128655] ? zone_watermark_ok_safe+0x220/0x220 [ 623.133538] __alloc_pages_nodemask+0x2127/0x2720 [ 623.138386] ? lock_acquire+0x170/0x3f0 [ 623.142362] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 623.147209] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 623.152659] ? __mutex_unlock_slowpath+0x75/0x770 [ 623.157503] alloc_pages_current+0x155/0x260 [ 623.161930] ion_page_pool_alloc+0x118/0x1b0 [ 623.166358] ion_system_heap_allocate+0x133/0x8c0 [ 623.171199] ? _raw_spin_unlock+0x29/0x40 [ 623.175345] ? _ion_heap_freelist_drain+0x6e/0x410 [ 623.180276] ? ion_system_contig_heap_create+0x130/0x130 [ 623.185759] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 623.190772] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 623.194606] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 623.195609] ion_alloc+0x27a/0x810 [ 623.195624] ? ion_dma_buf_release+0x40/0x40 [ 623.207408] , order=0, oom_score_adj=1000 [ 623.209962] ? __might_fault+0x177/0x1b0 [ 623.214347] syz-executor.0 cpuset= [ 623.218566] ion_ioctl+0xea/0x1f0 [ 623.218577] ? ion_query_heaps+0x360/0x360 [ 623.218590] ? ion_query_heaps+0x360/0x360 [ 623.222657] / [ 623.226208] do_vfs_ioctl+0x75a/0xff0 [ 623.229664] mems_allowed=0-1 [ 623.233863] ? ioctl_preallocate+0x1a0/0x1a0 [ 623.251090] ? lock_downgrade+0x740/0x740 [ 623.255230] ? __fget+0x225/0x360 [ 623.258674] ? do_vfs_ioctl+0xff0/0xff0 [ 623.262651] ? security_file_ioctl+0x83/0xb0 [ 623.267070] SyS_ioctl+0x7f/0xb0 [ 623.270426] ? do_vfs_ioctl+0xff0/0xff0 [ 623.274390] do_syscall_64+0x1d5/0x640 [ 623.278275] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 623.283453] RIP: 0033:0x466459 [ 623.286629] RSP: 002b:00007f98f1e65188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 623.294326] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 623.301583] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 623.308858] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 623.316130] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 623.323389] R13: 00007ffde3ff81ef R14: 00007f98f1e65300 R15: 0000000000022000 [ 623.330664] CPU: 0 PID: 20987 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 623.338547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.339240] Node 0 active_anon:52040kB inactive_anon:87560kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175720kB dirty:0kB writeback:0kB shmem:88872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 623.347888] Call Trace: [ 623.347908] dump_stack+0x1b2/0x281 [ 623.347922] dump_header+0x178/0x82f [ 623.347934] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 623.347945] ? ___ratelimit+0x2cd/0x530 [ 623.347957] oom_kill_process.cold+0x10/0xb18 [ 623.347978] out_of_memory+0xe3e/0x1190 [ 623.347994] ? oom_killer_disable+0x1c0/0x1c0 [ 623.348005] ? mutex_trylock+0x152/0x1a0 [ 623.383728] Node 1 active_anon:640kB inactive_anon:45000kB active_file:48kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34896kB dirty:0kB writeback:0kB shmem:45348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 623.385603] __alloc_pages_nodemask+0x23e1/0x2720 [ 623.391971] Node 0 [ 623.394697] ? lock_acquire+0x170/0x3f0 [ 623.405788] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 623.407643] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 623.407656] ? ion_page_pool_alloc+0x9e/0x1b0 [ 623.407673] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 623.407684] ? check_preemption_disabled+0x35/0x240 [ 623.407703] alloc_pages_current+0x155/0x260 [ 623.407716] ion_page_pool_alloc+0x118/0x1b0 [ 623.413026] lowmem_reserve[]: [ 623.438848] ion_system_heap_allocate+0x133/0x8c0 [ 623.438859] ? ion_alloc+0x187/0x810 [ 623.438869] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 623.438878] ? ion_system_contig_heap_create+0x130/0x130 [ 623.438888] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 623.438899] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 623.438910] ion_alloc+0x204/0x810 [ 623.438924] ? ion_dma_buf_release+0x40/0x40 [ 623.438937] ? __might_fault+0x177/0x1b0 [ 623.438950] ion_ioctl+0xea/0x1f0 [ 623.438967] ? ion_query_heaps+0x360/0x360 [ 623.438979] ? ion_query_heaps+0x360/0x360 [ 623.438989] do_vfs_ioctl+0x75a/0xff0 [ 623.439000] ? ioctl_preallocate+0x1a0/0x1a0 [ 623.451535] 0 [ 623.475607] ? lock_downgrade+0x740/0x740 [ 623.475623] ? __fget+0x225/0x360 [ 623.475632] ? do_vfs_ioctl+0xff0/0xff0 [ 623.475642] ? security_file_ioctl+0x83/0xb0 [ 623.475652] SyS_ioctl+0x7f/0xb0 [ 623.475660] ? do_vfs_ioctl+0xff0/0xff0 [ 623.475671] do_syscall_64+0x1d5/0x640 [ 623.475687] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 623.475696] RIP: 0033:0x466459 [ 623.475701] RSP: 002b:00007f5fb7692188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 623.475710] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 623.475715] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 623.475720] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 623.475725] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 623.475730] R13: 00007fff6f6f7f0f R14: 00007f5fb7692300 R15: 0000000000022000 [ 623.476110] syz-executor.3: [ 623.484096] 2717 [ 623.498618] page allocation failure: order:0 [ 623.504258] 2718 [ 623.504539] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 623.507667] 2718 2718 [ 623.507678] Node 0 DMA32 free:18000kB min:36200kB low:45248kB high:54296kB active_anon:52028kB inactive_anon:87560kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7840kB pagetables:2900kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 623.515949] (null) [ 623.516217] lowmem_reserve[]: [ 623.526255] syz-executor.3 cpuset= [ 623.527205] 0 [ 623.534296] / [ 623.537088] 0 [ 623.546499] mems_allowed=0-1 [ 623.549163] 0 [ 623.554950] CPU: 0 PID: 20986 Comm: syz-executor.3 Not tainted 4.14.227-syzkaller #0 [ 623.556948] 0 [ 623.561165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.561170] Call Trace: [ 623.561191] dump_stack+0x1b2/0x281 [ 623.561206] warn_alloc.cold+0x96/0x1cc [ 623.561218] ? zone_watermark_ok_safe+0x220/0x220 [ 623.561228] ? usleep_range+0x130/0x130 [ 623.561240] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 623.565023] 0 [ 623.569521] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 623.569531] ? run_timer_softirq+0x5a0/0x5a0 [ 623.569548] __alloc_pages_nodemask+0x2127/0x2720 [ 623.569565] ? lock_acquire+0x170/0x3f0 [ 623.575503] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 623.578978] Node 0 [ 623.582894] ? ion_page_pool_alloc+0x9e/0x1b0 [ 623.587286] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 623.590628] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 623.590649] alloc_pages_current+0x155/0x260 [ 623.590665] ion_page_pool_alloc+0x118/0x1b0 [ 623.594619] lowmem_reserve[]: [ 623.598522] ion_system_heap_allocate+0x133/0x8c0 [ 623.598533] ? ion_alloc+0x187/0x810 [ 623.598543] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 623.598552] ? ion_system_contig_heap_create+0x130/0x130 [ 623.598574] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 623.603742] 0 [ 623.606925] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 623.625325] 0 [ 623.629163] ion_alloc+0x204/0x810 [ 623.629180] ? ion_dma_buf_release+0x40/0x40 [ 623.629192] ? __might_fault+0x177/0x1b0 [ 623.629207] ion_ioctl+0xea/0x1f0 [ 623.636463] 0 [ 623.643760] ? ion_query_heaps+0x360/0x360 [ 623.643773] ? ion_query_heaps+0x360/0x360 [ 623.643784] do_vfs_ioctl+0x75a/0xff0 [ 623.643794] ? ioctl_preallocate+0x1a0/0x1a0 [ 623.643804] ? lock_downgrade+0x740/0x740 [ 623.643817] ? __fget+0x225/0x360 [ 623.677872] 0 [ 623.700777] ? do_vfs_ioctl+0xff0/0xff0 [ 623.700788] ? security_file_ioctl+0x83/0xb0 [ 623.700797] SyS_ioctl+0x7f/0xb0 [ 623.700806] ? do_vfs_ioctl+0xff0/0xff0 [ 623.700817] do_syscall_64+0x1d5/0x640 [ 623.700833] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 623.700844] RIP: 0033:0x466459 [ 623.703318] 0 [ 623.706085] RSP: 002b:00007f42379f8188 EFLAGS: 00000246 [ 623.711391] ORIG_RAX: 0000000000000010 [ 623.713091] Node 1 [ 623.714875] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 623.718040] syz-executor.5: [ 623.719738] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 623.727677] Normal free:26384kB min:53696kB low:67120kB high:80544kB active_anon:640kB inactive_anon:45000kB active_file:32kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:176kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 623.729386] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 623.738785] page allocation failure: order:0 [ 623.741295] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 623.744959] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 623.748912] R13: 00007ffef8958def R14: 00007f42379f8300 R15: 0000000000022000 [ 623.758928] Mem-Info: [ 623.762881] lowmem_reserve[]: [ 623.764681] active_anon:13170 inactive_anon:33140 isolated_anon:0 [ 623.764681] active_file:20 inactive_file:31 isolated_file:0 [ 623.764681] unevictable:0 dirty:0 writeback:0 unstable:0 [ 623.764681] slab_reclaimable:12766 slab_unreclaimable:115133 [ 623.764681] mapped:52654 shmem:33555 pagetables:769 bounce:0 [ 623.764681] free:13840 free_pcp:33 free_cma:0 [ 623.769707] 0 0 0 0 0 [ 623.769727] Node 0 DMA: 2*4kB (UM) 3*8kB (ME) [ 623.779629] Node 0 active_anon:52040kB inactive_anon:87560kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175720kB dirty:0kB writeback:0kB shmem:88872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 623.783019] (null) [ 623.793560] Node 1 active_anon:640kB inactive_anon:45000kB active_file:48kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34896kB dirty:0kB writeback:0kB shmem:45348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 623.794593] syz-executor.5 cpuset= [ 623.832658] Node 0 [ 623.834251] 4*16kB [ 623.844845] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 623.845848] (UME) [ 623.862086] lowmem_reserve[]: [ 623.863651] 4*32kB [ 623.878323] 0 [ 623.882346] / [ 623.885770] 2717 [ 623.887584] (UME) 4*64kB (UME) 4*128kB (UE) 5*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10976kB [ 623.887636] Node 0 DMA32: 860*4kB (UME) 578*8kB (UME) 187*16kB (UME) 45*32kB (UME) 34*64kB (UME) 13*128kB (UME) 5*256kB (UM) 1*512kB (U) 0*1024kB [ 623.903964] 2718 [ 623.904375] mems_allowed=0-1 [ 623.915842] 2718 [ 623.917813] CPU: 1 PID: 20980 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 623.926072] 2718 [ 623.929484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.929488] Call Trace: [ 623.929507] dump_stack+0x1b2/0x281 [ 623.929521] warn_alloc.cold+0x96/0x1cc [ 623.929532] ? zone_watermark_ok_safe+0x220/0x220 [ 623.929542] ? usleep_range+0x130/0x130 [ 623.929551] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 623.929564] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 623.929575] ? run_timer_softirq+0x5a0/0x5a0 [ 623.929592] __alloc_pages_nodemask+0x2127/0x2720 [ 623.929608] ? lock_acquire+0x170/0x3f0 [ 623.929624] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 623.929636] ? ion_page_pool_alloc+0x9e/0x1b0 [ 623.929651] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 623.929671] alloc_pages_current+0x155/0x260 [ 623.929683] ion_page_pool_alloc+0x118/0x1b0 [ 623.929694] ion_system_heap_allocate+0x133/0x8c0 [ 623.929704] ? _raw_spin_unlock+0x29/0x40 [ 623.929714] ? _ion_heap_freelist_drain+0x6e/0x410 [ 623.929725] ? ion_system_contig_heap_create+0x130/0x130 [ 623.929736] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 623.929747] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 623.929759] ion_alloc+0x27a/0x810 [ 623.929773] ? ion_dma_buf_release+0x40/0x40 [ 623.929785] ? __might_fault+0x177/0x1b0 [ 623.929799] ion_ioctl+0xea/0x1f0 [ 623.929809] ? ion_query_heaps+0x360/0x360 [ 623.929822] ? ion_query_heaps+0x360/0x360 [ 623.929833] do_vfs_ioctl+0x75a/0xff0 [ 623.929844] ? ioctl_preallocate+0x1a0/0x1a0 [ 623.929853] ? lock_downgrade+0x740/0x740 [ 623.929867] ? __fget+0x225/0x360 [ 623.929876] ? do_vfs_ioctl+0xff0/0xff0 [ 623.929887] ? security_file_ioctl+0x83/0xb0 [ 623.929898] SyS_ioctl+0x7f/0xb0 [ 623.929905] ? do_vfs_ioctl+0xff0/0xff0 [ 623.929917] do_syscall_64+0x1d5/0x640 [ 623.929932] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 623.929940] RIP: 0033:0x466459 [ 623.929945] RSP: 002b:00007f98f1e65188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 623.929955] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 623.929961] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 623.929966] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 623.929971] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 623.929977] R13: 00007ffde3ff81ef R14: 00007f98f1e65300 R15: 0000000000022000 [ 623.930079] 0*2048kB 0*4096kB = 18128kB [ 623.942683] Node 0 [ 623.944240] Node 0 [ 623.949566] Normal: 0*4kB 0*8kB 0*16kB 0*32kB [ 624.005170] DMA32 free:19024kB min:36200kB low:45248kB high:54296kB active_anon:52028kB inactive_anon:87560kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7840kB pagetables:2900kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 624.012284] 0*64kB [ 624.017096] lowmem_reserve[]: [ 624.047470] 0*128kB [ 624.207416] 0 [ 624.296800] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 624.506243] Node 1 Normal: 951*4kB (UM) 565*8kB (UM) 369*16kB (UME) 213*32kB (UME) 7128*64kB (UM) 2160*128kB (UM) 334*256kB (U) 45*512kB (U) 180*1024kB (U) 10*2048kB (U) 0*4096kB = 1067060kB [ 624.523977] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 624.533293] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 624.553215] 0 0 0 0 [ 624.557503] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 624.570889] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 624.587445] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 624.627454] lowmem_reserve[]: 0 0 0 0 0 [ 624.631465] Node 1 Normal free:1067184kB min:53696kB low:67120kB high:80544kB active_anon:640kB inactive_anon:45000kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:176kB bounce:0kB free_pcp:752kB local_pcp:696kB free_cma:0kB [ 624.647444] 34473 total pagecache pages [ 624.660357] lowmem_reserve[]: 0 0 0 0 0 [ 624.677459] Node 0 DMA: 2*4kB (UM) 4*8kB (UME) 4*16kB (UME) 4*32kB (UME) 10*64kB (UME) 4*128kB (UE) 5*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11368kB [ 624.707425] Node 0 DMA32: 21327*4kB (UE) 5954*8kB (UME) 1663*16kB (UE) 1721*32kB (UE) 2309*64kB (UME) 330*128kB (UME) 8*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 407196kB [ 624.721218] 0 pages in swap cache [ 624.723891] Node 0 [ 624.727202] Swap cache stats: add 0, delete 0, find 0/0 [ 624.727210] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 624.767455] Node 1 Normal: 951*4kB (UM) 603*8kB (UM) 373*16kB (UME) 214*32kB (UME) 7128*64kB (UM) 2160*128kB (UM) 334*256kB (U) 45*512kB (U) 180*1024kB (U) 10*2048kB (U) 0*4096kB = 1067460kB [ 624.771216] Free swap = 0kB [ 624.787425] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 624.796611] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 624.817444] Total swap = 0kB [ 624.817452] 2097051 pages RAM [ 624.817455] 0 pages HighMem/MovableOnly [ 624.817458] 363841 pages reserved [ 624.817460] 0 pages cma reserved [ 624.857690] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 624.857698] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 624.857702] 34473 total pagecache pages [ 624.857712] 0 pages in swap cache [ 624.857717] Swap cache stats: add 0, delete 0, find 0/0 [ 624.857721] Free swap = 0kB [ 624.857725] Total swap = 0kB [ 624.857731] 2097051 pages RAM [ 624.857735] 0 pages HighMem/MovableOnly [ 624.857738] 363841 pages reserved [ 624.857741] 0 pages cma reserved [ 624.857750] Out of memory (oom_kill_allocating_task): Kill process 20987 (syz-executor.0) score 0 or sacrifice child [ 624.857771] Killed process 20987 (syz-executor.0) total-vm:93252kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 624.871809] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 624.871831] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 624.871853] CPU: 0 PID: 20987 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 624.871859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 624.871863] Call Trace: [ 624.871879] dump_stack+0x1b2/0x281 [ 624.871893] warn_alloc.cold+0x96/0x1cc [ 624.871904] ? lock_downgrade+0x740/0x740 [ 624.871915] ? zone_watermark_ok_safe+0x220/0x220 [ 624.871926] ? wake_up_q+0x82/0xd0 [ 624.871951] ? wait_for_completion_io+0x10/0x10 [ 624.871965] __alloc_pages_nodemask+0x2127/0x2720 [ 624.871981] ? lock_acquire+0x170/0x3f0 [ 624.871997] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 624.872008] ? ion_page_pool_alloc+0x9e/0x1b0 [ 624.872023] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 624.872035] ? check_preemption_disabled+0x35/0x240 [ 624.872054] alloc_pages_current+0x155/0x260 [ 624.872066] ion_page_pool_alloc+0x118/0x1b0 [ 624.872077] ion_system_heap_allocate+0x133/0x8c0 [ 624.872088] ? ion_alloc+0x187/0x810 [ 624.872098] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 624.872109] ? ion_system_contig_heap_create+0x130/0x130 [ 624.872118] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 624.872130] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 624.872141] ion_alloc+0x204/0x810 [ 624.872156] ? ion_dma_buf_release+0x40/0x40 [ 624.872168] ? __might_fault+0x177/0x1b0 [ 624.872181] ion_ioctl+0xea/0x1f0 [ 624.872191] ? ion_query_heaps+0x360/0x360 [ 624.872205] ? ion_query_heaps+0x360/0x360 [ 624.872215] do_vfs_ioctl+0x75a/0xff0 [ 624.872227] ? ioctl_preallocate+0x1a0/0x1a0 [ 624.872235] ? lock_downgrade+0x740/0x740 [ 624.872248] ? __fget+0x225/0x360 [ 624.872257] ? do_vfs_ioctl+0xff0/0xff0 [ 624.872268] ? security_file_ioctl+0x83/0xb0 [ 624.872278] SyS_ioctl+0x7f/0xb0 [ 624.872286] ? do_vfs_ioctl+0xff0/0xff0 [ 624.872297] do_syscall_64+0x1d5/0x640 [ 624.872313] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 624.872320] RIP: 0033:0x466459 [ 624.872325] RSP: 002b:00007f5fb7692188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 624.872335] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 624.872340] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 624.872346] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 624.872351] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 624.872357] R13: 00007fff6f6f7f0f R14: 00007f5fb7692300 R15: 0000000000022000 [ 624.872375] warn_alloc_show_mem: 3 callbacks suppressed [ 624.872378] Mem-Info: [ 624.872399] active_anon:13168 inactive_anon:33140 isolated_anon:0 [ 624.872399] active_file:15 inactive_file:915 isolated_file:0 [ 624.872399] unevictable:0 dirty:0 writeback:0 unstable:0 [ 624.872399] slab_reclaimable:12716 slab_unreclaimable:115937 [ 624.872399] mapped:53284 shmem:33555 pagetables:732 bounce:0 [ 624.872399] free:409226 free_pcp:569 free_cma:0 [ 624.872416] Node 0 active_anon:52032kB inactive_anon:87560kB active_file:32kB inactive_file:3632kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:178320kB dirty:0kB writeback:0kB shmem:88872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 624.872432] Node 1 active_anon:640kB inactive_anon:45000kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:45348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 624.872435] Node 0 DMA free:11448kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 624.872457] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 624.872478] Node 0 DMA32 free:476588kB min:36200kB low:45248kB high:54296kB active_anon:52020kB inactive_anon:87560kB active_file:32kB inactive_file:3632kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7808kB pagetables:2752kB bounce:0kB free_pcp:1520kB local_pcp:700kB free_cma:0kB [ 624.872500] lowmem_reserve[]: 0 0 0 0 0 [ 624.872520] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 624.872540] lowmem_reserve[]: 0 0 0 0 0 [ 624.872560] Node 1 Normal free:1148868kB min:53696kB low:67120kB high:80544kB active_anon:640kB inactive_anon:45000kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:176kB bounce:0kB free_pcp:756kB local_pcp:700kB free_cma:0kB [ 624.872582] lowmem_reserve[]: 0 0 0 0 0 [ 624.872602] Node 0 DMA: 2*4kB (UM) 6*8kB (UME) 4*16kB (UME) 4*32kB (UME) 11*64kB (UME) 4*128kB (UE) 5*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11448kB [ 624.872682] Node 0 DMA32: 21347*4kB (UE) 8440*8kB (UME) 4528*16kB (UME) 1775*32kB (UE) 2332*64kB (UME) 333*128kB (UME) 8*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 476588kB [ 624.872756] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 624.872806] Node 1 Normal: 951*4kB (UM) 603*8kB (UM) 373*16kB (UME) 214*32kB (UME) 8097*64kB (UM) 2258*128kB (UM) 353*256kB (UM) 49*512kB (UM) 180*1024kB (U) 10*2048kB (U) 0*4096kB = 1148932kB [ 624.872890] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 624.872897] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 624.872904] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 624.872910] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 624.872914] 34510 total pagecache pages [ 624.872924] 0 pages in swap cache [ 624.872929] Swap cache stats: add 0, delete 0, find 0/0 [ 624.872939] Free swap = 0kB [ 624.872942] Total swap = 0kB [ 624.872947] 2097051 pages RAM [ 624.872951] 0 pages HighMem/MovableOnly [ 624.872954] 363841 pages reserved [ 624.872957] 0 pages cma reserved 05:08:07 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:08:07 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) [ 628.444343] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 628.462980] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 628.471152] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 628.487447] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 628.489252] CPU: 1 PID: 20987 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 628.500466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.509930] Call Trace: [ 628.512515] dump_stack+0x1b2/0x281 [ 628.516157] warn_alloc.cold+0x96/0x1cc [ 628.520153] ? zone_watermark_ok_safe+0x220/0x220 [ 628.525000] __alloc_pages_nodemask+0x2127/0x2720 [ 628.529841] ? lock_acquire+0x170/0x3f0 [ 628.533826] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 628.538670] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 628.544114] ? __mutex_unlock_slowpath+0x75/0x770 [ 628.548955] alloc_pages_current+0x155/0x260 [ 628.553374] ion_page_pool_alloc+0x118/0x1b0 [ 628.557789] ion_system_heap_allocate+0x133/0x8c0 [ 628.562625] ? _raw_spin_unlock+0x29/0x40 [ 628.566764] ? _ion_heap_freelist_drain+0x6e/0x410 [ 628.571712] ? ion_system_contig_heap_create+0x130/0x130 [ 628.577167] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 628.582178] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 628.587013] ion_alloc+0x27a/0x810 [ 628.590550] ? ion_dma_buf_release+0x40/0x40 [ 628.594946] ? __might_fault+0x177/0x1b0 [ 628.598998] ion_ioctl+0xea/0x1f0 [ 628.602438] ? ion_query_heaps+0x360/0x360 [ 628.606664] ? ion_query_heaps+0x360/0x360 [ 628.610890] do_vfs_ioctl+0x75a/0xff0 [ 628.614697] ? ioctl_preallocate+0x1a0/0x1a0 [ 628.619095] ? lock_downgrade+0x740/0x740 [ 628.623233] ? __fget+0x225/0x360 [ 628.626675] ? do_vfs_ioctl+0xff0/0xff0 [ 628.630639] ? security_file_ioctl+0x83/0xb0 [ 628.635035] SyS_ioctl+0x7f/0xb0 [ 628.638391] ? do_vfs_ioctl+0xff0/0xff0 [ 628.642359] do_syscall_64+0x1d5/0x640 [ 628.646241] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 628.651418] RIP: 0033:0x466459 [ 628.654592] RSP: 002b:00007f5fb7692188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 628.662286] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 628.669559] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 628.676838] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 628.684119] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 628.691381] R13: 00007fff6f6f7f0f R14: 00007f5fb7692300 R15: 0000000000022000 [ 628.698663] CPU: 0 PID: 20988 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 628.706561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 628.715937] Call Trace: [ 628.718528] dump_stack+0x1b2/0x281 [ 628.721959] Mem-Info: [ 628.722154] warn_alloc.cold+0x96/0x1cc [ 628.724559] active_anon:13162 inactive_anon:33140 isolated_anon:0 [ 628.724559] active_file:1330 inactive_file:1351 isolated_file:0 [ 628.724559] unevictable:0 dirty:28 writeback:0 unstable:0 [ 628.724559] slab_reclaimable:12597 slab_unreclaimable:116107 [ 628.724559] mapped:54572 shmem:33555 pagetables:717 bounce:0 [ 628.724559] free:254384 free_pcp:58 free_cma:0 [ 628.728521] ? zone_watermark_ok_safe+0x220/0x220 [ 628.728544] __alloc_pages_nodemask+0x2127/0x2720 [ 628.728556] ? lock_acquire+0x170/0x3f0 [ 628.728568] ? lock_acquire+0x170/0x3f0 [ 628.728583] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 628.728601] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 628.728614] ? __mutex_unlock_slowpath+0x75/0x770 [ 628.728629] alloc_pages_current+0x155/0x260 [ 628.728658] ion_page_pool_alloc+0x118/0x1b0 [ 628.770674] Node 0 active_anon:52008kB inactive_anon:87564kB active_file:5284kB inactive_file:5384kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:183472kB dirty:108kB writeback:0kB shmem:88876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 628.772013] ion_system_heap_allocate+0x133/0x8c0 [ 628.775969] Node 1 active_anon:640kB inactive_anon:44996kB active_file:36kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:4kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 628.779931] ? _raw_spin_unlock+0x29/0x40 [ 628.779941] ? _ion_heap_freelist_drain+0x6e/0x410 [ 628.779952] ? ion_system_contig_heap_create+0x130/0x130 [ 628.779963] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 628.779975] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 628.779987] ion_alloc+0x27a/0x810 [ 628.780001] ? ion_dma_buf_release+0x40/0x40 [ 628.780013] ? __might_fault+0x177/0x1b0 [ 628.791187] Node 0 [ 628.795122] ion_ioctl+0xea/0x1f0 [ 628.801750] DMA free:11036kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 628.803921] ? ion_query_heaps+0x360/0x360 [ 628.836084] lowmem_reserve[]: [ 628.836970] ? ion_query_heaps+0x360/0x360 [ 628.870482] 0 [ 628.873077] do_vfs_ioctl+0x75a/0xff0 [ 628.879228] 2717 [ 628.883525] ? ioctl_preallocate+0x1a0/0x1a0 [ 628.891497] 2718 [ 628.891874] ? lock_downgrade+0x740/0x740 [ 628.896254] 2718 [ 628.900305] ? __fget+0x225/0x360 [ 628.900315] ? do_vfs_ioctl+0xff0/0xff0 [ 628.900326] ? security_file_ioctl+0x83/0xb0 [ 628.900336] SyS_ioctl+0x7f/0xb0 [ 628.900344] ? do_vfs_ioctl+0xff0/0xff0 [ 628.900355] do_syscall_64+0x1d5/0x640 [ 628.900372] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 628.900381] RIP: 0033:0x466459 [ 628.900386] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 628.903263] 2718 [ 628.906051] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 628.945014] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 628.948844] Node 0 [ 628.950851] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 628.955261] DMA32 free:851552kB min:36200kB low:45248kB high:54296kB active_anon:51996kB inactive_anon:87564kB active_file:5284kB inactive_file:5384kB unevictable:0kB writepending:108kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7776kB pagetables:2692kB bounce:0kB free_pcp:228kB local_pcp:60kB free_cma:0kB [ 628.957311] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 628.965278] lowmem_reserve[]: [ 628.966930] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 628.974393] 0 0 0 0 0 [ 629.081554] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 629.108509] lowmem_reserve[]: 0 0 0 0 0 [ 629.112521] Node 1 Normal free:154260kB min:53696kB low:67120kB high:80544kB active_anon:624kB inactive_anon:44996kB active_file:32kB inactive_file:24kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:176kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 629.143016] lowmem_reserve[]: 0 0 0 0 0 [ 629.147051] Node 0 DMA: 11*4kB (UM) 27*8kB (UME) 32*16kB (UME) 27*32kB (UME) 5*64kB (UME) 7*128kB (UE) 6*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 11044kB [ 629.164464] Node 0 DMA32: 354*4kB (E) 10281*8kB (UE) 17620*16kB (UME) 10765*32kB (UME) 25*64kB (U) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 711792kB [ 629.181080] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 629.192340] Node 1 Normal: 801*4kB (UM) 2636*8kB (UM) 2455*16kB (UME) 2474*32kB (UME) 184*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 154644kB [ 629.207994] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 629.216840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 629.226552] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 629.236072] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 629.249150] 36343 total pagecache pages [ 629.253139] 0 pages in swap cache [ 629.256584] Swap cache stats: add 0, delete 0, find 0/0 [ 629.265971] Free swap = 0kB [ 629.270855] Total swap = 0kB [ 629.273884] 2097051 pages RAM [ 629.277030] 0 pages HighMem/MovableOnly [ 629.284919] 363841 pages reserved [ 629.290191] 0 pages cma reserved [ 629.824445] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 629.839882] ion_system_heap cpuset=/ mems_allowed=0-1 [ 629.845099] CPU: 1 PID: 4243 Comm: ion_system_heap Not tainted 4.14.227-syzkaller #0 [ 629.852971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 629.862320] Call Trace: [ 629.864906] dump_stack+0x1b2/0x281 [ 629.868541] dump_header+0x178/0x82f [ 629.872235] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 629.877408] ? ___ratelimit+0x2cd/0x530 [ 629.881377] oom_kill_process.cold+0x10/0xb18 [ 629.885868] ? lock_downgrade+0x740/0x740 [ 629.890005] out_of_memory+0x2dc/0x1190 [ 629.893972] ? oom_killer_disable+0x1c0/0x1c0 [ 629.898453] ? mutex_trylock+0x152/0x1a0 [ 629.902519] __alloc_pages_nodemask+0x23e1/0x2720 [ 629.907387] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 629.912213] ? kmem_cache_alloc_node_trace+0x153/0x400 [ 629.917475] ? cache_grow_begin+0x41/0x630 [ 629.921705] cache_grow_begin+0x91/0x630 [ 629.925757] ? cache_grow_begin+0x91/0x630 [ 629.929986] fallback_alloc+0x207/0x2c0 [ 629.933953] kmem_cache_alloc_node_trace+0xed/0x400 [ 629.938966] alloc_vmap_area+0xf0/0x7c0 [ 629.942920] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 629.948363] ? purge_vmap_area_lazy+0xb0/0xb0 [ 629.952833] ? __get_vm_area_node+0xed/0x340 [ 629.957239] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 629.962506] __get_vm_area_node+0x126/0x340 [ 629.966822] vmap+0xd5/0x290 [ 629.969821] ? ion_heap_clear_pages+0x23/0x70 [ 629.974290] ? vunmap+0x50/0x50 [ 629.977542] ? __vunmap+0x21c/0x300 [ 629.981196] ion_heap_clear_pages+0x23/0x70 [ 629.985642] ion_heap_sglist_zero+0x165/0x220 [ 629.990164] ? ion_heap_clear_pages+0x70/0x70 [ 629.994687] ? finish_task_switch+0x178/0x610 [ 629.999185] ? pagerange_is_ram_callback+0x100/0x100 [ 630.004270] ? ion_heap_deferred_free+0x222/0x470 [ 630.009109] ion_system_heap_free+0x1d0/0x240 [ 630.013608] ion_buffer_destroy+0x132/0x190 [ 630.017910] ion_heap_deferred_free+0x22a/0x470 [ 630.022558] ? __schedule+0x837/0x1de0 [ 630.026438] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 630.031102] ? wait_woken+0x230/0x230 [ 630.034880] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 630.039961] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 630.044610] kthread+0x30d/0x420 [ 630.047955] ? kthread_create_on_node+0xd0/0xd0 [ 630.052603] ret_from_fork+0x24/0x30 [ 630.130121] Mem-Info: [ 630.132579] active_anon:13180 inactive_anon:33140 isolated_anon:0 [ 630.132579] active_file:15 inactive_file:15 isolated_file:0 [ 630.132579] unevictable:0 dirty:0 writeback:0 unstable:0 [ 630.132579] slab_reclaimable:12597 slab_unreclaimable:116243 [ 630.132579] mapped:52696 shmem:33555 pagetables:718 bounce:0 [ 630.132579] free:13899 free_pcp:0 free_cma:0 [ 630.168160] Node 0 active_anon:52096kB inactive_anon:87564kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175968kB dirty:0kB writeback:0kB shmem:88876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 630.173828] syz-executor.0: [ 630.198228] Node 1 active_anon:624kB inactive_anon:44996kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 630.207192] syz-executor.2: [ 630.230459] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 630.238260] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 630.270267] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 630.272704] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 630.290689] CPU: 0 PID: 20987 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 630.293462] syz-executor.2 cpuset= [ 630.298562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.298567] Call Trace: [ 630.298588] dump_stack+0x1b2/0x281 [ 630.298602] warn_alloc.cold+0x96/0x1cc [ 630.298613] ? zone_watermark_ok_safe+0x220/0x220 [ 630.298623] ? usleep_range+0x130/0x130 [ 630.298631] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 630.298644] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 630.298654] ? run_timer_softirq+0x5a0/0x5a0 [ 630.298674] __alloc_pages_nodemask+0x2127/0x2720 [ 630.305114] / [ 630.311564] ? lock_acquire+0x170/0x3f0 [ 630.324505] lowmem_reserve[]: [ 630.326526] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 630.333679] mems_allowed=0-1 [ 630.335561] ? ion_page_pool_alloc+0x9e/0x1b0 [ 630.371055] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 630.376503] ? retint_kernel+0x2d/0x2d [ 630.380392] alloc_pages_current+0x155/0x260 [ 630.384801] ion_page_pool_alloc+0x118/0x1b0 [ 630.389205] ion_system_heap_allocate+0x133/0x8c0 [ 630.394041] ? _raw_spin_unlock+0x29/0x40 [ 630.398235] ? _ion_heap_freelist_drain+0x6e/0x410 [ 630.403160] ? ion_system_contig_heap_create+0x130/0x130 [ 630.408612] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 630.413645] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 630.418483] ion_alloc+0x27a/0x810 [ 630.422026] ? ion_dma_buf_release+0x40/0x40 [ 630.426432] ? __might_fault+0x177/0x1b0 [ 630.430488] ion_ioctl+0xea/0x1f0 [ 630.433933] ? ion_query_heaps+0x360/0x360 [ 630.438170] ? ion_query_heaps+0x360/0x360 [ 630.442402] do_vfs_ioctl+0x75a/0xff0 [ 630.446199] ? ioctl_preallocate+0x1a0/0x1a0 [ 630.450611] ? lock_downgrade+0x740/0x740 [ 630.454752] ? __fget+0x225/0x360 [ 630.458200] ? do_vfs_ioctl+0xff0/0xff0 [ 630.462200] ? security_file_ioctl+0x83/0xb0 [ 630.466607] SyS_ioctl+0x7f/0xb0 [ 630.469984] ? do_vfs_ioctl+0xff0/0xff0 [ 630.473954] do_syscall_64+0x1d5/0x640 [ 630.477843] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 630.483026] RIP: 0033:0x466459 [ 630.486208] RSP: 002b:00007f5fb7692188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 630.493910] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 630.501360] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 630.508832] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 630.516096] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 630.523382] R13: 00007fff6f6f7f0f R14: 00007f5fb7692300 R15: 0000000000022000 [ 630.530663] CPU: 1 PID: 20988 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 630.533336] warn_alloc_show_mem: 1 callbacks suppressed [ 630.533340] Mem-Info: [ 630.538545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.538549] Call Trace: [ 630.538568] dump_stack+0x1b2/0x281 [ 630.538588] warn_alloc.cold+0x96/0x1cc [ 630.543940] active_anon:13180 inactive_anon:33140 isolated_anon:0 [ 630.543940] active_file:40 inactive_file:0 isolated_file:0 [ 630.543940] unevictable:0 dirty:0 writeback:0 unstable:0 [ 630.543940] slab_reclaimable:12597 slab_unreclaimable:116243 [ 630.543940] mapped:52696 shmem:33555 pagetables:718 bounce:0 [ 630.543940] free:13899 free_pcp:0 free_cma:0 [ 630.546323] ? zone_watermark_ok_safe+0x220/0x220 [ 630.555693] Node 0 active_anon:52096kB inactive_anon:87564kB active_file:152kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175968kB dirty:0kB writeback:0kB shmem:88876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 630.558223] ? usleep_range+0x130/0x130 [ 630.558232] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 630.558245] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 630.561860] Node 1 active_anon:624kB inactive_anon:44996kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 630.565831] ? run_timer_softirq+0x5a0/0x5a0 [ 630.598826] Node 0 [ 630.603626] __alloc_pages_nodemask+0x2127/0x2720 [ 630.631330] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 630.635256] ? lock_acquire+0x170/0x3f0 [ 630.640342] lowmem_reserve[]: [ 630.645336] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 630.672248] 0 [ 630.676619] ? ion_page_pool_alloc+0x9e/0x1b0 [ 630.678852] 2717 [ 630.683656] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 630.709259] 2718 [ 630.713204] alloc_pages_current+0x155/0x260 [ 630.716268] 2718 [ 630.721101] ion_page_pool_alloc+0x118/0x1b0 [ 630.721113] ion_system_heap_allocate+0x133/0x8c0 [ 630.721126] ? _raw_spin_unlock+0x29/0x40 [ 630.722922] 2718 [ 630.727402] ? _ion_heap_freelist_drain+0x6e/0x410 [ 630.727413] ? ion_system_contig_heap_create+0x130/0x130 [ 630.727424] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 630.727436] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 630.734907] ion_alloc+0x27a/0x810 [ 630.736943] Node 0 [ 630.741341] ? ion_dma_buf_release+0x40/0x40 [ 630.741354] ? __might_fault+0x177/0x1b0 [ 630.741366] ion_ioctl+0xea/0x1f0 [ 630.743426] DMA32 free:18084kB min:36200kB low:45248kB high:54296kB active_anon:52084kB inactive_anon:87564kB active_file:152kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7776kB pagetables:2696kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 630.747805] ? ion_query_heaps+0x360/0x360 [ 630.747818] ? ion_query_heaps+0x360/0x360 [ 630.747829] do_vfs_ioctl+0x75a/0xff0 [ 630.752647] lowmem_reserve[]: [ 630.756796] ? ioctl_preallocate+0x1a0/0x1a0 [ 630.758869] 0 [ 630.763770] ? lock_downgrade+0x740/0x740 [ 630.769206] 0 [ 630.774207] ? __fget+0x225/0x360 [ 630.779040] 0 [ 630.782543] ? do_vfs_ioctl+0xff0/0xff0 [ 630.784750] 0 [ 630.789142] ? security_file_ioctl+0x83/0xb0 [ 630.789152] SyS_ioctl+0x7f/0xb0 [ 630.789165] ? do_vfs_ioctl+0xff0/0xff0 [ 630.793213] 0 [ 630.796668] do_syscall_64+0x1d5/0x640 [ 630.828860] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 630.828871] RIP: 0033:0x466459 [ 630.833092] Node 0 [ 630.836876] RSP: 002b:00007f9149019188 EFLAGS: 00000246 [ 630.840003] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 630.844367] ORIG_RAX: 0000000000000010 [ 630.846152] lowmem_reserve[]: [ 630.850280] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 630.850287] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 630.850292] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 630.850297] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 630.850302] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 630.967649] 0 0 0 0 0 [ 630.971222] Node 1 Normal free:198416kB min:53696kB low:67120kB high:80544kB active_anon:624kB inactive_anon:44996kB active_file:8kB inactive_file:1608kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:176kB bounce:0kB free_pcp:296kB local_pcp:112kB free_cma:0kB [ 631.001312] lowmem_reserve[]: 0 0 0 0 0 [ 631.006223] Node 0 DMA: 2*4kB (UM) 21*8kB (UME) 32*16kB (UME) 27*32kB (UME) 5*64kB (UME) 7*128kB (UE) 6*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 10960kB [ 631.023185] Node 0 DMA32: 802*4kB (ME) 558*8kB (UME) 185*16kB (UME) 53*32kB (UME) 903*64kB (UM) 99*128kB (UM) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 83560kB [ 631.039514] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 631.051042] Node 1 Normal: 0*4kB 21*8kB (UM) 5*16kB (UME) 425*32kB (UE) 3396*64kB (UM) 183*128kB (UM) 189*256kB (UM) 38*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 322456kB [ 631.067105] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 631.076745] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 631.086218] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 631.096147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 631.104779] 34243 total pagecache pages [ 631.108931] 0 pages in swap cache [ 631.112482] Swap cache stats: add 0, delete 0, find 0/0 [ 631.117978] Free swap = 0kB [ 631.121136] Total swap = 0kB [ 631.124158] 2097051 pages RAM [ 631.127273] 0 pages HighMem/MovableOnly [ 631.131352] 363841 pages reserved [ 631.135039] 0 pages cma reserved [ 631.627534] 0 2717 2718 2718 2718 [ 631.631132] Node 0 DMA32 free:846220kB min:36200kB low:45248kB high:54296kB active_anon:52088kB inactive_anon:87564kB active_file:52kB inactive_file:828kB unevictable:0kB writepending:72kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7776kB pagetables:2696kB bounce:0kB free_pcp:1320kB local_pcp:620kB free_cma:0kB [ 631.707516] lowmem_reserve[]: 0 0 0 0 0 [ 631.717937] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 631.747739] lowmem_reserve[]: 0 0 0 0 0 [ 631.757663] Node 1 Normal free:2166040kB min:53696kB low:67120kB high:80544kB active_anon:624kB inactive_anon:44996kB active_file:56kB inactive_file:1756kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:176kB bounce:0kB free_pcp:296kB local_pcp:112kB free_cma:0kB [ 631.868040] lowmem_reserve[]: 0 0 0 0 0 [ 631.897432] Node 0 DMA: 2*4kB (UM) 21*8kB (UME) 32*16kB (UME) 27*32kB (UME) 12*64kB (UME) 10*128kB (UE) 7*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 0*4096kB = 12048kB [ 631.947515] Node 0 DMA32: 15444*4kB (UME) 20364*8kB (UME) 17629*16kB (UME) 9648*32kB (UME) 5817*64kB (UM) 1266*128kB (UM) 182*256kB (UM) 11*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 1402048kB [ 632.012522] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 632.023406] Node 1 Normal: 841*4kB (UM) 2591*8kB (UM) 2439*16kB (UME) 2410*32kB (UME) 12048*64kB (UM) 4920*128kB (UM) 2137*256kB (UM) 377*512kB (UM) 12*1024kB (U) 0*2048kB 0*4096kB = 2293452kB [ 632.041137] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 632.050471] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 632.059337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 632.068576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 632.077212] 34397 total pagecache pages [ 632.081477] 0 pages in swap cache [ 632.085006] Swap cache stats: add 0, delete 0, find 0/0 [ 632.090786] Free swap = 0kB [ 632.093920] Total swap = 0kB [ 632.096945] 2097051 pages RAM [ 632.100207] 0 pages HighMem/MovableOnly [ 632.104398] 363841 pages reserved [ 632.107902] 0 pages cma reserved [ 632.111422] Out of memory: Kill process 7962 (syz-fuzzer) score 5 or sacrifice child [ 632.119775] Killed process 20726 (syz-executor.1) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB 05:08:12 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:08:12 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:12 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:12 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:12 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:12 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:12 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:12 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:12 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:12 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:12 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) [ 632.705778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.735942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.761469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.790894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.812988] device bridge_slave_1 left promiscuous mode [ 632.833109] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.870256] device bridge_slave_0 left promiscuous mode [ 632.885582] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.914892] device veth1_macvtap left promiscuous mode [ 632.930972] device veth0_macvtap left promiscuous mode [ 632.945347] device veth1_vlan left promiscuous mode [ 632.956287] device veth0_vlan left promiscuous mode [ 633.202730] device hsr_slave_1 left promiscuous mode [ 633.211975] device hsr_slave_0 left promiscuous mode [ 633.232953] team0 (unregistering): Port device team_slave_1 removed [ 633.256308] team0 (unregistering): Port device team_slave_0 removed [ 633.272168] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 633.291629] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 633.339459] bond0 (unregistering): Released all slaves [ 633.566158] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 633.575065] syz-executor.2: [ 633.587801] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 633.598088] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 633.608571] CPU: 1 PID: 21049 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 633.616452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.626325] Call Trace: [ 633.628922] dump_stack+0x1b2/0x281 [ 633.632549] warn_alloc.cold+0x96/0x1cc [ 633.636537] ? zone_watermark_ok_safe+0x220/0x220 [ 633.641390] __alloc_pages_nodemask+0x2127/0x2720 [ 633.646225] ? __schedule+0x893/0x1de0 [ 633.650129] ? lock_acquire+0x170/0x3f0 [ 633.654892] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 633.659740] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 633.665193] ? __mutex_unlock_slowpath+0x75/0x770 [ 633.670036] alloc_pages_current+0x155/0x260 [ 633.674444] ion_page_pool_alloc+0x118/0x1b0 [ 633.678852] ion_system_heap_allocate+0x133/0x8c0 [ 633.683698] ? ion_alloc+0x187/0x810 [ 633.687410] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 633.692858] ? ion_system_contig_heap_create+0x130/0x130 [ 633.698311] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 633.703323] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 633.708161] ion_alloc+0x204/0x810 [ 633.711711] ? ion_dma_buf_release+0x40/0x40 [ 633.716125] ? __might_fault+0x177/0x1b0 [ 633.720187] ion_ioctl+0xea/0x1f0 [ 633.723638] ? ion_query_heaps+0x360/0x360 [ 633.727872] ? ion_query_heaps+0x360/0x360 [ 633.732102] do_vfs_ioctl+0x75a/0xff0 [ 633.735902] ? ioctl_preallocate+0x1a0/0x1a0 [ 633.740330] ? lock_downgrade+0x740/0x740 [ 633.744488] ? __fget+0x225/0x360 [ 633.747957] ? do_vfs_ioctl+0xff0/0xff0 [ 633.751928] ? security_file_ioctl+0x83/0xb0 [ 633.756335] SyS_ioctl+0x7f/0xb0 [ 633.759699] ? do_vfs_ioctl+0xff0/0xff0 [ 633.763688] do_syscall_64+0x1d5/0x640 [ 633.767609] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 633.772790] RIP: 0033:0x466459 [ 633.775968] RSP: 002b:00007ff90c340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 633.783673] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 633.791380] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 633.798647] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 633.805946] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 633.813297] R13: 00007ffce90c212f R14: 00007ff90c340300 R15: 0000000000022000 [ 633.821692] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 633.826867] CPU: 1 PID: 21039 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 633.834750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.844107] Call Trace: [ 633.846719] dump_stack+0x1b2/0x281 [ 633.850363] warn_alloc.cold+0x96/0x1cc [ 633.854342] ? zone_watermark_ok_safe+0x220/0x220 [ 633.859203] __alloc_pages_nodemask+0x2127/0x2720 [ 633.864232] ? lock_acquire+0x170/0x3f0 [ 633.868241] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 633.873109] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 633.878557] ? __mutex_unlock_slowpath+0x75/0x770 [ 633.883401] alloc_pages_current+0x155/0x260 [ 633.887826] ion_page_pool_alloc+0x118/0x1b0 [ 633.892231] ion_system_heap_allocate+0x133/0x8c0 [ 633.897069] ? ion_alloc+0x187/0x810 [ 633.900791] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 633.906236] ? ion_system_contig_heap_create+0x130/0x130 [ 633.911942] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 633.916954] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 633.921793] ion_alloc+0x204/0x810 [ 633.925334] ? ion_dma_buf_release+0x40/0x40 [ 633.929744] ? __might_fault+0x177/0x1b0 [ 633.933823] ion_ioctl+0xea/0x1f0 [ 633.937270] ? ion_query_heaps+0x360/0x360 [ 633.941500] ? ion_query_heaps+0x360/0x360 [ 633.945728] do_vfs_ioctl+0x75a/0xff0 [ 633.949545] ? ioctl_preallocate+0x1a0/0x1a0 [ 633.953963] ? lock_downgrade+0x740/0x740 [ 633.958117] ? __fget+0x225/0x360 [ 633.961564] ? do_vfs_ioctl+0xff0/0xff0 [ 633.965536] ? security_file_ioctl+0x83/0xb0 [ 633.969942] SyS_ioctl+0x7f/0xb0 [ 633.973301] ? do_vfs_ioctl+0xff0/0xff0 [ 633.977288] do_syscall_64+0x1d5/0x640 [ 633.981177] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 633.986365] RIP: 0033:0x466459 [ 633.989545] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 633.997247] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 634.004508] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 634.011769] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 634.019031] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 634.026293] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 634.034789] warn_alloc_show_mem: 1 callbacks suppressed [ 634.034792] Mem-Info: [ 634.043639] active_anon:13228 inactive_anon:33145 isolated_anon:0 [ 634.043639] active_file:1915 inactive_file:4858 isolated_file:0 [ 634.043639] unevictable:0 dirty:79 writeback:0 unstable:0 [ 634.043639] slab_reclaimable:12581 slab_unreclaimable:114147 [ 634.043639] mapped:48567 shmem:33552 pagetables:695 bounce:0 [ 634.043639] free:227981 free_pcp:109 free_cma:0 [ 634.078793] Node 0 active_anon:52412kB inactive_anon:87556kB active_file:7004kB inactive_file:18872kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158252kB dirty:312kB writeback:0kB shmem:88864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 634.108138] Node 1 active_anon:532kB inactive_anon:44996kB active_file:600kB inactive_file:608kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36020kB dirty:4kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 634.136936] Node 0 DMA free:11132kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 634.187458] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 634.192533] Node 0 DMA32 free:734204kB min:36200kB low:45248kB high:54296kB active_anon:52400kB inactive_anon:87556kB active_file:7004kB inactive_file:19072kB unevictable:0kB writepending:312kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7744kB pagetables:2604kB bounce:0kB free_pcp:260kB local_pcp:52kB free_cma:0kB [ 634.257471] lowmem_reserve[]: 0 0 0 0 0 [ 634.261521] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 634.317469] lowmem_reserve[]: 0 0 0 0 0 [ 634.321511] Node 1 Normal free:104312kB min:53696kB low:67120kB high:80544kB active_anon:532kB inactive_anon:44996kB active_file:600kB inactive_file:608kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:176kB bounce:0kB free_pcp:152kB local_pcp:20kB free_cma:0kB [ 634.387493] lowmem_reserve[]: 0 0 0 0 0 [ 634.391541] Node 0 DMA: 11*4kB (UM) 28*8kB (UME) 33*16kB (UME) 27*32kB (UME) 12*64kB (UME) 10*128kB (UE) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 0*2048kB 0*4096kB = 11132kB [ 634.427478] Node 0 DMA32: 583*4kB (ME) 481*8kB (UE) 15562*16kB (UE) 10674*32kB (UME) 11*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 597444kB [ 634.456843] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 634.484765] Node 1 Normal: 800*4kB (UM) 1999*8kB (UM) 1850*16kB (UME) 1611*32kB (UME) 58*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 104312kB [ 634.503485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 634.513821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 634.526719] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 634.536302] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 634.549307] 40363 total pagecache pages [ 634.553394] 0 pages in swap cache [ 634.556925] Swap cache stats: add 0, delete 0, find 0/0 [ 634.566246] Free swap = 0kB [ 634.572130] Total swap = 0kB [ 634.575226] 2097051 pages RAM [ 634.580883] 0 pages HighMem/MovableOnly [ 634.584962] 363841 pages reserved [ 634.591691] 0 pages cma reserved [ 635.216784] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 635.312563] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 635.333765] CPU: 0 PID: 17779 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 635.341665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.351009] Call Trace: [ 635.353605] dump_stack+0x1b2/0x281 [ 635.357231] dump_header+0x178/0x82f [ 635.361051] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 635.366180] ? ___ratelimit+0x2cd/0x530 [ 635.370183] oom_kill_process.cold+0x10/0xb18 [ 635.374686] out_of_memory+0xe3e/0x1190 [ 635.378663] ? oom_killer_disable+0x1c0/0x1c0 [ 635.383155] ? mutex_trylock+0x152/0x1a0 [ 635.387212] __alloc_pages_nodemask+0x23e1/0x2720 [ 635.392065] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 635.396919] alloc_pages_current+0x155/0x260 [ 635.401362] filemap_fault+0xea3/0x1980 [ 635.405345] ext4_filemap_fault+0x84/0xb0 [ 635.409512] __do_fault+0xfa/0x380 [ 635.413068] __handle_mm_fault+0x2497/0x4620 [ 635.417481] ? vm_insert_page+0x7c0/0x7c0 [ 635.421633] ? nanosleep_copyout+0x100/0x100 [ 635.426050] handle_mm_fault+0x391/0x860 [ 635.430112] __do_page_fault+0x549/0xad0 [ 635.434200] ? spurious_fault+0x640/0x640 [ 635.438368] ? do_page_fault+0x60/0x500 [ 635.442361] ? page_fault+0x2f/0x50 [ 635.445985] page_fault+0x45/0x50 [ 635.449431] RIP: 9aa46:0x2 [ 635.452286] RSP: 004c:00007ffce90c23ec EFLAGS: 00000032 [ 636.016661] Mem-Info: [ 636.093585] active_anon:13292 inactive_anon:33138 isolated_anon:0 [ 636.093585] active_file:26 inactive_file:0 isolated_file:25 [ 636.093585] unevictable:0 dirty:0 writeback:0 unstable:0 [ 636.093585] slab_reclaimable:12580 slab_unreclaimable:113387 [ 636.093585] mapped:52737 shmem:33552 pagetables:739 bounce:0 [ 636.093585] free:25216 free_pcp:61 free_cma:0 [ 636.341243] Node 0 active_anon:52636kB inactive_anon:87556kB active_file:96kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176132kB dirty:0kB writeback:0kB shmem:88864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 636.487490] Node 1 active_anon:532kB inactive_anon:44996kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 636.704089] Node 0 DMA free:11040kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 636.911367] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 636.916436] Node 0 DMA32 free:36180kB min:36200kB low:45248kB high:54296kB active_anon:52624kB inactive_anon:87556kB active_file:100kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7808kB pagetables:2780kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 637.173581] lowmem_reserve[]: 0 0 0 0 0 [ 637.197324] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 637.363431] lowmem_reserve[]: 0 0 0 0 0 [ 637.386869] Node 1 Normal free:53664kB min:53696kB low:67120kB high:80544kB active_anon:532kB inactive_anon:44996kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:176kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 637.580378] lowmem_reserve[]: 0 0 0 0 0 [ 637.584414] Node 0 DMA: 2*4kB (UM) 21*8kB (UME) 33*16kB (UME) 27*32kB (UME) 12*64kB (UME) 10*128kB (UE) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 0*2048kB 0*4096kB = 11040kB [ 637.616109] Node 0 DMA32: 1067*4kB (UME) 715*8kB (UME) 315*16kB (ME) 168*32kB (UME) 130*64kB (UM) 25*128kB (M) 9*256kB (M) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35764kB [ 637.642909] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 637.700507] Node 1 Normal: 40*4kB (UM) 63*8kB (UM) 28*16kB (UME) 1522*32kB (UME) 58*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53784kB [ 637.774163] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.829545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 637.874257] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.883155] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 637.918190] 33583 total pagecache pages [ 637.922179] 0 pages in swap cache [ 637.925624] Swap cache stats: add 0, delete 0, find 0/0 [ 637.960357] Free swap = 0kB [ 637.963383] Total swap = 0kB [ 637.966390] 2097051 pages RAM [ 637.986770] 0 pages HighMem/MovableOnly [ 637.999603] 363841 pages reserved [ 638.003056] 0 pages cma reserved [ 638.006413] Out of memory (oom_kill_allocating_task): Kill process 17779 (syz-executor.4) score 0 or sacrifice child [ 638.023212] Killed process 21049 (syz-executor.4) total-vm:93252kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 638.063685] oom_reaper: reaped process 21049 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 638.079645] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 638.101973] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 638.106775] CPU: 0 PID: 7964 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 638.114211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.123575] Call Trace: [ 638.126167] dump_stack+0x1b2/0x281 [ 638.129795] dump_header+0x178/0x82f [ 638.133506] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 638.138610] ? ___ratelimit+0x2cd/0x530 [ 638.142582] oom_kill_process.cold+0x10/0xb18 [ 638.147087] out_of_memory+0xe3e/0x1190 [ 638.151061] ? oom_killer_disable+0x1c0/0x1c0 [ 638.155551] ? mutex_trylock+0x152/0x1a0 [ 638.159721] __alloc_pages_nodemask+0x23e1/0x2720 [ 638.164575] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 638.169429] alloc_pages_current+0x155/0x260 [ 638.173836] filemap_fault+0xea3/0x1980 [ 638.178519] ext4_filemap_fault+0x84/0xb0 [ 638.182674] __do_fault+0xfa/0x380 [ 638.186209] __handle_mm_fault+0x2497/0x4620 [ 638.190612] ? vm_insert_page+0x7c0/0x7c0 [ 638.194755] ? lock_downgrade+0x740/0x740 [ 638.198909] handle_mm_fault+0x391/0x860 [ 638.202968] __do_page_fault+0x549/0xad0 [ 638.207025] ? spurious_fault+0x640/0x640 [ 638.211168] ? do_page_fault+0x60/0x500 [ 638.215136] ? page_fault+0x2f/0x50 [ 638.218755] page_fault+0x45/0x50 [ 638.222198] RIP: 0000:0x940aec [ 638.225379] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 638.240157] Mem-Info: [ 638.259657] active_anon:13269 inactive_anon:33138 isolated_anon:0 [ 638.259657] active_file:24 inactive_file:1 isolated_file:0 [ 638.259657] unevictable:0 dirty:0 writeback:0 unstable:0 [ 638.259657] slab_reclaimable:12578 slab_unreclaimable:113382 [ 638.259657] mapped:52737 shmem:33552 pagetables:739 bounce:0 [ 638.259657] free:21574 free_pcp:31 free_cma:0 [ 638.337467] Node 0 active_anon:52544kB inactive_anon:87556kB active_file:168kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176132kB dirty:0kB writeback:0kB shmem:88864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 638.374493] Node 1 active_anon:532kB inactive_anon:44996kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 638.403899] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 638.415780] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 638.447590] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 638.452734] CPU: 0 PID: 21049 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 638.460611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 638.469966] Call Trace: [ 638.472559] dump_stack+0x1b2/0x281 [ 638.476185] warn_alloc.cold+0x96/0x1cc [ 638.480171] ? zone_watermark_ok_safe+0x220/0x220 [ 638.485009] ? usleep_range+0x130/0x130 [ 638.489769] ? try_to_free_pages+0x23f/0x6e0 [ 638.494174] ? _find_next_bit+0xdb/0x100 [ 638.498236] ? run_timer_softirq+0x5a0/0x5a0 [ 638.502657] __alloc_pages_nodemask+0x2127/0x2720 [ 638.507511] ? lock_acquire+0x170/0x3f0 [ 638.511490] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 638.516343] ? ion_page_pool_alloc+0x9e/0x1b0 [ 638.520845] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 638.526312] alloc_pages_current+0x155/0x260 [ 638.530727] ion_page_pool_alloc+0x118/0x1b0 [ 638.535138] ion_system_heap_allocate+0x133/0x8c0 [ 638.539978] ? ion_alloc+0x187/0x810 [ 638.543680] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 638.549121] ? ion_system_contig_heap_create+0x130/0x130 [ 638.554574] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 638.559582] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 638.564413] ion_alloc+0x204/0x810 [ 638.567947] ? ion_dma_buf_release+0x40/0x40 [ 638.572345] ? __might_fault+0x177/0x1b0 [ 638.576398] ion_ioctl+0xea/0x1f0 [ 638.580273] ? ion_query_heaps+0x360/0x360 [ 638.584501] ? ion_query_heaps+0x360/0x360 [ 638.588722] do_vfs_ioctl+0x75a/0xff0 [ 638.592511] ? ioctl_preallocate+0x1a0/0x1a0 [ 638.596908] ? lock_downgrade+0x740/0x740 [ 638.601046] ? __fget+0x225/0x360 [ 638.604485] ? do_vfs_ioctl+0xff0/0xff0 [ 638.608445] ? security_file_ioctl+0x83/0xb0 [ 638.612841] SyS_ioctl+0x7f/0xb0 [ 638.616193] ? do_vfs_ioctl+0xff0/0xff0 [ 638.620161] do_syscall_64+0x1d5/0x640 [ 638.624044] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 638.629221] RIP: 0033:0x466459 [ 638.632396] RSP: 002b:00007ff90c340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 638.640438] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 638.647694] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 638.654986] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 638.662242] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 638.669498] R13: 00007ffce90c212f R14: 00007ff90c340300 R15: 0000000000022000 [ 638.694088] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 638.715965] Node 0 DMA32 free:19644kB min:36200kB low:45248kB high:54296kB active_anon:52532kB inactive_anon:87556kB active_file:88kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7840kB pagetables:2780kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 638.749426] lowmem_reserve[]: 0 0 0 0 0 [ 638.753436] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 638.775952] warn_alloc_show_mem: 1 callbacks suppressed [ 638.775956] Mem-Info: [ 638.791205] lowmem_reserve[]: 0 0 0 0 0 [ 638.795205] Node 1 Normal free:26752kB min:53696kB low:67120kB high:80544kB active_anon:532kB inactive_anon:44996kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:176kB bounce:0kB free_pcp:244kB local_pcp:4kB free_cma:0kB [ 638.798795] active_anon:13269 inactive_anon:33138 isolated_anon:0 [ 638.798795] active_file:17 inactive_file:1 isolated_file:0 [ 638.798795] unevictable:0 dirty:0 writeback:0 unstable:0 [ 638.798795] slab_reclaimable:12578 slab_unreclaimable:112940 [ 638.798795] mapped:52737 shmem:33552 pagetables:739 bounce:0 [ 638.798795] free:14338 free_pcp:91 free_cma:0 [ 638.835581] lowmem_reserve[]: [ 638.860461] Node 0 active_anon:52544kB inactive_anon:87556kB active_file:40kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176132kB dirty:0kB writeback:0kB shmem:88864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 638.891447] Node 1 active_anon:532kB inactive_anon:44996kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 638.916136] 0 [ 638.918459] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 638.918482] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 638.918504] Node 0 DMA32 free:19644kB min:36200kB low:45248kB high:54296kB active_anon:52532kB inactive_anon:87556kB active_file:88kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7840kB pagetables:2780kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 638.918526] lowmem_reserve[]: 0 0 0 0 0 [ 638.918548] Node 0 [ 638.946456] 0 [ 638.946570] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 639.006392] 0 [ 639.014119] lowmem_reserve[]: 0 0 0 0 0 [ 639.019942] Node 1 Normal free:26752kB min:53696kB low:67120kB high:80544kB active_anon:532kB inactive_anon:44996kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:176kB bounce:0kB free_pcp:244kB local_pcp:240kB free_cma:0kB [ 639.048485] lowmem_reserve[]: 0 0 0 0 0 [ 639.052485] Node 0 DMA: 1*4kB (M) 11*8kB (UME) 33*16kB (UME) 27*32kB (UME) 12*64kB (UME) 10*128kB (UE) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 0*2048kB 0*4096kB = 10956kB [ 639.068264] Node 0 DMA32: 979*4kB (UME) 801*8kB (UME) 211*16kB (UME) 73*32kB (UME) 42*64kB (UM) 8*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19748kB [ 639.088540] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 639.093763] 0 [ 639.103677] Node 1 Normal: 8*4kB (M) 52*8kB (UM) 18*16kB (ME) 689*32kB (UME) 58*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26752kB [ 639.117081] 0 [ 639.128143] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 639.136985] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 639.153910] Node 0 DMA: 1*4kB (M) 11*8kB (UME) 33*16kB (UME) 27*32kB (UME) 12*64kB (UME) 10*128kB (UE) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 0*2048kB 0*4096kB = 10956kB [ 639.156053] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 639.190573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 639.195226] Node 0 DMA32: 1018*4kB (UME) 803*8kB (UME) 212*16kB (UME) 76*32kB (UME) 42*64kB (UM) 8*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20032kB [ 639.206784] 33583 total pagecache pages [ 639.232827] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 639.236157] 0 pages in swap cache [ 639.256219] Node 1 Normal: 39*4kB (M) 51*8kB (M) 18*16kB (ME) 693*32kB (UME) 58*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26996kB [ 639.259331] Swap cache stats: add 0, delete 0, find 0/0 [ 639.282693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 639.287447] Free swap = 0kB [ 639.294573] Total swap = 0kB [ 639.304155] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 639.307631] 2097051 pages RAM [ 639.315855] 0 pages HighMem/MovableOnly [ 639.316917] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 639.331590] 363841 pages reserved [ 639.335064] 0 pages cma reserved [ 639.341045] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 639.357965] 33583 total pagecache pages [ 639.363184] 0 pages in swap cache [ 639.375054] Swap cache stats: add 0, delete 0, find 0/0 [ 639.381044] Free swap = 0kB [ 639.384590] Total swap = 0kB [ 639.388189] 2097051 pages RAM [ 639.395562] 0 pages HighMem/MovableOnly [ 639.413801] 363841 pages reserved [ 639.431380] 0 pages cma reserved [ 639.439456] Out of memory (oom_kill_allocating_task): Kill process 7964 (syz-fuzzer) score 0 or sacrifice child [ 639.461139] Killed process 19080 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 639.507519] oom_reaper: reaped process 19080 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 05:08:20 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:20 executing program 2: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) [ 641.400026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.406844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.415834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.423127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.432276] device bridge_slave_1 left promiscuous mode [ 641.440983] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.448714] device bridge_slave_0 left promiscuous mode [ 641.454316] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.464118] device veth1_macvtap left promiscuous mode [ 641.469640] device veth0_macvtap left promiscuous mode [ 641.474960] device veth1_vlan left promiscuous mode [ 641.480259] device veth0_vlan left promiscuous mode [ 641.552503] device hsr_slave_1 left promiscuous mode [ 641.561461] device hsr_slave_0 left promiscuous mode [ 641.574188] team0 (unregistering): Port device team_slave_1 removed [ 641.584693] team0 (unregistering): Port device team_slave_0 removed [ 641.593641] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 641.604464] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 641.628198] bond0 (unregistering): Released all slaves [ 647.899647] IPVS: ftp: loaded support on port[0] = 21 [ 648.005002] chnl_net:caif_netlink_parms(): no params data found [ 648.215677] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.222197] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.229867] device bridge_slave_0 entered promiscuous mode [ 648.236354] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.243314] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.250246] device bridge_slave_1 entered promiscuous mode [ 648.268975] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 648.277843] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 648.297114] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 648.304241] team0: Port device team_slave_0 added [ 648.310331] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 648.317379] team0: Port device team_slave_1 added [ 648.335040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.341341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.367350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.379538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.385822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.411819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.423351] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 648.431033] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 648.452232] device hsr_slave_0 entered promiscuous mode [ 648.457992] device hsr_slave_1 entered promiscuous mode [ 648.463864] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 648.471809] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 648.539901] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.546271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.552952] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.559356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.589300] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 648.595493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.604052] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 648.613216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 648.620433] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.627012] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.637326] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 648.643501] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.651925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 648.660685] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.667043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.676439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 648.684279] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.690672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.708465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 648.716135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 648.723946] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 648.732906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 648.745561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 648.756220] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 648.762429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 648.769898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 648.783122] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 648.793837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.800560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 648.807253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 648.854728] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 648.864792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 648.896382] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 648.903683] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 648.910861] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 648.922227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 648.929729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 648.936603] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 648.945611] device veth0_vlan entered promiscuous mode [ 648.954555] device veth1_vlan entered promiscuous mode [ 648.961582] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 648.970418] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 648.982459] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 648.990271] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 648.997401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 649.004924] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 649.014277] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 649.021265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 649.029212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 649.040290] device veth0_macvtap entered promiscuous mode [ 649.046301] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 649.054803] device veth1_macvtap entered promiscuous mode [ 649.061194] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 649.069813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 649.079465] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 649.089243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 649.099305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.108461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 649.118387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.127573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 649.137269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.146429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 649.156448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.166422] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 649.173704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.180863] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 649.188315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 649.195285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 649.203072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 649.212564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 649.223337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.232757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 649.242744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.251913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 649.261671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.271206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 649.281047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.291143] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 649.298139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.305005] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 649.312941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 05:08:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:08:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:29 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:29 executing program 2: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xf}) 05:08:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:29 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xf}) 05:08:29 executing program 2: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:29 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:29 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:29 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:29 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xf}) [ 649.958107] Bluetooth: hci3 command 0x0409 tx timeout [ 651.662584] IPVS: ftp: loaded support on port[0] = 21 [ 651.775291] chnl_net:caif_netlink_parms(): no params data found [ 651.831068] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.838467] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.845514] device bridge_slave_0 entered promiscuous mode [ 651.853167] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.860208] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.867230] device bridge_slave_1 entered promiscuous mode [ 651.887232] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 651.896860] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 651.918269] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 651.925903] team0: Port device team_slave_0 added [ 651.931700] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 651.939304] team0: Port device team_slave_1 added [ 651.955623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.962580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.988717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.000709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.006955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 652.032950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.043980] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 652.047864] Bluetooth: hci3 command 0x041b tx timeout [ 652.051718] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 652.078454] device hsr_slave_0 entered promiscuous mode [ 652.084455] device hsr_slave_1 entered promiscuous mode [ 652.090847] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 652.098200] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 652.172959] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.179523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.186100] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.193012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.228992] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 652.236066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.245611] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 652.255159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 652.263394] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.271083] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.282873] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 652.290136] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.299765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 652.307492] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.314108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.336234] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 652.346921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 652.358518] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 652.365409] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 652.373573] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.381538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.389796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 652.398110] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 652.406016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 652.413821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 652.421872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 652.429062] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 652.443256] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 652.452069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 652.458974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 652.473046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.530684] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 652.541510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 652.578920] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 652.586295] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 652.593600] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 652.606008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 652.614219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 652.621625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 652.631339] device veth0_vlan entered promiscuous mode [ 652.641864] device veth1_vlan entered promiscuous mode [ 652.648424] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 652.657072] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 652.670205] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 652.681386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 652.689184] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 652.696667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 652.706871] device veth0_macvtap entered promiscuous mode [ 652.714063] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 652.723532] device veth1_macvtap entered promiscuous mode [ 652.733383] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 652.743456] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 652.752526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 652.762905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.773062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 652.783514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.794074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 652.805533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.815214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 652.825538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.834979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 652.845344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.857068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.866140] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 652.874181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 652.883839] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 652.895316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 652.905487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.915355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 652.926632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.936764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 652.946791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.956141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 652.966746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.976750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 652.986880] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.998920] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 653.006188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.015413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 653.023731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 05:08:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 05:08:33 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 05:08:33 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 05:08:33 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:08:33 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) msgctl$IPC_STAT(0x0, 0x2, 0x0) 05:08:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:08:33 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:08:33 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:08:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:08:33 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:33 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:08:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:08:33 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:08:33 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 653.718258] Bluetooth: hci4 command 0x0409 tx timeout [ 654.118075] Bluetooth: hci3 command 0x040f tx timeout 05:08:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:34 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xf}) 05:08:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:08:34 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:08:34 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:08:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xf}) 05:08:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xf}) 05:08:34 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xf}) 05:08:34 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xf}) 05:08:34 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:08:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:08:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xf}) 05:08:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:34 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xf}) 05:08:34 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xf}) 05:08:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:08:34 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xf}) 05:08:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 05:08:34 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 05:08:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xf}) 05:08:34 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xf}) 05:08:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 05:08:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xf}) 05:08:34 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xf}) 05:08:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:08:35 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 05:08:35 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 05:08:35 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 05:08:35 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xf}) 05:08:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xf}) 05:08:35 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 05:08:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 05:08:36 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 05:08:36 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 05:08:36 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) msgctl$IPC_STAT(0x0, 0x2, 0x0) 05:08:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 05:08:36 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 05:08:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:36 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 05:08:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 05:08:36 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) [ 655.797572] Bluetooth: hci4 command 0x041b tx timeout 05:08:36 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/99) 05:08:36 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/99) 05:08:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xf, 0x1}) 05:08:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x0, 0x1}) [ 656.197679] Bluetooth: hci3 command 0x0419 tx timeout [ 656.238947] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 656.239218] syz-executor.4: [ 656.251976] syz-executor.3: [ 656.255424] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 656.271645] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 656.283233] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 656.289433] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 656.295097] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 656.300877] CPU: 0 PID: 21823 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 656.308776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 656.318701] Call Trace: [ 656.321780] dump_stack+0x1b2/0x281 [ 656.326112] warn_alloc.cold+0x96/0x1cc [ 656.330252] ? zone_watermark_ok_safe+0x220/0x220 [ 656.335148] __alloc_pages_nodemask+0x2127/0x2720 [ 656.335457] page allocation failure: order:4 [ 656.340313] ? lock_acquire+0x170/0x3f0 [ 656.340332] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 656.340350] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 656.340362] ? __mutex_unlock_slowpath+0x75/0x770 [ 656.340375] alloc_pages_current+0x155/0x260 [ 656.340397] ion_page_pool_alloc+0x118/0x1b0 [ 656.340408] ion_system_heap_allocate+0x133/0x8c0 [ 656.340419] ? ion_alloc+0x187/0x810 [ 656.340429] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 656.340438] ? ion_system_contig_heap_create+0x130/0x130 [ 656.340448] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 656.340458] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 656.340470] ion_alloc+0x204/0x810 [ 656.374234] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 656.378411] ? ion_dma_buf_release+0x40/0x40 [ 656.378426] ? __might_fault+0x177/0x1b0 [ 656.378438] ion_ioctl+0xea/0x1f0 [ 656.378448] ? ion_query_heaps+0x360/0x360 [ 656.378460] ? ion_query_heaps+0x360/0x360 [ 656.378470] do_vfs_ioctl+0x75a/0xff0 [ 656.378481] ? ioctl_preallocate+0x1a0/0x1a0 [ 656.378490] ? lock_downgrade+0x740/0x740 [ 656.378504] ? __fget+0x225/0x360 [ 656.378512] ? do_vfs_ioctl+0xff0/0xff0 [ 656.378522] ? security_file_ioctl+0x83/0xb0 [ 656.378532] SyS_ioctl+0x7f/0xb0 [ 656.378540] ? do_vfs_ioctl+0xff0/0xff0 [ 656.378551] do_syscall_64+0x1d5/0x640 [ 656.378567] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 656.405561] (null) [ 656.408615] RIP: 0033:0x466459 [ 656.408621] RSP: 002b:00007f91d38e9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.408640] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 656.408646] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 656.408652] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 656.408657] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 656.408661] R13: 00007ffd37b9a83f R14: 00007f91d38e9300 R15: 0000000000022000 [ 656.415296] CPU: 0 PID: 21811 Comm: syz-executor.3 Not tainted 4.14.227-syzkaller #0 [ 656.434562] syz-executor.4 cpuset= [ 656.437175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 656.437179] Call Trace: [ 656.437198] dump_stack+0x1b2/0x281 [ 656.437213] warn_alloc.cold+0x96/0x1cc [ 656.437229] ? zone_watermark_ok_safe+0x220/0x220 [ 656.462544] / [ 656.463113] __alloc_pages_nodemask+0x2127/0x2720 [ 656.486727] mems_allowed=0-1 [ 656.488551] ? lock_acquire+0x170/0x3f0 [ 656.488569] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 656.488588] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 656.488601] ? __mutex_unlock_slowpath+0x75/0x770 [ 656.488610] ? retint_kernel+0x2d/0x2d [ 656.488623] alloc_pages_current+0x155/0x260 [ 656.488762] ion_page_pool_alloc+0x118/0x1b0 [ 656.488775] ion_system_heap_allocate+0x133/0x8c0 [ 656.488786] ? ion_alloc+0x187/0x810 [ 656.488799] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 656.630442] ? ion_system_contig_heap_create+0x130/0x130 [ 656.636124] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 656.641438] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 656.646300] ion_alloc+0x204/0x810 [ 656.649863] ? ion_dma_buf_release+0x40/0x40 [ 656.654455] ? __might_fault+0x177/0x1b0 [ 656.658705] ion_ioctl+0xea/0x1f0 [ 656.662204] ? ion_query_heaps+0x360/0x360 [ 656.666655] ? ion_query_heaps+0x360/0x360 [ 656.672266] do_vfs_ioctl+0x75a/0xff0 [ 656.676326] ? ioctl_preallocate+0x1a0/0x1a0 [ 656.681734] ? lock_downgrade+0x740/0x740 [ 656.686380] ? __fget+0x225/0x360 [ 656.689854] ? do_vfs_ioctl+0xff0/0xff0 [ 656.694138] ? security_file_ioctl+0x83/0xb0 [ 656.698576] SyS_ioctl+0x7f/0xb0 [ 656.702182] ? do_vfs_ioctl+0xff0/0xff0 [ 656.706845] do_syscall_64+0x1d5/0x640 [ 656.710749] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 656.715960] RIP: 0033:0x466459 [ 656.719402] RSP: 002b:00007f42379f8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.727214] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 656.734719] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 656.745178] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 656.752545] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 656.759950] R13: 00007ffef8958def R14: 00007f42379f8300 R15: 0000000000022000 [ 656.768883] CPU: 1 PID: 21826 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 656.776801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 656.786343] Call Trace: [ 656.789236] dump_stack+0x1b2/0x281 [ 656.793068] warn_alloc.cold+0x96/0x1cc [ 656.797147] ? zone_watermark_ok_safe+0x220/0x220 [ 656.802104] __alloc_pages_nodemask+0x2127/0x2720 [ 656.803286] Mem-Info: [ 656.807374] ? lock_acquire+0x170/0x3f0 [ 656.807398] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 656.807415] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 656.810160] active_anon:13448 inactive_anon:33141 isolated_anon:24 [ 656.810160] active_file:1829 inactive_file:4456 isolated_file:0 [ 656.810160] unevictable:0 dirty:81 writeback:0 unstable:0 [ 656.810160] slab_reclaimable:12737 slab_unreclaimable:119403 [ 656.810160] mapped:57181 shmem:33556 pagetables:928 bounce:0 [ 656.810160] free:185788 free_pcp:355 free_cma:0 [ 656.814380] ? __mutex_unlock_slowpath+0x75/0x770 [ 656.814397] ? retint_kernel+0x2d/0x2d [ 656.814414] alloc_pages_current+0x155/0x260 [ 656.825102] Node 0 active_anon:53260kB inactive_anon:87568kB active_file:3700kB inactive_file:15604kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:188668kB dirty:300kB writeback:0kB shmem:88880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 656.859281] ion_page_pool_alloc+0x118/0x1b0 [ 656.859293] ion_system_heap_allocate+0x133/0x8c0 [ 656.859304] ? ion_alloc+0x187/0x810 [ 656.859314] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 656.859323] ? ion_system_contig_heap_create+0x130/0x130 [ 656.859333] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 656.859345] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 656.859355] ion_alloc+0x204/0x810 [ 656.859369] ? ion_dma_buf_release+0x40/0x40 [ 656.859381] ? __might_fault+0x177/0x1b0 [ 656.859399] ion_ioctl+0xea/0x1f0 [ 656.869719] Node 1 active_anon:532kB inactive_anon:44996kB active_file:3616kB inactive_file:2220kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40056kB dirty:24kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 656.872970] ? ion_query_heaps+0x360/0x360 [ 656.872985] ? ion_query_heaps+0x360/0x360 [ 656.872996] do_vfs_ioctl+0x75a/0xff0 [ 656.873007] ? ioctl_preallocate+0x1a0/0x1a0 [ 656.902047] Node 0 [ 656.906459] ? lock_downgrade+0x740/0x740 [ 656.906474] ? __fget+0x225/0x360 [ 656.906485] ? do_vfs_ioctl+0xff0/0xff0 [ 656.906500] ? security_file_ioctl+0x83/0xb0 [ 656.915934] DMA free:11104kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 656.921102] SyS_ioctl+0x7f/0xb0 [ 656.921111] ? do_vfs_ioctl+0xff0/0xff0 [ 656.921123] do_syscall_64+0x1d5/0x640 [ 656.921140] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 656.921148] RIP: 0033:0x466459 [ 656.921153] RSP: 002b:00007ff90c340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.921166] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 656.930138] lowmem_reserve[]: [ 656.931820] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 656.931826] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 656.931831] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 656.931837] R13: 00007ffce90c212f R14: 00007ff90c340300 R15: 0000000000022000 [ 656.953340] CPU: 1 PID: 21803 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 656.989984] 0 [ 656.993336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 656.993340] Call Trace: [ 656.993358] dump_stack+0x1b2/0x281 [ 656.993377] warn_alloc.cold+0x96/0x1cc [ 656.998196] 2717 [ 657.000338] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 657.000349] ? zone_watermark_ok_safe+0x220/0x220 [ 657.000373] __alloc_pages_nodemask+0x2127/0x2720 [ 657.004566] 2718 [ 657.007955] ? io_schedule_timeout+0x140/0x140 [ 657.007973] ? lock_acquire+0x170/0x3f0 [ 657.007988] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 657.008004] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 657.008017] ? __mutex_unlock_slowpath+0x75/0x770 [ 657.008031] alloc_pages_current+0x155/0x260 [ 657.018813] 2718 [ 657.042164] ion_page_pool_alloc+0x118/0x1b0 [ 657.042176] ion_system_heap_allocate+0x133/0x8c0 [ 657.042187] ? ion_alloc+0x187/0x810 [ 657.042197] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 657.042207] ? ion_system_contig_heap_create+0x130/0x130 [ 657.042217] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 657.042233] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 657.052051] 2718 [ 657.055645] ion_alloc+0x204/0x810 [ 657.055662] ? ion_dma_buf_release+0x40/0x40 [ 657.055675] ? __might_fault+0x177/0x1b0 [ 657.064277] ion_ioctl+0xea/0x1f0 [ 657.064289] ? ion_query_heaps+0x360/0x360 [ 657.064303] ? ion_query_heaps+0x360/0x360 [ 657.064314] do_vfs_ioctl+0x75a/0xff0 [ 657.075924] Node 0 [ 657.079768] ? ioctl_preallocate+0x1a0/0x1a0 [ 657.079779] ? lock_downgrade+0x740/0x740 [ 657.079793] ? __fget+0x225/0x360 [ 657.079803] ? do_vfs_ioctl+0xff0/0xff0 [ 657.079814] ? security_file_ioctl+0x83/0xb0 [ 657.079824] SyS_ioctl+0x7f/0xb0 [ 657.079834] ? do_vfs_ioctl+0xff0/0xff0 [ 657.086222] DMA32 free:587800kB min:36200kB low:45248kB high:54296kB active_anon:53744kB inactive_anon:87568kB active_file:3700kB inactive_file:15604kB unevictable:0kB writepending:300kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:8064kB pagetables:3536kB bounce:0kB free_pcp:1172kB local_pcp:536kB free_cma:0kB [ 657.090222] do_syscall_64+0x1d5/0x640 [ 657.090241] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 657.090249] RIP: 0033:0x466459 [ 657.090253] RSP: 002b:00007f5fb7692188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 657.090264] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 657.090269] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 657.090274] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 657.090279] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 657.090284] R13: 00007fff6f6f7f0f R14: 00007f5fb7692300 R15: 0000000000022000 [ 657.392464] lowmem_reserve[]: 0 0 0 0 0 [ 657.398899] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 657.428908] lowmem_reserve[]: 0 0 0 0 0 [ 657.433366] Node 1 Normal free:255172kB min:53696kB low:67120kB high:80544kB active_anon:532kB inactive_anon:44996kB active_file:3524kB inactive_file:2240kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:176kB bounce:0kB free_pcp:384kB local_pcp:0kB free_cma:0kB [ 657.466140] lowmem_reserve[]: 0 0 0 0 0 [ 657.471339] Node 0 DMA: 8*4kB (UM) 28*8kB (UME) 32*16kB (UME) 29*32kB (UME) 3*64kB (ME) 2*128kB (UE) 5*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11104kB [ 657.489223] Node 0 DMA32: 1*4kB (U) 547*8kB (UE) 14216*16kB (UE) 10489*32kB (UME) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 567804kB [ 657.524773] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 657.564807] Node 1 Normal: 793*4kB (UM) 1320*8kB (UM) 1168*16kB (UME) 909*32kB (UME) 19*64kB (UM) 11*128kB (UM) 9*256kB (UM) 316*512kB (UM) 50*1024kB (U) 0*2048kB 0*4096kB = 279428kB [ 657.654432] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 657.695285] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 657.737497] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 657.760688] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 657.794670] 40331 total pagecache pages [ 657.814278] 0 pages in swap cache [ 657.825901] Swap cache stats: add 0, delete 0, find 0/0 [ 657.853575] Free swap = 0kB [ 657.866583] Total swap = 0kB [ 657.878093] Bluetooth: hci4 command 0x040f tx timeout [ 657.892186] 2097051 pages RAM [ 657.903705] 0 pages HighMem/MovableOnly [ 657.922624] 363841 pages reserved [ 657.938683] 0 pages cma reserved [ 658.915017] oom_reaper: reaped process 21823 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 658.939687] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 658.971825] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 658.977315] CPU: 0 PID: 21808 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 658.985732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 658.995185] Call Trace: [ 658.997865] dump_stack+0x1b2/0x281 [ 659.001845] warn_alloc.cold+0x96/0x1cc [ 659.005833] ? zone_watermark_ok_safe+0x220/0x220 [ 659.010833] __alloc_pages_nodemask+0x2127/0x2720 [ 659.015915] ? _raw_spin_unlock_irq+0x24/0x80 [ 659.020432] ? lock_acquire+0x170/0x3f0 [ 659.024420] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 659.029287] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 659.034752] ? __mutex_unlock_slowpath+0x75/0x770 [ 659.040009] alloc_pages_current+0x155/0x260 [ 659.044591] ion_page_pool_alloc+0x118/0x1b0 [ 659.049060] ion_system_heap_allocate+0x133/0x8c0 [ 659.054102] ? ion_alloc+0x187/0x810 [ 659.057835] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 659.063604] ? ion_system_contig_heap_create+0x130/0x130 [ 659.069250] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 659.074382] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 659.079243] ion_alloc+0x204/0x810 [ 659.083050] ? ion_dma_buf_release+0x40/0x40 [ 659.087659] ? __might_fault+0x177/0x1b0 [ 659.091738] ion_ioctl+0xea/0x1f0 [ 659.095211] ? ion_query_heaps+0x360/0x360 [ 659.099611] ? ion_query_heaps+0x360/0x360 [ 659.103952] do_vfs_ioctl+0x75a/0xff0 [ 659.107921] ? ioctl_preallocate+0x1a0/0x1a0 [ 659.112345] ? lock_downgrade+0x740/0x740 [ 659.116611] ? __fget+0x225/0x360 [ 659.120451] ? do_vfs_ioctl+0xff0/0xff0 [ 659.124442] ? security_file_ioctl+0x83/0xb0 [ 659.129018] SyS_ioctl+0x7f/0xb0 [ 659.129632] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 659.132416] ? do_vfs_ioctl+0xff0/0xff0 [ 659.132428] do_syscall_64+0x1d5/0x640 [ 659.151390] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 659.156599] RIP: 0033:0x466459 [ 659.159800] RSP: 002b:00007f8e9dbaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 659.173796] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 659.179823] , order=0, oom_score_adj=0 [ 659.181169] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 659.185280] syz-executor.5 cpuset= [ 659.192637] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 659.192642] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 659.192647] R13: 00007ffdd5fc694f R14: 00007f8e9dbaf300 R15: 0000000000022000 [ 659.200555] warn_alloc_show_mem: 3 callbacks suppressed [ 659.200558] Mem-Info: [ 659.229424] active_anon:13358 inactive_anon:33140 isolated_anon:0 [ 659.229424] active_file:15 inactive_file:14 isolated_file:0 [ 659.229424] unevictable:0 dirty:0 writeback:0 unstable:0 [ 659.229424] slab_reclaimable:12752 slab_unreclaimable:118986 [ 659.229424] mapped:52803 shmem:33555 pagetables:796 bounce:0 [ 659.229424] free:14750 free_pcp:39 free_cma:0 [ 659.272153] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 659.272878] Node 0 active_anon:52900kB inactive_anon:87564kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176396kB dirty:0kB writeback:0kB shmem:88876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 659.300861] / [ 659.327246] syz-executor.5 cpuset= [ 659.328160] Node 1 active_anon:532kB inactive_anon:44996kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 659.331324] / [ 659.332960] Node 0 [ 659.371694] mems_allowed=0-1 [ 659.375834] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 659.377421] CPU: 1 PID: 21378 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 659.403392] lowmem_reserve[]: [ 659.411546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 659.411551] Call Trace: [ 659.411572] dump_stack+0x1b2/0x281 [ 659.411584] dump_header+0x178/0x82f [ 659.415045] 0 [ 659.424579] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 659.424588] ? ___ratelimit+0x2cd/0x530 [ 659.424599] oom_kill_process.cold+0x10/0xb18 [ 659.424617] out_of_memory+0xe3e/0x1190 [ 659.427330] 2717 [ 659.431091] ? oom_killer_disable+0x1c0/0x1c0 [ 659.431100] ? mutex_trylock+0x152/0x1a0 [ 659.431112] __alloc_pages_nodemask+0x23e1/0x2720 [ 659.434893] 2718 [ 659.436848] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 659.442482] 2718 [ 659.446451] alloc_pages_current+0x155/0x260 [ 659.450963] 2718 [ 659.455012] filemap_fault+0xea3/0x1980 [ 659.462096] ext4_filemap_fault+0x84/0xb0 [ 659.466309] Node 0 [ 659.471339] __do_fault+0xfa/0x380 [ 659.471348] __handle_mm_fault+0x2497/0x4620 [ 659.471358] ? vm_insert_page+0x7c0/0x7c0 [ 659.471368] ? nanosleep_copyout+0x100/0x100 [ 659.471392] handle_mm_fault+0x391/0x860 [ 659.473589] DMA32 free:19040kB min:36200kB low:45248kB high:54296kB active_anon:52888kB inactive_anon:87564kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7840kB pagetables:3008kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 659.478506] __do_page_fault+0x549/0xad0 [ 659.478518] ? spurious_fault+0x640/0x640 [ 659.478527] ? do_page_fault+0x60/0x500 [ 659.478538] ? page_fault+0x2f/0x50 [ 659.480686] lowmem_reserve[]: [ 659.485229] page_fault+0x45/0x50 [ 659.487284] 0 [ 659.491255] RIP: a077f:0x3 [ 659.491259] RSP: 001f:00007ffd37b9aafc EFLAGS: 00000032 [ 659.500026] Mem-Info: [ 659.517092] mems_allowed=0-1 [ 659.527680] active_anon:13358 inactive_anon:33140 isolated_anon:0 [ 659.527680] active_file:15 inactive_file:14 isolated_file:0 [ 659.527680] unevictable:0 dirty:0 writeback:0 unstable:0 [ 659.527680] slab_reclaimable:12752 slab_unreclaimable:118648 [ 659.527680] mapped:52803 shmem:33555 pagetables:796 bounce:0 [ 659.527680] free:14072 free_pcp:60 free_cma:0 [ 659.563040] 0 [ 659.581203] Node 0 active_anon:52900kB inactive_anon:87564kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176396kB dirty:0kB writeback:0kB shmem:88876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 659.596641] 0 [ 659.634936] Node 1 active_anon:532kB inactive_anon:44996kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 659.664283] CPU: 0 PID: 21823 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 659.691218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 659.695435] Node 0 [ 659.700584] Call Trace: [ 659.700612] dump_stack+0x1b2/0x281 [ 659.700627] warn_alloc.cold+0x96/0x1cc [ 659.700638] ? zone_watermark_ok_safe+0x220/0x220 [ 659.700648] ? usleep_range+0x130/0x130 [ 659.700657] ? try_to_free_pages+0x23f/0x6e0 [ 659.700667] ? _find_next_bit+0xdb/0x100 [ 659.700689] ? run_timer_softirq+0x5a0/0x5a0 [ 659.700704] __alloc_pages_nodemask+0x2127/0x2720 [ 659.707142] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 659.709498] ? lock_acquire+0x170/0x3f0 [ 659.709514] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 659.709525] ? ion_page_pool_alloc+0x9e/0x1b0 [ 659.709541] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 659.709555] ? policy_node+0xe3/0x110 [ 659.709576] alloc_pages_current+0x155/0x260 [ 659.709589] ion_page_pool_alloc+0x118/0x1b0 [ 659.709600] ion_system_heap_allocate+0x133/0x8c0 [ 659.725616] lowmem_reserve[]: [ 659.727997] ? ion_alloc+0x187/0x810 [ 659.728013] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 659.728024] ? ion_system_contig_heap_create+0x130/0x130 [ 659.728033] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 659.728046] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 659.728057] ion_alloc+0x204/0x810 [ 659.732115] 0 [ 659.736783] ? ion_dma_buf_release+0x40/0x40 [ 659.752692] 2717 [ 659.768276] ? __might_fault+0x177/0x1b0 [ 659.768291] ion_ioctl+0xea/0x1f0 [ 659.768302] ? ion_query_heaps+0x360/0x360 [ 659.768314] ? ion_query_heaps+0x360/0x360 [ 659.768324] do_vfs_ioctl+0x75a/0xff0 [ 659.768336] ? ioctl_preallocate+0x1a0/0x1a0 [ 659.768346] ? lock_downgrade+0x740/0x740 [ 659.768360] ? __fget+0x225/0x360 [ 659.768369] ? do_vfs_ioctl+0xff0/0xff0 [ 659.768380] ? security_file_ioctl+0x83/0xb0 [ 659.768390] SyS_ioctl+0x7f/0xb0 [ 659.768398] ? do_vfs_ioctl+0xff0/0xff0 [ 659.768409] do_syscall_64+0x1d5/0x640 [ 659.768428] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 659.784742] 2718 [ 659.788072] RIP: 0033:0x466459 [ 659.788077] RSP: 002b:00007f91d38e9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 659.788087] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 659.788092] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 659.788097] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 659.788102] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 659.788107] R13: 00007ffd37b9a83f R14: 00007f91d38e9300 R15: 0000000000022000 [ 659.799115] 0 [ 659.811798] 2718 [ 659.821689] 0 [ 659.842159] 2718 [ 659.884995] Node 0 [ 659.914276] Node 0 [ 659.927935] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 659.954518] DMA32 free:19040kB min:36200kB low:45248kB high:54296kB active_anon:52888kB inactive_anon:87564kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7840kB pagetables:3008kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 659.965431] lowmem_reserve[]: [ 659.981681] lowmem_reserve[]: [ 659.995234] Bluetooth: hci4 command 0x0419 tx timeout [ 660.003504] 0 0 0 0 0 [ 660.079025] Node 1 Normal free:67648kB min:53696kB low:67120kB high:80544kB active_anon:532kB inactive_anon:44996kB active_file:28kB inactive_file:328kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:176kB bounce:0kB free_pcp:376kB local_pcp:228kB free_cma:0kB [ 660.131639] 0 0 0 0 0 [ 660.135146] lowmem_reserve[]: 0 0 0 0 0 [ 660.140075] Node 0 DMA: 1*4kB (M) 7*8kB (UME) 32*16kB (UME) 29*32kB (UME) 5*64kB (UME) 2*128kB (UE) 5*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11036kB [ 660.143040] Node 0 [ 660.157606] Node 0 DMA32: 652*4kB (UME) 716*8kB (UME) 233*16kB (UME) 62*32kB (UME) 74*64kB (UM) 12*128kB (M) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 21600kB [ 660.181594] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 660.218777] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 660.237677] Node 1 Normal: 45*4kB (U) 46*8kB (U) 51*16kB (UME) 247*32kB (UE) 882*64kB (UM) 428*128kB (UM) 17*256kB (UM) 1*512kB (M) 17*1024kB (UM) 0*2048kB 0*4096kB = 142772kB [ 660.254570] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 660.267517] lowmem_reserve[]: 0 0 0 0 0 [ 660.271807] Node 1 Normal free:124620kB min:53696kB low:67120kB high:80544kB active_anon:532kB inactive_anon:44996kB active_file:28kB inactive_file:2628kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:176kB bounce:0kB free_pcp:884kB local_pcp:172kB free_cma:0kB [ 660.302871] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 660.337317] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 660.388181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 660.405693] lowmem_reserve[]: 0 0 0 0 0 [ 660.416876] Node 0 DMA: 1*4kB (M) 7*8kB (UME) 32*16kB (UME) 29*32kB (UME) 5*64kB (UME) 2*128kB (UE) 5*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11036kB [ 660.427503] 34180 total pagecache pages [ 660.452235] Node 0 DMA32: 672*4kB (UME) 753*8kB (UME) 320*16kB (UME) 126*32kB (UME) 4*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18120kB [ 660.457627] 0 pages in swap cache [ 660.489112] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 660.503436] Swap cache stats: add 0, delete 0, find 0/0 [ 660.507347] Node 0 [ 660.509123] Free swap = 0kB [ 660.509127] Total swap = 0kB [ 660.509134] 2097051 pages RAM [ 660.509137] 0 pages HighMem/MovableOnly [ 660.509140] 363841 pages reserved [ 660.509143] 0 pages cma reserved [ 660.511251] syz-executor.5 cpuset= [ 660.525369] Normal: [ 660.538948] / mems_allowed=0-1 [ 660.544770] CPU: 0 PID: 21823 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 660.552744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 660.552852] 0*4kB [ 660.562239] Call Trace: [ 660.562260] dump_stack+0x1b2/0x281 [ 660.562274] warn_alloc.cold+0x96/0x1cc [ 660.562286] ? zone_watermark_ok_safe+0x220/0x220 [ 660.562310] __alloc_pages_nodemask+0x2127/0x2720 [ 660.562327] ? lock_acquire+0x170/0x3f0 [ 660.562342] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 660.562358] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 660.583971] 0*8kB [ 660.585683] ? __mutex_unlock_slowpath+0x75/0x770 [ 660.610853] ? retint_kernel+0x2d/0x2d [ 660.614757] alloc_pages_current+0x155/0x260 [ 660.619188] ion_page_pool_alloc+0x118/0x1b0 [ 660.623702] ion_system_heap_allocate+0x133/0x8c0 [ 660.628814] ? _raw_spin_unlock+0x29/0x40 [ 660.633239] ? _ion_heap_freelist_drain+0x6e/0x410 [ 660.636726] 0*16kB [ 660.638420] ? ion_system_contig_heap_create+0x130/0x130 [ 660.638432] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 660.638443] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 660.638455] ion_alloc+0x27a/0x810 [ 660.638470] ? ion_dma_buf_release+0x40/0x40 [ 660.638483] ? __might_fault+0x177/0x1b0 [ 660.638495] ion_ioctl+0xea/0x1f0 [ 660.662111] 0*32kB [ 660.664959] ? ion_query_heaps+0x360/0x360 [ 660.681300] ? ion_query_heaps+0x360/0x360 [ 660.685858] do_vfs_ioctl+0x75a/0xff0 [ 660.689768] ? ioctl_preallocate+0x1a0/0x1a0 [ 660.694322] ? lock_downgrade+0x740/0x740 [ 660.695571] 0*64kB [ 660.698589] ? __fget+0x225/0x360 [ 660.698599] ? do_vfs_ioctl+0xff0/0xff0 [ 660.698609] ? security_file_ioctl+0x83/0xb0 [ 660.698618] SyS_ioctl+0x7f/0xb0 [ 660.698626] ? do_vfs_ioctl+0xff0/0xff0 [ 660.698643] do_syscall_64+0x1d5/0x640 [ 660.698661] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 660.698670] RIP: 0033:0x466459 [ 660.698674] RSP: 002b:00007f91d38e9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 660.698684] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 660.698689] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 660.698693] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 660.698698] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 660.698706] R13: 00007ffd37b9a83f R14: 00007f91d38e9300 R15: 0000000000022000 [ 660.714924] 0*128kB [ 660.726359] warn_alloc_show_mem: 1 callbacks suppressed [ 660.726363] Mem-Info: [ 660.753592] 0*256kB [ 660.765702] active_anon:13358 inactive_anon:33140 isolated_anon:0 [ 660.765702] active_file:13 inactive_file:2 isolated_file:0 [ 660.765702] unevictable:0 dirty:0 writeback:0 unstable:0 [ 660.765702] slab_reclaimable:12748 slab_unreclaimable:118660 [ 660.765702] mapped:52828 shmem:33555 pagetables:796 bounce:0 [ 660.765702] free:13932 free_pcp:0 free_cma:0 [ 660.785037] 0*512kB [ 660.799962] Node 0 active_anon:52900kB inactive_anon:87564kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176396kB dirty:0kB writeback:0kB shmem:88876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 660.839372] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 660.871458] Node 1 active_anon:532kB inactive_anon:44996kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34916kB dirty:0kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 660.875427] Node 1 [ 660.912671] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 660.926221] Normal: 54*4kB (UM) 60*8kB (UM) 30*16kB (UME) 19*32kB (UME) 34*64kB (UM) 132*128kB (UM) 20*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 27000kB [ 660.956236] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 660.987109] Node 0 DMA32 free:18084kB min:36200kB low:45248kB high:54296kB active_anon:52888kB inactive_anon:87564kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7840kB pagetables:3008kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 660.995116] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 661.036963] lowmem_reserve[]: 0 0 0 0 0 [ 661.039732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 661.044658] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 661.063975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 661.105405] lowmem_reserve[]: 0 0 0 0 0 [ 661.111050] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 661.111837] Node 1 Normal free:27000kB min:53696kB low:67120kB high:80544kB active_anon:552kB inactive_anon:44996kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:56kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:176kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 661.133847] 33598 total pagecache pages [ 661.176565] 0 pages in swap cache [ 661.180104] Swap cache stats: add 0, delete 0, find 0/0 [ 661.181897] lowmem_reserve[]: [ 661.185497] Free swap = 0kB [ 661.185505] 0 [ 661.197879] Total swap = 0kB [ 661.202704] 2097051 pages RAM [ 661.205817] 0 pages HighMem/MovableOnly [ 661.209402] 0 0 0 0 [ 661.212237] Node 0 DMA: 1*4kB (M) 7*8kB (UME) 32*16kB (UME) 29*32kB (UME) 5*64kB (UME) 2*128kB (UE) 5*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11036kB [ 661.216549] 363841 pages reserved [ 661.242045] 0 pages cma reserved [ 661.245434] Out of memory (oom_kill_allocating_task): Kill process 21378 (syz-executor.5) score 0 or sacrifice child [ 661.247240] Node 0 [ 661.265833] Killed process 21378 (syz-executor.5) total-vm:93120kB, anon-rss:108kB, file-rss:34820kB, shmem-rss:0kB [ 661.274082] DMA32: 673*4kB (UME) 757*8kB (UME) 320*16kB (UME) 126*32kB (UME) 4*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18156kB [ 661.314332] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 661.316162] oom_reaper: reaped process 21378 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 661.332776] Node 1 Normal: 54*4kB (UM) 60*8kB (UM) 30*16kB (UME) 19*32kB (UME) 34*64kB (UM) 132*128kB (UM) 20*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 27000kB [ 661.363390] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 661.397047] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 661.399215] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 661.427573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 661.436741] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 661.445868] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 661.447556] systemd-journal cpuset= [ 661.458758] syz-executor.0: [ 661.461722] syz-executor.4: [ 661.462942] page allocation failure: order:0 [ 661.465962] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 661.486673] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 661.493221] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 661.503334] / mems_allowed=0-1 [ 661.507030] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 661.508497] 33598 total pagecache pages [ 661.514267] CPU: 1 PID: 20717 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 661.516379] 0 pages in swap cache [ 661.524491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 661.524495] Call Trace: [ 661.524515] dump_stack+0x1b2/0x281 [ 661.524528] dump_header+0x178/0x82f [ 661.524540] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 661.537488] syz-executor.4 cpuset= [ 661.537963] ? ___ratelimit+0x2cd/0x530 [ 661.540650] / [ 661.544518] oom_kill_process.cold+0x10/0xb18 [ 661.557485] mems_allowed=0-1 [ 661.561242] out_of_memory+0xe3e/0x1190 [ 661.567501] Swap cache stats: add 0, delete 0, find 0/0 [ 661.567667] ? oom_killer_disable+0x1c0/0x1c0 [ 661.571005] Free swap = 0kB [ 661.575212] ? mutex_trylock+0x152/0x1a0 [ 661.593152] __alloc_pages_nodemask+0x23e1/0x2720 [ 661.598030] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 661.603060] ? cache_grow_begin+0x41/0x630 [ 661.607487] Total swap = 0kB [ 661.607749] cache_grow_begin+0x91/0x630 [ 661.610771] 2097051 pages RAM [ 661.614857] ? cache_grow_begin+0x91/0x630 [ 661.622487] fallback_alloc+0x207/0x2c0 [ 661.626963] kmem_cache_alloc+0x1e5/0x3c0 [ 661.631303] getname_flags+0xc8/0x550 [ 661.635119] do_sys_open+0x1ce/0x410 [ 661.637506] 0 pages HighMem/MovableOnly [ 661.638928] ? filp_open+0x60/0x60 [ 661.643026] 363841 pages reserved [ 661.646677] ? do_syscall_64+0x4c/0x640 [ 661.654365] ? do_sys_open+0x410/0x410 [ 661.658320] do_syscall_64+0x1d5/0x640 [ 661.662787] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 661.668158] RIP: 0033:0x7f33da827840 [ 661.672108] RSP: 002b:00007ffca9b73e78 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 661.677501] 0 pages cma reserved [ 661.680328] RAX: ffffffffffffffda RBX: 00007ffca9b74180 RCX: 00007f33da827840 [ 661.680336] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 00005651c64f5660 [ 661.698954] RBP: 000000000000000d R08: 000000000000ffc0 R09: 00000000ffffffff [ 661.706315] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 661.713688] R13: 00005651c64f1040 R14: 00007ffca9b74140 R15: 00005651c64f58a0 [ 661.721136] CPU: 0 PID: 21826 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 661.729302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 661.739116] Call Trace: [ 661.742018] dump_stack+0x1b2/0x281 [ 661.745859] warn_alloc.cold+0x96/0x1cc [ 661.749935] ? zone_watermark_ok_safe+0x220/0x220 [ 661.754943] ? usleep_range+0x130/0x130 [ 661.759017] ? try_to_free_pages+0x23f/0x6e0 [ 661.763682] ? _find_next_bit+0xdb/0x100 [ 661.768059] ? run_timer_softirq+0x5a0/0x5a0 [ 661.772674] __alloc_pages_nodemask+0x2127/0x2720 [ 661.777638] ? lock_acquire+0x170/0x3f0 [ 661.781957] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 661.787008] ? ion_page_pool_alloc+0x9e/0x1b0 [ 661.791809] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 661.797465] ? alloc_pages_current+0x123/0x260 [ 661.802058] alloc_pages_current+0x155/0x260 [ 661.806992] ion_page_pool_alloc+0x118/0x1b0 [ 661.813528] ion_system_heap_allocate+0x133/0x8c0 [ 661.818392] ? ion_alloc+0x187/0x810 [ 661.822492] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 661.827958] ? ion_system_contig_heap_create+0x130/0x130 [ 661.833772] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 661.838815] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 661.843888] ion_alloc+0x204/0x810 [ 661.847443] ? ion_dma_buf_release+0x40/0x40 [ 661.851884] ? __might_fault+0x177/0x1b0 [ 661.855966] ion_ioctl+0xea/0x1f0 [ 661.859810] ? ion_query_heaps+0x360/0x360 [ 661.864540] ? ion_query_heaps+0x360/0x360 [ 661.868957] do_vfs_ioctl+0x75a/0xff0 [ 661.872960] ? ioctl_preallocate+0x1a0/0x1a0 [ 661.877531] ? lock_downgrade+0x740/0x740 [ 661.881821] ? __fget+0x225/0x360 [ 661.885453] ? do_vfs_ioctl+0xff0/0xff0 [ 661.889653] ? security_file_ioctl+0x83/0xb0 [ 661.894401] SyS_ioctl+0x7f/0xb0 [ 661.897802] ? do_vfs_ioctl+0xff0/0xff0 [ 661.901984] do_syscall_64+0x1d5/0x640 [ 661.907124] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 661.912448] RIP: 0033:0x466459 [ 661.915722] RSP: 002b:00007ff90c340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 661.923528] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 661.931128] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 661.938673] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 661.946153] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 661.953565] R13: 00007ffce90c212f R14: 00007ff90c340300 R15: 0000000000022000 [ 661.961332] CPU: 1 PID: 21803 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 661.970894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 661.971964] syz-executor.5: [ 661.980617] Call Trace: [ 661.980637] dump_stack+0x1b2/0x281 [ 661.980650] warn_alloc.cold+0x96/0x1cc [ 661.980663] ? zone_watermark_ok_safe+0x220/0x220 [ 661.997487] page allocation failure: order:0 [ 661.999496] ? usleep_range+0x130/0x130 [ 661.999501] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 662.003919] ? try_to_free_pages+0x23f/0x6e0 [ 662.013172] syz-executor.5 cpuset= [ 662.015736] ? _find_next_bit+0xdb/0x100 [ 662.027487] / mems_allowed=0-1 [ 662.028030] ? run_timer_softirq+0x5a0/0x5a0 [ 662.028049] __alloc_pages_nodemask+0x2127/0x2720 [ 662.041287] ? lock_acquire+0x170/0x3f0 [ 662.045271] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 662.050495] ? ion_page_pool_alloc+0x9e/0x1b0 [ 662.055085] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 662.060774] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 662.066043] alloc_pages_current+0x155/0x260 [ 662.070562] ion_page_pool_alloc+0x118/0x1b0 [ 662.075044] ion_system_heap_allocate+0x133/0x8c0 [ 662.080167] ? ion_alloc+0x187/0x810 [ 662.084336] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 662.089919] ? ion_system_contig_heap_create+0x130/0x130 [ 662.095962] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 662.101053] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 662.105914] ion_alloc+0x204/0x810 [ 662.109468] ? ion_dma_buf_release+0x40/0x40 [ 662.114031] ? __might_fault+0x177/0x1b0 [ 662.118128] ion_ioctl+0xea/0x1f0 [ 662.122030] ? ion_query_heaps+0x360/0x360 [ 662.126273] ? ion_query_heaps+0x360/0x360 [ 662.130520] do_vfs_ioctl+0x75a/0xff0 [ 662.134656] ? ioctl_preallocate+0x1a0/0x1a0 [ 662.139210] ? lock_downgrade+0x740/0x740 [ 662.143776] ? __fget+0x225/0x360 [ 662.147497] ? do_vfs_ioctl+0xff0/0xff0 [ 662.151715] ? security_file_ioctl+0x83/0xb0 [ 662.156213] SyS_ioctl+0x7f/0xb0 [ 662.159584] ? do_vfs_ioctl+0xff0/0xff0 [ 662.163597] do_syscall_64+0x1d5/0x640 [ 662.168970] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 662.174446] RIP: 0033:0x466459 [ 662.177883] RSP: 002b:00007f5fb7692188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 662.186179] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 662.193814] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 662.201389] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 662.208751] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 662.216200] R13: 00007fff6f6f7f0f R14: 00007f5fb7692300 R15: 0000000000022000 [ 662.223749] CPU: 0 PID: 21808 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 662.231738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 662.234062] Mem-Info: [ 662.241259] Call Trace: [ 662.241280] dump_stack+0x1b2/0x281 [ 662.241293] warn_alloc.cold+0x96/0x1cc [ 662.241305] ? zone_watermark_ok_safe+0x220/0x220 [ 662.241315] ? usleep_range+0x130/0x130 [ 662.241323] ? try_to_free_pages+0x23f/0x6e0 [ 662.241333] ? _find_next_bit+0xdb/0x100 [ 662.241343] ? run_timer_softirq+0x5a0/0x5a0 [ 662.241358] __alloc_pages_nodemask+0x2127/0x2720 [ 662.241373] ? lock_acquire+0x170/0x3f0 [ 662.241387] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 662.241398] ? ion_page_pool_alloc+0x9e/0x1b0 [ 662.241414] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 662.241434] alloc_pages_current+0x155/0x260 [ 662.241447] ion_page_pool_alloc+0x118/0x1b0 [ 662.241458] ion_system_heap_allocate+0x133/0x8c0 [ 662.245335] active_anon:13343 inactive_anon:33140 isolated_anon:0 [ 662.245335] active_file:26 inactive_file:10 isolated_file:0 [ 662.245335] unevictable:0 dirty:0 writeback:18 unstable:0 [ 662.245335] slab_reclaimable:12748 slab_unreclaimable:118651 [ 662.245335] mapped:52807 shmem:33555 pagetables:773 bounce:0 [ 662.245335] free:13706 free_pcp:64 free_cma:0 [ 662.246933] ? ion_alloc+0x187/0x810 [ 662.257330] Node 0 active_anon:52820kB inactive_anon:87564kB active_file:40kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176412kB dirty:0kB writeback:12kB shmem:88876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 662.259598] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 662.259610] ? ion_system_contig_heap_create+0x130/0x130 [ 662.259621] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 662.259633] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 662.259644] ion_alloc+0x204/0x810 [ 662.259659] ? ion_dma_buf_release+0x40/0x40 [ 662.259671] ? __might_fault+0x177/0x1b0 [ 662.259683] ion_ioctl+0xea/0x1f0 [ 662.265008] Node 1 active_anon:552kB inactive_anon:44996kB active_file:64kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:60kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 662.268236] ? ion_query_heaps+0x360/0x360 [ 662.268249] ? ion_query_heaps+0x360/0x360 [ 662.268259] do_vfs_ioctl+0x75a/0xff0 [ 662.268271] ? ioctl_preallocate+0x1a0/0x1a0 [ 662.268281] ? lock_downgrade+0x740/0x740 [ 662.268295] ? __fget+0x225/0x360 [ 662.268304] ? do_vfs_ioctl+0xff0/0xff0 [ 662.268315] ? security_file_ioctl+0x83/0xb0 [ 662.268325] SyS_ioctl+0x7f/0xb0 [ 662.268334] ? do_vfs_ioctl+0xff0/0xff0 [ 662.280244] Node 0 [ 662.281655] do_syscall_64+0x1d5/0x640 [ 662.285629] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 662.290629] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 662.290638] RIP: 0033:0x466459 [ 662.290642] RSP: 002b:00007f8e9dbaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 662.290652] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 662.290656] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 662.290661] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 662.290666] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 662.290671] R13: 00007ffdd5fc694f R14: 00007f8e9dbaf300 R15: 0000000000022000 [ 662.306299] CPU: 0 PID: 21823 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 662.315124] lowmem_reserve[]: [ 662.315535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 662.354612] 0 [ 662.383013] Call Trace: [ 662.383037] dump_stack+0x1b2/0x281 [ 662.383050] warn_alloc.cold+0x96/0x1cc [ 662.383061] ? zone_watermark_ok_safe+0x220/0x220 [ 662.383070] ? usleep_range+0x130/0x130 [ 662.383078] ? try_to_free_pages+0x23f/0x6e0 [ 662.383087] ? _find_next_bit+0xdb/0x100 [ 662.383097] ? run_timer_softirq+0x5a0/0x5a0 [ 662.383112] __alloc_pages_nodemask+0x2127/0x2720 [ 662.383129] ? lock_acquire+0x170/0x3f0 [ 662.383144] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 662.383155] ? ion_page_pool_alloc+0x9e/0x1b0 [ 662.383170] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 662.383183] ? retint_kernel+0x2d/0x2d [ 662.393764] 2717 [ 662.394835] alloc_pages_current+0x155/0x260 [ 662.400136] 2718 [ 662.405010] ion_page_pool_alloc+0x118/0x1b0 [ 662.412913] 2718 [ 662.413218] ion_system_heap_allocate+0x133/0x8c0 [ 662.417575] 2718 [ 662.420987] ? _raw_spin_unlock+0x29/0x40 [ 662.457469] ? _ion_heap_freelist_drain+0x6e/0x410 [ 662.461691] Node 0 [ 662.466659] ? ion_system_contig_heap_create+0x130/0x130 [ 662.475196] DMA32 free:17744kB min:36200kB low:45248kB high:54296kB active_anon:52808kB inactive_anon:87564kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7840kB pagetables:2916kB bounce:0kB free_pcp:136kB local_pcp:120kB free_cma:0kB [ 662.478303] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 662.478317] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 662.478329] ion_alloc+0x27a/0x810 [ 662.478344] ? ion_dma_buf_release+0x40/0x40 [ 662.478356] ? __might_fault+0x177/0x1b0 [ 662.478368] ion_ioctl+0xea/0x1f0 [ 662.482775] lowmem_reserve[]: [ 662.486151] ? ion_query_heaps+0x360/0x360 [ 662.494523] Mem-Info: [ 662.496578] ? ion_query_heaps+0x360/0x360 [ 662.527068] 0 [ 662.528037] do_vfs_ioctl+0x75a/0xff0 [ 662.528051] ? ioctl_preallocate+0x1a0/0x1a0 [ 662.528060] ? lock_downgrade+0x740/0x740 [ 662.528073] ? __fget+0x225/0x360 [ 662.528081] ? do_vfs_ioctl+0xff0/0xff0 [ 662.528092] ? security_file_ioctl+0x83/0xb0 [ 662.528102] SyS_ioctl+0x7f/0xb0 [ 662.528112] ? do_vfs_ioctl+0xff0/0xff0 [ 662.531603] 0 [ 662.539645] do_syscall_64+0x1d5/0x640 [ 662.539662] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 662.539672] RIP: 0033:0x466459 [ 662.539676] RSP: 002b:00007f91d38e9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 662.539685] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 662.539690] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 662.539695] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 662.539699] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 662.539704] R13: 00007ffd37b9a83f R14: 00007f91d38e9300 R15: 0000000000022000 [ 662.874808] active_anon:13368 inactive_anon:33140 isolated_anon:0 [ 662.874808] active_file:240 inactive_file:609 isolated_file:0 [ 662.874808] unevictable:0 dirty:25 writeback:0 unstable:0 [ 662.874808] slab_reclaimable:12748 slab_unreclaimable:118651 [ 662.874808] mapped:53382 shmem:33555 pagetables:773 bounce:0 [ 662.874808] free:107151 free_pcp:55 free_cma:0 [ 662.926148] Node 0 active_anon:52820kB inactive_anon:87564kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176412kB dirty:0kB writeback:0kB shmem:88876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 662.955745] Node 1 active_anon:652kB inactive_anon:44996kB active_file:1132kB inactive_file:1868kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37116kB dirty:100kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 662.986111] Node 0 DMA free:11124kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 663.015219] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 663.020376] Node 0 DMA32 free:33944kB min:36200kB low:45248kB high:54296kB active_anon:52808kB inactive_anon:87564kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7840kB pagetables:2916kB bounce:0kB free_pcp:296kB local_pcp:268kB free_cma:0kB [ 663.050774] lowmem_reserve[]: 0 0 0 0 0 [ 663.055794] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 663.117549] lowmem_reserve[]: 0 0 0 0 0 [ 663.122465] Node 1 Normal free:65048kB min:53696kB low:67120kB high:80544kB active_anon:652kB inactive_anon:44996kB active_file:1132kB inactive_file:1868kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:176kB bounce:0kB free_pcp:432kB local_pcp:220kB free_cma:0kB [ 663.167552] lowmem_reserve[]: 0 0 0 0 0 [ 663.172205] Node 0 DMA: 0*4kB 2*8kB (UE) 28*16kB (UME) 29*32kB (UME) 4*64kB (UME) 1*128kB (E) 6*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10992kB [ 663.217516] Node 0 DMA32: 682*4kB (UME) 859*8kB (UME) 391*16kB (UME) 448*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 30192kB [ 663.232357] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 663.287526] Node 1 Normal: 525*4kB (UM) 447*8kB (UM) 377*16kB (UME) 374*32kB (UME) 382*64kB (UM) 72*128kB (UM) 21*256kB (UM) 4*512kB (UM) 15*1024kB (U) 0*2048kB 0*4096kB = 80124kB [ 663.327531] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 663.347531] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 663.356474] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 663.387531] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 663.396544] 33627 total pagecache pages [ 663.400934] 0 0 0 [ 663.403115] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 663.442659] 0 pages in swap cache [ 663.446150] Swap cache stats: add 0, delete 0, find 0/0 [ 663.451746] Free swap = 0kB [ 663.454780] Total swap = 0kB [ 663.457883] 2097051 pages RAM [ 663.461001] 0 pages HighMem/MovableOnly [ 663.465063] 363841 pages reserved [ 663.468628] 0 pages cma reserved [ 663.473183] lowmem_reserve[]: 0 0 0 0 0 [ 663.477400] Node 1 Normal free:27840kB min:53696kB low:67120kB high:80544kB active_anon:652kB inactive_anon:44996kB active_file:112kB inactive_file:304kB unevictable:0kB writepending:148kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:176kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 663.607560] lowmem_reserve[]: 0 0 0 0 0 [ 663.611976] Node 0 DMA: 2*4kB (UM) 8*8kB (UME) 31*16kB (UME) 29*32kB (UME) 4*64kB (UME) 1*128kB (E) 6*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11096kB [ 663.630771] Node 0 DMA32: 926*4kB (UME) 1307*8kB (UME) 4904*16kB (UME) 663*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 113840kB [ 663.697509] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 663.747517] Node 1 Normal: 868*4kB (UM) 925*8kB (UM) 898*16kB (UME) 791*32kB (UME) 2424*64kB (UM) 697*128kB (UM) 24*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 301560kB [ 663.777508] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 663.787587] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 663.797111] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 663.847564] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 663.856443] 33627 total pagecache pages [ 663.887546] 0 pages in swap cache [ 663.891226] Swap cache stats: add 0, delete 0, find 0/0 [ 663.896599] Free swap = 0kB [ 663.927526] Total swap = 0kB [ 663.930849] 2097051 pages RAM [ 663.934072] 0 pages HighMem/MovableOnly [ 663.957542] 363841 pages reserved [ 663.961163] 0 pages cma reserved [ 663.964818] Out of memory (oom_kill_allocating_task): Kill process 20717 (systemd-journal) score 0 or sacrifice child [ 663.975982] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 663.988175] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 663.988797] syz-executor.1: [ 664.001120] Killed process 20717 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:4kB, shmem-rss:2316kB [ 664.013240] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 664.015499] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 664.039600] oom_reaper: reaped process 21808 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 664.041128] CPU: 0 PID: 21826 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 664.049873] syz-executor.0 cpuset= [ 664.058352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 664.058357] Call Trace: [ 664.058374] dump_stack+0x1b2/0x281 [ 664.058388] warn_alloc.cold+0x96/0x1cc [ 664.058400] ? zone_watermark_ok_safe+0x220/0x220 [ 664.058429] __alloc_pages_nodemask+0x2127/0x2720 [ 664.077563] syz-executor.1 cpuset= [ 664.078014] ? lock_acquire+0x170/0x3f0 [ 664.082248] / [ 664.087257] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 664.092530] / [ 664.096347] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 664.101214] oom_reaper: reaped process 20717 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2332kB [ 664.102214] ? __mutex_unlock_slowpath+0x75/0x770 [ 664.118670] mems_allowed=0-1 [ 664.124531] alloc_pages_current+0x155/0x260 [ 664.136932] oom_reaper: reaped process 21803 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 664.137583] ion_page_pool_alloc+0x118/0x1b0 [ 664.137596] ion_system_heap_allocate+0x133/0x8c0 [ 664.137608] ? _raw_spin_unlock+0x29/0x40 [ 664.137618] ? _ion_heap_freelist_drain+0x6e/0x410 [ 664.137631] ? ion_system_contig_heap_create+0x130/0x130 [ 664.149565] mems_allowed=0-1 [ 664.153099] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 664.182040] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 664.187128] ion_alloc+0x27a/0x810 [ 664.190690] ? ion_dma_buf_release+0x40/0x40 [ 664.195200] ? __might_fault+0x177/0x1b0 [ 664.199285] ion_ioctl+0xea/0x1f0 [ 664.202743] ? ion_query_heaps+0x360/0x360 [ 664.207211] ? ion_query_heaps+0x360/0x360 [ 664.211776] do_vfs_ioctl+0x75a/0xff0 [ 664.215736] ? ioctl_preallocate+0x1a0/0x1a0 [ 664.220286] ? lock_downgrade+0x740/0x740 [ 664.224715] ? __fget+0x225/0x360 [ 664.228244] ? do_vfs_ioctl+0xff0/0xff0 [ 664.232323] ? security_file_ioctl+0x83/0xb0 [ 664.236739] SyS_ioctl+0x7f/0xb0 [ 664.240558] ? do_vfs_ioctl+0xff0/0xff0 [ 664.244798] do_syscall_64+0x1d5/0x640 [ 664.249071] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 664.254889] RIP: 0033:0x466459 [ 664.258087] RSP: 002b:00007ff90c340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 664.266196] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 664.273923] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 664.281294] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 664.288783] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 664.296298] R13: 00007ffce90c212f R14: 00007ff90c340300 R15: 0000000000022000 [ 664.304123] CPU: 1 PID: 21803 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 664.311472] warn_alloc_show_mem: 3 callbacks suppressed [ 664.311476] Mem-Info: [ 664.312846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 664.318843] active_anon:13197 inactive_anon:33140 isolated_anon:0 [ 664.318843] active_file:14 inactive_file:81 isolated_file:0 [ 664.318843] unevictable:0 dirty:1 writeback:0 unstable:0 [ 664.318843] slab_reclaimable:12728 slab_unreclaimable:118114 [ 664.318843] mapped:52807 shmem:33555 pagetables:773 bounce:0 [ 664.318843] free:55991 free_pcp:105 free_cma:0 [ 664.321576] Call Trace: [ 664.330999] Node 0 active_anon:52220kB inactive_anon:87564kB active_file:28kB inactive_file:292kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176412kB dirty:4kB writeback:0kB shmem:88876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 664.366790] dump_stack+0x1b2/0x281 [ 664.366804] warn_alloc.cold+0x96/0x1cc [ 664.366816] ? zone_watermark_ok_safe+0x220/0x220 [ 664.366837] __alloc_pages_nodemask+0x2127/0x2720 [ 664.369631] Node 1 active_anon:568kB inactive_anon:44996kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 664.398432] ? lock_acquire+0x170/0x3f0 [ 664.398449] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 664.398467] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 664.402267] Node 0 [ 664.406247] ? __mutex_unlock_slowpath+0x75/0x770 [ 664.411284] DMA free:11032kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 664.416642] alloc_pages_current+0x155/0x260 [ 664.445132] lowmem_reserve[]: [ 664.449374] ion_page_pool_alloc+0x118/0x1b0 [ 664.449387] ion_system_heap_allocate+0x133/0x8c0 [ 664.449399] ? _raw_spin_unlock+0x29/0x40 [ 664.454655] 0 [ 664.460557] ? _ion_heap_freelist_drain+0x6e/0x410 [ 664.460567] ? ion_system_contig_heap_create+0x130/0x130 [ 664.460578] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 664.460590] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 664.460601] ion_alloc+0x27a/0x810 [ 664.462837] 2717 [ 664.467691] ? ion_dma_buf_release+0x40/0x40 [ 664.467703] ? __might_fault+0x177/0x1b0 [ 664.467716] ion_ioctl+0xea/0x1f0 [ 664.494607] 2718 [ 664.499235] ? ion_query_heaps+0x360/0x360 [ 664.499252] ? ion_query_heaps+0x360/0x360 [ 664.502350] 2718 [ 664.507228] do_vfs_ioctl+0x75a/0xff0 [ 664.512435] 2718 [ 664.516777] ? ioctl_preallocate+0x1a0/0x1a0 [ 664.523743] ? lock_downgrade+0x740/0x740 [ 664.529377] Node 0 [ 664.534373] ? __fget+0x225/0x360 [ 664.539460] DMA32 free:138760kB min:36200kB low:45248kB high:54296kB active_anon:52204kB inactive_anon:87564kB active_file:28kB inactive_file:304kB unevictable:0kB writepending:4kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7840kB pagetables:2916kB bounce:0kB free_pcp:416kB local_pcp:176kB free_cma:0kB [ 664.543141] ? do_vfs_ioctl+0xff0/0xff0 [ 664.545417] lowmem_reserve[]: [ 664.550007] ? security_file_ioctl+0x83/0xb0 [ 664.550017] SyS_ioctl+0x7f/0xb0 [ 664.550026] ? do_vfs_ioctl+0xff0/0xff0 [ 664.550044] do_syscall_64+0x1d5/0x640 [ 664.554266] 0 [ 664.557731] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 664.557741] RIP: 0033:0x466459 [ 664.557748] RSP: 002b:00007f5fb7692188 EFLAGS: 00000246 [ 664.559808] 0 [ 664.564126] ORIG_RAX: 0000000000000010 [ 664.564135] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 664.568781] 0 [ 664.571031] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 664.575067] 0 [ 664.577359] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 664.582108] 0 [ 664.586468] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 664.592350] R13: 00007fff6f6f7f0f R14: 00007f5fb7692300 R15: 0000000000022000 [ 664.621739] Node 0 [ 664.634328] CPU: 1 PID: 21808 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 664.645151] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 664.645376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 664.647425] lowmem_reserve[]: [ 664.652985] Call Trace: [ 664.653003] dump_stack+0x1b2/0x281 [ 664.653018] warn_alloc.cold+0x96/0x1cc [ 664.653030] ? zone_watermark_ok_safe+0x220/0x220 [ 664.656224] 0 [ 664.662012] __alloc_pages_nodemask+0x2127/0x2720 [ 664.662029] ? lock_acquire+0x170/0x3f0 [ 664.663973] 0 [ 664.668346] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 664.668365] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 664.668376] ? __mutex_unlock_slowpath+0x75/0x770 [ 664.676243] 0 [ 664.678197] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 664.678213] alloc_pages_current+0x155/0x260 [ 664.678229] ion_page_pool_alloc+0x118/0x1b0 [ 664.678242] ion_system_heap_allocate+0x133/0x8c0 [ 664.685778] 0 [ 664.687635] ? _raw_spin_unlock+0x29/0x40 [ 664.687646] ? _ion_heap_freelist_drain+0x6e/0x410 [ 664.687657] ? ion_system_contig_heap_create+0x130/0x130 [ 664.687670] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 664.695475] 0 [ 664.697451] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 664.712417] ion_alloc+0x27a/0x810 [ 664.712433] ? ion_dma_buf_release+0x40/0x40 [ 664.712445] ? __might_fault+0x177/0x1b0 [ 664.715053] Node 1 [ 664.723617] ion_ioctl+0xea/0x1f0 [ 664.723628] ? ion_query_heaps+0x360/0x360 [ 664.723649] ? ion_query_heaps+0x360/0x360 [ 664.755539] oom_reaper: reaped process 21826 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 664.758869] do_vfs_ioctl+0x75a/0xff0 [ 664.758883] ? ioctl_preallocate+0x1a0/0x1a0 [ 664.758893] ? lock_downgrade+0x740/0x740 [ 664.758906] ? __fget+0x225/0x360 [ 664.762037] Normal free:74172kB min:53696kB low:67120kB high:80544kB active_anon:568kB inactive_anon:44996kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:176kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 664.764839] ? do_vfs_ioctl+0xff0/0xff0 [ 664.768665] lowmem_reserve[]: [ 664.772653] ? security_file_ioctl+0x83/0xb0 [ 664.782714] 0 [ 664.784446] SyS_ioctl+0x7f/0xb0 [ 664.788780] 0 [ 664.790515] ? do_vfs_ioctl+0xff0/0xff0 [ 664.795575] 0 [ 664.801248] do_syscall_64+0x1d5/0x640 [ 664.801266] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 664.801274] RIP: 0033:0x466459 [ 664.801282] RSP: 002b:00007f8e9dbaf188 EFLAGS: 00000246 [ 664.806549] 0 [ 664.808474] ORIG_RAX: 0000000000000010 [ 664.808479] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 664.808484] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 664.808489] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 664.808494] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 664.808500] R13: 00007ffdd5fc694f R14: 00007f8e9dbaf300 R15: 0000000000022000 [ 665.036168] 0 [ 665.039553] Node 0 DMA: 2*4kB (UM) 8*8kB (UME) 31*16kB (UME) 29*32kB (UME) 3*64kB (ME) 1*128kB (E) 6*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11032kB [ 665.107635] Node 0 DMA32: 415*4kB (UME) 535*8kB (UME) 154*16kB (UME) 867*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36148kB [ 665.125189] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 665.138950] Node 1 Normal: 41*4kB (M) 53*8kB (UM) 815*16kB (UM) 1247*32kB (UME) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53596kB [ 665.154691] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 665.167260] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 665.177051] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 665.196421] oom_reaper: reaped process 21811 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 665.207803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 665.217098] 33622 total pagecache pages [ 665.221606] 0 pages in swap cache [ 665.225242] Swap cache stats: add 0, delete 0, find 0/0 [ 665.230889] Free swap = 0kB [ 665.233923] Total swap = 0kB [ 665.236954] 2097051 pages RAM [ 665.240298] 0 pages HighMem/MovableOnly [ 665.244567] 363841 pages reserved [ 665.248830] 0 pages cma reserved [ 665.270922] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 665.291161] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 665.296699] CPU: 0 PID: 21377 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 665.304985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.315059] Call Trace: [ 665.317727] dump_stack+0x1b2/0x281 [ 665.321532] dump_header+0x178/0x82f [ 665.325258] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 665.330455] ? ___ratelimit+0x2cd/0x530 [ 665.334618] oom_kill_process.cold+0x10/0xb18 [ 665.339275] out_of_memory+0xe3e/0x1190 [ 665.343263] ? oom_killer_disable+0x1c0/0x1c0 [ 665.348148] ? mutex_trylock+0x152/0x1a0 [ 665.352214] __alloc_pages_nodemask+0x23e1/0x2720 [ 665.357163] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 665.362025] alloc_pages_current+0x155/0x260 [ 665.366795] filemap_fault+0xea3/0x1980 [ 665.371600] ext4_filemap_fault+0x84/0xb0 [ 665.376029] __do_fault+0xfa/0x380 [ 665.380828] __handle_mm_fault+0x2497/0x4620 [ 665.385545] ? kill_orphaned_pgrp+0x310/0x310 [ 665.390290] ? vm_insert_page+0x7c0/0x7c0 [ 665.394441] ? lock_downgrade+0x740/0x740 [ 665.399040] handle_mm_fault+0x391/0x860 [ 665.403113] __do_page_fault+0x549/0xad0 [ 665.407312] ? spurious_fault+0x640/0x640 [ 665.411635] ? do_page_fault+0x60/0x500 [ 665.415615] ? page_fault+0x2f/0x50 [ 665.419608] page_fault+0x45/0x50 [ 665.423373] RIP: 56ca68: (null) [ 665.427507] RSP: 5382:00007ffd37b9acac EFLAGS: ffffffff [ 665.450587] Mem-Info: [ 665.482991] active_anon:13157 inactive_anon:33139 isolated_anon:0 [ 665.482991] active_file:12 inactive_file:8 isolated_file:0 [ 665.482991] unevictable:0 dirty:0 writeback:4 unstable:0 [ 665.482991] slab_reclaimable:12728 slab_unreclaimable:118124 [ 665.482991] mapped:52225 shmem:33555 pagetables:725 bounce:0 [ 665.482991] free:13950 free_pcp:1 free_cma:0 [ 665.596195] Node 0 active_anon:52048kB inactive_anon:87560kB active_file:180kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:16kB shmem:88876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 665.597550] syz-executor.3: [ 665.627344] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 665.642291] page allocation failure: order:0 [ 665.654559] syz-executor.0: [ 665.657496] Node 1 active_anon:580kB inactive_anon:44996kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 665.678243] page allocation failure: order:0 [ 665.691766] syz-executor.1 cpuset= [ 665.695649] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 665.697678] / mems_allowed=0-1 [ 665.712822] CPU: 0 PID: 21808 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 665.712865] (null) [ 665.720888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.720892] Call Trace: [ 665.720910] dump_stack+0x1b2/0x281 [ 665.720923] warn_alloc.cold+0x96/0x1cc [ 665.720936] ? zone_watermark_ok_safe+0x220/0x220 [ 665.720945] ? usleep_range+0x130/0x130 [ 665.720954] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 665.720966] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 665.720976] ? run_timer_softirq+0x5a0/0x5a0 [ 665.720992] __alloc_pages_nodemask+0x2127/0x2720 [ 665.721007] ? lock_acquire+0x170/0x3f0 [ 665.721022] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 665.721034] ? ion_page_pool_alloc+0x9e/0x1b0 [ 665.721050] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 665.721064] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 665.721078] alloc_pages_current+0x155/0x260 [ 665.721090] ion_page_pool_alloc+0x118/0x1b0 [ 665.721102] ion_system_heap_allocate+0x133/0x8c0 [ 665.721113] ? _raw_spin_unlock+0x29/0x40 [ 665.721123] ? _ion_heap_freelist_drain+0x6e/0x410 [ 665.721133] ? ion_system_contig_heap_create+0x130/0x130 [ 665.721144] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 665.721155] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 665.721167] ion_alloc+0x27a/0x810 [ 665.721181] ? ion_dma_buf_release+0x40/0x40 [ 665.721194] ? __might_fault+0x177/0x1b0 [ 665.721206] ion_ioctl+0xea/0x1f0 [ 665.721215] ? ion_query_heaps+0x360/0x360 [ 665.721227] ? ion_query_heaps+0x360/0x360 [ 665.721237] do_vfs_ioctl+0x75a/0xff0 [ 665.721248] ? ioctl_preallocate+0x1a0/0x1a0 [ 665.721261] ? lock_downgrade+0x740/0x740 [ 665.730021] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 665.732876] ? __fget+0x225/0x360 [ 665.735923] (null) [ 665.739573] ? do_vfs_ioctl+0xff0/0xff0 [ 665.739584] ? security_file_ioctl+0x83/0xb0 [ 665.739594] SyS_ioctl+0x7f/0xb0 [ 665.739602] ? do_vfs_ioctl+0xff0/0xff0 [ 665.739613] do_syscall_64+0x1d5/0x640 [ 665.739628] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 665.739637] RIP: 0033:0x466459 [ 665.739641] RSP: 002b:00007f8e9dbaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 665.739652] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 665.739660] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 665.747577] syz-executor.3 cpuset= [ 665.749431] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 665.753555] / [ 665.759024] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 665.774540] syz-executor.0 cpuset= [ 665.778068] R13: 00007ffdd5fc694f R14: 00007f8e9dbaf300 R15: 0000000000022000 [ 665.779145] Node 0 [ 665.786766] / [ 665.788594] DMA free:11040kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 665.800969] mems_allowed=0-1 [ 665.804674] lowmem_reserve[]: [ 665.814155] mems_allowed=0-1 [ 665.814905] 0 [ 665.825471] CPU: 1 PID: 21811 Comm: syz-executor.3 Not tainted 4.14.227-syzkaller #0 [ 665.834233] 2717 [ 665.835154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.840171] 2718 [ 665.843782] Call Trace: [ 665.848478] 2718 [ 665.852524] dump_stack+0x1b2/0x281 [ 665.856092] 2718 [ 665.860476] warn_alloc.cold+0x96/0x1cc [ 665.860489] ? zone_watermark_ok_safe+0x220/0x220 [ 665.860501] ? usleep_range+0x130/0x130 [ 665.864746] warn_alloc_show_mem: 2 callbacks suppressed [ 665.864749] Mem-Info: [ 665.868975] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 665.868988] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 665.868997] ? run_timer_softirq+0x5a0/0x5a0 [ 665.869014] __alloc_pages_nodemask+0x2127/0x2720 [ 665.869029] ? lock_acquire+0x170/0x3f0 [ 665.873574] active_anon:13157 inactive_anon:33139 isolated_anon:0 [ 665.873574] active_file:239 inactive_file:754 isolated_file:0 [ 665.873574] unevictable:0 dirty:25 writeback:4 unstable:0 [ 665.873574] slab_reclaimable:12728 slab_unreclaimable:117812 [ 665.873574] mapped:52925 shmem:33555 pagetables:725 bounce:0 [ 665.873574] free:37137 free_pcp:68 free_cma:0 [ 665.878005] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 665.878016] ? ion_page_pool_alloc+0x9e/0x1b0 [ 665.878032] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 665.889395] alloc_pages_current+0x155/0x260 [ 665.889410] ion_page_pool_alloc+0x118/0x1b0 [ 665.889425] ion_system_heap_allocate+0x133/0x8c0 [ 665.891563] Node 0 [ 665.895540] ? ion_alloc+0x187/0x810 [ 665.899985] Node 0 active_anon:52048kB inactive_anon:87560kB active_file:152kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:16kB shmem:88876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 665.903309] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 665.907281] Node 1 active_anon:580kB inactive_anon:44996kB active_file:804kB inactive_file:2928kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37616kB dirty:100kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 665.911292] ? ion_system_contig_heap_create+0x130/0x130 [ 665.911302] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 665.911313] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 665.911325] ion_alloc+0x204/0x810 [ 665.916605] DMA32 free:19668kB min:36200kB low:45248kB high:54296kB active_anon:52036kB inactive_anon:87560kB active_file:152kB inactive_file:8kB unevictable:0kB writepending:16kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7808kB pagetables:2720kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 665.919837] ? ion_dma_buf_release+0x40/0x40 [ 665.919850] ? __might_fault+0x177/0x1b0 [ 665.919862] ion_ioctl+0xea/0x1f0 [ 665.927913] Node 0 [ 665.935491] ? ion_query_heaps+0x360/0x360 [ 665.943793] lowmem_reserve[]: [ 665.947550] ? ion_query_heaps+0x360/0x360 [ 665.947562] do_vfs_ioctl+0x75a/0xff0 [ 665.947574] ? ioctl_preallocate+0x1a0/0x1a0 [ 665.955319] 0 [ 665.957037] ? lock_downgrade+0x740/0x740 [ 665.957051] ? __fget+0x225/0x360 [ 665.964512] DMA free:11040kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 665.968239] ? do_vfs_ioctl+0xff0/0xff0 [ 665.968250] ? security_file_ioctl+0x83/0xb0 [ 665.968260] SyS_ioctl+0x7f/0xb0 [ 665.968270] ? do_vfs_ioctl+0xff0/0xff0 [ 665.975852] lowmem_reserve[]: [ 665.978094] do_syscall_64+0x1d5/0x640 [ 665.978112] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 665.978121] RIP: 0033:0x466459 [ 665.979848] 0 [ 666.007365] RSP: 002b:00007f42379f8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 666.007376] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 666.007381] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 666.007385] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 666.007390] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 666.007395] R13: 00007ffef8958def R14: 00007f42379f8300 R15: 0000000000022000 [ 666.018339] CPU: 1 PID: 21803 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 666.440594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.450113] Call Trace: [ 666.452717] dump_stack+0x1b2/0x281 [ 666.456683] warn_alloc.cold+0x96/0x1cc [ 666.460959] ? zone_watermark_ok_safe+0x220/0x220 [ 666.466186] ? usleep_range+0x130/0x130 [ 666.470390] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 666.475732] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 666.481147] ? run_timer_softirq+0x5a0/0x5a0 [ 666.485770] __alloc_pages_nodemask+0x2127/0x2720 [ 666.490781] ? lock_acquire+0x170/0x3f0 [ 666.494917] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 666.499845] ? ion_page_pool_alloc+0x9e/0x1b0 [ 666.504636] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 666.510429] alloc_pages_current+0x155/0x260 [ 666.514854] ion_page_pool_alloc+0x118/0x1b0 [ 666.519271] ion_system_heap_allocate+0x133/0x8c0 [ 666.524356] ? _raw_spin_unlock+0x29/0x40 [ 666.528721] ? _ion_heap_freelist_drain+0x6e/0x410 [ 666.533958] ? ion_system_contig_heap_create+0x130/0x130 [ 666.539763] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 666.545224] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 666.550290] ion_alloc+0x27a/0x810 [ 666.554043] ? ion_dma_buf_release+0x40/0x40 [ 666.558835] ? __might_fault+0x177/0x1b0 [ 666.563000] ion_ioctl+0xea/0x1f0 [ 666.566593] ? ion_query_heaps+0x360/0x360 [ 666.571105] ? ion_query_heaps+0x360/0x360 [ 666.575649] do_vfs_ioctl+0x75a/0xff0 [ 666.579981] ? ioctl_preallocate+0x1a0/0x1a0 [ 666.584892] ? lock_downgrade+0x740/0x740 [ 666.589388] ? __fget+0x225/0x360 [ 666.593146] ? do_vfs_ioctl+0xff0/0xff0 [ 666.597216] ? security_file_ioctl+0x83/0xb0 [ 666.601635] SyS_ioctl+0x7f/0xb0 [ 666.605083] ? do_vfs_ioctl+0xff0/0xff0 [ 666.609208] do_syscall_64+0x1d5/0x640 [ 666.613274] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 666.618548] RIP: 0033:0x466459 [ 666.622072] RSP: 002b:00007f5fb7692188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 666.629846] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 666.637214] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 666.644574] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 666.651844] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 666.659257] R13: 00007fff6f6f7f0f R14: 00007f5fb7692300 R15: 0000000000022000 [ 666.672297] 0 2717 2718 2718 2718 [ 666.694863] Node 0 DMA32 free:19668kB min:36200kB low:45248kB high:54296kB active_anon:51940kB inactive_anon:87560kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:4kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7776kB pagetables:2720kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 666.734071] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 666.742646] 0 0 0 [ 666.746148] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 666.756451] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 666.784302] lowmem_reserve[]: 0 0 0 0 0 [ 666.790459] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 666.825409] lowmem_reserve[]: 0 0 0 0 0 [ 666.830048] Node 1 Normal free:112752kB min:53696kB low:67120kB high:80544kB active_anon:908kB inactive_anon:44996kB active_file:2712kB inactive_file:4392kB unevictable:0kB writepending:140kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:344kB bounce:0kB free_pcp:724kB local_pcp:324kB free_cma:0kB [ 666.848211] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 666.860032] lowmem_reserve[]: 0 0 0 0 0 [ 666.870316] Node 1 Normal free:112324kB min:53696kB low:67120kB high:80544kB active_anon:1008kB inactive_anon:44996kB active_file:2712kB inactive_file:4392kB unevictable:0kB writepending:140kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:344kB bounce:0kB free_pcp:704kB local_pcp:292kB free_cma:0kB [ 666.879025] systemd[1]: Stopped Journal Service. [ 666.900465] lowmem_reserve[]: 0 0 0 0 0 [ 666.909737] Node 0 DMA: 2*4kB (UM) 3*8kB (ME) 30*16kB (UME) 29*32kB (UME) 4*64kB (UME) 1*128kB (E) 6*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11040kB [ 666.926253] lowmem_reserve[]: 0 0 0 0 0 [ 666.930312] Node 0 DMA: 2*4kB (UM) 3*8kB (ME) 30*16kB (UME) 29*32kB (UME) 4*64kB (UME) 1*128kB (E) 6*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11040kB [ 666.946224] Node 0 DMA32: 591*4kB (UME) 838*8kB (UME) 158*16kB (UME) 280*32kB (UME) 2*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20812kB [ 666.962373] Node 0 DMA32: 591*4kB (UME) 838*8kB (UME) 158*16kB (UME) 280*32kB (UME) 2*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20812kB [ 666.973025] systemd[1]: Starting Journal Service... [ 666.978555] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 667.001983] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 667.014114] Node 1 Normal: 2*4kB (UE) 0*8kB 1*16kB (M) 695*32kB (UE) 922*64kB (UME) 85*128kB (UE) 2*256kB (ME) 1*512kB (E) 17*1024kB (U) 0*2048kB 0*4096kB = 110584kB [ 667.031462] Node 1 Normal: 2*4kB (UM) 1*8kB (E) 2*16kB (UM) 694*32kB (UE) 922*64kB (UME) 85*128kB (UM) 1*256kB (E) 1*512kB (E) 5*1024kB (U) 0*2048kB 0*4096kB = 98032kB [ 667.049603] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 667.059211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 667.069955] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 667.083491] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 667.093148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 667.104190] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 667.113286] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 667.123259] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 667.133073] 35892 total pagecache pages [ 667.137530] 0 pages in swap cache [ 667.143749] 35929 total pagecache pages [ 667.147815] Swap cache stats: add 0, delete 0, find 0/0 [ 667.153458] Free swap = 0kB [ 667.156464] Total swap = 0kB [ 667.159748] 0 pages in swap cache [ 667.163209] Swap cache stats: add 0, delete 0, find 0/0 [ 667.168903] 2097051 pages RAM [ 667.172009] 0 pages HighMem/MovableOnly [ 667.175998] 363841 pages reserved [ 667.179814] Free swap = 0kB [ 667.182844] Total swap = 0kB [ 667.185867] 2097051 pages RAM [ 667.189050] 0 pages HighMem/MovableOnly [ 667.193030] 363841 pages reserved [ 667.197014] 0 pages cma reserved [ 667.201242] 0 pages cma reserved [ 667.204648] Out of memory (oom_kill_allocating_task): Kill process 21377 (syz-executor.5) score 0 or sacrifice child [ 667.204779] systemd[1]: Started Load/Save RF Kill Switch Status. [ 667.221945] Killed process 21377 (syz-executor.5) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 667.651297] warn_alloc_show_mem: 1 callbacks suppressed [ 667.651301] Mem-Info: [ 667.667713] active_anon:13390 inactive_anon:33139 isolated_anon:0 [ 667.667713] active_file:1068 inactive_file:2588 isolated_file:0 [ 667.667713] unevictable:0 dirty:36 writeback:0 unstable:0 [ 667.667713] slab_reclaimable:12728 slab_unreclaimable:116828 [ 667.667713] mapped:45836 shmem:33555 pagetables:803 bounce:0 [ 667.667713] free:197406 free_pcp:501 free_cma:0 [ 667.712733] Node 0 active_anon:52252kB inactive_anon:87560kB active_file:660kB inactive_file:5760kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142584kB dirty:4kB writeback:0kB shmem:88876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 667.743105] Node 1 active_anon:1308kB inactive_anon:44996kB active_file:3612kB inactive_file:4692kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40760kB dirty:140kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 667.796759] Node 0 DMA free:11256kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 667.823353] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 667.828854] Node 0 DMA32 free:461872kB min:36200kB low:45248kB high:54296kB active_anon:52344kB inactive_anon:87560kB active_file:564kB inactive_file:5604kB unevictable:0kB writepending:4kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7776kB pagetables:2720kB bounce:0kB free_pcp:1104kB local_pcp:480kB free_cma:0kB [ 667.860095] lowmem_reserve[]: 0 0 0 0 0 [ 667.864166] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 667.890053] lowmem_reserve[]: 0 0 0 0 0 [ 667.894079] Node 1 Normal free:930292kB min:53696kB low:67120kB high:80544kB active_anon:1308kB inactive_anon:44996kB active_file:3616kB inactive_file:4992kB unevictable:0kB writepending:140kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:492kB bounce:0kB free_pcp:1064kB local_pcp:436kB free_cma:0kB [ 667.923935] lowmem_reserve[]: 0 0 0 0 0 [ 667.928001] Node 0 DMA: 4*4kB (UM) 13*8kB (UME) 30*16kB (UME) 29*32kB (UME) 15*64kB (UME) 1*128kB (E) 6*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 11832kB [ 667.944376] Node 0 DMA32: 2473*4kB (UE) 5883*8kB (UE) 10333*16kB (UME) 3231*32kB (UME) 2751*64kB (UME) 649*128kB (UME) 23*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 590700kB [ 667.960828] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 667.972049] Node 1 Normal: 1185*4kB (UME) 1444*8kB (UME) 1163*16kB (UME) 1507*32kB (UME) 5754*64kB (UME) 1053*128kB (UME) 1461*256kB (UME) 36*512kB (UME) 79*1024kB (U) 7*2048kB (U) 0*4096kB = 1073844kB [ 667.990342] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 667.999637] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 668.008326] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 668.017314] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 668.027136] 37323 total pagecache pages [ 668.031225] 0 pages in swap cache [ 668.032645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.034696] Swap cache stats: add 0, delete 0, find 0/0 [ 668.047380] Free swap = 0kB [ 668.050482] Total swap = 0kB [ 668.053499] 2097051 pages RAM [ 668.056599] 0 pages HighMem/MovableOnly 05:08:48 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/99) 05:08:48 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) msgctl$IPC_STAT(0x0, 0x2, 0x0) 05:08:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:48 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/99) [ 668.057583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.060873] 363841 pages reserved [ 668.070699] 0 pages cma reserved [ 668.082021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.104046] batman_adv: batadv0: Removing interface: batadv_slave_1 05:08:48 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:08:48 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) [ 668.129744] device bridge_slave_1 left promiscuous mode [ 668.135371] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.163116] device bridge_slave_0 left promiscuous mode [ 668.180929] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.205453] systemd-journald[21851]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 668.223678] device veth1_macvtap left promiscuous mode [ 668.236788] device veth0_macvtap left promiscuous mode [ 668.260684] device veth1_vlan left promiscuous mode [ 668.300272] device veth0_vlan left promiscuous mode [ 668.929876] device hsr_slave_1 left promiscuous mode [ 668.976095] device hsr_slave_0 left promiscuous mode [ 669.085874] team0 (unregistering): Port device team_slave_1 removed [ 669.160654] team0 (unregistering): Port device team_slave_0 removed [ 669.193858] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 669.214846] warn_alloc: 1 callbacks suppressed [ 669.214852] syz-executor.1: [ 669.219908] syz-executor.4: [ 669.225098] syz-executor.0: [ 669.225424] syz-executor.3: [ 669.234814] page allocation failure: order:4 [ 669.238148] page allocation failure: order:4 [ 669.243869] page allocation failure: order:4 [ 669.250747] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 669.255927] page allocation failure: order:4 [ 669.256536] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 669.268042] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 669.270145] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 669.283648] (null) [ 669.284310] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 669.299968] syz-executor.4 cpuset= [ 669.308387] (null) [ 669.316473] (null) [ 669.320095] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 669.326504] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 669.328890] (null) [ 669.334112] / mems_allowed=0-1 [ 669.339745] CPU: 1 PID: 21863 Comm: syz-executor.3 Not tainted 4.14.227-syzkaller #0 [ 669.341436] syz-executor.0 cpuset= [ 669.347628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 669.347632] Call Trace: [ 669.347649] dump_stack+0x1b2/0x281 [ 669.347662] warn_alloc.cold+0x96/0x1cc [ 669.370712] ? zone_watermark_ok_safe+0x220/0x220 [ 669.375574] __alloc_pages_nodemask+0x2127/0x2720 [ 669.380420] ? _raw_spin_unlock_irq+0x24/0x80 [ 669.384915] ? lock_acquire+0x170/0x3f0 [ 669.388896] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 669.389997] / mems_allowed=0-1 [ 669.393757] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 669.393770] ? __mutex_unlock_slowpath+0x75/0x770 [ 669.403526] bond0 (unregistering): Released all slaves [ 669.407233] alloc_pages_current+0x155/0x260 [ 669.416900] ion_page_pool_alloc+0x118/0x1b0 [ 669.421307] ion_system_heap_allocate+0x133/0x8c0 [ 669.426149] ? ion_alloc+0x187/0x810 [ 669.429859] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 669.435304] ? ion_system_contig_heap_create+0x130/0x130 [ 669.440834] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 669.445850] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 669.450687] ion_alloc+0x204/0x810 [ 669.454250] ? ion_dma_buf_release+0x40/0x40 [ 669.458662] ? __might_fault+0x177/0x1b0 [ 669.462727] ion_ioctl+0xea/0x1f0 [ 669.466176] ? ion_query_heaps+0x360/0x360 [ 669.470409] ? ion_query_heaps+0x360/0x360 [ 669.474643] do_vfs_ioctl+0x75a/0xff0 [ 669.478444] ? ioctl_preallocate+0x1a0/0x1a0 [ 669.482846] ? lock_downgrade+0x740/0x740 [ 669.486998] ? __fget+0x225/0x360 [ 669.491236] ? do_vfs_ioctl+0xff0/0xff0 [ 669.495213] ? security_file_ioctl+0x83/0xb0 [ 669.499640] SyS_ioctl+0x7f/0xb0 [ 669.502996] ? do_vfs_ioctl+0xff0/0xff0 [ 669.506969] do_syscall_64+0x1d5/0x640 [ 669.510860] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 669.516163] RIP: 0033:0x466459 [ 669.519344] RSP: 002b:00007f42379f8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 669.527061] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 669.534322] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 669.541581] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 669.548930] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 669.556196] R13: 00007ffef8958def R14: 00007f42379f8300 R15: 0000000000022000 [ 669.563476] CPU: 0 PID: 21869 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 669.571360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 669.580714] Call Trace: [ 669.583310] dump_stack+0x1b2/0x281 [ 669.586960] warn_alloc.cold+0x96/0x1cc [ 669.590936] ? zone_watermark_ok_safe+0x220/0x220 [ 669.595885] __alloc_pages_nodemask+0x2127/0x2720 [ 669.601174] ? lock_acquire+0x170/0x3f0 [ 669.605185] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 669.610205] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 669.615659] ? __mutex_unlock_slowpath+0x75/0x770 [ 669.620499] ? retint_kernel+0x2d/0x2d [ 669.624391] alloc_pages_current+0x155/0x260 [ 669.628798] ion_page_pool_alloc+0x118/0x1b0 [ 669.633225] ion_system_heap_allocate+0x133/0x8c0 [ 669.638067] ? ion_alloc+0x187/0x810 [ 669.641812] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 669.647261] ? ion_system_contig_heap_create+0x130/0x130 [ 669.652714] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 669.657732] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 669.662577] ion_alloc+0x204/0x810 [ 669.666121] ? ion_dma_buf_release+0x40/0x40 [ 669.670527] ? __might_fault+0x177/0x1b0 [ 669.674586] ion_ioctl+0xea/0x1f0 [ 669.678039] ? ion_query_heaps+0x360/0x360 [ 669.682275] ? ion_query_heaps+0x360/0x360 [ 669.686512] do_vfs_ioctl+0x75a/0xff0 [ 669.690338] ? ioctl_preallocate+0x1a0/0x1a0 [ 669.694747] ? lock_downgrade+0x740/0x740 [ 669.698899] ? __fget+0x225/0x360 [ 669.702351] ? do_vfs_ioctl+0xff0/0xff0 [ 669.706323] ? security_file_ioctl+0x83/0xb0 [ 669.710725] SyS_ioctl+0x7f/0xb0 [ 669.714116] ? do_vfs_ioctl+0xff0/0xff0 [ 669.718092] do_syscall_64+0x1d5/0x640 [ 669.721991] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 669.727180] RIP: 0033:0x466459 [ 669.730364] RSP: 002b:00007f5fb7692188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 669.738077] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 669.745350] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 669.752614] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 669.759882] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 669.767143] R13: 00007fff6f6f7f0f R14: 00007f5fb7692300 R15: 0000000000022000 [ 669.776589] CPU: 1 PID: 21862 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 669.784482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 669.793831] Call Trace: [ 669.796422] dump_stack+0x1b2/0x281 [ 669.800066] warn_alloc.cold+0x96/0x1cc [ 669.804042] ? zone_watermark_ok_safe+0x220/0x220 [ 669.808906] __alloc_pages_nodemask+0x2127/0x2720 [ 669.813767] ? _raw_spin_unlock_irq+0x5a/0x80 [ 669.818259] ? finish_task_switch+0x178/0x610 [ 669.822752] ? finish_task_switch+0x14d/0x610 [ 669.827250] ? lock_acquire+0x170/0x3f0 [ 669.831234] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 669.836084] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 669.841537] ? __mutex_unlock_slowpath+0x75/0x770 [ 669.846386] alloc_pages_current+0x155/0x260 [ 669.850799] ion_page_pool_alloc+0x118/0x1b0 [ 669.855211] ion_system_heap_allocate+0x133/0x8c0 [ 669.860073] ? ion_alloc+0x187/0x810 [ 669.863788] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 669.869267] ? ion_system_contig_heap_create+0x130/0x130 [ 669.874715] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 669.879738] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 669.885624] ion_alloc+0x204/0x810 [ 669.889168] ? ion_dma_buf_release+0x40/0x40 [ 669.893579] ? __might_fault+0x177/0x1b0 [ 669.897747] ion_ioctl+0xea/0x1f0 [ 669.901199] ? ion_query_heaps+0x360/0x360 [ 669.905435] ? ion_query_heaps+0x360/0x360 [ 669.909668] do_vfs_ioctl+0x75a/0xff0 [ 669.913467] ? ioctl_preallocate+0x1a0/0x1a0 [ 669.917870] ? lock_downgrade+0x740/0x740 [ 669.922024] ? __fget+0x225/0x360 [ 669.925475] ? do_vfs_ioctl+0xff0/0xff0 [ 669.929449] ? security_file_ioctl+0x83/0xb0 [ 669.933856] SyS_ioctl+0x7f/0xb0 [ 669.937222] ? do_vfs_ioctl+0xff0/0xff0 [ 669.941204] do_syscall_64+0x1d5/0x640 [ 669.945099] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 669.950302] RIP: 0033:0x466459 [ 669.953489] RSP: 002b:00007ff90c340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 669.961223] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 669.968497] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 669.975856] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 669.983136] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 669.990418] R13: 00007ffce90c212f R14: 00007ff90c340300 R15: 0000000000022000 [ 669.999520] CPU: 1 PID: 21868 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 670.007939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 670.017382] Call Trace: [ 670.019988] dump_stack+0x1b2/0x281 [ 670.023624] warn_alloc.cold+0x96/0x1cc [ 670.027611] ? zone_watermark_ok_safe+0x220/0x220 [ 670.032486] __alloc_pages_nodemask+0x2127/0x2720 [ 670.037339] ? lock_acquire+0x170/0x3f0 [ 670.037522] Mem-Info: [ 670.041333] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 670.043750] active_anon:13863 inactive_anon:35162 isolated_anon:0 [ 670.043750] active_file:1340 inactive_file:5834 isolated_file:0 [ 670.043750] unevictable:0 dirty:100 writeback:0 unstable:0 [ 670.043750] slab_reclaimable:12765 slab_unreclaimable:116328 [ 670.043750] mapped:48458 shmem:35599 pagetables:775 bounce:0 [ 670.043750] free:94986 free_pcp:260 free_cma:0 [ 670.048585] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 670.048597] ? __mutex_unlock_slowpath+0x75/0x770 [ 670.048606] ? retint_kernel+0x2d/0x2d [ 670.048620] alloc_pages_current+0x155/0x260 [ 670.048655] ion_page_pool_alloc+0x118/0x1b0 [ 670.105812] ion_system_heap_allocate+0x133/0x8c0 [ 670.110666] ? ion_alloc+0x187/0x810 [ 670.114395] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 670.119850] ? ion_system_contig_heap_create+0x130/0x130 [ 670.125304] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 670.127527] Node 0 active_anon:54504kB inactive_anon:95652kB active_file:832kB inactive_file:19444kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153100kB dirty:240kB writeback:0kB shmem:97052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 670.130318] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 670.163262] ion_alloc+0x204/0x810 [ 670.166813] ? ion_dma_buf_release+0x40/0x40 [ 670.171230] ? __might_fault+0x177/0x1b0 [ 670.175295] ion_ioctl+0xea/0x1f0 [ 670.178748] ? ion_query_heaps+0x360/0x360 [ 670.182987] ? ion_query_heaps+0x360/0x360 [ 670.187223] do_vfs_ioctl+0x75a/0xff0 [ 670.187549] Node 1 active_anon:948kB inactive_anon:44996kB active_file:4528kB inactive_file:3892kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40732kB dirty:160kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 670.191023] ? ioctl_preallocate+0x1a0/0x1a0 [ 670.222917] ? lock_downgrade+0x740/0x740 [ 670.227072] ? __fget+0x225/0x360 [ 670.230526] ? do_vfs_ioctl+0xff0/0xff0 [ 670.234530] ? security_file_ioctl+0x83/0xb0 [ 670.238937] SyS_ioctl+0x7f/0xb0 [ 670.242303] ? do_vfs_ioctl+0xff0/0xff0 [ 670.246279] do_syscall_64+0x1d5/0x640 [ 670.247521] Node 0 DMA free:11152kB min:204kB low:252kB high:300kB active_anon:2060kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 670.250187] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 670.250198] RIP: 0033:0x466459 [ 670.285366] RSP: 002b:00007f8e9dbaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 670.293085] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 670.300374] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 670.307512] lowmem_reserve[]: [ 670.307639] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 670.307648] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 670.310830] 0 [ 670.318082] R13: 00007ffdd5fc694f R14: 00007f8e9dbaf300 R15: 0000000000022000 [ 670.427746] 2717 2718 2718 2718 [ 670.431166] Node 0 DMA32 free:43744kB min:36200kB low:45248kB high:54296kB active_anon:52548kB inactive_anon:95680kB active_file:876kB inactive_file:19940kB unevictable:0kB writepending:300kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7712kB pagetables:2848kB bounce:0kB free_pcp:448kB local_pcp:220kB free_cma:0kB [ 670.547508] lowmem_reserve[]: 0 0 0 0 0 [ 670.551525] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 670.710516] lowmem_reserve[]: 0 0 0 0 0 [ 670.714553] Node 1 Normal free:53744kB min:53696kB low:67120kB high:80544kB active_anon:948kB inactive_anon:44996kB active_file:3304kB inactive_file:2720kB unevictable:0kB writepending:160kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:400kB bounce:0kB free_pcp:240kB local_pcp:0kB free_cma:0kB [ 670.905741] lowmem_reserve[]: 0 0 0 0 0 [ 670.930442] Node 0 DMA: 2*4kB (UM) 3*8kB (ME) 25*16kB (UME) 26*32kB (UME) 15*64kB (UME) 11*128kB (UE) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 0*2048kB 0*4096kB = 11056kB [ 670.987915] Node 0 DMA32: 315*4kB (UME) 564*8kB (UME) 197*16kB (UME) 559*32kB (UME) 104*64kB (UM) 15*128kB (UM) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36156kB [ 671.023071] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 671.029590] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 671.060463] Node 1 Normal: 60*4kB (UME) 75*8kB (UM) 41*16kB (M) 18*32kB (UME) 484*64kB (UM) 56*128kB (UM) 50*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 53528kB [ 671.193803] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 671.242224] CPU: 1 PID: 21097 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 671.247975] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 671.250219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 671.268415] Call Trace: [ 671.271010] dump_stack+0x1b2/0x281 [ 671.274644] dump_header+0x178/0x82f [ 671.278355] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 671.283453] ? ___ratelimit+0x2cd/0x530 [ 671.287423] oom_kill_process.cold+0x10/0xb18 [ 671.291929] out_of_memory+0xe3e/0x1190 [ 671.295904] ? oom_killer_disable+0x1c0/0x1c0 [ 671.300398] ? mutex_trylock+0x152/0x1a0 [ 671.304458] __alloc_pages_nodemask+0x23e1/0x2720 [ 671.309309] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 671.314709] alloc_pages_current+0x155/0x260 [ 671.316917] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 671.319112] filemap_fault+0xea3/0x1980 [ 671.319131] ext4_filemap_fault+0x84/0xb0 [ 671.319140] __do_fault+0xfa/0x380 [ 671.319150] __handle_mm_fault+0x2497/0x4620 [ 671.343835] ? vm_insert_page+0x7c0/0x7c0 [ 671.347975] ? nanosleep_copyout+0x100/0x100 [ 671.348638] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 671.352384] handle_mm_fault+0x391/0x860 [ 671.361257] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 671.365283] __do_page_fault+0x549/0xad0 [ 671.373880] 35665 total pagecache pages [ 671.377925] ? spurious_fault+0x640/0x640 [ 671.377937] ? do_page_fault+0x60/0x500 [ 671.381910] 0 pages in swap cache [ 671.386061] ? page_fault+0x2f/0x50 [ 671.390041] Swap cache stats: add 0, delete 0, find 0/0 [ 671.393450] page_fault+0x45/0x50 [ 671.397048] Free swap = 0kB [ 671.402389] RIP: a35ff:0x2 [ 671.402393] RSP: 001e:00007ffdd5fc6c0c EFLAGS: 00000032 [ 671.468412] Total swap = 0kB [ 671.476800] 2097051 pages RAM [ 671.597126] 0 pages HighMem/MovableOnly [ 671.636146] 363841 pages reserved [ 671.681369] 0 pages cma reserved [ 672.396061] Mem-Info: [ 672.423912] active_anon:13927 inactive_anon:35169 isolated_anon:0 [ 672.423912] active_file:30 inactive_file:24 isolated_file:0 [ 672.423912] unevictable:0 dirty:0 writeback:0 unstable:0 [ 672.423912] slab_reclaimable:12753 slab_unreclaimable:116042 [ 672.423912] mapped:52615 shmem:35599 pagetables:819 bounce:0 [ 672.423912] free:25071 free_pcp:1 free_cma:0 [ 672.667756] Node 0 active_anon:54708kB inactive_anon:95680kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):104kB mapped:152964kB dirty:0kB writeback:0kB shmem:97052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 672.707535] Node 1 active_anon:1000kB inactive_anon:44996kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:57496kB dirty:0kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 672.734578] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:2060kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 672.780124] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 672.785178] Node 0 DMA32 free:35836kB min:36200kB low:45248kB high:54296kB active_anon:52648kB inactive_anon:95680kB active_file:24kB inactive_file:76kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7744kB pagetables:2888kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 672.819159] lowmem_reserve[]: 0 0 0 0 0 [ 672.823246] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 672.849033] lowmem_reserve[]: 0 0 0 0 0 [ 672.853032] Node 1 Normal free:53528kB min:53696kB low:67120kB high:80544kB active_anon:1000kB inactive_anon:44996kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:388kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 672.908098] lowmem_reserve[]: 0 0 0 0 0 [ 672.912106] Node 0 DMA: 2*4kB (UM) 3*8kB (ME) 25*16kB (UME) 26*32kB (UME) 15*64kB (UME) 11*128kB (UE) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 0*2048kB 0*4096kB = 11056kB [ 672.927779] Node 0 DMA32: 544*4kB (ME) 552*8kB (UME) 199*16kB (UME) 531*32kB (UME) 104*64kB (UM) 15*128kB (UM) 3*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36112kB [ 672.943017] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 672.953924] Node 1 Normal: 60*4kB (UME) 75*8kB (UM) 41*16kB (M) 18*32kB (UME) 484*64kB (UM) 56*128kB (UM) 50*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 53528kB [ 672.969248] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 672.978145] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 672.986759] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 672.995660] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 673.004272] 35624 total pagecache pages [ 673.013665] 0 pages in swap cache [ 673.017124] Swap cache stats: add 0, delete 0, find 0/0 [ 673.022526] Free swap = 0kB [ 673.025536] Total swap = 0kB [ 673.031303] 2097051 pages RAM [ 673.034405] 0 pages HighMem/MovableOnly [ 673.039001] 363841 pages reserved [ 673.042446] 0 pages cma reserved [ 673.045800] Out of memory (oom_kill_allocating_task): Kill process 21097 (syz-executor.1) score 0 or sacrifice child [ 673.056532] Killed process 21868 (syz-executor.1) total-vm:93252kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 673.083872] oom_reaper: reaped process 21868 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 673.124210] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 673.152150] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 673.162375] CPU: 0 PID: 21097 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 673.170256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 673.179601] Call Trace: [ 673.182189] dump_stack+0x1b2/0x281 [ 673.185814] dump_header+0x178/0x82f [ 673.189529] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 673.194634] ? ___ratelimit+0x2cd/0x530 [ 673.198614] oom_kill_process.cold+0x10/0xb18 [ 673.203115] out_of_memory+0xe3e/0x1190 [ 673.207093] ? oom_killer_disable+0x1c0/0x1c0 [ 673.211581] ? mutex_trylock+0x152/0x1a0 [ 673.215642] __alloc_pages_nodemask+0x23e1/0x2720 [ 673.220493] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 673.225350] alloc_pages_current+0x155/0x260 [ 673.229757] filemap_fault+0xea3/0x1980 [ 673.233750] ext4_filemap_fault+0x84/0xb0 [ 673.237894] __do_fault+0xfa/0x380 [ 673.241428] __handle_mm_fault+0x2497/0x4620 [ 673.245832] ? vm_insert_page+0x7c0/0x7c0 [ 673.249978] ? nanosleep_copyout+0x100/0x100 [ 673.254396] handle_mm_fault+0x391/0x860 [ 673.258463] __do_page_fault+0x549/0xad0 [ 673.262522] ? spurious_fault+0x640/0x640 [ 673.266683] ? do_page_fault+0x60/0x500 [ 673.270655] ? page_fault+0x2f/0x50 [ 673.274276] page_fault+0x45/0x50 [ 673.277719] RIP: a35ff:0x2 [ 673.280549] RSP: 001e:00007ffdd5fc6c0c EFLAGS: 00000032 [ 673.356404] Mem-Info: [ 673.404333] active_anon:13906 inactive_anon:35169 isolated_anon:0 [ 673.404333] active_file:12 inactive_file:11 isolated_file:0 [ 673.404333] unevictable:0 dirty:0 writeback:0 unstable:0 [ 673.404333] slab_reclaimable:12752 slab_unreclaimable:115357 [ 673.404333] mapped:52615 shmem:35599 pagetables:819 bounce:0 [ 673.404333] free:15165 free_pcp:35 free_cma:0 [ 673.457190] Node 0 active_anon:54624kB inactive_anon:95680kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:152964kB dirty:0kB writeback:0kB shmem:97052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 673.506260] Node 1 active_anon:1000kB inactive_anon:44996kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:57496kB dirty:0kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 673.555194] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2060kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 673.564368] syz-executor.1: [ 673.626351] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 673.677429] Node 0 DMA32 free:17612kB min:36200kB low:45248kB high:54296kB active_anon:52564kB inactive_anon:95680kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7744kB pagetables:2888kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 673.752296] lowmem_reserve[]: 0 0 0 0 0 [ 673.756330] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 673.773360] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 673.821798] lowmem_reserve[]: 0 0 0 0 0 [ 673.826870] Node 1 Normal free:26744kB min:53696kB low:67120kB high:80544kB active_anon:1000kB inactive_anon:44996kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:388kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 673.876041] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 673.880219] lowmem_reserve[]: 0 0 0 0 0 [ 673.885208] Node 0 DMA: 1*4kB (M) 3*8kB (ME) 20*16kB (UME) 26*32kB (UME) 15*64kB (UME) 11*128kB (UE) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 0*2048kB 0*4096kB = 10972kB [ 673.924499] CPU: 1 PID: 21868 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 673.931031] Node 0 [ 673.932406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 673.932414] DMA32: [ 673.934630] Call Trace: [ 673.944007] 540*4kB [ 673.946259] dump_stack+0x1b2/0x281 [ 673.948827] (UME) [ 673.951118] warn_alloc.cold+0x96/0x1cc [ 673.954716] 552*8kB [ 673.956852] ? zone_watermark_ok_safe+0x220/0x220 [ 673.960814] (ME) [ 673.963105] ? usleep_range+0x130/0x130 [ 673.967940] 194*16kB [ 673.969970] ? try_to_free_pages+0x23f/0x6e0 [ 673.973915] (UME) [ 673.976313] ? _find_next_bit+0xdb/0x100 [ 673.980716] 63*32kB [ 673.982837] ? run_timer_softirq+0x5a0/0x5a0 [ 673.986890] (UME) [ 673.989208] __alloc_pages_nodemask+0x2127/0x2720 [ 673.989226] ? lock_acquire+0x170/0x3f0 [ 673.993640] 48*64kB [ 673.995808] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 674.000650] (UM) [ 674.004583] ? ion_page_pool_alloc+0x9e/0x1b0 [ 674.006878] 13*128kB [ 674.011735] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 674.011755] alloc_pages_current+0x155/0x260 [ 674.011769] ion_page_pool_alloc+0x118/0x1b0 [ 674.013972] (UM) [ 674.018293] ion_system_heap_allocate+0x133/0x8c0 [ 674.018304] ? ion_alloc+0x187/0x810 [ 674.018315] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 674.018326] ? ion_system_contig_heap_create+0x130/0x130 [ 674.020716] 5*256kB [ 674.026149] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 674.026162] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 674.030567] (M) [ 674.034939] ion_alloc+0x204/0x810 [ 674.036973] 0*512kB [ 674.041807] ? ion_dma_buf_release+0x40/0x40 [ 674.041821] ? __might_fault+0x177/0x1b0 [ 674.041833] ion_ioctl+0xea/0x1f0 [ 674.045524] 0*1024kB [ 674.050974] ? ion_query_heaps+0x360/0x360 [ 674.050987] ? ion_query_heaps+0x360/0x360 [ 674.050998] do_vfs_ioctl+0x75a/0xff0 [ 674.051010] ? ioctl_preallocate+0x1a0/0x1a0 [ 674.056449] 0*2048kB [ 674.058761] ? lock_downgrade+0x740/0x740 [ 674.058774] ? __fget+0x225/0x360 [ 674.058783] ? do_vfs_ioctl+0xff0/0xff0 [ 674.058795] ? security_file_ioctl+0x83/0xb0 [ 674.063787] 0*4096kB [ 674.068633] SyS_ioctl+0x7f/0xb0 [ 674.068642] ? do_vfs_ioctl+0xff0/0xff0 [ 674.068654] do_syscall_64+0x1d5/0x640 [ 674.068676] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 674.070628] = 17712kB [ 674.074151] RIP: 0033:0x466459 [ 674.076451] Node 0 [ 674.080843] RSP: 002b:00007f8e9dbaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 674.080853] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 674.080858] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 674.080862] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 674.080867] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 674.080872] R13: 00007ffdd5fc694f R14: 00007f8e9dbaf300 R15: 0000000000022000 [ 674.223759] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 674.249705] Node 1 Normal: 54*4kB (ME) 68*8kB (UM) 42*16kB (UM) 17*32kB (ME) 67*64kB (UM) 56*128kB (UM) 50*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 26744kB [ 674.283691] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 674.285348] warn_alloc_show_mem: 3 callbacks suppressed [ 674.285352] Mem-Info: [ 674.300629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 674.317384] active_anon:13904 inactive_anon:35169 isolated_anon:0 [ 674.317384] active_file:6 inactive_file:12 isolated_file:0 [ 674.317384] unevictable:0 dirty:0 writeback:0 unstable:0 [ 674.317384] slab_reclaimable:12750 slab_unreclaimable:115350 [ 674.317384] mapped:52615 shmem:35599 pagetables:819 bounce:0 [ 674.317384] free:13857 free_pcp:60 free_cma:0 [ 674.329094] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 674.367197] Node 0 active_anon:54616kB inactive_anon:95680kB active_file:20kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:152964kB dirty:0kB writeback:0kB shmem:97052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 674.385214] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 674.413569] Node 1 active_anon:1000kB inactive_anon:44996kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:57496kB dirty:0kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 674.427166] 35624 total pagecache pages [ 674.463099] 0 pages in swap cache [ 674.466577] Swap cache stats: add 0, delete 0, find 0/0 [ 674.493190] Free swap = 0kB [ 674.496249] Total swap = 0kB [ 674.515536] 2097051 pages RAM [ 674.519175] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2060kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 674.526020] 0 pages HighMem/MovableOnly [ 674.565448] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 674.569192] 363841 pages reserved [ 674.574157] 0 pages cma reserved [ 674.577520] Out of memory (oom_kill_allocating_task): Kill process 21097 (syz-executor.1) score 0 or sacrifice child [ 674.597357] Node 0 DMA32 free:17712kB min:36200kB low:45248kB high:54296kB active_anon:52556kB inactive_anon:95680kB active_file:96kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7744kB pagetables:2888kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 674.608353] Killed process 21097 (syz-executor.1) total-vm:93120kB, anon-rss:104kB, file-rss:33580kB, shmem-rss:0kB [ 674.656403] oom_reaper: reaped process 21097 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 674.678937] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 674.697584] syz-executor.1: page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 674.725464] lowmem_reserve[]: 0 0 0 0 0 [ 674.726703] syz-executor.1 cpuset= [ 674.754909] Node 0 [ 674.756261] / [ 674.793710] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 674.796280] mems_allowed=0-1 [ 674.840768] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 674.845939] CPU: 0 PID: 7984 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 674.853726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.863076] Call Trace: [ 674.865672] dump_stack+0x1b2/0x281 [ 674.869302] dump_header+0x178/0x82f [ 674.873276] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 674.875965] lowmem_reserve[]: [ 674.878377] ? ___ratelimit+0x2cd/0x530 [ 674.878387] oom_kill_process.cold+0x10/0xb18 [ 674.878405] out_of_memory+0xe3e/0x1190 [ 674.878419] ? oom_killer_disable+0x1c0/0x1c0 [ 674.878427] ? mutex_trylock+0x152/0x1a0 [ 674.878438] __alloc_pages_nodemask+0x23e1/0x2720 [ 674.878460] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 674.878485] alloc_pages_current+0x155/0x260 [ 674.878496] filemap_fault+0xea3/0x1980 [ 674.878515] ext4_filemap_fault+0x84/0xb0 [ 674.878527] __do_fault+0xfa/0x380 [ 674.916831] 0 [ 674.920577] __handle_mm_fault+0x2497/0x4620 [ 674.920589] ? vm_insert_page+0x7c0/0x7c0 [ 674.920599] ? lock_downgrade+0x740/0x740 [ 674.920619] handle_mm_fault+0x391/0x860 [ 674.920631] __do_page_fault+0x549/0xad0 [ 674.920644] ? spurious_fault+0x640/0x640 [ 674.920654] ? do_page_fault+0x60/0x500 [ 674.920663] ? page_fault+0x2f/0x50 [ 674.920673] page_fault+0x45/0x50 [ 674.945254] 0 [ 674.946959] RIP: a360f:0x3 [ 674.970786] RSP: 147d:00007fff6f6f81cc EFLAGS: 00000032 [ 674.986452] CPU: 0 PID: 21097 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 674.986700] 0 [ 674.991816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.991821] Call Trace: [ 674.991838] dump_stack+0x1b2/0x281 [ 674.991850] warn_alloc.cold+0x96/0x1cc [ 674.991861] ? zone_watermark_ok_safe+0x220/0x220 [ 674.991869] ? usleep_range+0x130/0x130 [ 674.991877] ? try_to_free_pages+0x23f/0x6e0 [ 674.991885] ? _find_next_bit+0xdb/0x100 [ 674.991895] ? run_timer_softirq+0x5a0/0x5a0 [ 674.991909] __alloc_pages_nodemask+0x2127/0x2720 [ 674.991931] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 674.991956] alloc_pages_current+0x155/0x260 [ 674.991972] filemap_fault+0xea3/0x1980 [ 675.057390] 0 [ 675.060755] ext4_filemap_fault+0x84/0xb0 [ 675.060767] __do_fault+0xfa/0x380 [ 675.060777] __handle_mm_fault+0x2497/0x4620 [ 675.060788] ? vm_insert_page+0x7c0/0x7c0 [ 675.060798] ? nanosleep_copyout+0x100/0x100 [ 675.060817] handle_mm_fault+0x391/0x860 [ 675.060830] __do_page_fault+0x549/0xad0 [ 675.060842] ? spurious_fault+0x640/0x640 [ 675.060851] ? do_page_fault+0x60/0x500 [ 675.060860] ? page_fault+0x2f/0x50 [ 675.060875] page_fault+0x45/0x50 [ 675.106820] RIP: a35ff:0x2 [ 675.109661] RSP: 001e:00007ffdd5fc6c0c EFLAGS: 00000032 [ 675.115361] 0 [ 675.143541] Mem-Info: [ 675.156390] active_anon:13884 inactive_anon:35169 isolated_anon:0 [ 675.156390] active_file:36 inactive_file:9 isolated_file:0 [ 675.156390] unevictable:0 dirty:0 writeback:0 unstable:0 [ 675.156390] slab_reclaimable:12750 slab_unreclaimable:115300 [ 675.156390] mapped:52615 shmem:35599 pagetables:819 bounce:0 [ 675.156390] free:13883 free_pcp:118 free_cma:0 [ 675.214527] Node 1 Normal free:26744kB min:53696kB low:67120kB high:80544kB active_anon:996kB inactive_anon:44996kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:388kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 675.218665] Node 0 active_anon:54540kB inactive_anon:95680kB active_file:140kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:152964kB dirty:0kB writeback:0kB shmem:97052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 675.263666] lowmem_reserve[]: 0 0 0 0 0 [ 675.303341] Node 1 active_anon:996kB inactive_anon:44996kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:57496kB dirty:0kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 675.325881] Node 0 [ 675.355900] Node 0 [ 675.356057] DMA: [ 675.366661] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:2060kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 675.385730] 1*4kB (M) 3*8kB (ME) 20*16kB (UME) 26*32kB (UME) 15*64kB (UME) 11*128kB (UE) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 0*2048kB 0*4096kB = 10972kB [ 675.417121] lowmem_reserve[]: [ 675.446369] Node 0 [ 675.447981] 0 2717 2718 2718 2718 [ 675.455283] Node 0 DMA32 free:17816kB min:36200kB low:45248kB high:54296kB active_anon:52480kB inactive_anon:95680kB active_file:104kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7744kB pagetables:2888kB bounce:0kB free_pcp:348kB local_pcp:216kB free_cma:0kB [ 675.474109] DMA32: 540*4kB (UME) 565*8kB (UME) 198*16kB (UME) 63*32kB (UME) 48*64kB (UM) 13*128kB (UM) 5*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17880kB [ 675.507705] lowmem_reserve[]: [ 675.546551] Node 0 [ 675.547732] 0 0 0 0 0 [ 675.554439] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 675.574715] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 675.616302] Node 1 Normal: 54*4kB (ME) 68*8kB (UM) 42*16kB (UM) 17*32kB (ME) 67*64kB (UM) 56*128kB (UM) 50*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 26744kB [ 675.619680] lowmem_reserve[]: [ 675.655613] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 675.656466] 0 [ 675.666791] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 675.687438] 0 0 0 0 [ 675.697450] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 675.698315] Node 1 Normal free:26744kB min:53696kB low:67120kB high:80544kB active_anon:996kB inactive_anon:44996kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:388kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 675.724613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 675.764844] 35624 total pagecache pages [ 675.766900] lowmem_reserve[]: [ 675.795026] 0 pages in swap cache [ 675.798064] 0 0 0 0 0 [ 675.804961] Node 0 DMA: 1*4kB (M) 3*8kB (ME) 20*16kB (UME) 26*32kB (UME) 15*64kB (UME) 11*128kB (UE) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 0*2048kB 0*4096kB = 10972kB [ 675.806777] Swap cache stats: add 0, delete 0, find 0/0 [ 675.844353] Free swap = 0kB [ 675.846035] Node 0 [ 675.847375] Total swap = 0kB [ 675.847384] DMA32: 540*4kB (UME) 565*8kB (UME) 198*16kB (UME) 63*32kB (UME) 48*64kB (UM) 13*128kB (UM) 5*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17880kB [ 675.873794] 2097051 pages RAM [ 675.916047] 0 pages HighMem/MovableOnly [ 675.917222] Node 0 [ 675.942707] 363841 pages reserved [ 675.946167] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 675.966959] 0 pages cma reserved [ 675.974642] Node 1 Normal: 54*4kB (ME) 68*8kB (UM) 42*16kB (UM) 17*32kB (ME) 67*64kB (UM) 56*128kB (UM) 50*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 26744kB [ 676.006133] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 676.033737] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 676.068702] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 676.130336] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 676.180770] 37210 total pagecache pages [ 676.194835] 0 pages in swap cache [ 676.247149] Swap cache stats: add 0, delete 0, find 0/0 [ 676.263279] Free swap = 0kB [ 676.278057] Total swap = 0kB [ 676.283754] 2097051 pages RAM [ 676.293842] 0 pages HighMem/MovableOnly [ 676.310034] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 676.311010] 363841 pages reserved [ 676.332449] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 676.340268] CPU: 1 PID: 21868 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 676.347330] 0 pages cma reserved [ 676.348150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.348155] Call Trace: [ 676.348172] dump_stack+0x1b2/0x281 [ 676.348186] warn_alloc.cold+0x96/0x1cc [ 676.348198] ? zone_watermark_ok_safe+0x220/0x220 [ 676.348220] __alloc_pages_nodemask+0x2127/0x2720 [ 676.351568] Out of memory (oom_kill_allocating_task): Kill process 7984 (syz-executor.0) score 0 or sacrifice child [ 676.360931] ? io_schedule_timeout+0x140/0x140 [ 676.360941] ? retint_kernel+0x2d/0x2d [ 676.360956] ? lock_acquire+0x170/0x3f0 [ 676.360972] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 676.363558] Killed process 21869 (syz-executor.0) total-vm:93384kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 676.367151] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 676.424524] ? __mutex_unlock_slowpath+0x75/0x770 [ 676.429365] alloc_pages_current+0x155/0x260 [ 676.433786] ion_page_pool_alloc+0x118/0x1b0 [ 676.438189] ion_system_heap_allocate+0x133/0x8c0 [ 676.443026] ? _raw_spin_unlock+0x29/0x40 [ 676.447170] ? _ion_heap_freelist_drain+0x6e/0x410 [ 676.452110] ? ion_system_contig_heap_create+0x130/0x130 [ 676.457554] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 676.462580] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 676.467417] ion_alloc+0x27a/0x810 [ 676.470955] ? ion_dma_buf_release+0x40/0x40 [ 676.475444] ? __might_fault+0x177/0x1b0 [ 676.479500] ion_ioctl+0xea/0x1f0 [ 676.482968] ? ion_query_heaps+0x360/0x360 [ 676.487206] ? ion_query_heaps+0x360/0x360 [ 676.491436] do_vfs_ioctl+0x75a/0xff0 [ 676.495232] ? ioctl_preallocate+0x1a0/0x1a0 [ 676.499650] ? lock_downgrade+0x740/0x740 [ 676.503793] ? __fget+0x225/0x360 [ 676.507257] ? do_vfs_ioctl+0xff0/0xff0 [ 676.511230] ? security_file_ioctl+0x83/0xb0 [ 676.515643] SyS_ioctl+0x7f/0xb0 [ 676.519003] ? do_vfs_ioctl+0xff0/0xff0 [ 676.522971] do_syscall_64+0x1d5/0x640 [ 676.526863] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 676.532057] RIP: 0033:0x466459 [ 676.535233] RSP: 002b:00007f8e9dbaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 676.543015] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 676.550272] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 676.557529] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 676.564784] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 676.572048] R13: 00007ffdd5fc694f R14: 00007f8e9dbaf300 R15: 0000000000022000 [ 676.590031] warn_alloc_show_mem: 1 callbacks suppressed [ 676.590034] Mem-Info: [ 676.624376] oom_reaper: reaped process 21869 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 676.626899] active_anon:13909 inactive_anon:35169 isolated_anon:0 [ 676.626899] active_file:50 inactive_file:6 isolated_file:1 [ 676.626899] unevictable:0 dirty:0 writeback:25 unstable:0 [ 676.626899] slab_reclaimable:12730 slab_unreclaimable:115186 [ 676.626899] mapped:52666 shmem:35599 pagetables:819 bounce:0 [ 676.626899] free:13823 free_pcp:32 free_cma:0 [ 676.679727] Node 0 active_anon:52448kB inactive_anon:95680kB active_file:116kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:153068kB dirty:0kB writeback:0kB shmem:97052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 676.688438] oom_reaper: reaped process 21862 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 676.707605] syz-executor.4: [ 676.717618] Node 1 active_anon:996kB inactive_anon:44996kB active_file:84kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:57596kB dirty:0kB writeback:100kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 676.749965] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 676.762971] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 676.768234] CPU: 1 PID: 7984 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 676.769487] syz-executor.0: [ 676.776015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.776022] Call Trace: [ 676.790949] dump_stack+0x1b2/0x281 [ 676.794575] dump_header+0x178/0x82f [ 676.797189] page allocation failure: order:0 [ 676.798290] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 676.798299] ? ___ratelimit+0x2cd/0x530 [ 676.798309] oom_kill_process.cold+0x10/0xb18 [ 676.798326] out_of_memory+0xe3e/0x1190 [ 676.802718] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 676.807807] ? oom_killer_disable+0x1c0/0x1c0 [ 676.807815] ? mutex_trylock+0x152/0x1a0 [ 676.807829] __alloc_pages_nodemask+0x23e1/0x2720 [ 676.811795] page allocation failure: order:0 [ 676.816273] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 676.820242] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 676.827311] alloc_pages_current+0x155/0x260 [ 676.831796] (null) [ 676.835813] filemap_fault+0xea3/0x1980 [ 676.835831] ext4_filemap_fault+0x84/0xb0 [ 676.835842] __do_fault+0xfa/0x380 [ 676.844825] syz-executor.4 cpuset= [ 676.845073] __handle_mm_fault+0x2497/0x4620 [ 676.850029] / [ 676.857091] ? vm_insert_page+0x7c0/0x7c0 [ 676.861504] (null) [ 676.863612] ? lock_downgrade+0x740/0x740 [ 676.867583] syz-executor.0 cpuset= [ 676.871701] handle_mm_fault+0x391/0x860 [ 676.875207] / [ 676.878737] __do_page_fault+0x549/0xad0 [ 676.883151] mems_allowed=0-1 [ 676.884820] ? spurious_fault+0x640/0x640 [ 676.897514] mems_allowed=0-1 [ 676.898721] ? do_page_fault+0x60/0x500 [ 676.922814] ? page_fault+0x2f/0x50 [ 676.926432] page_fault+0x45/0x50 [ 676.929890] RIP: a360f:0x3 [ 676.932717] RSP: 147d:00007fff6f6f81cc EFLAGS: 00000032 [ 676.932740] CPU: 0 PID: 21869 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 676.937293] Node 0 [ 676.938124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.938128] Call Trace: [ 676.938143] dump_stack+0x1b2/0x281 [ 676.938157] warn_alloc.cold+0x96/0x1cc [ 676.938168] ? zone_watermark_ok_safe+0x220/0x220 [ 676.938177] ? usleep_range+0x130/0x130 [ 676.938191] ? try_to_free_pages+0x23f/0x6e0 [ 676.946093] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 676.948282] ? _find_next_bit+0xdb/0x100 [ 676.948293] ? run_timer_softirq+0x5a0/0x5a0 [ 676.948309] __alloc_pages_nodemask+0x2127/0x2720 [ 676.948327] ? lock_acquire+0x170/0x3f0 [ 676.948344] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 676.959892] lowmem_reserve[]: [ 676.960257] ? ion_page_pool_alloc+0x9e/0x1b0 [ 676.963853] 0 [ 676.967815] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 676.967829] ? retint_kernel+0x2d/0x2d [ 676.967843] alloc_pages_current+0x155/0x260 [ 676.967859] ion_page_pool_alloc+0x118/0x1b0 [ 676.972702] 2717 [ 676.976686] ion_system_heap_allocate+0x133/0x8c0 [ 676.983188] 2718 [ 677.006658] ? ion_alloc+0x187/0x810 [ 677.006670] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 677.006680] ? ion_system_contig_heap_create+0x130/0x130 [ 677.006690] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 677.006701] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 677.006713] ion_alloc+0x204/0x810 [ 677.006727] ? ion_dma_buf_release+0x40/0x40 [ 677.006738] ? __might_fault+0x177/0x1b0 [ 677.006754] ion_ioctl+0xea/0x1f0 [ 677.006764] ? ion_query_heaps+0x360/0x360 [ 677.006776] ? ion_query_heaps+0x360/0x360 [ 677.006787] do_vfs_ioctl+0x75a/0xff0 [ 677.006798] ? ioctl_preallocate+0x1a0/0x1a0 [ 677.013339] 2718 [ 677.015244] ? lock_downgrade+0x740/0x740 [ 677.020115] 2718 [ 677.024025] ? __fget+0x225/0x360 [ 677.031929] ? do_vfs_ioctl+0xff0/0xff0 [ 677.036396] Node 0 [ 677.038185] ? security_file_ioctl+0x83/0xb0 [ 677.038196] SyS_ioctl+0x7f/0xb0 [ 677.038204] ? do_vfs_ioctl+0xff0/0xff0 [ 677.038216] do_syscall_64+0x1d5/0x640 [ 677.038233] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 677.043694] DMA32 free:17836kB min:36200kB low:45248kB high:54296kB active_anon:52596kB inactive_anon:95680kB active_file:96kB inactive_file:24kB unevictable:0kB writepending:4kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7712kB pagetables:2888kB bounce:0kB free_pcp:348kB local_pcp:128kB free_cma:0kB [ 677.047549] RIP: 0033:0x466459 [ 677.047554] RSP: 002b:00007f5fb7692188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 677.047564] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 677.047569] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 677.047574] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 677.047579] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 677.047584] R13: 00007fff6f6f7f0f R14: 00007f5fb7692300 R15: 0000000000022000 [ 677.226791] CPU: 0 PID: 21862 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 677.232443] Mem-Info: [ 677.239428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.239432] Call Trace: [ 677.239451] dump_stack+0x1b2/0x281 [ 677.239465] warn_alloc.cold+0x96/0x1cc [ 677.239477] ? zone_watermark_ok_safe+0x220/0x220 [ 677.239487] ? usleep_range+0x130/0x130 [ 677.239498] ? try_to_free_pages+0x23f/0x6e0 [ 677.247390] active_anon:13378 inactive_anon:35170 isolated_anon:0 [ 677.247390] active_file:26 inactive_file:9 isolated_file:0 [ 677.247390] unevictable:0 dirty:0 writeback:0 unstable:0 [ 677.247390] slab_reclaimable:12730 slab_unreclaimable:115188 [ 677.247390] mapped:52619 shmem:35600 pagetables:816 bounce:0 [ 677.247390] free:13897 free_pcp:0 free_cma:0 [ 677.249797] ? _find_next_bit+0xdb/0x100 [ 677.249808] ? run_timer_softirq+0x5a0/0x5a0 [ 677.249824] __alloc_pages_nodemask+0x2127/0x2720 [ 677.249842] ? lock_acquire+0x170/0x3f0 [ 677.249857] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 677.259238] Node 0 active_anon:52448kB inactive_anon:95680kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:152980kB dirty:0kB writeback:0kB shmem:97052kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 677.261769] ? ion_page_pool_alloc+0x9e/0x1b0 [ 677.265400] Node 1 active_anon:1064kB inactive_anon:45000kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:57496kB dirty:0kB writeback:0kB shmem:45348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 677.269360] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 677.269372] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 677.269424] alloc_pages_current+0x155/0x260 [ 677.269440] ion_page_pool_alloc+0x118/0x1b0 [ 677.274280] Node 0 [ 677.278239] ion_system_heap_allocate+0x133/0x8c0 [ 677.278250] ? ion_alloc+0x187/0x810 [ 677.278261] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 677.278274] ? ion_system_contig_heap_create+0x130/0x130 [ 677.282685] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 677.315661] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 677.315675] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 677.315687] ion_alloc+0x204/0x810 [ 677.315702] ? ion_dma_buf_release+0x40/0x40 [ 677.315713] ? __might_fault+0x177/0x1b0 [ 677.315725] ion_ioctl+0xea/0x1f0 [ 677.315734] ? ion_query_heaps+0x360/0x360 [ 677.315747] ? ion_query_heaps+0x360/0x360 [ 677.315757] do_vfs_ioctl+0x75a/0xff0 [ 677.315768] ? ioctl_preallocate+0x1a0/0x1a0 [ 677.320010] lowmem_reserve[]: [ 677.324228] ? lock_downgrade+0x740/0x740 [ 677.329095] 0 [ 677.333019] ? __fget+0x225/0x360 [ 677.337879] 2717 [ 677.365509] ? do_vfs_ioctl+0xff0/0xff0 [ 677.365519] ? security_file_ioctl+0x83/0xb0 [ 677.365528] SyS_ioctl+0x7f/0xb0 [ 677.365537] ? do_vfs_ioctl+0xff0/0xff0 [ 677.365548] do_syscall_64+0x1d5/0x640 [ 677.365564] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 677.365573] RIP: 0033:0x466459 [ 677.365577] RSP: 002b:00007ff90c340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 677.365586] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 677.365591] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 677.365596] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 677.365601] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 677.365606] R13: 00007ffce90c212f R14: 00007ff90c340300 R15: 0000000000022000 [ 677.432760] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 677.432783] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 677.432806] CPU: 0 PID: 21869 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 677.438298] lowmem_reserve[]: [ 677.463840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 677.463845] Call Trace: [ 677.463867] dump_stack+0x1b2/0x281 [ 677.463880] warn_alloc.cold+0x96/0x1cc [ 677.463892] ? zone_watermark_ok_safe+0x220/0x220 [ 677.463913] __alloc_pages_nodemask+0x2127/0x2720 [ 677.463929] ? lock_acquire+0x170/0x3f0 [ 677.463944] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 677.463960] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 677.469058] 0 [ 677.473824] ? __mutex_unlock_slowpath+0x75/0x770 [ 677.477331] 0 [ 677.481723] ? retint_kernel+0x2d/0x2d [ 677.481737] alloc_pages_current+0x155/0x260 [ 677.481751] ion_page_pool_alloc+0x118/0x1b0 [ 677.481763] ion_system_heap_allocate+0x133/0x8c0 [ 677.481774] ? _raw_spin_unlock+0x29/0x40 [ 677.481783] ? _ion_heap_freelist_drain+0x6e/0x410 [ 677.481793] ? ion_system_contig_heap_create+0x130/0x130 [ 677.481807] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 677.485845] 0 [ 677.489281] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 677.489294] ion_alloc+0x27a/0x810 [ 677.489308] ? ion_dma_buf_release+0x40/0x40 [ 677.489319] ? __might_fault+0x177/0x1b0 [ 677.489332] ion_ioctl+0xea/0x1f0 [ 677.489344] ? ion_query_heaps+0x360/0x360 [ 677.493594] 0 [ 677.497873] ? ion_query_heaps+0x360/0x360 [ 677.497884] do_vfs_ioctl+0x75a/0xff0 [ 677.497896] ? ioctl_preallocate+0x1a0/0x1a0 [ 677.497905] ? lock_downgrade+0x740/0x740 [ 677.497918] ? __fget+0x225/0x360 [ 677.497927] ? do_vfs_ioctl+0xff0/0xff0 [ 677.497939] ? security_file_ioctl+0x83/0xb0 [ 677.501727] 0 [ 677.506162] SyS_ioctl+0x7f/0xb0 [ 677.513392] ? do_vfs_ioctl+0xff0/0xff0 [ 677.515169] Node 0 [ 677.518629] do_syscall_64+0x1d5/0x640 [ 677.518647] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 677.518656] RIP: 0033:0x466459 [ 677.518660] RSP: 002b:00007f5fb7692188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 677.518670] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 677.518675] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 677.518683] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 677.520749] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 677.524691] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 677.529167] 2718 [ 677.532425] R13: 00007fff6f6f7f0f R14: 00007f5fb7692300 R15: 0000000000022000 [ 677.621621] syz-executor.0: [ 677.623861] lowmem_reserve[]: [ 677.680504] page allocation failure: order:0 [ 677.821892] 0 [ 677.917837] 2718 2718 [ 677.922172] Node 0 DMA32 free:103276kB min:36200kB low:45248kB high:54296kB active_anon:52436kB inactive_anon:95680kB active_file:136kB inactive_file:4136kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7712kB pagetables:2792kB bounce:0kB free_pcp:192kB local_pcp:80kB free_cma:0kB [ 677.960799] 0 0 0 0 [ 677.963164] Node 1 Normal free:366736kB min:53696kB low:67120kB high:80544kB active_anon:1064kB inactive_anon:45000kB active_file:1028kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:472kB bounce:0kB free_pcp:608kB local_pcp:308kB free_cma:0kB [ 677.995471] lowmem_reserve[]: 0 0 0 0 0 [ 678.000767] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 678.062743] lowmem_reserve[]: 0 0 0 0 0 [ 678.066789] Node 0 DMA: 2*4kB (UM) 3*8kB (ME) 4*16kB (UME) 4*32kB (UME) 5*64kB (UME) 8*128kB (UE) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11040kB [ 678.091777] IPVS: ftp: loaded support on port[0] = 21 [ 678.127747] lowmem_reserve[]: 0 0 0 0 0 [ 678.131788] Node 1 Normal free:268028kB min:53696kB low:67120kB high:80544kB active_anon:960kB inactive_anon:45000kB active_file:1000kB inactive_file:68kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:324kB bounce:0kB free_pcp:412kB local_pcp:32kB free_cma:0kB [ 678.171766] Node 0 DMA32: 312*4kB (UME) 480*8kB (UE) 147*16kB (UME) 14*32kB (ME) 279*64kB (UE) 131*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 42512kB [ 678.210053] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 678.238499] Node 1 Normal: 1*4kB (E) 0*8kB 1*16kB (M) 22*32kB (UME) 141*64kB (UM) 449*128kB (UM) 240*256kB (UM) 13*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 135316kB [ 678.263787] lowmem_reserve[]: 0 0 0 0 0 [ 678.274223] Node 0 DMA: 2*4kB (UM) 3*8kB (ME) 4*16kB (UME) 4*32kB (UME) 5*64kB (UME) 8*128kB (UE) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11040kB [ 678.302050] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 678.330716] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 678.351854] Node 0 DMA32: 395*4kB (UME) 507*8kB (UME) 160*16kB (UME) 20*32kB (UME) 3*64kB (UE) 74*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18500kB [ 678.369191] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 678.378845] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 678.391428] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 678.400212] 35938 total pagecache pages [ 678.404191] 0 pages in swap cache [ 678.407732] Node 1 Normal: 56*4kB (UME) 70*8kB (UM) 37*16kB (UM) 22*32kB (UME) 26*64kB (M) 8*128kB (UM) 62*256kB (UM) 13*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 27296kB [ 678.423098] Swap cache stats: add 0, delete 0, find 0/0 [ 678.428763] Free swap = 0kB [ 678.431785] Total swap = 0kB [ 678.434838] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 678.447186] 2097051 pages RAM [ 678.449422] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 678.451103] 0 pages HighMem/MovableOnly [ 678.460427] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 678.465421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 678.467192] CPU: 0 PID: 21869 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 678.475830] 363841 pages reserved [ 678.483600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.483605] Call Trace: [ 678.483624] dump_stack+0x1b2/0x281 [ 678.483638] warn_alloc.cold+0x96/0x1cc [ 678.483650] ? zone_watermark_ok_safe+0x220/0x220 [ 678.483660] ? usleep_range+0x130/0x130 [ 678.483678] ? try_to_free_pages+0x23f/0x6e0 [ 678.483688] ? _find_next_bit+0xdb/0x100 [ 678.483700] ? run_timer_softirq+0x5a0/0x5a0 [ 678.487146] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 678.496922] __alloc_pages_nodemask+0x2127/0x2720 [ 678.496939] ? lock_acquire+0x170/0x3f0 [ 678.496955] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 678.496966] ? ion_page_pool_alloc+0x9e/0x1b0 [ 678.496981] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 678.496995] ? retint_kernel+0x2d/0x2d [ 678.497009] alloc_pages_current+0x155/0x260 [ 678.500986] 0 pages cma reserved [ 678.503224] ion_page_pool_alloc+0x118/0x1b0 [ 678.512817] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 678.516005] ion_system_heap_allocate+0x133/0x8c0 [ 678.521591] 35713 total pagecache pages [ 678.524461] ? _raw_spin_unlock+0x29/0x40 [ 678.528937] 0 pages in swap cache [ 678.537668] ? _ion_heap_freelist_drain+0x6e/0x410 [ 678.537679] ? ion_system_contig_heap_create+0x130/0x130 [ 678.537691] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 678.537703] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 678.537714] ion_alloc+0x27a/0x810 [ 678.542542] Swap cache stats: add 0, delete 0, find 0/0 [ 678.546504] ? ion_dma_buf_release+0x40/0x40 [ 678.551413] Free swap = 0kB [ 678.555802] ? __might_fault+0x177/0x1b0 [ 678.561274] Total swap = 0kB [ 678.565134] ion_ioctl+0xea/0x1f0 [ 678.569626] 2097051 pages RAM [ 678.572869] ? ion_query_heaps+0x360/0x360 [ 678.577249] 0 pages HighMem/MovableOnly [ 678.585825] ? ion_query_heaps+0x360/0x360 [ 678.585836] do_vfs_ioctl+0x75a/0xff0 [ 678.585848] ? ioctl_preallocate+0x1a0/0x1a0 [ 678.585857] ? lock_downgrade+0x740/0x740 [ 678.585869] ? __fget+0x225/0x360 [ 678.585877] ? do_vfs_ioctl+0xff0/0xff0 [ 678.585887] ? security_file_ioctl+0x83/0xb0 [ 678.585896] SyS_ioctl+0x7f/0xb0 [ 678.585903] ? do_vfs_ioctl+0xff0/0xff0 [ 678.585915] do_syscall_64+0x1d5/0x640 [ 678.585932] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 678.585940] RIP: 0033:0x466459 [ 678.585945] RSP: 002b:00007f5fb7692188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 678.585954] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 678.585960] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 678.585965] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 678.585970] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 678.585975] R13: 00007fff6f6f7f0f R14: 00007f5fb7692300 R15: 0000000000022000 [ 678.608580] warn_alloc_show_mem: 3 callbacks suppressed [ 678.608583] Mem-Info: [ 678.635672] 363841 pages reserved [ 678.655361] active_anon:13311 inactive_anon:35171 isolated_anon:0 [ 678.655361] active_file:6 inactive_file:51 isolated_file:8 [ 678.655361] unevictable:0 dirty:24 writeback:0 unstable:0 [ 678.655361] slab_reclaimable:12728 slab_unreclaimable:115838 [ 678.655361] mapped:52680 shmem:35602 pagetables:774 bounce:0 [ 678.655361] free:13777 free_pcp:0 free_cma:0 [ 678.657295] syz-executor.4: [ 678.663515] Node 0 active_anon:52324kB inactive_anon:95684kB active_file:44kB inactive_file:172kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:153192kB dirty:92kB writeback:0kB shmem:97056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 678.670166] page allocation failure: order:4 [ 678.673728] Node 1 active_anon:920kB inactive_anon:45000kB active_file:0kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:57528kB dirty:4kB writeback:0kB shmem:45352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 678.685011] 0 pages cma reserved [ 678.687811] Node 0 [ 678.689919] Out of memory (oom_kill_allocating_task): Kill process 7984 (syz-executor.0) score 0 or sacrifice child [ 678.693193] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 678.697157] Killed process 7984 (syz-executor.0) total-vm:93120kB, anon-rss:104kB, file-rss:34544kB, shmem-rss:0kB [ 678.706455] lowmem_reserve[]: [ 678.709493] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 678.717193] 0 [ 678.724486] (null) [ 678.724492] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 678.724516] CPU: 1 PID: 21862 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 678.724528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 678.724534] Call Trace: [ 678.737267] 2717 [ 678.739067] dump_stack+0x1b2/0x281 [ 678.739086] warn_alloc.cold+0x96/0x1cc [ 678.746340] 2718 [ 678.753709] ? zone_watermark_ok_safe+0x220/0x220 [ 678.753731] __alloc_pages_nodemask+0x2127/0x2720 [ 678.753748] ? lock_acquire+0x170/0x3f0 [ 678.759107] 2718 [ 678.761513] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 678.764949] 2718 [ 678.798000] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 678.798011] ? __mutex_unlock_slowpath+0x75/0x770 [ 678.798036] alloc_pages_current+0x155/0x260 [ 678.829502] ion_page_pool_alloc+0x118/0x1b0 [ 678.829513] ion_system_heap_allocate+0x133/0x8c0 [ 678.829532] ? _raw_spin_unlock+0x29/0x40 [ 678.829545] ? _ion_heap_freelist_drain+0x6e/0x410 [ 678.833944] Node 0 [ 678.860922] ? ion_system_contig_heap_create+0x130/0x130 [ 678.860933] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 678.860944] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 678.860955] ion_alloc+0x27a/0x810 [ 678.860969] ? ion_dma_buf_release+0x40/0x40 [ 678.864360] DMA32 free:17696kB min:36200kB low:45248kB high:54296kB active_anon:52312kB inactive_anon:95684kB active_file:904kB inactive_file:508kB unevictable:0kB writepending:92kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7712kB pagetables:2728kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 678.866583] ? __might_fault+0x177/0x1b0 [ 678.877259] lowmem_reserve[]: [ 678.903332] ion_ioctl+0xea/0x1f0 [ 678.903344] ? ion_query_heaps+0x360/0x360 [ 678.903357] ? ion_query_heaps+0x360/0x360 [ 678.903370] do_vfs_ioctl+0x75a/0xff0 [ 678.913868] 0 [ 678.916959] ? ioctl_preallocate+0x1a0/0x1a0 [ 678.924059] 0 [ 678.925824] ? lock_downgrade+0x740/0x740 [ 678.927965] 0 [ 678.933053] ? __fget+0x225/0x360 [ 678.940962] 0 [ 678.950280] ? do_vfs_ioctl+0xff0/0xff0 [ 678.950322] ? security_file_ioctl+0x83/0xb0 [ 678.952866] 0 [ 678.954917] SyS_ioctl+0x7f/0xb0 [ 678.962487] ? do_vfs_ioctl+0xff0/0xff0 [ 678.964523] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 678.969357] do_syscall_64+0x1d5/0x640 [ 678.969375] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 678.969385] RIP: 0033:0x466459 [ 678.974209] lowmem_reserve[]: [ 678.978160] RSP: 002b:00007ff90c340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 678.978169] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 678.978175] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 678.978180] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 678.978189] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 678.980231] 0 [ 678.985061] R13: 00007ffce90c212f R14: 00007ff90c340300 R15: 0000000000022000 [ 678.987101] 0 [ 679.010272] oom_reaper: reaped process 7984 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 679.040335] 0 [ 679.183606] oom_reaper: reaped process 21863 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 679.187707] 0 0 [ 679.248967] Node 1 Normal free:26672kB min:53696kB low:67120kB high:80544kB active_anon:1004kB inactive_anon:45000kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:388kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 679.257699] syz-executor.0: [ 679.277530] lowmem_reserve[]: 0 0 0 0 0 [ 679.277557] Node 0 [ 679.282679] syz-executor.1: [ 679.284525] DMA: 2*4kB [ 679.286754] page allocation failure: order:0 [ 679.289788] (UM) [ 679.292363] syz-executor.4: [ 679.296753] 3*8kB (ME) 4*16kB (UME) 4*32kB (UME) 4*64kB (UME) 8*128kB (UE) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10976kB [ 679.327533] Node 0 DMA32: 509*4kB (ME) 534*8kB (UME) 159*16kB (UME) 21*32kB (ME) 681*64kB (UE) 186*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 76916kB [ 679.331966] oom_reaper: reaped process 21870 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 679.342393] page allocation failure: order:0 [ 679.352269] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 679.367528] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 679.375156] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 679.387523] page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 679.397770] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 679.408533] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 679.413651] CPU: 0 PID: 21868 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 679.421533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.430888] Call Trace: [ 679.433498] dump_stack+0x1b2/0x281 [ 679.437123] warn_alloc.cold+0x96/0x1cc [ 679.441094] ? zone_watermark_ok_safe+0x220/0x220 [ 679.445936] ? usleep_range+0x130/0x130 [ 679.449906] ? try_to_free_pages+0x23f/0x6e0 [ 679.454308] ? _find_next_bit+0xdb/0x100 [ 679.458383] ? run_timer_softirq+0x5a0/0x5a0 [ 679.462796] __alloc_pages_nodemask+0x2127/0x2720 [ 679.467643] ? lock_acquire+0x170/0x3f0 [ 679.471628] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 679.476468] ? ion_page_pool_alloc+0x9e/0x1b0 [ 679.480990] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 679.486449] alloc_pages_current+0x155/0x260 [ 679.490970] ion_page_pool_alloc+0x118/0x1b0 [ 679.495389] ion_system_heap_allocate+0x133/0x8c0 [ 679.500259] ? _raw_spin_unlock+0x29/0x40 [ 679.504501] ? _ion_heap_freelist_drain+0x6e/0x410 [ 679.509435] ? ion_system_contig_heap_create+0x130/0x130 [ 679.514882] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 679.519898] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 679.524739] ion_alloc+0x27a/0x810 [ 679.528300] ? ion_dma_buf_release+0x40/0x40 [ 679.532710] ? __might_fault+0x177/0x1b0 [ 679.536776] ion_ioctl+0xea/0x1f0 [ 679.540228] ? ion_query_heaps+0x360/0x360 [ 679.544465] ? ion_query_heaps+0x360/0x360 [ 679.548707] do_vfs_ioctl+0x75a/0xff0 [ 679.552592] ? ioctl_preallocate+0x1a0/0x1a0 [ 679.557011] ? lock_downgrade+0x740/0x740 [ 679.561160] ? __fget+0x225/0x360 [ 679.564605] ? do_vfs_ioctl+0xff0/0xff0 [ 679.568663] ? security_file_ioctl+0x83/0xb0 [ 679.573067] SyS_ioctl+0x7f/0xb0 [ 679.576427] ? do_vfs_ioctl+0xff0/0xff0 [ 679.580408] do_syscall_64+0x1d5/0x640 [ 679.584305] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 679.589488] RIP: 0033:0x466459 [ 679.592671] RSP: 002b:00007f8e9dbaf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 679.600373] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 679.607641] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 679.615000] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 679.622263] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 679.629527] R13: 00007ffdd5fc694f R14: 00007f8e9dbaf300 R15: 0000000000022000 [ 679.638232] CPU: 0 PID: 21862 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 679.646297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.655662] Call Trace: [ 679.658252] dump_stack+0x1b2/0x281 [ 679.661882] warn_alloc.cold+0x96/0x1cc [ 679.665854] ? zone_watermark_ok_safe+0x220/0x220 [ 679.670693] ? usleep_range+0x130/0x130 [ 679.674665] ? try_to_free_pages+0x23f/0x6e0 [ 679.679090] ? _find_next_bit+0xdb/0x100 [ 679.683146] ? run_timer_softirq+0x5a0/0x5a0 [ 679.687577] __alloc_pages_nodemask+0x2127/0x2720 [ 679.692425] ? lock_acquire+0x170/0x3f0 [ 679.696405] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 679.701245] ? ion_page_pool_alloc+0x9e/0x1b0 [ 679.705741] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 679.711207] alloc_pages_current+0x155/0x260 [ 679.715617] ion_page_pool_alloc+0x118/0x1b0 [ 679.720031] ion_system_heap_allocate+0x133/0x8c0 [ 679.724875] ? _raw_spin_unlock+0x29/0x40 [ 679.729043] ? _ion_heap_freelist_drain+0x6e/0x410 [ 679.733967] ? ion_system_contig_heap_create+0x130/0x130 [ 679.739420] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 679.744434] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 679.749281] ion_alloc+0x27a/0x810 [ 679.752845] ? ion_dma_buf_release+0x40/0x40 [ 679.757252] ? __might_fault+0x177/0x1b0 [ 679.761325] ion_ioctl+0xea/0x1f0 [ 679.764780] ? ion_query_heaps+0x360/0x360 [ 679.769017] ? ion_query_heaps+0x360/0x360 [ 679.773334] do_vfs_ioctl+0x75a/0xff0 [ 679.777135] ? ioctl_preallocate+0x1a0/0x1a0 [ 679.781543] ? lock_downgrade+0x740/0x740 [ 679.785694] ? __fget+0x225/0x360 [ 679.789149] ? do_vfs_ioctl+0xff0/0xff0 [ 679.793158] ? security_file_ioctl+0x83/0xb0 [ 679.797594] SyS_ioctl+0x7f/0xb0 [ 679.800976] ? do_vfs_ioctl+0xff0/0xff0 [ 679.804949] do_syscall_64+0x1d5/0x640 [ 679.808931] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 679.814140] RIP: 0033:0x466459 [ 679.817328] RSP: 002b:00007ff90c340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 679.825033] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 679.832297] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 679.839561] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 679.846832] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 679.854098] R13: 00007ffce90c212f R14: 00007ff90c340300 R15: 0000000000022000 [ 679.871718] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 679.873952] warn_alloc_show_mem: 1 callbacks suppressed [ 679.873956] Mem-Info: [ 679.877073] CPU: 0 PID: 7984 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 679.884313] active_anon:13304 inactive_anon:35172 isolated_anon:0 [ 679.884313] active_file:10 inactive_file:694 isolated_file:0 [ 679.884313] unevictable:0 dirty:21 writeback:0 unstable:0 [ 679.884313] slab_reclaimable:12728 slab_unreclaimable:115698 [ 679.884313] mapped:53033 shmem:35603 pagetables:795 bounce:0 [ 679.884313] free:163909 free_pcp:384 free_cma:0 [ 679.884677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.884681] Call Trace: [ 679.884696] dump_stack+0x1b2/0x281 [ 679.884710] warn_alloc.cold+0x96/0x1cc [ 679.895844] Node 0 active_anon:52212kB inactive_anon:95688kB active_file:28kB inactive_file:2764kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:154636kB dirty:76kB writeback:0kB shmem:97060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 679.926428] ? zone_watermark_ok_safe+0x220/0x220 [ 679.926438] ? usleep_range+0x130/0x130 [ 679.926445] ? try_to_free_pages+0x23f/0x6e0 [ 679.926453] ? _find_next_bit+0xdb/0x100 [ 679.926461] ? run_timer_softirq+0x5a0/0x5a0 [ 679.926474] __alloc_pages_nodemask+0x2127/0x2720 [ 679.926492] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 679.926514] alloc_pages_current+0x155/0x260 [ 679.926525] filemap_fault+0xea3/0x1980 [ 679.926544] ext4_filemap_fault+0x84/0xb0 [ 679.926554] __do_fault+0xfa/0x380 [ 679.926563] __handle_mm_fault+0x2497/0x4620 [ 679.926572] ? vm_insert_page+0x7c0/0x7c0 [ 679.926583] ? lock_downgrade+0x740/0x740 [ 679.926601] handle_mm_fault+0x391/0x860 [ 679.926629] __do_page_fault+0x549/0xad0 [ 679.939772] Node 1 active_anon:1004kB inactive_anon:45000kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:57496kB dirty:8kB writeback:0kB shmem:45352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 679.942162] ? spurious_fault+0x640/0x640 [ 679.942173] ? do_page_fault+0x60/0x500 [ 679.946171] Node 0 [ 679.973998] ? page_fault+0x2f/0x50 [ 679.974006] page_fault+0x45/0x50 [ 679.974014] RIP: a360f:0x3 [ 679.974018] RSP: 147d:00007fff6f6f81cc EFLAGS: 00000032 [ 679.974417] Node 1 [ 679.989623] DMA free:11232kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 680.008090] Normal: [ 680.016198] lowmem_reserve[]: [ 680.019089] 345*4kB (UME) 383*8kB (UM) 444*16kB (UM) [ 680.055169] Bluetooth: hci4 command 0x0409 tx timeout [ 680.117764] 512*32kB [ 680.140179] 0 [ 680.145394] (UME) 3772*64kB (UM) 599*128kB (UM) 392*256kB (UM) 16*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 454556kB [ 680.163061] syz-executor.0 invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=0 [ 680.167607] 2717 2718 2718 2718 [ 680.174381] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 680.191580] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 680.196710] CPU: 0 PID: 7984 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 680.199294] Node 0 [ 680.204547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.204554] Call Trace: [ 680.206797] DMA32 free:236888kB min:36200kB low:45248kB high:54296kB active_anon:52400kB inactive_anon:95688kB active_file:344kB inactive_file:5348kB unevictable:0kB writepending:144kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:8000kB pagetables:2792kB bounce:0kB free_pcp:848kB local_pcp:192kB free_cma:0kB [ 680.219690] dump_stack+0x1b2/0x281 [ 680.219702] dump_header+0x178/0x82f [ 680.219712] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 680.219720] ? ___ratelimit+0x2cd/0x530 [ 680.219729] oom_kill_process.cold+0x10/0xb18 [ 680.219746] out_of_memory+0xe3e/0x1190 [ 680.219755] ? pagefault_out_of_memory+0xaa/0xd0 [ 680.219765] ? oom_killer_disable+0x1c0/0x1c0 [ 680.219772] ? mutex_trylock+0x152/0x1a0 [ 680.219779] ? pagefault_out_of_memory+0xaa/0xd0 [ 680.219789] pagefault_out_of_memory+0xbb/0xd0 [ 680.219800] ? out_of_memory+0x1190/0x1190 [ 680.297633] lowmem_reserve[]: [ 680.301138] ? lock_downgrade+0x740/0x740 [ 680.305365] 0 [ 680.308481] mm_fault_error+0xad/0x2c0 [ 680.308492] __do_page_fault+0x93c/0xad0 [ 680.308503] ? spurious_fault+0x640/0x640 [ 680.308510] ? do_page_fault+0x60/0x500 [ 680.308519] ? page_fault+0x2f/0x50 [ 680.308527] page_fault+0x45/0x50 [ 680.308534] RIP: a360f:0x3 [ 680.308538] RSP: 147d:00007fff6f6f81cc EFLAGS: 00000032 [ 680.322628] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 680.357020] chnl_net:caif_netlink_parms(): no params data found [ 680.359978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 680.376831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 680.385612] 37120 total pagecache pages [ 680.393061] 0 pages in swap cache [ 680.396522] Swap cache stats: add 0, delete 0, find 0/0 [ 680.402574] Free swap = 0kB [ 680.405927] Total swap = 0kB [ 680.412903] 2097051 pages RAM [ 680.416019] 0 pages HighMem/MovableOnly [ 680.417625] 0 0 0 0 [ 680.420730] 363841 pages reserved [ 680.426269] 0 pages cma reserved [ 680.427652] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 680.445631] Mem-Info: [ 680.467934] active_anon:13286 inactive_anon:35172 isolated_anon:0 [ 680.467934] active_file:133 inactive_file:1359 isolated_file:0 [ 680.467934] unevictable:0 dirty:26 writeback:0 unstable:0 [ 680.467934] slab_reclaimable:12720 slab_unreclaimable:115814 [ 680.467934] mapped:53791 shmem:35603 pagetables:795 bounce:0 [ 680.467934] free:175814 free_pcp:376 free_cma:0 [ 680.468497] lowmem_reserve[]: 0 0 0 0 0 [ 680.522319] Node 1 Normal free:454556kB min:53696kB low:67120kB high:80544kB active_anon:1000kB inactive_anon:45000kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:388kB bounce:0kB free_pcp:672kB local_pcp:672kB free_cma:0kB [ 680.567642] Node 0 active_anon:52144kB inactive_anon:95688kB active_file:524kB inactive_file:5632kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157668kB dirty:104kB writeback:0kB shmem:97060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 680.591376] lowmem_reserve[]: 0 0 0 0 0 [ 680.631689] Node 0 DMA: 2*4kB (UM) 7*8kB (UME) 4*16kB (UME) 4*32kB (UME) 8*64kB (UME) 8*128kB (UE) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11264kB [ 680.647580] Node 1 active_anon:1000kB inactive_anon:45000kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:57496kB dirty:0kB writeback:0kB shmem:45352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 680.647586] Node 0 DMA free:11264kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 680.647604] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 680.647959] Node 0 [ 680.738918] Node 0 DMA32: 317*4kB (UE) 480*8kB (UE) 3014*16kB (UE) 354*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 64660kB [ 680.807412] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 680.807581] DMA32 free:45108kB min:36200kB low:45248kB high:54296kB active_anon:52132kB inactive_anon:95688kB active_file:824kB inactive_file:5832kB unevictable:0kB writepending:152kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7776kB pagetables:2792kB bounce:0kB free_pcp:340kB local_pcp:180kB free_cma:0kB [ 680.827747] Node 1 Normal: 24*4kB (UME) 67*8kB (UM) 33*16kB (UM) 298*32kB (UME) 1381*64kB (UM) 599*128kB (UM) 392*256kB (UM) 16*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 284296kB [ 680.922077] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 680.938357] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 680.957864] lowmem_reserve[]: 0 0 0 0 0 [ 680.962252] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 680.992195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 681.017559] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 681.026156] 37519 total pagecache pages [ 681.057568] 0 pages in swap cache [ 681.061055] Swap cache stats: add 0, delete 0, find 0/0 [ 681.066416] Free swap = 0kB [ 681.070145] lowmem_reserve[]: 0 0 0 0 0 [ 681.074152] Node 1 Normal free:86664kB min:53696kB low:67120kB high:80544kB active_anon:1100kB inactive_anon:45000kB active_file:408kB inactive_file:304kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:388kB bounce:0kB free_pcp:580kB local_pcp:428kB free_cma:0kB [ 681.103703] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.127596] Total swap = 0kB [ 681.130649] 2097051 pages RAM [ 681.133746] 0 pages HighMem/MovableOnly [ 681.138345] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.151445] device bridge_slave_0 entered promiscuous mode [ 681.157943] 363841 pages reserved [ 681.161422] 0 pages cma reserved [ 681.179118] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.185582] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.218581] device bridge_slave_1 entered promiscuous mode [ 681.224988] lowmem_reserve[]: 0 0 0 0 0 [ 681.251528] Node 0 DMA: 1*4kB (M) 5*8kB (UME) 4*16kB (UME) 4*32kB (UME) 6*64kB (UME) 8*128kB (UE) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11116kB [ 681.291196] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 681.298016] Node 0 DMA32: 255*4kB (UE) 499*8kB (E) 1065*16kB (UE) 381*32kB (UE) 159*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44420kB [ 681.328000] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 681.341623] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 681.377588] Node 1 Normal: 2*4kB (ME) 2*8kB (UM) 32*16kB (UM) 19*32kB (ME) 566*64kB (UM) 14*128kB (UM) 23*256kB (UM) 7*512kB (UM) 69*1024kB (U) 0*2048kB 0*4096kB = 119288kB [ 681.414323] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 681.427979] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 681.448555] team0: Port device team_slave_0 added [ 681.457162] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 681.471471] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 681.487880] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 681.496740] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 681.497843] team0: Port device team_slave_1 added [ 681.546136] 37804 total pagecache pages [ 681.550228] 0 pages in swap cache [ 681.556231] Swap cache stats: add 0, delete 0, find 0/0 [ 681.577992] Free swap = 0kB [ 681.581037] Total swap = 0kB [ 681.584046] 2097051 pages RAM [ 681.587148] 0 pages HighMem/MovableOnly [ 681.618055] 363841 pages reserved [ 681.621531] 0 pages cma reserved [ 681.622467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.624886] Out of memory (oom_kill_allocating_task): Kill process 7984 (syz-executor.0) score 0 or sacrifice child [ 681.658095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.697637] Killed process 7984 (syz-executor.0) total-vm:93120kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 681.748813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.777675] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 681.811002] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 681.830281] CPU: 0 PID: 7966 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 681.832861] warn_alloc: 1 callbacks suppressed [ 681.832865] syz-executor.2: [ 681.837742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.837747] Call Trace: [ 681.837763] dump_stack+0x1b2/0x281 [ 681.837776] dump_header+0x178/0x82f [ 681.837786] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 681.837795] ? ___ratelimit+0x2cd/0x530 [ 681.837805] oom_kill_process.cold+0x10/0xb18 [ 681.837823] out_of_memory+0xe3e/0x1190 [ 681.837835] ? oom_killer_disable+0x1c0/0x1c0 [ 681.837841] ? mutex_trylock+0x152/0x1a0 [ 681.837852] __alloc_pages_nodemask+0x23e1/0x2720 [ 681.837873] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 681.837898] alloc_pages_current+0x155/0x260 [ 681.837909] filemap_fault+0xea3/0x1980 [ 681.837928] ext4_filemap_fault+0x84/0xb0 [ 681.837939] __do_fault+0xfa/0x380 [ 681.837948] __handle_mm_fault+0x2497/0x4620 [ 681.837959] ? vm_insert_page+0x7c0/0x7c0 [ 681.837979] handle_mm_fault+0x391/0x860 [ 681.848375] page allocation failure: order:4 [ 681.855000] __do_page_fault+0x549/0xad0 [ 681.860499] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 681.861266] ? spurious_fault+0x640/0x640 [ 681.864951] (null) [ 681.870036] ? do_page_fault+0x60/0x500 [ 681.870045] ? page_fault+0x2f/0x50 [ 681.870053] page_fault+0x45/0x50 [ 681.870061] RIP: 0f00:0xc00005e300 [ 681.870065] RSP: 39fd0:000000c00018b6f8 EFLAGS: 00000003 [ 681.879143] Mem-Info: [ 681.883344] syz-executor.2 cpuset= [ 681.889506] active_anon:13299 inactive_anon:35172 isolated_anon:0 [ 681.889506] active_file:59 inactive_file:23 isolated_file:0 [ 681.889506] unevictable:0 dirty:32 writeback:0 unstable:0 [ 681.889506] slab_reclaimable:12613 slab_unreclaimable:119239 [ 681.889506] mapped:52821 shmem:35603 pagetables:793 bounce:0 [ 681.889506] free:13891 free_pcp:2 free_cma:0 [ 681.893364] / [ 681.895931] Node 0 active_anon:52112kB inactive_anon:95688kB active_file:120kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153652kB dirty:128kB writeback:0kB shmem:97060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 681.900828] mems_allowed=0-1 [ 681.901532] CPU: 1 PID: 21870 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 681.912262] Node 1 active_anon:1084kB inactive_anon:45000kB active_file:116kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:57632kB dirty:0kB writeback:0kB shmem:45352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 681.913383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.916902] Node 0 [ 681.921286] Call Trace: [ 681.921304] dump_stack+0x1b2/0x281 [ 681.921318] warn_alloc.cold+0x96/0x1cc [ 681.921330] ? zone_watermark_ok_safe+0x220/0x220 [ 681.925796] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 681.929515] __alloc_pages_nodemask+0x2127/0x2720 [ 681.929528] ? _raw_spin_unlock_irq+0x5a/0x80 [ 681.933912] lowmem_reserve[]: [ 681.937961] ? finish_task_switch+0x178/0x610 [ 681.937969] ? finish_task_switch+0x14d/0x610 [ 681.937986] ? lock_acquire+0x170/0x3f0 [ 681.945063] 0 [ 681.949202] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 681.949220] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 681.949232] ? __mutex_unlock_slowpath+0x75/0x770 [ 681.951358] 2717 [ 681.955339] ? alloc_pages_current+0x84/0x260 [ 681.958959] 2718 [ 681.962374] alloc_pages_current+0x155/0x260 [ 681.965887] 2718 [ 681.971331] ion_page_pool_alloc+0x118/0x1b0 [ 681.971342] ion_system_heap_allocate+0x133/0x8c0 [ 681.971355] ? _raw_spin_unlock+0x29/0x40 [ 681.973746] 2718 [ 681.977285] ? _ion_heap_freelist_drain+0x6e/0x410 [ 682.013018] ? ion_system_contig_heap_create+0x130/0x130 [ 682.040890] Node 0 [ 682.043958] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 682.051869] DMA32 free:17876kB min:36200kB low:45248kB high:54296kB active_anon:52100kB inactive_anon:95688kB active_file:644kB inactive_file:268kB unevictable:0kB writepending:128kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7744kB pagetables:2788kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB [ 682.078989] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 682.079003] ion_alloc+0x27a/0x810 [ 682.079022] ? ion_dma_buf_release+0x40/0x40 [ 682.088388] lowmem_reserve[]: [ 682.090591] ? __might_fault+0x177/0x1b0 [ 682.093144] 0 [ 682.096757] ion_ioctl+0xea/0x1f0 [ 682.100732] 0 [ 682.105532] ? ion_query_heaps+0x360/0x360 [ 682.131256] 0 [ 682.135971] ? ion_query_heaps+0x360/0x360 [ 682.140453] 0 [ 682.143521] do_vfs_ioctl+0x75a/0xff0 [ 682.148006] 0 [ 682.152473] ? ioctl_preallocate+0x1a0/0x1a0 [ 682.158292] ? lock_downgrade+0x740/0x740 [ 682.158306] ? __fget+0x225/0x360 [ 682.158318] ? do_vfs_ioctl+0xff0/0xff0 [ 682.163137] Node 0 [ 682.168664] ? security_file_ioctl+0x83/0xb0 [ 682.168682] SyS_ioctl+0x7f/0xb0 [ 682.168694] ? do_vfs_ioctl+0xff0/0xff0 [ 682.173528] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 682.175569] do_syscall_64+0x1d5/0x640 [ 682.180063] lowmem_reserve[]: [ 682.182108] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 682.186479] 0 [ 682.188524] RIP: 0033:0x466459 [ 682.188529] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 682.188539] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 682.188546] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 682.188553] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 682.192946] 0 [ 682.197799] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 682.197805] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 682.235262] warn_alloc_show_mem: 2 callbacks suppressed [ 682.235266] Mem-Info: [ 682.345072] 0 [ 682.353396] active_anon:13287 inactive_anon:35172 isolated_anon:0 [ 682.353396] active_file:23 inactive_file:28 isolated_file:0 [ 682.353396] unevictable:0 dirty:32 writeback:0 unstable:0 [ 682.353396] slab_reclaimable:12602 slab_unreclaimable:119277 [ 682.353396] mapped:52764 shmem:35603 pagetables:695 bounce:0 [ 682.353396] free:13878 free_pcp:61 free_cma:0 [ 682.355132] syz-executor.3: [ 682.358266] Node 0 active_anon:52148kB inactive_anon:95688kB active_file:56kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153560kB dirty:112kB writeback:0kB shmem:97060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 682.358284] Node 1 active_anon:1000kB inactive_anon:45000kB active_file:36kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:57496kB dirty:16kB writeback:0kB shmem:45352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 682.358290] Node 0 [ 682.367528] page allocation failure: order:0 [ 682.370804] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 682.378060] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 682.383563] lowmem_reserve[]: [ 682.390869] 0 [ 682.400352] 0 [ 682.408019] 0 [ 682.414680] 2717 [ 682.429692] (null) [ 682.459779] 2718 [ 682.490801] 2718 [ 682.550932] Node 1 [ 682.557438] Bluetooth: hci4 command 0x041b tx timeout [ 682.579596] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 682.586944] CPU: 1 PID: 21863 Comm: syz-executor.3 Not tainted 4.14.227-syzkaller #0 [ 682.594833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.597060] Normal free:26800kB min:53696kB low:67120kB high:80544kB active_anon:1000kB inactive_anon:45000kB active_file:36kB inactive_file:44kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:388kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 682.604181] Call Trace: [ 682.604202] dump_stack+0x1b2/0x281 [ 682.604216] warn_alloc.cold+0x96/0x1cc [ 682.604228] ? zone_watermark_ok_safe+0x220/0x220 [ 682.604241] ? usleep_range+0x130/0x130 [ 682.633694] lowmem_reserve[]: [ 682.636288] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 682.639905] 0 [ 682.643856] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 682.648696] 0 [ 682.652638] ? run_timer_softirq+0x5a0/0x5a0 [ 682.655726] 0 [ 682.660821] __alloc_pages_nodemask+0x2127/0x2720 [ 682.660840] ? lock_acquire+0x170/0x3f0 [ 682.662613] 0 [ 682.667618] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 682.667630] ? ion_page_pool_alloc+0x9e/0x1b0 [ 682.667647] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 682.669425] 0 [ 682.673830] alloc_pages_current+0x155/0x260 [ 682.680426] ion_page_pool_alloc+0x118/0x1b0 [ 682.680437] ion_system_heap_allocate+0x133/0x8c0 [ 682.680446] ? ion_alloc+0x187/0x810 [ 682.680462] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 682.680473] ? ion_system_contig_heap_create+0x130/0x130 [ 682.684427] Node 0 [ 682.686215] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 682.691056] DMA: [ 682.695520] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 682.700969] 2*4kB [ 682.702751] ion_alloc+0x204/0x810 [ 682.707128] (UM) [ 682.711536] ? ion_dma_buf_release+0x40/0x40 [ 682.711549] ? __might_fault+0x177/0x1b0 [ 682.711562] ion_ioctl+0xea/0x1f0 [ 682.718308] 3*8kB [ 682.721990] ? ion_query_heaps+0x360/0x360 [ 682.727409] (ME) [ 682.732848] ? ion_query_heaps+0x360/0x360 [ 682.732860] do_vfs_ioctl+0x75a/0xff0 [ 682.732872] ? ioctl_preallocate+0x1a0/0x1a0 [ 682.735086] 4*16kB [ 682.740098] ? lock_downgrade+0x740/0x740 [ 682.740112] ? __fget+0x225/0x360 [ 682.740121] ? do_vfs_ioctl+0xff0/0xff0 [ 682.742162] (UME) [ 682.746991] ? security_file_ioctl+0x83/0xb0 [ 682.749153] 4*32kB [ 682.752654] SyS_ioctl+0x7f/0xb0 [ 682.754690] (UME) [ 682.759079] ? do_vfs_ioctl+0xff0/0xff0 [ 682.759091] do_syscall_64+0x1d5/0x640 [ 682.759109] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 682.763143] 4*64kB [ 682.766578] RIP: 0033:0x466459 [ 682.768730] (UME) [ 682.772913] RSP: 002b:00007f42379f8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 682.774979] 8*128kB [ 682.779196] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 682.779202] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 682.779206] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 682.779211] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 682.779216] R13: 00007ffef8958def R14: 00007f42379f8300 R15: 0000000000022000 [ 682.782264] 2718 [ 682.835096] (UE) [ 682.886694] 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10976kB [ 682.889767] Node 0 DMA32 free:17736kB min:36200kB low:45248kB high:54296kB active_anon:52136kB inactive_anon:95688kB active_file:156kB inactive_file:36kB unevictable:0kB writepending:112kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7680kB pagetables:2392kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 682.930234] Node 0 [ 682.958385] lowmem_reserve[]: 0 0 0 0 0 [ 682.964612] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 682.984718] DMA32: 586*4kB (UME) 602*8kB (UME) 224*16kB (UME) 30*32kB (UME) 8*64kB (ME) 33*128kB (UM) 5*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17720kB [ 682.990554] lowmem_reserve[]: 0 0 0 0 0 [ 683.041045] Node 1 Normal free:64072kB min:53696kB low:67120kB high:80544kB active_anon:1000kB inactive_anon:45000kB active_file:28kB inactive_file:1252kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:388kB bounce:0kB free_pcp:136kB local_pcp:8kB free_cma:0kB [ 683.067533] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 683.089304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.095602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.162589] lowmem_reserve[]: 0 0 0 0 0 [ 683.167548] Node 1 Normal: 1*4kB (E) 2*8kB (UM) 2*16kB (UM) 3*32kB (ME) 2783*64kB (UM) 397*128kB (UM) 45*256kB (UM) 2*512kB (UM) 50*1024kB (U) 3*2048kB (U) 0*4096kB = 298964kB [ 683.169520] Node 0 [ 683.230762] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 683.243319] DMA: 3*4kB (UM) 18*8kB (UME) 5*16kB (UME) 4*32kB (UME) 5*64kB (UME) 8*128kB (UE) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11180kB [ 683.259020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.298190] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 683.311166] Node 0 DMA32: 795*4kB (UE) 1003*8kB (UME) 307*16kB (UE) 375*32kB (UE) 1837*64kB (UE) 214*128kB (U) 4*256kB (U) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 174612kB [ 683.338995] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 683.346539] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 683.376055] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 683.391811] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 05:09:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:09:03 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) [ 683.437827] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 683.442388] Node 1 Normal: 315*4kB (UME) [ 683.446507] 38270 total pagecache pages [ 683.494974] 285*8kB (UM) 254*16kB (UM) 473*32kB (UE) 4264*64kB (UM) 559*128kB (UM) 370*256kB (UM) 11*512kB (UM) 49*1024kB (U) 4*2048kB (U) 0*4096kB = 525908kB [ 683.496260] 0 pages in swap cache [ 683.549633] Swap cache stats: add 0, delete 0, find 0/0 [ 683.562027] device hsr_slave_0 entered promiscuous mode [ 683.568249] Free swap = 0kB [ 683.570987] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 683.571264] Total swap = 0kB [ 683.571271] 2097051 pages RAM [ 683.571274] 0 pages HighMem/MovableOnly [ 683.571277] 363841 pages reserved [ 683.571284] 0 pages cma reserved [ 683.583672] device hsr_slave_1 entered promiscuous mode [ 683.603793] Out of memory (oom_kill_allocating_task): Kill process 7966 (syz-fuzzer) score 0 or sacrifice child [ 683.612299] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 683.631951] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 05:09:04 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) [ 683.652344] Killed process 21872 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 683.671932] oom_reaper: reaped process 21872 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 683.684215] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 683.691609] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 683.725902] 39195 total pagecache pages [ 683.748107] 0 pages in swap cache [ 683.755116] Swap cache stats: add 0, delete 0, find 0/0 [ 683.767610] Free swap = 0kB [ 683.770789] Total swap = 0kB [ 683.791203] 2097051 pages RAM 05:09:04 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x121800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) [ 683.804548] 0 pages HighMem/MovableOnly [ 683.808678] 363841 pages reserved [ 683.812138] 0 pages cma reserved [ 683.830023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.836769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.845377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.852286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.860696] device bridge_slave_1 left promiscuous mode [ 683.866374] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.874357] device bridge_slave_0 left promiscuous mode [ 683.880132] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.889721] device veth1_macvtap left promiscuous mode [ 683.895038] device veth0_macvtap left promiscuous mode [ 683.900435] device veth1_vlan left promiscuous mode [ 683.905665] device veth0_vlan left promiscuous mode [ 684.007583] device hsr_slave_1 left promiscuous mode [ 684.015807] device hsr_slave_0 left promiscuous mode [ 684.031741] team0 (unregistering): Port device team_slave_1 removed [ 684.041806] team0 (unregistering): Port device team_slave_0 removed [ 684.051484] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 684.067568] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 684.100849] bond0 (unregistering): Released all slaves 05:09:04 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x121800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) [ 684.837613] Bluetooth: hci4 command 0x040f tx timeout [ 685.387877] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 685.408143] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 685.413301] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 685.425815] CPU: 0 PID: 21863 Comm: syz-executor.3 Not tainted 4.14.227-syzkaller #0 [ 685.433706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 685.443069] Call Trace: [ 685.445665] dump_stack+0x1b2/0x281 [ 685.449302] warn_alloc.cold+0x96/0x1cc [ 685.453289] ? zone_watermark_ok_safe+0x220/0x220 [ 685.458152] __alloc_pages_nodemask+0x2127/0x2720 [ 685.462992] ? io_schedule_timeout+0x140/0x140 [ 685.467588] ? lock_acquire+0x170/0x3f0 [ 685.471577] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 685.476430] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 685.481886] ? __mutex_unlock_slowpath+0x75/0x770 [ 685.486746] alloc_pages_current+0x155/0x260 [ 685.491172] ion_page_pool_alloc+0x118/0x1b0 [ 685.495591] ion_system_heap_allocate+0x133/0x8c0 [ 685.500451] ? _raw_spin_unlock+0x29/0x40 [ 685.504603] ? _ion_heap_freelist_drain+0x6e/0x410 [ 685.509533] ? ion_system_contig_heap_create+0x130/0x130 [ 685.514992] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 685.520016] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 685.524869] ion_alloc+0x27a/0x810 [ 685.528416] ? ion_dma_buf_release+0x40/0x40 [ 685.532833] ? __might_fault+0x177/0x1b0 [ 685.536907] ion_ioctl+0xea/0x1f0 [ 685.540366] ? ion_query_heaps+0x360/0x360 [ 685.544599] ? ion_query_heaps+0x360/0x360 [ 685.548840] do_vfs_ioctl+0x75a/0xff0 [ 685.552672] ? ioctl_preallocate+0x1a0/0x1a0 [ 685.557080] ? lock_downgrade+0x740/0x740 [ 685.561236] ? __fget+0x225/0x360 [ 685.564710] ? do_vfs_ioctl+0xff0/0xff0 [ 685.568686] ? security_file_ioctl+0x83/0xb0 [ 685.573094] SyS_ioctl+0x7f/0xb0 [ 685.576462] ? do_vfs_ioctl+0xff0/0xff0 [ 685.580443] do_syscall_64+0x1d5/0x640 [ 685.584349] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 685.589546] RIP: 0033:0x466459 [ 685.592728] RSP: 002b:00007f42379f8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 685.600432] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 685.607710] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 685.615680] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 685.622948] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 685.630217] R13: 00007ffef8958def R14: 00007f42379f8300 R15: 0000000000022000 [ 685.640637] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 685.646420] CPU: 0 PID: 22060 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 685.654312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 685.663661] Call Trace: [ 685.666259] dump_stack+0x1b2/0x281 [ 685.669889] warn_alloc.cold+0x96/0x1cc [ 685.673874] ? zone_watermark_ok_safe+0x220/0x220 [ 685.678734] __alloc_pages_nodemask+0x2127/0x2720 [ 685.683584] ? io_schedule_timeout+0x140/0x140 [ 685.688187] ? lock_acquire+0x170/0x3f0 [ 685.692176] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 685.697071] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 685.702532] ? __mutex_unlock_slowpath+0x75/0x770 [ 685.707385] alloc_pages_current+0x155/0x260 [ 685.711800] ion_page_pool_alloc+0x118/0x1b0 [ 685.716210] ion_system_heap_allocate+0x133/0x8c0 [ 685.721050] ? ion_alloc+0x187/0x810 [ 685.724768] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 685.730224] ? ion_system_contig_heap_create+0x130/0x130 [ 685.735685] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 685.740709] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 685.745560] ion_alloc+0x204/0x810 [ 685.749113] ? ion_dma_buf_release+0x40/0x40 [ 685.753521] ? __might_fault+0x177/0x1b0 [ 685.757583] ion_ioctl+0xea/0x1f0 [ 685.761035] ? ion_query_heaps+0x360/0x360 [ 685.765293] ? ion_query_heaps+0x360/0x360 [ 685.769529] do_vfs_ioctl+0x75a/0xff0 [ 685.773338] ? ioctl_preallocate+0x1a0/0x1a0 [ 685.777750] ? lock_downgrade+0x740/0x740 [ 685.781901] ? __fget+0x225/0x360 [ 685.785365] ? do_vfs_ioctl+0xff0/0xff0 [ 685.789364] ? security_file_ioctl+0x83/0xb0 [ 685.793771] SyS_ioctl+0x7f/0xb0 [ 685.797162] ? do_vfs_ioctl+0xff0/0xff0 [ 685.801143] do_syscall_64+0x1d5/0x640 [ 685.805046] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 685.810245] RIP: 0033:0x466459 [ 685.813431] RSP: 002b:00007ff90c340188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 685.821144] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 685.828436] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 685.835724] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 685.842987] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 685.850257] R13: 00007ffce90c212f R14: 00007ff90c340300 R15: 0000000000022000 [ 685.861392] warn_alloc_show_mem: 1 callbacks suppressed [ 685.861396] Mem-Info: [ 685.877746] active_anon:13250 inactive_anon:35167 isolated_anon:36 [ 685.877746] active_file:1667 inactive_file:3773 isolated_file:12 [ 685.877746] unevictable:0 dirty:1 writeback:50 unstable:0 [ 685.877746] slab_reclaimable:12600 slab_unreclaimable:118107 [ 685.877746] mapped:47990 shmem:35595 pagetables:707 bounce:0 [ 685.877746] free:178430 free_pcp:79 free_cma:0 [ 685.947554] Node 0 active_anon:52112kB inactive_anon:95668kB active_file:6332kB inactive_file:14812kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:156584kB dirty:8kB writeback:100kB shmem:97028kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 685.997559] Node 1 active_anon:888kB inactive_anon:45000kB active_file:336kB inactive_file:280kB unevictable:0kB isolated(anon):48kB isolated(file):48kB mapped:35376kB dirty:0kB writeback:100kB shmem:45352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 686.057554] Node 0 DMA free:11160kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 686.107534] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 686.112604] Node 0 DMA32 free:318908kB min:36200kB low:45248kB high:54296kB active_anon:52184kB inactive_anon:95668kB active_file:6416kB inactive_file:14892kB unevictable:0kB writepending:52kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7648kB pagetables:2632kB bounce:0kB free_pcp:200kB local_pcp:184kB free_cma:0kB [ 686.177539] lowmem_reserve[]: 0 0 0 0 0 [ 686.181562] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 686.237542] lowmem_reserve[]: 0 0 0 0 0 [ 686.241572] Node 1 Normal free:407272kB min:53696kB low:67120kB high:80544kB active_anon:888kB inactive_anon:45000kB active_file:300kB inactive_file:300kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:252kB bounce:0kB free_pcp:56kB local_pcp:0kB free_cma:0kB [ 686.307538] lowmem_reserve[]: 0 0 0 0 0 [ 686.311595] Node 0 DMA: 18*4kB (UM) 30*8kB (UME) 8*16kB (UME) 5*32kB (UME) 3*64kB (ME) 7*128kB (UE) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11160kB [ 686.347543] Node 0 DMA32: 244*4kB (UME) 488*8kB (UME) 3736*16kB (UME) 6617*32kB (UE) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 276464kB [ 686.377546] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 686.398438] Node 1 Normal: 1674*4kB (UME) 1424*8kB (UM) 2102*16kB (UM) 1811*32kB (UME) 11*64kB (M) 0*128kB 136*256kB (U) 61*512kB (U) 43*1024kB (U) 0*2048kB 0*4096kB = 220456kB [ 686.427549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 686.437314] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 686.467551] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 686.476449] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 686.517549] 40982 total pagecache pages [ 686.521578] 0 pages in swap cache [ 686.525028] Swap cache stats: add 0, delete 0, find 0/0 [ 686.549207] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 686.552922] Free swap = 0kB [ 686.577541] Total swap = 0kB [ 686.580588] 2097051 pages RAM [ 686.581870] syz-executor.2 cpuset= [ 686.583708] 0 pages HighMem/MovableOnly [ 686.583712] 363841 pages reserved [ 686.583716] 0 pages cma reserved [ 686.621904] / mems_allowed=0-1 [ 686.628540] CPU: 1 PID: 22065 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 686.636427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 686.645783] Call Trace: [ 686.648381] dump_stack+0x1b2/0x281 [ 686.652021] warn_alloc.cold+0x96/0x1cc [ 686.655999] ? zone_watermark_ok_safe+0x220/0x220 [ 686.660878] __alloc_pages_nodemask+0x2127/0x2720 [ 686.665758] ? lock_acquire+0x170/0x3f0 [ 686.669743] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 686.674593] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 686.680052] ? __mutex_unlock_slowpath+0x75/0x770 [ 686.685158] ? retint_kernel+0x2d/0x2d [ 686.689062] alloc_pages_current+0x155/0x260 [ 686.693476] ion_page_pool_alloc+0x118/0x1b0 [ 686.697899] ion_system_heap_allocate+0x133/0x8c0 [ 686.702751] ? ion_alloc+0x187/0x810 [ 686.706469] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 686.711925] ? ion_system_contig_heap_create+0x130/0x130 [ 686.717374] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 686.722391] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 686.727235] ion_alloc+0x204/0x810 [ 686.730776] ? ion_dma_buf_release+0x40/0x40 [ 686.735184] ? __might_fault+0x177/0x1b0 [ 686.739246] ion_ioctl+0xea/0x1f0 [ 686.742699] ? ion_query_heaps+0x360/0x360 [ 686.746934] ? ion_query_heaps+0x360/0x360 [ 686.751168] do_vfs_ioctl+0x75a/0xff0 [ 686.754978] ? ioctl_preallocate+0x1a0/0x1a0 [ 686.759388] ? lock_downgrade+0x740/0x740 [ 686.763537] ? __fget+0x225/0x360 [ 686.766988] ? do_vfs_ioctl+0xff0/0xff0 [ 686.771020] ? security_file_ioctl+0x83/0xb0 [ 686.775428] SyS_ioctl+0x7f/0xb0 [ 686.778795] ? do_vfs_ioctl+0xff0/0xff0 [ 686.782768] do_syscall_64+0x1d5/0x640 [ 686.786665] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 686.791853] RIP: 0033:0x466459 [ 686.795037] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 686.802743] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 686.810018] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 686.817719] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 686.824989] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 686.832289] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 687.216140] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 687.254158] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 687.274711] CPU: 1 PID: 14657 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 687.282306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 687.290681] warn_alloc_show_mem: 1 callbacks suppressed [ 687.290685] Mem-Info: [ 687.291749] Call Trace: [ 687.297118] active_anon:13314 inactive_anon:35164 isolated_anon:0 [ 687.297118] active_file:54 inactive_file:23 isolated_file:7 [ 687.297118] unevictable:0 dirty:28 writeback:0 unstable:0 [ 687.297118] slab_reclaimable:12588 slab_unreclaimable:118791 [ 687.297118] mapped:44147 shmem:35591 pagetables:721 bounce:0 [ 687.297118] free:13835 free_pcp:62 free_cma:0 [ 687.299508] dump_stack+0x1b2/0x281 [ 687.299519] dump_header+0x178/0x82f [ 687.299529] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 687.299538] ? ___ratelimit+0x2cd/0x530 [ 687.299548] oom_kill_process.cold+0x10/0xb18 [ 687.302162] Node 0 active_anon:52192kB inactive_anon:95660kB active_file:160kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):28kB mapped:141644kB dirty:96kB writeback:0kB shmem:97020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 687.336219] out_of_memory+0xe3e/0x1190 [ 687.336232] ? oom_killer_disable+0x1c0/0x1c0 [ 687.336241] ? mutex_trylock+0x152/0x1a0 [ 687.336251] __alloc_pages_nodemask+0x23e1/0x2720 [ 687.336269] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 687.340016] Node 1 active_anon:1064kB inactive_anon:44996kB active_file:56kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34944kB dirty:16kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 687.346597] alloc_pages_current+0x155/0x260 [ 687.351725] Node 0 [ 687.355640] filemap_fault+0xea3/0x1980 [ 687.360161] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:12kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 687.388440] ext4_filemap_fault+0x84/0xb0 [ 687.388460] __do_fault+0xfa/0x380 [ 687.388474] __handle_mm_fault+0x2497/0x4620 [ 687.392456] lowmem_reserve[]: [ 687.396940] ? vm_insert_page+0x7c0/0x7c0 [ 687.401021] 0 [ 687.405822] ? __might_fault+0x177/0x1b0 [ 687.410661] 2717 [ 687.437900] handle_mm_fault+0x391/0x860 [ 687.437915] __do_page_fault+0x549/0xad0 [ 687.437928] ? spurious_fault+0x640/0x640 [ 687.442334] 2718 [ 687.444563] ? do_page_fault+0x60/0x500 [ 687.448544] 2718 [ 687.474266] ? page_fault+0x2f/0x50 [ 687.474273] page_fault+0x45/0x50 [ 687.474282] RIP: 0000:0xb750a0 [ 687.474286] RSP: 0009:000000c0006b5e68 EFLAGS: 00000003 [ 687.477140] Mem-Info: [ 687.487969] 2718 [ 687.491242] active_anon:13314 inactive_anon:35164 isolated_anon:0 [ 687.491242] active_file:54 inactive_file:23 isolated_file:7 [ 687.491242] unevictable:0 dirty:28 writeback:0 unstable:0 [ 687.491242] slab_reclaimable:12588 slab_unreclaimable:118791 [ 687.491242] mapped:44147 shmem:35591 pagetables:721 bounce:0 [ 687.491242] free:13885 free_pcp:0 free_cma:0 [ 687.507679] Node 0 active_anon:52192kB inactive_anon:95660kB active_file:160kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):28kB mapped:141644kB dirty:96kB writeback:0kB shmem:97020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 687.513090] Node 0 [ 687.515997] Node 1 active_anon:1064kB inactive_anon:44996kB active_file:56kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34944kB dirty:16kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 687.516165] DMA32 free:17864kB min:36200kB low:45248kB high:54296kB active_anon:52080kB inactive_anon:95660kB active_file:108kB inactive_file:148kB unevictable:0kB writepending:84kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7648kB pagetables:2632kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 687.521642] Node 0 [ 687.522207] lowmem_reserve[]: [ 687.525829] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:12kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 687.532369] 0 [ 687.532509] lowmem_reserve[]: [ 687.537861] 0 0 0 0 [ 687.537875] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 687.537895] lowmem_reserve[]: 0 0 0 0 0 [ 687.537916] Node 1 Normal free:26704kB min:53696kB low:67120kB high:80544kB active_anon:1064kB inactive_anon:44996kB active_file:500kB inactive_file:512kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:252kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 687.537938] lowmem_reserve[]: 0 0 0 0 0 [ 687.537958] Node 0 DMA: 2*4kB (UM) 4*8kB (UME) 4*16kB (UME) 4*32kB (UME) 4*64kB (UME) 8*128kB (UE) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10984kB [ 687.538045] Node 0 DMA32: 736*4kB (UME) 650*8kB (ME) 252*16kB (UME) 83*32kB (UME) 29*64kB (UM) 10*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17968kB [ 687.538113] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 687.538163] Node 1 Normal: 46*4kB (ME) 64*8kB (UM) 21*16kB (M) 7*32kB (ME) 399*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26792kB [ 687.538233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 687.538240] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 687.538246] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 687.538253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 687.538257] 35694 total pagecache pages [ 687.538267] 0 pages in swap cache [ 687.538272] Swap cache stats: add 0, delete 0, find 0/0 [ 687.538276] Free swap = 0kB [ 687.538279] Total swap = 0kB [ 687.538285] 2097051 pages RAM [ 687.538289] 0 pages HighMem/MovableOnly [ 687.538292] 363841 pages reserved [ 687.538296] 0 pages cma reserved [ 687.890100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.896799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.905165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.911935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.920110] device bridge_slave_1 left promiscuous mode [ 687.925623] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.933108] device bridge_slave_0 left promiscuous mode [ 687.938188] 0 2717 2718 2718 2718 [ 687.939061] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.942100] Node 0 DMA32 free:17864kB min:36200kB low:45248kB high:54296kB active_anon:52080kB inactive_anon:95660kB active_file:108kB inactive_file:148kB unevictable:0kB writepending:84kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7648kB pagetables:2632kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 687.982316] lowmem_reserve[]: 0 0 0 0 0 [ 687.987231] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 688.015184] lowmem_reserve[]: 0 0 0 0 0 [ 688.022460] Node 1 Normal free:26704kB min:53696kB low:67120kB high:80544kB active_anon:1064kB inactive_anon:44996kB active_file:52kB inactive_file:24kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:252kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 688.054244] lowmem_reserve[]: 0 0 0 0 0 [ 688.059805] Node 0 DMA: 2*4kB (UM) 4*8kB (UME) 4*16kB (UME) 4*32kB (UME) 4*64kB (UME) 8*128kB (UE) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10984kB [ 688.077868] Node 0 DMA32: 741*4kB (UME) 649*8kB (ME) 251*16kB (UME) 82*32kB (UME) 30*64kB (UM) 10*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17996kB [ 688.092640] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 688.104548] Node 1 Normal: 46*4kB (ME) 64*8kB (UM) 21*16kB (M) 7*32kB (ME) 399*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26792kB [ 688.118735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 688.135355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 688.158377] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 688.167241] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 688.176989] 35619 total pagecache pages [ 688.184057] 0 pages in swap cache [ 688.187599] Swap cache stats: add 0, delete 0, find 0/0 [ 688.197020] Free swap = 0kB [ 688.206726] Total swap = 0kB [ 688.213920] 2097051 pages RAM [ 688.217026] 0 pages HighMem/MovableOnly [ 688.229428] 363841 pages reserved [ 688.232900] 0 pages cma reserved [ 688.236280] Out of memory (oom_kill_allocating_task): Kill process 14657 (syz-fuzzer) score 0 or sacrifice child [ 688.255178] Killed process 22067 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 688.269602] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 688.297062] in:imklog cpuset=/ mems_allowed=0-1 [ 688.306095] CPU: 0 PID: 20716 Comm: in:imklog Not tainted 4.14.227-syzkaller #0 [ 688.313545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 688.322895] Call Trace: [ 688.325492] dump_stack+0x1b2/0x281 [ 688.329120] dump_header+0x178/0x82f [ 688.332830] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 688.337932] ? ___ratelimit+0x2cd/0x530 [ 688.341911] oom_kill_process.cold+0x10/0xb18 [ 688.346412] out_of_memory+0xe3e/0x1190 [ 688.350389] ? oom_killer_disable+0x1c0/0x1c0 [ 688.354880] ? mutex_trylock+0x152/0x1a0 [ 688.358948] __alloc_pages_nodemask+0x23e1/0x2720 [ 688.363811] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 688.368958] alloc_pages_current+0x155/0x260 [ 688.373371] filemap_fault+0xea3/0x1980 [ 688.377363] ext4_filemap_fault+0x84/0xb0 [ 688.381504] __do_fault+0xfa/0x380 [ 688.385060] __handle_mm_fault+0x2497/0x4620 [ 688.389463] ? vm_insert_page+0x7c0/0x7c0 [ 688.393606] ? lock_downgrade+0x740/0x740 [ 688.397760] handle_mm_fault+0x391/0x860 [ 688.401820] __do_page_fault+0x549/0xad0 [ 688.405966] ? spurious_fault+0x640/0x640 [ 688.410110] ? do_page_fault+0x60/0x500 [ 688.414082] ? page_fault+0x2f/0x50 [ 688.417702] page_fault+0x45/0x50 [ 688.421148] RIP: 1fa0:0x1f9f [ 688.424154] RSP: 0000:000055801df8d9d0 EFLAGS: 7fb33bec9da0 [ 688.433722] syz-executor.3: [ 688.441038] Mem-Info: [ 688.446492] active_anon:13335 inactive_anon:35164 isolated_anon:0 [ 688.446492] active_file:37 inactive_file:0 isolated_file:0 [ 688.446492] unevictable:0 dirty:0 writeback:0 unstable:0 [ 688.446492] slab_reclaimable:12582 slab_unreclaimable:118779 [ 688.446492] mapped:44085 shmem:35591 pagetables:721 bounce:0 [ 688.446492] free:13942 free_pcp:0 free_cma:0 [ 688.496005] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 688.516851] Node 0 active_anon:52268kB inactive_anon:95660kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141524kB dirty:0kB writeback:0kB shmem:97020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 688.555051] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 688.564381] CPU: 0 PID: 21863 Comm: syz-executor.3 Not tainted 4.14.227-syzkaller #0 [ 688.572266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 688.581613] Call Trace: [ 688.584228] dump_stack+0x1b2/0x281 [ 688.587857] warn_alloc.cold+0x96/0x1cc [ 688.591829] ? zone_watermark_ok_safe+0x220/0x220 [ 688.596667] ? usleep_range+0x130/0x130 [ 688.600637] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 688.605737] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 688.610750] ? run_timer_softirq+0x5a0/0x5a0 [ 688.615166] __alloc_pages_nodemask+0x2127/0x2720 [ 688.620014] ? lock_acquire+0x170/0x3f0 [ 688.623994] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 688.628833] ? ion_page_pool_alloc+0x9e/0x1b0 [ 688.633334] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 688.638796] alloc_pages_current+0x155/0x260 [ 688.643247] ion_page_pool_alloc+0x118/0x1b0 [ 688.647654] ion_system_heap_allocate+0x133/0x8c0 [ 688.652515] ? _raw_spin_unlock+0x29/0x40 [ 688.656663] ? _ion_heap_freelist_drain+0x6e/0x410 [ 688.661594] ? ion_system_contig_heap_create+0x130/0x130 [ 688.667062] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 688.672088] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 688.677042] ion_alloc+0x27a/0x810 [ 688.680592] ? ion_dma_buf_release+0x40/0x40 [ 688.685017] ? __might_fault+0x177/0x1b0 [ 688.689080] ion_ioctl+0xea/0x1f0 [ 688.692532] ? ion_query_heaps+0x360/0x360 [ 688.696769] ? ion_query_heaps+0x360/0x360 [ 688.701024] do_vfs_ioctl+0x75a/0xff0 [ 688.704829] ? ioctl_preallocate+0x1a0/0x1a0 [ 688.709234] ? lock_downgrade+0x740/0x740 [ 688.713484] ? __fget+0x225/0x360 [ 688.716954] ? do_vfs_ioctl+0xff0/0xff0 [ 688.720931] ? security_file_ioctl+0x83/0xb0 [ 688.725338] SyS_ioctl+0x7f/0xb0 [ 688.728702] ? do_vfs_ioctl+0xff0/0xff0 [ 688.732696] do_syscall_64+0x1d5/0x640 [ 688.736590] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 688.741775] RIP: 0033:0x466459 [ 688.744959] RSP: 002b:00007f42379f8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 688.752680] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 688.759960] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 688.767227] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 688.774495] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 688.781761] R13: 00007ffef8958def R14: 00007f42379f8300 R15: 0000000000022000 [ 688.804148] Node 1 active_anon:1072kB inactive_anon:44996kB active_file:24kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 688.841516] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 688.878107] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 688.883167] Node 0 DMA32 free:18012kB min:36200kB low:45248kB high:54296kB active_anon:52256kB inactive_anon:95660kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7584kB pagetables:2632kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 688.921876] lowmem_reserve[]: 0 0 0 0 0 [ 688.925900] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 688.962186] lowmem_reserve[]: 0 0 0 0 0 [ 688.966229] Node 1 Normal free:26792kB min:53696kB low:67120kB high:80544kB active_anon:1072kB inactive_anon:44996kB active_file:24kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:252kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 689.005083] lowmem_reserve[]: 0 0 0 0 0 [ 689.011147] Node 0 DMA: 1*4kB (M) 4*8kB (UME) 3*16kB (ME) 4*32kB (UME) 4*64kB (UME) 8*128kB (UE) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10964kB [ 689.036914] Node 0 DMA32: 741*4kB (UME) 651*8kB (UME) 251*16kB (UME) 82*32kB (UME) 30*64kB (UM) 10*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18012kB [ 689.061842] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 689.076698] Node 1 Normal: 46*4kB (ME) 64*8kB (UM) 21*16kB (M) 7*32kB (ME) 399*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26792kB [ 689.102362] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 689.117353] Mem-Info: [ 689.123876] active_anon:13335 inactive_anon:35164 isolated_anon:0 [ 689.123876] active_file:10 inactive_file:16 isolated_file:0 [ 689.123876] unevictable:0 dirty:0 writeback:0 unstable:0 [ 689.123876] slab_reclaimable:12582 slab_unreclaimable:118666 [ 689.123876] mapped:44085 shmem:35591 pagetables:721 bounce:0 [ 689.123876] free:14046 free_pcp:27 free_cma:0 [ 689.171383] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 689.186139] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 689.211534] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 689.235029] 35619 total pagecache pages [ 689.245115] 0 pages in swap cache [ 689.256798] Swap cache stats: add 0, delete 0, find 0/0 [ 689.276708] Node 0 active_anon:52268kB inactive_anon:95660kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141524kB dirty:0kB writeback:0kB shmem:97020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 689.321069] Free swap = 0kB [ 689.324109] Total swap = 0kB [ 689.327117] 2097051 pages RAM [ 689.344546] 0 pages HighMem/MovableOnly [ 689.354646] 363841 pages reserved [ 689.367103] 0 pages cma reserved [ 689.376631] Out of memory (oom_kill_allocating_task): Kill process 20716 (in:imklog) score 0 or sacrifice child [ 689.401369] Node 1 active_anon:1072kB inactive_anon:44996kB active_file:44kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 689.442944] Killed process 20708 (rsyslogd) total-vm:254332kB, anon-rss:984kB, file-rss:0kB, shmem-rss:0kB [ 689.494170] oom_reaper: reaped process 20708 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 689.520295] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 689.563709] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 689.569665] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 689.580627] Node 0 DMA32 free:19564kB min:36200kB low:45248kB high:54296kB active_anon:51552kB inactive_anon:95660kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7488kB pagetables:2632kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 689.637024] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 689.665667] CPU: 1 PID: 7962 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 689.669989] lowmem_reserve[]: [ 689.673156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 689.673164] 0 [ 689.676255] Call Trace: [ 689.685656] 0 [ 689.687416] dump_stack+0x1b2/0x281 [ 689.689985] 0 [ 689.691758] dump_header+0x178/0x82f [ 689.695375] 0 [ 689.697199] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 689.700911] 0 [ 689.702675] ? ___ratelimit+0x2cd/0x530 [ 689.709542] oom_kill_process.cold+0x10/0xb18 [ 689.713492] Node 0 [ 689.717980] out_of_memory+0xe3e/0x1190 [ 689.717994] ? oom_killer_disable+0x1c0/0x1c0 [ 689.720226] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 689.724170] ? mutex_trylock+0x152/0x1a0 [ 689.731620] lowmem_reserve[]: [ 689.756509] __alloc_pages_nodemask+0x23e1/0x2720 [ 689.756530] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 689.756552] alloc_pages_current+0x155/0x260 [ 689.760610] 0 [ 689.763715] filemap_fault+0xea3/0x1980 [ 689.768553] 0 [ 689.773542] ext4_filemap_fault+0x84/0xb0 [ 689.777951] 0 [ 689.779724] __do_fault+0xfa/0x380 [ 689.783670] 0 [ 689.785464] __handle_mm_fault+0x2497/0x4620 [ 689.789605] 0 [ 689.791374] ? vm_insert_page+0x7c0/0x7c0 [ 689.796687] ? lock_downgrade+0x740/0x740 [ 689.801094] Node 1 [ 689.802879] handle_mm_fault+0x391/0x860 [ 689.807007] Normal free:26792kB min:53696kB low:67120kB high:80544kB active_anon:1072kB inactive_anon:44996kB active_file:40kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:252kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 689.811127] __do_page_fault+0x549/0xad0 [ 689.811139] ? spurious_fault+0x640/0x640 [ 689.811151] ? do_page_fault+0x60/0x500 [ 689.813370] lowmem_reserve[]: [ 689.817434] ? page_fault+0x2f/0x50 [ 689.845133] 0 [ 689.849144] page_fault+0x45/0x50 [ 689.849155] RIP: 0009:0x80c000398000 [ 689.853284] 0 [ 689.857230] RSP: 182e6c0:00007ffc8728aa20 EFLAGS: 00b75060 [ 689.863352] Mem-Info: [ 689.889295] active_anon:13085 inactive_anon:35164 isolated_anon:0 [ 689.889295] active_file:17 inactive_file:7 isolated_file:0 [ 689.889295] unevictable:0 dirty:0 writeback:0 unstable:0 [ 689.889295] slab_reclaimable:12582 slab_unreclaimable:118151 [ 689.889295] mapped:44085 shmem:35591 pagetables:721 bounce:0 [ 689.889295] free:14834 free_pcp:80 free_cma:0 [ 689.909691] 0 [ 689.928623] Node 0 active_anon:51268kB inactive_anon:95660kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141524kB dirty:0kB writeback:0kB shmem:97020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 689.952625] 0 [ 689.964334] Node 1 active_anon:1072kB inactive_anon:44996kB active_file:40kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:45344kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 689.988298] 0 [ 689.994998] Node 0 DMA: 1*4kB (M) 4*8kB (UME) 3*16kB (ME) 4*32kB (UME) 4*64kB (UME) 8*128kB (UE) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10964kB [ 689.999061] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 690.040748] Node 0 DMA32: 852*4kB (UME) 906*8kB (UME) 269*16kB (UME) 91*32kB (UME) 37*64kB (UM) 13*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 21904kB [ 690.047845] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 690.065880] Node 0 DMA32 free:21732kB min:36200kB low:45248kB high:54296kB active_anon:51184kB inactive_anon:95660kB active_file:92kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7456kB pagetables:2512kB bounce:0kB free_pcp:320kB local_pcp:4kB free_cma:0kB [ 690.088531] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 690.100493] lowmem_reserve[]: 0 0 0 0 0 [ 690.111362] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 690.135698] Node 1 Normal: 54*4kB (UME) 66*8kB (UM) 21*16kB (M) 7*32kB (ME) 399*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26840kB [ 690.144738] lowmem_reserve[]: 0 0 0 0 0 [ 690.154622] Node 1 Normal free:26836kB min:53696kB low:67120kB high:80544kB active_anon:1028kB inactive_anon:44996kB active_file:32kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:252kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 690.180574] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 690.190736] lowmem_reserve[]: 0 0 0 0 0 [ 690.195830] Node 0 DMA: 1*4kB (M) 4*8kB (UME) 3*16kB (ME) 4*32kB (UME) 4*64kB (UME) 8*128kB (UE) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 10964kB [ 690.213148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 690.246318] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 690.246478] Node 0 DMA32: 853*4kB (UME) 906*8kB (UME) 269*16kB (UME) 91*32kB (UME) 37*64kB (UM) 13*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 21908kB [ 690.278112] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 690.316861] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 690.320834] 35619 total pagecache pages [ 690.347158] Node 1 Normal: 54*4kB (UME) 66*8kB (UM) 21*16kB (M) 7*32kB (ME) 399*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26840kB [ 690.352274] 0 pages in swap cache [ 690.387197] Swap cache stats: add 0, delete 0, find 0/0 [ 690.417356] Free swap = 0kB [ 690.423983] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 690.430209] Total swap = 0kB [ 690.435865] 2097051 pages RAM [ 690.486864] 0 pages HighMem/MovableOnly [ 690.505699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 690.511215] 363841 pages reserved [ 690.546669] 0 pages cma reserved [ 690.601828] device veth1_macvtap left promiscuous mode [ 690.610898] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 690.643535] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 690.664660] device veth0_macvtap left promiscuous mode [ 690.672485] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 690.707699] device veth1_vlan left promiscuous mode [ 690.712928] device veth0_vlan left promiscuous mode [ 690.733110] 38468 total pagecache pages [ 690.764624] systemd[1]: rsyslog.service: Unit entered failed state. [ 690.783210] 0 pages in swap cache [ 690.808071] Swap cache stats: add 0, delete 0, find 0/0 [ 690.813522] Free swap = 0kB [ 690.816535] Total swap = 0kB [ 690.851661] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 690.862626] 2097051 pages RAM [ 690.878256] 0 pages HighMem/MovableOnly [ 690.892536] 363841 pages reserved [ 690.896003] 0 pages cma reserved [ 690.938560] Out of memory (oom_kill_allocating_task): Kill process 7962 (syz-fuzzer) score 0 or sacrifice child [ 690.967715] Killed process 17778 (syz-executor.4) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 691.002798] oom_reaper: reaped process 17778 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 05:09:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) [ 691.095016] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 691.120952] systemd[1]: Stopped System Logging Service. [ 691.172748] device hsr_slave_1 left promiscuous mode [ 691.186751] systemd[1]: Starting System Logging Service... [ 691.220945] device hsr_slave_0 left promiscuous mode [ 691.271523] team0 (unregistering): Port device team_slave_1 removed [ 691.340888] team0 (unregistering): Port device team_slave_0 removed [ 691.395793] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 691.457766] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 691.612593] bond0 (unregistering): Released all slaves [ 691.789650] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 691.860336] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 691.865493] CPU: 0 PID: 22092 Comm: syz-executor.3 Not tainted 4.14.227-syzkaller #0 [ 691.873368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 691.878399] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 691.882799] Call Trace: [ 691.882801] (null), order=0, oom_score_adj=0 [ 691.892852] dump_stack+0x1b2/0x281 [ 691.892867] warn_alloc.cold+0x96/0x1cc [ 691.892879] ? zone_watermark_ok_safe+0x220/0x220 [ 691.892901] __alloc_pages_nodemask+0x2127/0x2720 [ 691.917212] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 691.922232] ? lock_acquire+0x170/0x3f0 [ 691.926208] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 691.931057] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 691.936532] ? __mutex_unlock_slowpath+0x75/0x770 [ 691.941377] alloc_pages_current+0x155/0x260 [ 691.945790] ion_page_pool_alloc+0x118/0x1b0 [ 691.950197] ion_system_heap_allocate+0x133/0x8c0 [ 691.955048] ? ion_alloc+0x187/0x810 [ 691.958763] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 691.964214] ? ion_system_contig_heap_create+0x130/0x130 [ 691.969662] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 691.974679] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 691.979522] ion_alloc+0x204/0x810 [ 691.983063] ? ion_dma_buf_release+0x40/0x40 [ 691.987493] ? __might_fault+0x177/0x1b0 [ 691.991554] ion_ioctl+0xea/0x1f0 [ 691.995007] ? ion_query_heaps+0x360/0x360 [ 691.999246] ? ion_query_heaps+0x360/0x360 [ 692.003478] do_vfs_ioctl+0x75a/0xff0 [ 692.007277] ? ioctl_preallocate+0x1a0/0x1a0 [ 692.007860] syz-executor.3 cpuset= [ 692.012512] ? lock_downgrade+0x740/0x740 [ 692.012526] ? __fget+0x225/0x360 [ 692.016064] / [ 692.020198] ? do_vfs_ioctl+0xff0/0xff0 [ 692.029321] ? security_file_ioctl+0x83/0xb0 [ 692.033754] SyS_ioctl+0x7f/0xb0 [ 692.037119] ? do_vfs_ioctl+0xff0/0xff0 [ 692.041095] do_syscall_64+0x1d5/0x640 [ 692.044991] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 692.049205] mems_allowed=0-1 [ 692.050175] RIP: 0033:0x466459 [ 692.056436] RSP: 002b:00007f42379f8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 692.064142] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 692.071405] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 692.078669] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 692.085930] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 692.093194] R13: 00007ffef8958def R14: 00007f42379f8300 R15: 0000000000022000 [ 692.100477] CPU: 1 PID: 18728 Comm: syz-executor.3 Not tainted 4.14.227-syzkaller #0 [ 692.108356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 692.117699] Call Trace: [ 692.120283] dump_stack+0x1b2/0x281 [ 692.123911] dump_header+0x178/0x82f [ 692.127621] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 692.132732] ? ___ratelimit+0x2cd/0x530 [ 692.136701] oom_kill_process.cold+0x10/0xb18 [ 692.141196] out_of_memory+0xe3e/0x1190 [ 692.145164] ? oom_killer_disable+0x1c0/0x1c0 [ 692.149651] ? mutex_trylock+0x152/0x1a0 [ 692.153707] __alloc_pages_nodemask+0x23e1/0x2720 [ 692.158555] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 692.163408] alloc_pages_current+0x155/0x260 [ 692.167808] filemap_fault+0xea3/0x1980 [ 692.171792] ext4_filemap_fault+0x84/0xb0 [ 692.175949] __do_fault+0xfa/0x380 [ 692.179482] __handle_mm_fault+0x2497/0x4620 [ 692.183901] ? vm_insert_page+0x7c0/0x7c0 [ 692.188043] ? nanosleep_copyout+0x100/0x100 [ 692.192452] handle_mm_fault+0x391/0x860 [ 692.196508] __do_page_fault+0x549/0xad0 [ 692.200564] ? spurious_fault+0x640/0x640 [ 692.204703] ? do_page_fault+0x60/0x500 [ 692.208667] ? page_fault+0x2f/0x50 [ 692.212283] page_fault+0x45/0x50 [ 692.215725] RIP: a8beb:0x1 [ 692.218556] RSP: 0061:00007ffef89590ac EFLAGS: 00000032 [ 692.315755] Mem-Info: [ 692.323625] active_anon:13028 inactive_anon:35165 isolated_anon:0 [ 692.323625] active_file:31 inactive_file:20 isolated_file:0 [ 692.323625] unevictable:0 dirty:0 writeback:0 unstable:0 [ 692.323625] slab_reclaimable:12524 slab_unreclaimable:117579 [ 692.323625] mapped:35429 shmem:35595 pagetables:597 bounce:0 [ 692.323625] free:25224 free_pcp:73 free_cma:0 [ 692.377614] Node 0 active_anon:51292kB inactive_anon:95660kB active_file:0kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106900kB dirty:0kB writeback:0kB shmem:97020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 692.488886] Node 1 active_anon:820kB inactive_anon:45000kB active_file:104kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:45360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 692.575009] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 692.703584] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 692.738828] Node 0 DMA32 free:36160kB min:36200kB low:45248kB high:54296kB active_anon:51280kB inactive_anon:95660kB active_file:4kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7424kB pagetables:2272kB bounce:0kB free_pcp:20kB local_pcp:4kB free_cma:0kB [ 692.876287] Mem-Info: [ 692.877590] lowmem_reserve[]: 0 0 0 0 0 [ 692.882751] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 692.885197] active_anon:13028 inactive_anon:35165 isolated_anon:0 [ 692.885197] active_file:44 inactive_file:15 isolated_file:0 [ 692.885197] unevictable:0 dirty:0 writeback:0 unstable:0 [ 692.885197] slab_reclaimable:12524 slab_unreclaimable:117579 [ 692.885197] mapped:35429 shmem:35595 pagetables:597 bounce:0 [ 692.885197] free:25224 free_pcp:73 free_cma:0 [ 693.102002] lowmem_reserve[]: 0 0 0 0 0 [ 693.106033] Node 1 Normal free:53260kB min:53696kB low:67120kB high:80544kB active_anon:820kB inactive_anon:45000kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:116kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 693.154199] Node 0 active_anon:51292kB inactive_anon:95660kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106900kB dirty:0kB writeback:0kB shmem:97020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 693.232820] lowmem_reserve[]: 0 0 0 0 0 [ 693.236849] Node 0 DMA: 2*4kB (UM) 3*8kB (ME) 4*16kB (UME) 3*32kB (ME) 6*64kB (UME) 8*128kB (UE) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11072kB [ 693.307569] Node 1 active_anon:820kB inactive_anon:45000kB active_file:132kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:45360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 693.336327] Node 0 DMA32: 754*4kB (UME) 590*8kB (ME) 196*16kB (ME) 749*32kB (UME) 8*64kB (UM) 7*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36248kB [ 693.396761] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 693.454367] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 693.465463] Node 1 Normal: 63*4kB (ME) 92*8kB (M) 340*16kB (UM) 1095*32kB (UME) 29*64kB (UM) 4*128kB (UM) 30*256kB (UM) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53564kB [ 693.606415] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 693.620884] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 693.622938] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 693.625945] Node 0 [ 693.647221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 693.661953] DMA32 free:36080kB min:36200kB low:45248kB high:54296kB active_anon:51280kB inactive_anon:95660kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7424kB pagetables:2272kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 693.663364] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 693.699395] lowmem_reserve[]: 0 0 0 0 0 [ 693.703397] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 693.871986] 35640 total pagecache pages [ 693.876000] 0 pages in swap cache [ 693.880698] lowmem_reserve[]: 0 0 0 0 0 [ 693.884714] Node 1 Normal free:53260kB min:53696kB low:67120kB high:80544kB active_anon:820kB inactive_anon:45000kB active_file:12kB inactive_file:68kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:116kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 693.913779] Swap cache stats: add 0, delete 0, find 0/0 [ 693.936133] Free swap = 0kB [ 693.960291] Total swap = 0kB [ 693.963318] 2097051 pages RAM [ 693.966429] 0 pages HighMem/MovableOnly [ 693.992907] 363841 pages reserved [ 693.996406] 0 pages cma reserved [ 694.039254] Out of memory (oom_kill_allocating_task): Kill process 18728 (syz-executor.3) score 0 or sacrifice child [ 694.042559] lowmem_reserve[]: 0 0 0 0 0 [ 694.056685] Node 0 DMA: 2*4kB (UM) 3*8kB (ME) 4*16kB (UME) 3*32kB (ME) 6*64kB (UME) 8*128kB (UE) 7*256kB (UME) 5*512kB (UME) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 11072kB [ 694.073487] Killed process 22091 (syz-executor.3) total-vm:93252kB, anon-rss:148kB, file-rss:34816kB, shmem-rss:0kB [ 694.084315] Node 0 DMA32: 712*4kB (ME) 590*8kB (ME) 197*16kB (UME) 747*32kB (UME) 8*64kB (UM) 7*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36032kB [ 694.141140] oom_reaper: reaped process 22091 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 694.180250] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 694.234376] Node 1 Normal: 63*4kB (ME) 92*8kB (M) 340*16kB (UM) 1095*32kB (UME) 29*64kB (UM) 4*128kB (UM) 30*256kB (UM) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53564kB [ 694.274948] rsyslogd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 694.280915] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 694.347571] rsyslogd cpuset=/ mems_allowed=0-1 [ 694.352195] CPU: 1 PID: 22093 Comm: rsyslogd Not tainted 4.14.227-syzkaller #0 [ 694.357063] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 694.359559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 694.359563] Call Trace: [ 694.359582] dump_stack+0x1b2/0x281 [ 694.359595] dump_header+0x178/0x82f [ 694.387642] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 694.392738] ? ___ratelimit+0x2cd/0x530 [ 694.396709] oom_kill_process.cold+0x10/0xb18 [ 694.398054] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 694.401200] out_of_memory+0xe3e/0x1190 [ 694.414005] ? oom_killer_disable+0x1c0/0x1c0 [ 694.418619] ? mutex_trylock+0x152/0x1a0 [ 694.422683] __alloc_pages_nodemask+0x23e1/0x2720 [ 694.427531] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 694.432412] alloc_pages_current+0x155/0x260 [ 694.432781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 694.436838] filemap_fault+0xea3/0x1980 [ 694.445441] 35628 total pagecache pages [ 694.449382] ext4_filemap_fault+0x84/0xb0 [ 694.449395] __do_fault+0xfa/0x380 [ 694.453352] 0 pages in swap cache [ 694.457483] __handle_mm_fault+0x2497/0x4620 [ 694.461038] Swap cache stats: add 0, delete 0, find 0/0 [ 694.464441] ? vm_insert_page+0x7c0/0x7c0 [ 694.468852] Free swap = 0kB [ 694.474186] ? __fd_install+0x227/0x5c0 [ 694.478333] Total swap = 0kB [ 694.481313] ? putname+0xcd/0x110 [ 694.485261] 2097051 pages RAM [ 694.488314] handle_mm_fault+0x391/0x860 [ 694.488329] __do_page_fault+0x549/0xad0 [ 694.488341] ? spurious_fault+0x640/0x640 [ 694.491788] 0 pages HighMem/MovableOnly [ 694.496098] ? do_page_fault+0x60/0x500 [ 694.500198] 363841 pages reserved [ 694.504229] ? page_fault+0x2f/0x50 [ 694.508389] 0 pages cma reserved [ 694.512325] page_fault+0x45/0x50 [ 694.530191] RIP: 0001: (null) [ 694.534147] RSP: dd5c7d60:00007f2246decb4f EFLAGS: 7f2246de9633 [ 694.650444] Mem-Info: [ 694.680639] active_anon:13028 inactive_anon:35165 isolated_anon:0 [ 694.680639] active_file:44 inactive_file:17 isolated_file:0 [ 694.680639] unevictable:0 dirty:0 writeback:0 unstable:0 [ 694.680639] slab_reclaimable:12524 slab_unreclaimable:117442 [ 694.680639] mapped:35429 shmem:35595 pagetables:597 bounce:0 [ 694.680639] free:13960 free_pcp:133 free_cma:0 [ 694.719256] Node 0 active_anon:51292kB inactive_anon:95660kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106900kB dirty:0kB writeback:0kB shmem:97020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 694.725385] syz-executor.3: [ 694.752958] Node 1 active_anon:820kB inactive_anon:45000kB active_file:172kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:45360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 694.777555] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 694.788324] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 694.825541] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 694.826307] lowmem_reserve[]: [ 694.830914] CPU: 1 PID: 22092 Comm: syz-executor.3 Not tainted 4.14.227-syzkaller #0 [ 694.841193] 0 [ 694.841896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 694.841904] 2717 [ 694.843689] Call Trace: [ 694.853087] 2718 [ 694.855103] dump_stack+0x1b2/0x281 [ 694.857674] 2718 [ 694.859709] warn_alloc.cold+0x96/0x1cc [ 694.863332] 2718 [ 694.865387] ? zone_watermark_ok_safe+0x220/0x220 [ 694.871376] ? usleep_range+0x130/0x130 [ 694.876206] Node 0 [ 694.880166] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 694.880180] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 694.880190] ? run_timer_softirq+0x5a0/0x5a0 [ 694.880207] __alloc_pages_nodemask+0x2127/0x2720 [ 694.882426] DMA32 free:18088kB min:36200kB low:45248kB high:54296kB active_anon:51280kB inactive_anon:95660kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7392kB pagetables:2272kB bounce:0kB free_pcp:356kB local_pcp:136kB free_cma:0kB [ 694.887601] ? lock_acquire+0x170/0x3f0 [ 694.887618] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 694.887631] ? ion_page_pool_alloc+0x9e/0x1b0 [ 694.892624] lowmem_reserve[]: [ 694.897026] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 694.901859] 0 [ 694.930042] alloc_pages_current+0x155/0x260 [ 694.930058] ion_page_pool_alloc+0x118/0x1b0 [ 694.930072] ion_system_heap_allocate+0x133/0x8c0 [ 694.934026] 0 [ 694.938859] ? ion_alloc+0x187/0x810 [ 694.938870] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 694.938880] ? ion_system_contig_heap_create+0x130/0x130 [ 694.938893] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 694.943361] 0 [ 694.946474] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 694.951930] 0 [ 694.953704] ion_alloc+0x204/0x810 [ 694.958101] 0 [ 694.962483] ? ion_dma_buf_release+0x40/0x40 [ 694.969079] ? __might_fault+0x177/0x1b0 [ 694.969093] ion_ioctl+0xea/0x1f0 [ 694.969103] ? ion_query_heaps+0x360/0x360 [ 694.972800] Node 0 [ 694.978245] ? ion_query_heaps+0x360/0x360 [ 694.978256] do_vfs_ioctl+0x75a/0xff0 [ 694.978268] ? ioctl_preallocate+0x1a0/0x1a0 [ 694.983723] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 694.988732] ? lock_downgrade+0x740/0x740 [ 694.988746] ? __fget+0x225/0x360 [ 694.988756] ? do_vfs_ioctl+0xff0/0xff0 [ 694.988769] ? security_file_ioctl+0x83/0xb0 [ 694.990548] lowmem_reserve[]: 0 [ 694.995390] SyS_ioctl+0x7f/0xb0 [ 694.997163] 0 [ 695.000687] ? do_vfs_ioctl+0xff0/0xff0 [ 695.000698] do_syscall_64+0x1d5/0x640 [ 695.000715] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 695.000724] RIP: 0033:0x466459 [ 695.002503] 0 [ 695.006889] RSP: 002b:00007f42379f8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 695.010952] 0 [ 695.014371] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 695.018610] 0 [ 695.020811] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 695.028799] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 695.028805] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 695.028810] R13: 00007ffef8958def R14: 00007f42379f8300 R15: 0000000000022000 [ 695.034778] Mem-Info: [ 695.125329] Node 1 [ 695.133625] active_anon:13005 inactive_anon:35165 isolated_anon:0 [ 695.133625] active_file:16 inactive_file:17 isolated_file:0 [ 695.133625] unevictable:0 dirty:0 writeback:0 unstable:0 [ 695.133625] slab_reclaimable:12524 slab_unreclaimable:117280 [ 695.133625] mapped:35429 shmem:35595 pagetables:597 bounce:0 [ 695.133625] free:14108 free_pcp:170 free_cma:0 [ 695.155456] Normal free:26780kB min:53696kB low:67120kB high:80544kB active_anon:764kB inactive_anon:45000kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:116kB bounce:0kB free_pcp:176kB local_pcp:176kB free_cma:0kB [ 695.191365] Node 0 active_anon:51256kB inactive_anon:95660kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106900kB dirty:0kB writeback:0kB shmem:97020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 695.228620] lowmem_reserve[]: [ 695.247768] Node 1 active_anon:764kB inactive_anon:45000kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:45360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 695.252745] 0 [ 695.282959] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 695.288455] 0 0 0 0 [ 695.320617] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 695.325654] Node 0 DMA32 free:19320kB min:36200kB low:45248kB high:54296kB active_anon:51244kB inactive_anon:95660kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7392kB pagetables:2272kB bounce:0kB free_pcp:584kB local_pcp:348kB free_cma:0kB [ 695.327746] Node 0 [ 695.363131] lowmem_reserve[]: 0 0 0 0 0 [ 695.371358] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 695.397140] DMA: 1*4kB (M) 4*8kB (UME) 3*16kB (ME) 3*32kB (ME) 4*64kB (UME) 7*128kB (UE) 6*256kB (UME) 4*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11060kB [ 695.405358] lowmem_reserve[]: 0 0 0 0 0 [ 695.416033] Node 1 Normal free:26780kB min:53696kB low:67120kB high:80544kB active_anon:764kB inactive_anon:45000kB active_file:160kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:116kB bounce:0kB free_pcp:176kB local_pcp:0kB free_cma:0kB [ 695.418208] Node 0 DMA32: 744*4kB (UME) 708*8kB (UME) 202*16kB (UME) 183*32kB (UME) 10*64kB (UM) 8*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19392kB [ 695.453242] lowmem_reserve[]: [ 695.462543] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 695.473909] 0 0 0 0 0 [ 695.476455] Node 1 Normal: 63*4kB (ME) 92*8kB (M) 50*16kB (UM) 403*32kB (UME) 29*64kB (UM) 4*128kB (UM) 30*256kB (UM) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26780kB [ 695.484823] Node 0 [ 695.497518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 695.506453] DMA: 1*4kB (M) 4*8kB (UME) 3*16kB (ME) 3*32kB (ME) 4*64kB (UME) 7*128kB (UE) 6*256kB (UME) 4*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11060kB [ 695.513802] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 695.537586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 695.539980] Node 0 [ 695.546421] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 695.546429] DMA32: [ 695.551835] 35628 total pagecache pages [ 695.564798] 0 pages in swap cache [ 695.568391] Swap cache stats: add 0, delete 0, find 0/0 [ 695.573749] Free swap = 0kB [ 695.576757] Total swap = 0kB [ 695.577074] 744*4kB [ 695.581523] 2097051 pages RAM [ 695.586948] 0 pages HighMem/MovableOnly [ 695.592407] (UME) 708*8kB (UME) 202*16kB (UME) 183*32kB (UME) 10*64kB (UM) 8*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19392kB [ 695.593032] 363841 pages reserved [ 695.610778] 0 pages cma reserved [ 695.614153] Out of memory (oom_kill_allocating_task): Kill process 22093 (rsyslogd) score 0 or sacrifice child [ 695.619784] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 695.624908] Killed process 22093 (rsyslogd) total-vm:23632kB, anon-rss:220kB, file-rss:0kB, shmem-rss:0kB [ 695.647465] oom_reaper: reaped process 22093 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 695.651049] Node 1 Normal: 63*4kB (ME) 92*8kB (M) 50*16kB (UM) 403*32kB (UME) 29*64kB (UM) 4*128kB (UM) 30*256kB (UM) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26780kB [ 695.665578] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 695.685670] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 695.687564] (null) [ 695.710079] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 695.710428] , order=0, oom_score_adj=0 [ 695.712239] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 695.722850] systemd cpuset=/ mems_allowed=0-1 [ 695.737270] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 695.743508] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.227-syzkaller #0 [ 695.756995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 695.762393] 35628 total pagecache pages [ 695.766343] Call Trace: [ 695.772881] dump_stack+0x1b2/0x281 [ 695.776189] 0 pages in swap cache [ 695.776508] dump_header+0x178/0x82f [ 695.783669] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 695.786394] Swap cache stats: add 0, delete 0, find 0/0 [ 695.788766] ? ___ratelimit+0x2cd/0x530 [ 695.788778] oom_kill_process.cold+0x10/0xb18 [ 695.788789] ? lock_downgrade+0x740/0x740 [ 695.788804] out_of_memory+0x2dc/0x1190 [ 695.788817] ? oom_killer_disable+0x1c0/0x1c0 [ 695.788825] ? mutex_trylock+0x152/0x1a0 [ 695.788836] __alloc_pages_nodemask+0x23e1/0x2720 [ 695.788856] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 695.788879] alloc_pages_current+0x155/0x260 [ 695.807339] Free swap = 0kB [ 695.810760] filemap_fault+0xea3/0x1980 [ 695.810780] ext4_filemap_fault+0x84/0xb0 [ 695.810790] __do_fault+0xfa/0x380 [ 695.810799] __handle_mm_fault+0x2497/0x4620 [ 695.810809] ? ep_poll+0x1ab/0xa50 [ 695.810816] ? vm_insert_page+0x7c0/0x7c0 [ 695.810841] handle_mm_fault+0x391/0x860 [ 695.826587] Total swap = 0kB [ 695.829060] __do_page_fault+0x549/0xad0 [ 695.829072] ? spurious_fault+0x640/0x640 [ 695.829081] ? do_page_fault+0x60/0x500 [ 695.829090] ? page_fault+0x2f/0x50 [ 695.829098] page_fault+0x45/0x50 [ 695.829106] RIP: 0001:0xffffffffffffffff [ 695.829114] RSP: d6bb3f50:00007fff94d816b0 EFLAGS: 7fff94d813d0 [ 695.834802] 2097051 pages RAM [ 695.844986] Mem-Info: [ 695.859698] 0 pages HighMem/MovableOnly [ 695.867792] active_anon:12955 inactive_anon:35165 isolated_anon:0 [ 695.867792] active_file:41 inactive_file:0 isolated_file:0 [ 695.867792] unevictable:0 dirty:0 writeback:0 unstable:0 [ 695.867792] slab_reclaimable:12524 slab_unreclaimable:117076 [ 695.867792] mapped:35429 shmem:35595 pagetables:597 bounce:0 [ 695.867792] free:14440 free_pcp:26 free_cma:0 [ 695.884199] 363841 pages reserved [ 695.892760] Node 0 active_anon:51056kB inactive_anon:95660kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106900kB dirty:0kB writeback:0kB shmem:97020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 695.907270] 0 pages cma reserved [ 695.946222] Node 1 active_anon:764kB inactive_anon:45000kB active_file:160kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:45360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 696.028973] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 696.042278] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 696.074651] CPU: 1 PID: 22092 Comm: syz-executor.3 Not tainted 4.14.227-syzkaller #0 [ 696.082560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 696.091907] Call Trace: [ 696.094499] dump_stack+0x1b2/0x281 [ 696.098134] warn_alloc.cold+0x96/0x1cc [ 696.102108] ? zone_watermark_ok_safe+0x220/0x220 [ 696.106962] __alloc_pages_nodemask+0x2127/0x2720 [ 696.111802] ? lock_acquire+0x170/0x3f0 [ 696.115776] ? lock_acquire+0x170/0x3f0 [ 696.119754] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 696.124602] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 696.130054] ? __mutex_unlock_slowpath+0x75/0x770 [ 696.133430] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 696.134909] alloc_pages_current+0x155/0x260 [ 696.134924] ion_page_pool_alloc+0x118/0x1b0 [ 696.168792] lowmem_reserve[]: 0 [ 696.169943] ion_system_heap_allocate+0x133/0x8c0 [ 696.169950] 2717 [ 696.173217] ? _raw_spin_unlock+0x29/0x40 [ 696.178063] 2718 [ 696.180099] ? _ion_heap_freelist_drain+0x6e/0x410 [ 696.184216] 2718 [ 696.186268] ? ion_system_contig_heap_create+0x130/0x130 [ 696.191185] 2718 [ 696.193223] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 696.200696] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 696.205681] Node 0 [ 696.210513] ion_alloc+0x27a/0x810 [ 696.210535] ? ion_dma_buf_release+0x40/0x40 [ 696.210548] ? __might_fault+0x177/0x1b0 [ 696.212776] DMA32 free:35828kB min:36200kB low:45248kB high:54296kB active_anon:51040kB inactive_anon:95660kB active_file:4kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7360kB pagetables:2236kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 696.216290] ion_ioctl+0xea/0x1f0 [ 696.220690] lowmem_reserve[]: [ 696.224717] ? ion_query_heaps+0x360/0x360 [ 696.252600] 0 [ 696.256017] ? ion_query_heaps+0x360/0x360 [ 696.259106] 0 [ 696.263745] do_vfs_ioctl+0x75a/0xff0 [ 696.265521] 0 [ 696.269748] ? ioctl_preallocate+0x1a0/0x1a0 [ 696.269757] ? lock_downgrade+0x740/0x740 [ 696.269770] ? __fget+0x225/0x360 [ 696.269779] ? do_vfs_ioctl+0xff0/0xff0 [ 696.271559] 0 [ 696.275348] ? security_file_ioctl+0x83/0xb0 [ 696.277118] 0 [ 696.281513] SyS_ioctl+0x7f/0xb0 [ 696.281521] ? do_vfs_ioctl+0xff0/0xff0 [ 696.281538] do_syscall_64+0x1d5/0x640 [ 696.281555] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 696.289148] RIP: 0033:0x466459 [ 696.289152] RSP: 002b:00007f42379f8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 696.289162] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 696.289167] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 696.289172] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 696.289179] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 696.293134] Node 0 [ 696.294923] R13: 00007ffef8958def R14: 00007f42379f8300 R15: 0000000000022000 [ 696.299409] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 696.391476] Mem-Info: [ 696.394536] active_anon:12942 inactive_anon:35165 isolated_anon:0 [ 696.394536] active_file:16 inactive_file:19 isolated_file:0 [ 696.394536] unevictable:0 dirty:0 writeback:0 unstable:0 [ 696.394536] slab_reclaimable:12511 slab_unreclaimable:117034 [ 696.394536] mapped:35429 shmem:35595 pagetables:581 bounce:0 [ 696.394536] free:25117 free_pcp:0 free_cma:0 [ 696.457648] Node 0 active_anon:51052kB inactive_anon:95660kB active_file:4kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106900kB dirty:0kB writeback:0kB shmem:97020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 696.586668] Node 1 active_anon:716kB inactive_anon:45000kB active_file:108kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34816kB dirty:0kB writeback:0kB shmem:45360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 696.722196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.731689] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 696.745809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.782611] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 696.787734] Node 0 DMA32 free:36144kB min:36200kB low:45248kB high:54296kB active_anon:51040kB inactive_anon:95660kB active_file:4kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7360kB pagetables:2236kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 696.822934] device bridge_slave_1 left promiscuous mode [ 696.862528] lowmem_reserve[]: 0 0 0 0 0 [ 696.866553] Node 1 Normal free:53584kB min:53696kB low:67120kB high:80544kB active_anon:716kB inactive_anon:45000kB active_file:128kB inactive_file:84kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:88kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 696.901171] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.932484] lowmem_reserve[]: 0 0 0 0 0 [ 696.936503] Node 0 DMA: 1*4kB (M) 4*8kB (UME) 3*16kB (ME) 3*32kB (ME) 4*64kB (UME) 7*128kB (UE) 6*256kB (UME) 4*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11060kB [ 696.950881] lowmem_reserve[]: 0 0 0 0 0 [ 696.955948] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 696.979644] device bridge_slave_0 left promiscuous mode [ 696.986507] lowmem_reserve[]: 0 0 0 0 0 [ 696.986965] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.990842] Node 1 Normal free:53584kB min:53696kB low:67120kB high:80544kB active_anon:716kB inactive_anon:45000kB active_file:28kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:88kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 697.038210] Node 0 DMA32: 775*4kB (UME) 733*8kB (UME) 201*16kB (UME) 757*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36404kB [ 697.058650] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 697.062874] lowmem_reserve[]: 0 [ 697.073247] Node 1 [ 697.073599] 0 [ 697.076571] Normal: [ 697.078868] 0 [ 697.081131] 64*4kB [ 697.083783] 0 [ 697.084803] (UME) [ 697.088852] 0 [ 697.091390] device hsr_slave_1 left promiscuous mode [ 697.091760] 89*8kB [ 697.098371] (UM) 333*16kB (UM) 1092*32kB (UME) 31*64kB (UM) 5*128kB (UM) 30*256kB (UM) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 53592kB [ 697.103230] Node 0 [ 697.113318] device hsr_slave_0 left promiscuous mode [ 697.115574] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 697.121077] DMA: [ 697.132158] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 697.137049] 1*4kB [ 697.142903] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 697.142910] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 697.142914] 35628 total pagecache pages [ 697.142924] 0 pages in swap cache [ 697.142929] Swap cache stats: add 0, delete 0, find 0/0 [ 697.142933] Free swap = 0kB [ 697.142936] Total swap = 0kB [ 697.142942] 2097051 pages RAM [ 697.142945] 0 pages HighMem/MovableOnly [ 697.142952] 363841 pages reserved [ 697.145806] team0 (unregistering): Port device team_slave_1 removed [ 697.156519] 0 pages cma reserved [ 697.162579] (M) [ 697.166556] Out of memory: Kill process 22064 (syz-executor.2) score 1004 or sacrifice child [ 697.172475] 4*8kB [ 697.175983] Killed process 22065 (syz-executor.2) total-vm:93252kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 697.184124] (UME) 3*16kB (ME) 3*32kB (ME) 4*64kB (UME) 7*128kB (UE) 6*256kB (UME) 4*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 11060kB [ 697.245647] Node 0 DMA32: 727*4kB (ME) 590*8kB (UME) 194*16kB (ME) 532*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27756kB [ 697.251593] oom_reaper: reaped process 22065 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 697.262096] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 697.282908] Node 1 Normal: 54*4kB (UME) 89*8kB (UM) 267*16kB (UM) 1093*32kB (UME) 31*64kB (UM) 5*128kB (UM) 30*256kB (UM) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 52528kB [ 697.301854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 697.327581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 697.336192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 697.336706] oom_reaper: reaped process 22060 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 697.349704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 697.365488] 35628 total pagecache pages [ 697.370149] 0 pages in swap cache [ 697.373633] Swap cache stats: add 0, delete 0, find 0/0 [ 697.381073] Free swap = 0kB [ 697.384100] Total swap = 0kB [ 697.387136] 2097051 pages RAM [ 697.390912] 0 pages HighMem/MovableOnly [ 697.394886] 363841 pages reserved [ 697.400225] 0 pages cma reserved [ 697.417866] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 697.441172] systemd-journal cpuset=/ mems_allowed=0-1 [ 697.484690] CPU: 0 PID: 21851 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 697.492717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 697.502088] Call Trace: [ 697.504786] dump_stack+0x1b2/0x281 [ 697.508423] dump_header+0x178/0x82f [ 697.512135] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 697.517237] ? ___ratelimit+0x2cd/0x530 [ 697.521230] oom_kill_process.cold+0x10/0xb18 [ 697.525749] out_of_memory+0xe3e/0x1190 [ 697.529734] ? oom_killer_disable+0x1c0/0x1c0 [ 697.534223] ? mutex_trylock+0x152/0x1a0 [ 697.538372] __alloc_pages_nodemask+0x23e1/0x2720 [ 697.543222] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 697.548081] alloc_pages_current+0x155/0x260 [ 697.552492] filemap_fault+0xea3/0x1980 [ 697.556476] ext4_filemap_fault+0x84/0xb0 [ 697.560625] __do_fault+0xfa/0x380 [ 697.564162] __handle_mm_fault+0x2497/0x4620 [ 697.568575] ? vm_insert_page+0x7c0/0x7c0 [ 697.572726] ? lock_downgrade+0x740/0x740 [ 697.576883] handle_mm_fault+0x391/0x860 [ 697.580945] __do_page_fault+0x549/0xad0 [ 697.585004] ? spurious_fault+0x640/0x640 [ 697.589149] ? do_page_fault+0x60/0x500 [ 697.593119] ? page_fault+0x2f/0x50 [ 697.596771] page_fault+0x45/0x50 [ 697.600240] RIP: 3d1da040:0x7fffa389d390 [ 697.604288] RSP: a389d3d0:000000000000000d EFLAGS: ffffffff [ 697.610398] Mem-Info: [ 697.642945] active_anon:12882 inactive_anon:35165 isolated_anon:0 [ 697.642945] active_file:16 inactive_file:742 isolated_file:0 [ 697.642945] unevictable:0 dirty:0 writeback:0 unstable:0 [ 697.642945] slab_reclaimable:12506 slab_unreclaimable:116643 [ 697.642945] mapped:27101 shmem:35595 pagetables:581 bounce:0 [ 697.642945] free:211965 free_pcp:188 free_cma:0 [ 697.720198] Node 0 active_anon:50828kB inactive_anon:95660kB active_file:4kB inactive_file:5108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:110604kB dirty:0kB writeback:0kB shmem:97020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 697.870189] Node 1 active_anon:700kB inactive_anon:45000kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:45360kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 697.889498] team0 (unregistering): Port device team_slave_0 removed [ 697.949840] Node 0 DMA free:11300kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:780kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 697.976337] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 698.007807] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 698.009501] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 698.012882] Node 0 DMA32 free:736092kB min:36200kB low:45248kB high:54296kB active_anon:51016kB inactive_anon:95660kB active_file:1404kB inactive_file:7996kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7456kB pagetables:2384kB bounce:0kB free_pcp:316kB local_pcp:100kB free_cma:0kB [ 698.012902] lowmem_reserve[]: 0 0 0 0 0 [ 698.012919] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 698.012933] lowmem_reserve[]: 0 0 0 0 0 [ 698.012952] Node 1 Normal free:1363084kB min:53696kB low:67120kB high:80544kB active_anon:700kB inactive_anon:45000kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:88kB bounce:0kB free_pcp:48kB local_pcp:12kB free_cma:0kB [ 698.012969] lowmem_reserve[]: 0 0 0 0 0 [ 698.012989] Node 0 DMA: 3*4kB (UM) [ 698.090403] bond0 (unregistering): Released all slaves [ 698.166858] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 698.216011] systemd[1]: Failed to start System Logging Service. [ 698.262573] systemd[1]: rsyslog.service: Unit entered failed state. [ 698.279541] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 698.339540] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 698.411372] 3*8kB (ME) 1*16kB (E) 4*32kB (UME) 4*64kB (UE) 7*128kB (UME) 5*256kB (UE) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11316kB [ 698.460330] systemd[1]: Started Load/Save RF Kill Switch Status. [ 698.467058] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 698.475353] Node 0 DMA32: 477*4kB (UME) 486*8kB (UME) 152*16kB (ME) 17*32kB (UME) 2529*64kB (UME) 1914*128kB (U) 251*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 479876kB [ 698.500481] systemd[1]: Stopped System Logging Service. [ 698.507586] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 698.527586] Node 1 Normal: 55*4kB (UME) 88*8kB (M) 43*16kB (UM) 393*32kB (UME) 12189*64kB (UM) 4272*128kB (UM) 30*256kB (UM) 4*512kB (U) 12*1024kB (U) 0*2048kB 0*4096kB = 1363116kB [ 698.546456] systemd[1]: Starting System Logging Service... [ 698.565860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 698.587967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 698.597784] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 698.606617] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 698.647725] 41890 total pagecache pages [ 698.651707] 0 pages in swap cache [ 698.655150] Swap cache stats: add 0, delete 0, find 0/0 [ 698.677801] Free swap = 0kB [ 698.680839] Total swap = 0kB [ 698.683846] 2097051 pages RAM [ 698.686934] 0 pages HighMem/MovableOnly [ 698.697567] 363841 pages reserved [ 698.701020] 0 pages cma reserved [ 698.704375] Out of memory (oom_kill_allocating_task): Kill process 21851 (systemd-journal) score 0 or sacrifice child [ 698.737604] Killed process 21851 (systemd-journal) total-vm:46096kB, anon-rss:460kB, file-rss:0kB, shmem-rss:2424kB [ 698.775087] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL 05:09:19 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/99) [ 699.026115] systemd-journald[22106]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 699.837602] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 699.897302] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 699.921258] CPU: 0 PID: 22108 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 699.929158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.938518] Call Trace: [ 699.941131] dump_stack+0x1b2/0x281 [ 699.944762] warn_alloc.cold+0x96/0x1cc [ 699.948737] ? zone_watermark_ok_safe+0x220/0x220 [ 699.953589] __alloc_pages_nodemask+0x2127/0x2720 [ 699.958448] ? retint_kernel+0x2d/0x2d [ 699.962331] ? ion_page_pool_alloc+0x28/0x1b0 [ 699.966828] ? lock_acquire+0x170/0x3f0 [ 699.970817] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 699.975753] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 699.981202] ? __mutex_unlock_slowpath+0x75/0x770 [ 699.995770] alloc_pages_current+0x155/0x260 [ 700.000181] ion_page_pool_alloc+0x118/0x1b0 [ 700.004608] ion_system_heap_allocate+0x133/0x8c0 [ 700.009447] ? ion_alloc+0x187/0x810 [ 700.013163] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 700.018612] ? ion_system_contig_heap_create+0x130/0x130 [ 700.024142] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 700.029158] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 700.034020] ion_alloc+0x204/0x810 [ 700.037566] ? ion_dma_buf_release+0x40/0x40 [ 700.041971] ? __might_fault+0x177/0x1b0 [ 700.046035] ion_ioctl+0xea/0x1f0 [ 700.049490] ? ion_query_heaps+0x360/0x360 [ 700.053725] ? ion_query_heaps+0x360/0x360 [ 700.057947] do_vfs_ioctl+0x75a/0xff0 [ 700.061737] ? ioctl_preallocate+0x1a0/0x1a0 [ 700.066130] ? lock_downgrade+0x740/0x740 [ 700.070268] ? __fget+0x225/0x360 [ 700.073713] ? do_vfs_ioctl+0xff0/0xff0 [ 700.077675] ? security_file_ioctl+0x83/0xb0 [ 700.082072] SyS_ioctl+0x7f/0xb0 [ 700.085425] ? do_vfs_ioctl+0xff0/0xff0 [ 700.089388] do_syscall_64+0x1d5/0x640 [ 700.093268] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 700.098442] RIP: 0033:0x466459 [ 700.101615] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 700.109310] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 700.116582] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 700.123837] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 700.131094] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 700.138352] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 700.246378] Mem-Info: [ 700.248904] active_anon:13211 inactive_anon:37199 isolated_anon:0 [ 700.248904] active_file:34 inactive_file:19 isolated_file:21 [ 700.248904] unevictable:0 dirty:1 writeback:0 unstable:0 [ 700.248904] slab_reclaimable:12501 slab_unreclaimable:116789 [ 700.248904] mapped:35192 shmem:37645 pagetables:676 bounce:0 [ 700.248904] free:14621 free_pcp:244 free_cma:0 [ 700.285247] Node 0 active_anon:51712kB inactive_anon:95592kB active_file:120kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):84kB mapped:104632kB dirty:4kB writeback:0kB shmem:97020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 700.314705] Node 1 active_anon:1132kB inactive_anon:53204kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36136kB dirty:0kB writeback:0kB shmem:53560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 700.356792] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 700.383165] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 700.388244] Node 0 DMA32 free:17552kB min:36200kB low:45248kB high:54296kB active_anon:51592kB inactive_anon:95592kB active_file:812kB inactive_file:292kB unevictable:0kB writepending:4kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7488kB pagetables:2500kB bounce:0kB free_pcp:792kB local_pcp:672kB free_cma:0kB [ 700.418351] lowmem_reserve[]: 0 0 0 0 0 [ 700.422620] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 700.464882] lowmem_reserve[]: 0 0 0 0 0 [ 700.468953] Node 1 Normal free:26768kB min:53696kB low:67120kB high:80544kB active_anon:1132kB inactive_anon:53204kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:204kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 700.494913] IPVS: ftp: loaded support on port[0] = 21 [ 700.497737] lowmem_reserve[]: 0 0 0 0 0 [ 700.497763] Node 0 DMA: 6*4kB (UME) 5*8kB (M) 4*16kB (ME) 5*32kB (ME) 5*64kB (ME) 3*128kB (ME) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10976kB [ 700.522426] Node 0 DMA32: 849*4kB (UME) 772*8kB (UME) 203*16kB (UME) 36*32kB (UME) 33*64kB (UME) 11*128kB (UM) 8*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19540kB [ 700.538056] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 700.549512] Node 1 Normal: 43*4kB (UME) 46*8kB (M) 10*16kB (M) 6*32kB (ME) 1*64kB (M) 148*128kB (UM) 27*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26812kB [ 700.564160] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 700.587579] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 700.596198] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 700.607723] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 700.617571] 37693 total pagecache pages [ 700.621546] 0 pages in swap cache [ 700.625012] Swap cache stats: add 0, delete 0, find 0/0 [ 700.631856] Free swap = 0kB [ 700.634872] Total swap = 0kB [ 700.637950] 2097051 pages RAM [ 700.641049] 0 pages HighMem/MovableOnly [ 700.645008] 363841 pages reserved [ 700.650478] 0 pages cma reserved [ 700.695284] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 700.729931] systemd cpuset=/ mems_allowed=0-1 [ 700.734472] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.227-syzkaller #0 [ 700.741388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.750739] Call Trace: [ 700.753328] dump_stack+0x1b2/0x281 [ 700.756958] dump_header+0x178/0x82f [ 700.760678] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 700.765803] ? ___ratelimit+0x2cd/0x530 [ 700.769776] oom_kill_process.cold+0x10/0xb18 [ 700.774281] ? lock_downgrade+0x740/0x740 [ 700.778439] out_of_memory+0x2dc/0x1190 [ 700.782408] ? oom_killer_disable+0x1c0/0x1c0 [ 700.786892] ? mutex_trylock+0x152/0x1a0 [ 700.790956] __alloc_pages_nodemask+0x23e1/0x2720 [ 700.795807] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 700.801009] alloc_pages_current+0x155/0x260 [ 700.805408] filemap_fault+0xea3/0x1980 [ 700.809382] ext4_filemap_fault+0x84/0xb0 [ 700.813531] __do_fault+0xfa/0x380 [ 700.817058] __handle_mm_fault+0x2497/0x4620 [ 700.821456] ? ep_poll+0x1ab/0xa50 [ 700.824979] ? vm_insert_page+0x7c0/0x7c0 [ 700.829128] handle_mm_fault+0x391/0x860 [ 700.833179] __do_page_fault+0x549/0xad0 [ 700.837251] ? spurious_fault+0x640/0x640 [ 700.841384] ? do_page_fault+0x60/0x500 [ 700.845347] ? page_fault+0x2f/0x50 [ 700.848963] page_fault+0x45/0x50 [ 700.852400] RIP: 0001:0x1 [ 700.855152] RSP: d6bb4080:00007fff94d816b0 EFLAGS: 7fff94d813d0 [ 700.879006] Mem-Info: [ 700.887505] active_anon:13211 inactive_anon:37199 isolated_anon:0 [ 700.887505] active_file:37 inactive_file:15 isolated_file:2 [ 700.887505] unevictable:0 dirty:0 writeback:0 unstable:0 [ 700.887505] slab_reclaimable:12501 slab_unreclaimable:116535 [ 700.887505] mapped:35170 shmem:37645 pagetables:676 bounce:0 [ 700.887505] free:13922 free_pcp:30 free_cma:0 [ 700.920750] Node 0 active_anon:51712kB inactive_anon:95592kB active_file:144kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:104544kB dirty:0kB writeback:0kB shmem:97020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 700.948590] Node 1 active_anon:1132kB inactive_anon:53204kB active_file:4kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36136kB dirty:0kB writeback:0kB shmem:53560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 700.976006] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 701.025289] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 701.045256] Node 0 DMA32 free:17760kB min:36200kB low:45248kB high:54296kB active_anon:51720kB inactive_anon:95592kB active_file:52kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7456kB pagetables:2500kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 701.077622] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 701.088193] lowmem_reserve[]: 0 0 0 0 0 [ 701.093441] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 701.100619] syz-executor.4 cpuset= [ 701.134484] lowmem_reserve[]: 0 0 0 0 0 [ 701.153698] / mems_allowed=0-1 [ 701.156918] CPU: 1 PID: 22060 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 701.159331] Node 1 [ 701.164888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 701.164895] Call Trace: [ 701.167148] Normal free:26780kB min:53696kB low:67120kB high:80544kB active_anon:1132kB inactive_anon:53204kB active_file:0kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:204kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 701.176490] dump_stack+0x1b2/0x281 [ 701.176503] warn_alloc.cold+0x96/0x1cc [ 701.176515] ? zone_watermark_ok_safe+0x220/0x220 [ 701.176527] ? usleep_range+0x130/0x130 [ 701.179198] lowmem_reserve[]: [ 701.206863] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 701.206877] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 701.206887] ? run_timer_softirq+0x5a0/0x5a0 [ 701.206903] __alloc_pages_nodemask+0x2127/0x2720 [ 701.210524] 0 [ 701.215168] ? lock_acquire+0x170/0x3f0 [ 701.220027] 0 [ 701.223980] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 701.227054] 0 [ 701.232157] ? ion_page_pool_alloc+0x9e/0x1b0 [ 701.232174] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 701.232188] ? retint_kernel+0x2d/0x2d [ 701.237187] 0 [ 701.241585] alloc_pages_current+0x155/0x260 [ 701.241599] ion_page_pool_alloc+0x118/0x1b0 [ 701.241610] ion_system_heap_allocate+0x133/0x8c0 [ 701.246428] 0 [ 701.248222] ? ion_alloc+0x187/0x810 [ 701.248232] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 701.248244] ? ion_system_contig_heap_create+0x130/0x130 [ 701.253997] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 701.258853] Node 0 [ 701.260613] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 701.265077] DMA: [ 701.270516] ion_alloc+0x204/0x810 [ 701.270531] ? ion_dma_buf_release+0x40/0x40 [ 701.270543] ? __might_fault+0x177/0x1b0 [ 701.270555] ion_ioctl+0xea/0x1f0 [ 701.274415] 6*4kB [ 701.276206] ? ion_query_heaps+0x360/0x360 [ 701.280624] (UME) [ 701.285004] ? ion_query_heaps+0x360/0x360 [ 701.289840] 5*8kB [ 701.291611] do_vfs_ioctl+0x75a/0xff0 [ 701.295293] (M) [ 701.300732] ? ioctl_preallocate+0x1a0/0x1a0 [ 701.300742] ? lock_downgrade+0x740/0x740 [ 701.300755] ? __fget+0x225/0x360 [ 701.306180] 4*16kB [ 701.311184] ? do_vfs_ioctl+0xff0/0xff0 [ 701.311194] ? security_file_ioctl+0x83/0xb0 [ 701.311205] SyS_ioctl+0x7f/0xb0 [ 701.311215] ? do_vfs_ioctl+0xff0/0xff0 [ 701.313442] (ME) [ 701.318261] do_syscall_64+0x1d5/0x640 [ 701.318278] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 701.318288] RIP: 0033:0x466459 [ 701.320326] 5*32kB [ 701.323845] RSP: 002b:00007ff90c340188 EFLAGS: 00000246 [ 701.328259] (ME) [ 701.332271] ORIG_RAX: 0000000000000010 [ 701.335699] 5*64kB [ 701.337840] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 701.337846] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 701.337850] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 701.337854] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 701.337859] R13: 00007ffce90c212f R14: 00007ff90c340300 R15: 0000000000022000 [ 701.349674] Mem-Info: [ 701.366772] Bluetooth: hci3 command 0x0409 tx timeout [ 701.379848] active_anon:13218 inactive_anon:37199 isolated_anon:0 [ 701.379848] active_file:11 inactive_file:18 isolated_file:0 [ 701.379848] unevictable:0 dirty:0 writeback:0 unstable:0 [ 701.379848] slab_reclaimable:12497 slab_unreclaimable:116166 [ 701.379848] mapped:35148 shmem:37645 pagetables:676 bounce:0 [ 701.379848] free:13824 free_pcp:30 free_cma:0 [ 701.413422] (ME) [ 701.425757] Node 0 active_anon:51740kB inactive_anon:95592kB active_file:60kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104456kB dirty:0kB writeback:0kB shmem:97020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 701.481299] 3*128kB [ 701.507261] Node 1 active_anon:1132kB inactive_anon:53204kB active_file:0kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36136kB dirty:0kB writeback:0kB shmem:53560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 701.556077] (ME) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10976kB [ 701.567433] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 701.568115] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 701.598745] Node 0 [ 701.629260] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 701.633039] lowmem_reserve[]: 0 [ 701.636646] CPU: 0 PID: 22092 Comm: syz-executor.3 Not tainted 4.14.227-syzkaller #0 [ 701.636654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 701.656187] 2717 [ 701.657120] Call Trace: [ 701.657127] 2718 [ 701.659181] dump_stack+0x1b2/0x281 [ 701.659195] warn_alloc.cold+0x96/0x1cc [ 701.659208] ? zone_watermark_ok_safe+0x220/0x220 [ 701.659218] ? usleep_range+0x130/0x130 [ 701.659227] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 701.659240] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 701.659251] ? run_timer_softirq+0x5a0/0x5a0 [ 701.659267] __alloc_pages_nodemask+0x2127/0x2720 [ 701.677509] 2718 [ 701.680233] ? lock_acquire+0x170/0x3f0 [ 701.680249] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 701.680261] ? ion_page_pool_alloc+0x9e/0x1b0 [ 701.680278] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 701.680294] ? alloc_pages_current+0x16/0x260 [ 701.680305] alloc_pages_current+0x155/0x260 [ 701.701261] 2718 [ 701.701720] ion_page_pool_alloc+0x118/0x1b0 [ 701.710492] ion_system_heap_allocate+0x133/0x8c0 [ 701.710505] ? _raw_spin_unlock+0x29/0x40 [ 701.710515] ? _ion_heap_freelist_drain+0x6e/0x410 [ 701.710525] ? ion_system_contig_heap_create+0x130/0x130 [ 701.710536] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 701.710548] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 701.710560] ion_alloc+0x27a/0x810 [ 701.710574] ? ion_dma_buf_release+0x40/0x40 [ 701.710586] ? __might_fault+0x177/0x1b0 [ 701.710598] ion_ioctl+0xea/0x1f0 [ 701.731512] Node 0 [ 701.735855] ? ion_query_heaps+0x360/0x360 [ 701.756406] DMA32 free:17540kB min:36200kB low:45248kB high:54296kB active_anon:51720kB inactive_anon:95592kB active_file:48kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7456kB pagetables:2500kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 701.760151] ? ion_query_heaps+0x360/0x360 [ 701.760162] do_vfs_ioctl+0x75a/0xff0 [ 701.760175] ? ioctl_preallocate+0x1a0/0x1a0 [ 701.760185] ? lock_downgrade+0x740/0x740 [ 701.760199] ? __fget+0x225/0x360 [ 701.760208] ? do_vfs_ioctl+0xff0/0xff0 [ 701.760221] ? security_file_ioctl+0x83/0xb0 [ 701.780167] lowmem_reserve[]: [ 701.780480] SyS_ioctl+0x7f/0xb0 [ 701.782690] 0 [ 701.786907] ? do_vfs_ioctl+0xff0/0xff0 [ 701.830740] 0 [ 701.831730] do_syscall_64+0x1d5/0x640 [ 701.835160] 0 [ 701.839125] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 701.839134] RIP: 0033:0x466459 [ 701.839139] RSP: 002b:00007f42379f8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 701.839148] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 701.839153] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 701.839158] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 701.839163] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 701.839169] R13: 00007ffef8958def R14: 00007f42379f8300 R15: 0000000000022000 [ 701.851811] DMA32: [ 701.871998] 0 [ 701.891740] 833*4kB [ 701.914318] 0 [ 701.928755] (UME) 632*8kB (UME) 201*16kB (UME) 36*32kB (UME) 27*64kB (UME) 10*128kB (UM) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17556kB [ 701.944074] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 701.952178] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 701.987009] lowmem_reserve[]: [ 702.007127] Node 1 Normal: 43*4kB (UME) 46*8kB (M) 10*16kB (M) 7*32kB (UME) 2*64kB (UM) 147*128kB (UM) 27*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26780kB [ 702.014298] 0 [ 702.040060] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 702.044988] 0 [ 702.063648] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 702.073971] 0 0 0 [ 702.076191] Node 1 Normal free:26780kB min:53696kB low:67120kB high:80544kB active_anon:1132kB inactive_anon:53204kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:204kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 702.080133] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 702.120695] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 702.131544] 37674 total pagecache pages [ 702.135527] 0 pages in swap cache [ 702.143421] Swap cache stats: add 0, delete 0, find 0/0 [ 702.150981] Free swap = 0kB [ 702.153997] Total swap = 0kB [ 702.157007] 2097051 pages RAM [ 702.164635] 0 pages HighMem/MovableOnly [ 702.170828] 363841 pages reserved [ 702.173721] lowmem_reserve[]: [ 702.174274] 0 pages cma reserved [ 702.174281] 0 [ 702.177369] Out of memory: Kill process 22107 (syz-executor.2) score 1004 or sacrifice child [ 702.233623] 0 0 0 0 [ 702.235990] Node 0 DMA: 6*4kB (UME) 5*8kB (M) 4*16kB (ME) 5*32kB (ME) 5*64kB (ME) 3*128kB (ME) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10976kB [ 702.247602] Killed process 22108 (syz-executor.2) total-vm:93384kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 702.260630] Node 0 DMA32: 642*4kB (ME) 631*8kB (ME) 201*16kB (UME) 37*32kB (UME) 234*64kB (UME) 158*128kB (UM) 7*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 49008kB [ 702.370451] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 702.382767] Node 1 Normal: 12*4kB (UME) 47*8kB (UM) 10*16kB (M) 6*32kB (ME) 730*64kB (UM) 476*128kB (UM) 126*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 141704kB [ 702.401294] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 702.415481] oom_reaper: reaped process 22108 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 702.550664] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 702.582784] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 702.670863] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 702.680607] 42743 total pagecache pages [ 702.684604] 0 pages in swap cache [ 702.719933] Swap cache stats: add 0, delete 0, find 0/0 [ 702.726161] Free swap = 0kB [ 702.747592] Total swap = 0kB [ 702.750823] 2097051 pages RAM [ 702.753920] 0 pages HighMem/MovableOnly [ 702.834316] 363841 pages reserved [ 702.839636] 0 pages cma reserved 05:09:23 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) [ 702.874914] chnl_net:caif_netlink_parms(): no params data found 05:09:23 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) [ 703.114061] IPVS: ftp: loaded support on port[0] = 21 [ 703.505099] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.512988] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.548665] device bridge_slave_0 entered promiscuous mode [ 703.557753] Bluetooth: hci3 command 0x041b tx timeout [ 703.628721] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.635094] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.658595] device bridge_slave_1 entered promiscuous mode [ 703.665862] systemd[1]: Started Journal Service. [ 703.686867] chnl_net:caif_netlink_parms(): no params data found [ 703.798579] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 703.819160] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 703.886790] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 703.918414] team0: Port device team_slave_0 added [ 703.947699] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 703.948303] team0: Port device team_slave_1 added [ 704.023026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.037848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.070805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.114483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.121559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.154194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.164908] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.175638] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.184117] device bridge_slave_0 entered promiscuous mode [ 704.194777] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 704.203861] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 704.214965] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.222515] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.233865] device bridge_slave_1 entered promiscuous mode [ 704.286074] device hsr_slave_0 entered promiscuous mode [ 704.295561] device hsr_slave_1 entered promiscuous mode [ 704.305772] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 704.338262] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 704.346132] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 704.360900] Bluetooth: hci2 command 0x0409 tx timeout [ 704.397988] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 704.447396] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 704.468772] team0: Port device team_slave_0 added [ 704.499338] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 704.506754] team0: Port device team_slave_1 added [ 704.601362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.608046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.657772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.699150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.705407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 704.757846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.786570] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 704.815838] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 704.824056] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 704.875373] device hsr_slave_0 entered promiscuous mode [ 704.882287] device hsr_slave_1 entered promiscuous mode [ 704.899838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.907001] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 704.915475] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 704.925630] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 704.944325] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 704.952914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 704.961578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 704.971715] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 704.983596] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.010882] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 705.019706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 705.029079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 705.036758] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.043167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.062498] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 705.079438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 705.086676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 705.100535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 705.123132] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.129527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.152812] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 705.165367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 705.183125] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 705.191298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 705.218217] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 705.225102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 705.233546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 705.263636] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 705.271597] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 705.282798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 705.291412] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 705.305895] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 705.322629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 705.330788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 705.351492] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 705.367892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 705.375886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 705.392156] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 705.402447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 705.413673] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 705.436805] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 705.459763] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 705.479060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 705.485765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 705.497180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.512346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.521726] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 705.530742] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 705.542871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 705.551230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 705.561517] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 705.568560] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.578441] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 705.585449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 705.598746] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 705.606375] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.612805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.625512] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 705.634030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 705.642344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 705.651147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 705.659901] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.666249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.679291] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 705.692172] Bluetooth: hci3 command 0x040f tx timeout [ 705.700053] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 705.707439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 705.723365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 705.740090] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 705.751302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 705.754953] IPVS: ftp: loaded support on port[0] = 21 [ 705.772145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 705.782771] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 705.807394] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 705.815170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 705.824794] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 705.851662] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 705.875573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 705.885301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 705.896653] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 705.910585] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 705.946127] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 705.953755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 705.963645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 705.977168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 705.991377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 706.001716] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 706.009120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 706.129136] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 706.147037] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 706.161584] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 706.169639] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 706.219268] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 706.227909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 706.235266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 706.248107] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 706.262183] device veth0_vlan entered promiscuous mode [ 706.270698] chnl_net:caif_netlink_parms(): no params data found [ 706.289159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 706.296404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 706.306949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 706.313763] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 706.327278] device veth1_vlan entered promiscuous mode [ 706.333528] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 706.355035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.374800] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 706.410215] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 706.420689] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 706.429305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 706.436587] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 706.448148] Bluetooth: hci2 command 0x041b tx timeout [ 706.449374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 706.462382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 706.476760] device veth0_macvtap entered promiscuous mode [ 706.484473] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 706.496346] device veth1_macvtap entered promiscuous mode [ 706.503551] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 706.519091] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 706.539384] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 706.575873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 706.586290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.596954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 706.607385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.617175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 706.627622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.638711] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 706.645712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.657202] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.664578] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.677504] device bridge_slave_0 entered promiscuous mode [ 706.686716] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 706.696855] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 706.705631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 706.716525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 706.728125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 706.738666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.748219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 706.758503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.767767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 706.778254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.788834] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 706.795741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.806321] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 706.817901] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.824259] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.832134] device bridge_slave_1 entered promiscuous mode [ 706.856977] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 706.869621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 706.891276] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 706.904540] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 706.921270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 706.934583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 706.955346] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 706.965563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.974343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.984747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.992645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.001613] device bridge_slave_1 left promiscuous mode [ 707.007178] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.015631] device bridge_slave_0 left promiscuous mode [ 707.021755] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.031521] device veth1_macvtap left promiscuous mode [ 707.036819] device veth0_macvtap left promiscuous mode [ 707.043591] device veth1_vlan left promiscuous mode [ 707.049219] device veth0_vlan left promiscuous mode [ 707.157801] Bluetooth: hci4 command 0x0409 tx timeout [ 707.164592] device hsr_slave_1 left promiscuous mode [ 707.174681] device hsr_slave_0 left promiscuous mode [ 707.191219] team0 (unregistering): Port device team_slave_1 removed [ 707.203000] team0 (unregistering): Port device team_slave_0 removed [ 707.215173] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 707.226267] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 707.260376] bond0 (unregistering): Released all slaves [ 707.305221] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 707.313908] team0: Port device team_slave_0 added [ 707.323941] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 707.333434] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 707.341020] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 707.352390] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 707.360127] team0: Port device team_slave_1 added [ 707.376698] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 707.384654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 707.396634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 707.414800] device veth0_vlan entered promiscuous mode [ 707.421351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 707.429782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 707.455567] device veth1_vlan entered promiscuous mode [ 707.462398] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 707.476618] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 707.490521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.496770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.533871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.555482] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 707.574030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.586542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.616241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.630269] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 707.642398] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 707.650194] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 707.657377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 707.674412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 707.691739] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 707.702516] device veth0_macvtap entered promiscuous mode [ 707.710809] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 707.719775] Bluetooth: hci3 command 0x0419 tx timeout [ 707.727528] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 707.763878] device veth1_macvtap entered promiscuous mode [ 707.791295] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 707.813461] device hsr_slave_0 entered promiscuous mode [ 707.828818] device hsr_slave_1 entered promiscuous mode [ 707.838457] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 707.855294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 707.872017] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 707.898660] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 707.908771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 707.924020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.933437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 707.946185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.955458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 707.971373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.983423] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 707.992697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.012847] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 708.022318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 708.033599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 708.043996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 708.057462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 708.068796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.078744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 708.090134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.099860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 708.110365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.121940] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 708.129666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.142508] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 708.152817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 708.314951] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 708.393472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.404060] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 708.418150] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 708.424777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 708.436022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 708.458294] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 708.466385] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.482140] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 708.499598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 708.512444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 708.524765] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.531191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.558543] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 708.566708] Bluetooth: hci2 command 0x040f tx timeout [ 708.581497] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 708.597434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 708.609558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 708.629873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 708.665625] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.672051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.695473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 708.717049] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 708.738433] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 708.751443] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 708.773714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 708.783748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 708.805944] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 708.824824] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 708.841165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 708.854860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 708.883909] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 708.896868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 708.909245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 708.932054] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 708.946493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 708.958813] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 708.984604] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 708.995513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 709.045366] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 709.068449] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 709.091381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 709.099837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 709.125753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.238409] Bluetooth: hci4 command 0x041b tx timeout [ 709.339969] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 709.369284] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 709.392004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 709.406217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 709.524119] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 709.545746] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 709.579663] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 709.598829] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 709.613991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 709.623108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 05:09:30 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x121800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) 05:09:30 executing program 3: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:09:30 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) [ 709.645084] device veth0_vlan entered promiscuous mode [ 709.655825] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 709.669667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 709.708870] device veth1_vlan entered promiscuous mode [ 709.741818] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 709.783291] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 709.802897] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 709.845775] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 709.852848] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 709.854944] syz-executor.2: [ 709.863454] syz-executor.5: [ 709.866835] page allocation failure: order:4 [ 709.869688] CPU: 0 PID: 22814 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 709.870310] page allocation failure: order:4 [ 709.874276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 709.874280] Call Trace: [ 709.874298] dump_stack+0x1b2/0x281 [ 709.874312] warn_alloc.cold+0x96/0x1cc [ 709.874325] ? zone_watermark_ok_safe+0x220/0x220 [ 709.886618] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 709.895948] __alloc_pages_nodemask+0x2127/0x2720 [ 709.895962] ? lock_acquire+0x170/0x3f0 [ 709.895976] ? lock_acquire+0x170/0x3f0 [ 709.895991] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 709.896009] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 709.901906] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 709.902199] ? __mutex_unlock_slowpath+0x75/0x770 [ 709.906249] (null) [ 709.910973] alloc_pages_current+0x155/0x260 [ 709.910990] ion_page_pool_alloc+0x118/0x1b0 [ 709.911001] ion_system_heap_allocate+0x133/0x8c0 [ 709.911012] ? ion_alloc+0x187/0x810 [ 709.911022] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 709.911032] ? ion_system_contig_heap_create+0x130/0x130 [ 709.911042] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 709.911052] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 709.911063] ion_alloc+0x204/0x810 [ 709.911077] ? ion_dma_buf_release+0x40/0x40 [ 709.911089] ? __might_fault+0x177/0x1b0 [ 709.927980] (null) [ 709.930949] ion_ioctl+0xea/0x1f0 [ 709.930961] ? ion_query_heaps+0x360/0x360 [ 709.930974] ? ion_query_heaps+0x360/0x360 [ 709.930986] do_vfs_ioctl+0x75a/0xff0 [ 709.942036] syz-executor.5 cpuset= [ 709.948338] ? ioctl_preallocate+0x1a0/0x1a0 [ 709.948349] ? lock_downgrade+0x740/0x740 [ 709.948364] ? __fget+0x225/0x360 [ 709.948372] ? do_vfs_ioctl+0xff0/0xff0 [ 709.948383] ? security_file_ioctl+0x83/0xb0 [ 709.948393] SyS_ioctl+0x7f/0xb0 [ 709.948403] ? do_vfs_ioctl+0xff0/0xff0 [ 709.964479] syz-executor.2 cpuset= [ 709.968992] do_syscall_64+0x1d5/0x640 [ 709.969012] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 709.969020] RIP: 0033:0x466459 [ 709.969025] RSP: 002b:00007f878dccd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 709.969035] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 709.969040] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 709.969049] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 709.969054] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 709.972825] / [ 709.978186] R13: 00007fff67b70adf R14: 00007f878dccd300 R15: 0000000000022000 [ 709.991498] / [ 710.008348] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 710.021094] mems_allowed=0-1 [ 710.030156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 710.036104] CPU: 1 PID: 22837 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 710.044742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 710.047402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 710.047406] Call Trace: [ 710.047423] dump_stack+0x1b2/0x281 [ 710.047437] warn_alloc.cold+0x96/0x1cc [ 710.051476] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 710.054747] ? zone_watermark_ok_safe+0x220/0x220 [ 710.054771] __alloc_pages_nodemask+0x2127/0x2720 [ 710.058894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 710.062170] ? lock_acquire+0x170/0x3f0 [ 710.062186] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 710.069872] device veth0_macvtap entered promiscuous mode [ 710.070558] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 710.079303] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 710.085506] ? __mutex_unlock_slowpath+0x75/0x770 [ 710.085525] alloc_pages_current+0x155/0x260 [ 710.095671] device veth1_macvtap entered promiscuous mode [ 710.100042] ion_page_pool_alloc+0x118/0x1b0 [ 710.100060] ion_system_heap_allocate+0x133/0x8c0 [ 710.100072] ? ion_alloc+0x187/0x810 [ 710.100085] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 710.111944] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 710.116319] ? ion_system_contig_heap_create+0x130/0x130 [ 710.116331] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 710.116344] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 710.121145] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 710.124791] ion_alloc+0x204/0x810 [ 710.124810] ? ion_dma_buf_release+0x40/0x40 [ 710.130178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 710.134640] ? __might_fault+0x177/0x1b0 [ 710.134656] ion_ioctl+0xea/0x1f0 [ 710.142675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.149258] ? ion_query_heaps+0x360/0x360 [ 710.149272] ? ion_query_heaps+0x360/0x360 [ 710.149284] do_vfs_ioctl+0x75a/0xff0 [ 710.149296] ? ioctl_preallocate+0x1a0/0x1a0 [ 710.149308] ? lock_downgrade+0x740/0x740 [ 710.158823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 710.161223] ? __fget+0x225/0x360 [ 710.161233] ? do_vfs_ioctl+0xff0/0xff0 [ 710.161245] ? security_file_ioctl+0x83/0xb0 [ 710.164890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.168823] SyS_ioctl+0x7f/0xb0 [ 710.168831] ? do_vfs_ioctl+0xff0/0xff0 [ 710.168843] do_syscall_64+0x1d5/0x640 [ 710.168860] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 710.168870] RIP: 0033:0x466459 [ 710.176211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 710.180863] RSP: 002b:00007f243cc84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 710.180873] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 710.180879] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 710.180884] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 710.180889] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 710.180894] R13: 00007ffeefc8439f R14: 00007f243cc84300 R15: 0000000000022000 [ 710.226385] warn_alloc_show_mem: 1 callbacks suppressed [ 710.226389] Mem-Info: [ 710.234116] mems_allowed=0-1 [ 710.235609] active_anon:13313 inactive_anon:37203 isolated_anon:0 [ 710.235609] active_file:1974 inactive_file:3791 isolated_file:0 [ 710.235609] unevictable:0 dirty:32 writeback:0 unstable:0 [ 710.235609] slab_reclaimable:12132 slab_unreclaimable:114465 [ 710.235609] mapped:48486 shmem:37648 pagetables:722 bounce:0 [ 710.235609] free:183541 free_pcp:201 free_cma:0 [ 710.245426] CPU: 0 PID: 22841 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 710.251537] Node 0 active_anon:52296kB inactive_anon:95612kB active_file:7888kB inactive_file:15160kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157184kB dirty:124kB writeback:0kB shmem:97044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 710.254095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 710.254099] Call Trace: [ 710.254117] dump_stack+0x1b2/0x281 [ 710.254132] warn_alloc.cold+0x96/0x1cc [ 710.254145] ? zone_watermark_ok_safe+0x220/0x220 [ 710.263552] Node 1 active_anon:956kB inactive_anon:53200kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:36760kB dirty:4kB writeback:0kB shmem:53548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 710.266512] __alloc_pages_nodemask+0x2127/0x2720 [ 710.266530] ? lock_acquire+0x170/0x3f0 [ 710.266545] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 710.273337] Node 0 [ 710.276386] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 710.276400] ? __mutex_unlock_slowpath+0x75/0x770 [ 710.276417] alloc_pages_current+0x155/0x260 [ 710.286362] DMA free:11084kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 710.286857] ion_page_pool_alloc+0x118/0x1b0 [ 710.292204] lowmem_reserve[]: [ 710.300941] ion_system_heap_allocate+0x133/0x8c0 [ 710.300954] ? ion_alloc+0x187/0x810 [ 710.300964] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 710.300974] ? ion_system_contig_heap_create+0x130/0x130 [ 710.300984] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 710.300996] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 710.301007] ion_alloc+0x204/0x810 [ 710.301021] ? ion_dma_buf_release+0x40/0x40 [ 710.301032] ? __might_fault+0x177/0x1b0 [ 710.301045] ion_ioctl+0xea/0x1f0 [ 710.301063] ? ion_query_heaps+0x360/0x360 [ 710.311483] 0 [ 710.317667] ? ion_query_heaps+0x360/0x360 [ 710.317680] do_vfs_ioctl+0x75a/0xff0 [ 710.317693] ? ioctl_preallocate+0x1a0/0x1a0 [ 710.317702] ? lock_downgrade+0x740/0x740 [ 710.317715] ? __fget+0x225/0x360 [ 710.317724] ? do_vfs_ioctl+0xff0/0xff0 [ 710.317734] ? security_file_ioctl+0x83/0xb0 [ 710.317744] SyS_ioctl+0x7f/0xb0 [ 710.317750] ? do_vfs_ioctl+0xff0/0xff0 [ 710.317761] do_syscall_64+0x1d5/0x640 [ 710.317777] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 710.317785] RIP: 0033:0x466459 [ 710.317790] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 710.317801] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 710.317806] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 710.317811] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 710.317816] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 710.317820] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 710.369923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.384289] 2717 [ 710.401998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 710.408161] 2718 [ 710.429543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.438233] 2718 [ 710.471571] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 710.490279] 2718 [ 710.543776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.585330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 710.623149] Node 0 [ 710.776776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.856664] Bluetooth: hci2 command 0x0419 tx timeout [ 710.939502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 710.960698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.980419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 710.989452] DMA32 free:226240kB min:36200kB low:45248kB high:54296kB active_anon:52276kB inactive_anon:95612kB active_file:7884kB inactive_file:15460kB unevictable:0kB writepending:124kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7648kB pagetables:2696kB bounce:0kB free_pcp:860kB local_pcp:196kB free_cma:0kB [ 711.001956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.057446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 711.066531] lowmem_reserve[]: 0 0 0 0 0 [ 711.080147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.083604] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 711.102371] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 711.154958] lowmem_reserve[]: 0 0 0 0 0 [ 711.164839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.167145] Node 1 Normal free:97384kB min:53696kB low:67120kB high:80544kB active_anon:956kB inactive_anon:53200kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:192kB bounce:0kB free_pcp:40kB local_pcp:40kB free_cma:0kB [ 711.205844] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 711.219447] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 711.236600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 711.238333] lowmem_reserve[]: [ 711.270037] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 711.282830] 0 0 0 0 0 [ 711.293297] Node 0 DMA: 157*4kB (UME) 19*8kB (UM) 12*16kB (UME) 16*32kB (UME) 6*64kB (UME) 4*128kB (UME) 2*256kB (ME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11084kB [ 711.318597] Bluetooth: hci4 command 0x040f tx timeout [ 711.324583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 711.354056] Node 0 DMA32: 780*4kB (ME) 592*8kB (UME) 204*16kB (ME) 31*32kB (ME) 383*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36624kB [ 711.448762] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 711.477393] Node 1 Normal: 7*4kB (UME) 7*8kB (UM) 4*16kB (UM) 1311*32kB (UME) 4*64kB (UM) 2*128kB (M) 0*256kB 1*512kB (M) 10*1024kB (U) 0*2048kB 0*4096kB = 53364kB [ 711.551037] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 711.581762] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 711.593201] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 711.606391] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 711.625028] 38264 total pagecache pages [ 711.629808] 0 pages in swap cache [ 711.634388] Swap cache stats: add 0, delete 0, find 0/0 [ 711.645293] Free swap = 0kB [ 711.648649] Total swap = 0kB [ 711.652197] 2097051 pages RAM [ 711.655929] 0 pages HighMem/MovableOnly [ 711.665295] 363841 pages reserved [ 711.669802] 0 pages cma reserved 05:09:32 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x121800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) [ 713.399997] Bluetooth: hci4 command 0x0419 tx timeout 05:09:34 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:09:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x121800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/99) 05:09:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x121800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) msgget$private(0x0, 0x320) 05:09:34 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:09:34 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:09:34 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:09:34 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) 05:09:34 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf}) [ 714.576495] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 714.601179] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 714.606504] CPU: 1 PID: 22875 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 714.606506] syz-executor.0: page allocation failure: order:4 [ 714.614402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 714.614406] Call Trace: [ 714.614431] dump_stack+0x1b2/0x281 [ 714.614445] warn_alloc.cold+0x96/0x1cc [ 714.614458] ? zone_watermark_ok_safe+0x220/0x220 [ 714.614482] __alloc_pages_nodemask+0x2127/0x2720 [ 714.614494] ? _raw_spin_unlock_irq+0x24/0x80 [ 714.654336] ? lock_acquire+0x170/0x3f0 [ 714.658309] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 714.663149] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 714.668775] ? __mutex_unlock_slowpath+0x75/0x770 [ 714.673613] alloc_pages_current+0x155/0x260 [ 714.678018] ion_page_pool_alloc+0x118/0x1b0 [ 714.682424] ion_system_heap_allocate+0x133/0x8c0 [ 714.691941] ? ion_alloc+0x187/0x810 [ 714.695646] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 714.701086] ? ion_system_contig_heap_create+0x130/0x130 [ 714.706541] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 714.711552] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 714.716404] ion_alloc+0x204/0x810 [ 714.719953] ? ion_dma_buf_release+0x40/0x40 [ 714.724375] ? __might_fault+0x177/0x1b0 [ 714.728444] ion_ioctl+0xea/0x1f0 [ 714.731884] ? ion_query_heaps+0x360/0x360 [ 714.736196] ? ion_query_heaps+0x360/0x360 [ 714.740425] do_vfs_ioctl+0x75a/0xff0 [ 714.744218] ? ioctl_preallocate+0x1a0/0x1a0 [ 714.748617] ? lock_downgrade+0x740/0x740 [ 714.752756] ? __fget+0x225/0x360 [ 714.756197] ? do_vfs_ioctl+0xff0/0xff0 [ 714.760161] ? security_file_ioctl+0x83/0xb0 [ 714.764557] SyS_ioctl+0x7f/0xb0 [ 714.767908] ? do_vfs_ioctl+0xff0/0xff0 [ 714.771871] do_syscall_64+0x1d5/0x640 [ 714.775752] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 714.780928] RIP: 0033:0x466459 [ 714.784106] RSP: 002b:00007f878dccd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 714.791808] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 714.799076] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 714.806341] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 714.813600] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 714.820857] R13: 00007fff67b70adf R14: 00007f878dccd300 R15: 0000000000022000 [ 714.828768] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 714.839581] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 714.844708] CPU: 0 PID: 22873 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 714.850732] warn_alloc_show_mem: 2 callbacks suppressed [ 714.850735] Mem-Info: [ 714.852601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 714.858001] active_anon:13326 inactive_anon:37202 isolated_anon:0 [ 714.858001] active_file:64 inactive_file:67 isolated_file:8 [ 714.858001] unevictable:0 dirty:39 writeback:0 unstable:0 [ 714.858001] slab_reclaimable:12111 slab_unreclaimable:112336 [ 714.858001] mapped:52784 shmem:37647 pagetables:787 bounce:0 [ 714.858001] free:32128 free_pcp:0 free_cma:0 [ 714.860341] Call Trace: [ 714.872879] Node 0 active_anon:51972kB inactive_anon:95604kB active_file:184kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:140956kB dirty:64kB writeback:0kB shmem:97036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 714.902859] dump_stack+0x1b2/0x281 [ 714.902873] warn_alloc.cold+0x96/0x1cc [ 714.902885] ? zone_watermark_ok_safe+0x220/0x220 [ 714.902906] __alloc_pages_nodemask+0x2127/0x2720 [ 714.902923] ? finish_task_switch+0x178/0x610 [ 714.902933] ? switch_mm_irqs_off+0x2d2/0xeb0 [ 714.902947] ? lock_acquire+0x170/0x3f0 [ 714.902962] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 714.902979] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 714.902991] ? __mutex_unlock_slowpath+0x75/0x770 [ 714.903005] alloc_pages_current+0x155/0x260 [ 714.908928] Node 1 active_anon:1332kB inactive_anon:53204kB active_file:72kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70180kB dirty:92kB writeback:0kB shmem:53552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 714.933510] ion_page_pool_alloc+0x118/0x1b0 [ 714.933522] ion_system_heap_allocate+0x133/0x8c0 [ 714.933532] ? ion_alloc+0x187/0x810 [ 714.933542] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 714.933552] ? ion_system_contig_heap_create+0x130/0x130 [ 714.933561] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 714.933573] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 714.933584] ion_alloc+0x204/0x810 [ 714.933598] ? ion_dma_buf_release+0x40/0x40 [ 714.933610] ? __might_fault+0x177/0x1b0 [ 714.933623] ion_ioctl+0xea/0x1f0 [ 714.933633] ? ion_query_heaps+0x360/0x360 [ 714.933645] ? ion_query_heaps+0x360/0x360 [ 714.940445] Node 0 [ 714.941218] do_vfs_ioctl+0x75a/0xff0 [ 714.946050] DMA free:11396kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 714.950880] ? ioctl_preallocate+0x1a0/0x1a0 [ 714.950889] ? lock_downgrade+0x740/0x740 [ 714.950902] ? __fget+0x225/0x360 [ 714.950911] ? do_vfs_ioctl+0xff0/0xff0 [ 714.950927] ? security_file_ioctl+0x83/0xb0 [ 714.950937] SyS_ioctl+0x7f/0xb0 [ 714.950947] ? do_vfs_ioctl+0xff0/0xff0 [ 714.955420] lowmem_reserve[]: [ 714.959901] do_syscall_64+0x1d5/0x640 [ 714.959926] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 714.959935] RIP: 0033:0x466459 [ 714.959939] RSP: 002b:00007fd43b697188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 714.959949] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 714.959955] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 714.959960] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 714.959966] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 714.959971] R13: 00007ffdec314c5f R14: 00007fd43b697300 R15: 0000000000022000 [ 715.189286] 0 2717 2718 2718 2718 [ 715.192842] Node 0 DMA32 free:83616kB min:36200kB low:45248kB high:54296kB active_anon:51904kB inactive_anon:95600kB active_file:8kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7680kB pagetables:2752kB bounce:0kB free_pcp:128kB local_pcp:0kB free_cma:0kB [ 715.221573] lowmem_reserve[]: 0 0 0 0 0 [ 715.225567] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 715.267757] lowmem_reserve[]: 0 0 0 0 0 [ 715.282618] Node 1 Normal free:152384kB min:53696kB low:67120kB high:80544kB active_anon:1248kB inactive_anon:53208kB active_file:328kB inactive_file:2804kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:412kB bounce:0kB free_pcp:104kB local_pcp:0kB free_cma:0kB [ 715.324615] lowmem_reserve[]: 0 0 0 0 0 [ 715.328782] Node 0 DMA: 5*4kB (UME) 5*8kB (UM) 3*16kB (ME) 4*32kB (ME) 8*64kB (UME) 11*128kB (UME) 3*256kB (ME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11116kB [ 715.345745] Node 0 DMA32: 1042*4kB (MEH) 755*8kB (UMEH) 349*16kB (UMEH) 57*32kB (UME) 52*64kB (UMH) 14*128kB (UMH) 83*256kB (UM) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 45008kB [ 715.362813] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 715.406075] Node 1 Normal: 2*4kB (ME) 1*8kB (M) 2*16kB (UM) 3*32kB (UE) 437*64kB (UM) 133*128kB (UM) 33*256kB (UM) 74*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 91472kB [ 715.459946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 715.479946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 715.512170] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 715.531348] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 715.539992] 38354 total pagecache pages [ 715.543964] 0 pages in swap cache [ 715.547414] Swap cache stats: add 0, delete 0, find 0/0 [ 715.558511] Free swap = 0kB [ 715.561545] Total swap = 0kB [ 715.564557] 2097051 pages RAM [ 715.570794] 0 pages HighMem/MovableOnly [ 715.575138] 363841 pages reserved [ 715.578637] 0 pages cma reserved [ 716.219115] oom_reaper: reaped process 22873 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 716.286013] oom_reaper: reaped process 22841 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 716.297654] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 716.303853] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 716.309540] syz-executor.2: [ 716.319458] (null), order=0, oom_score_adj=0 [ 716.324616] page allocation failure: order:0 [ 716.326975] in:imklog cpuset= [ 716.326982] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 716.344341] / mems_allowed=0-1 [ 716.348748] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 716.353876] CPU: 1 PID: 22873 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 716.361749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.371112] Call Trace: [ 716.373703] dump_stack+0x1b2/0x281 [ 716.377328] warn_alloc.cold+0x96/0x1cc [ 716.377602] syz-executor.2 cpuset= [ 716.381294] ? zone_watermark_ok_safe+0x220/0x220 [ 716.381296] / mems_allowed=0-1 [ 716.384825] ? usleep_range+0x130/0x130 [ 716.396780] ? try_to_free_pages+0x23f/0x6e0 [ 716.401181] ? _find_next_bit+0xdb/0x100 [ 716.405236] ? run_timer_softirq+0x5a0/0x5a0 [ 716.409642] __alloc_pages_nodemask+0x2127/0x2720 [ 716.414479] ? lock_acquire+0x170/0x3f0 [ 716.418453] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 716.423286] ? ion_page_pool_alloc+0x9e/0x1b0 [ 716.427802] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 716.433259] ? alloc_pages_current+0x84/0x260 [ 716.437749] alloc_pages_current+0x155/0x260 [ 716.442170] ion_page_pool_alloc+0x118/0x1b0 [ 716.446577] ion_system_heap_allocate+0x133/0x8c0 [ 716.451416] ? ion_alloc+0x187/0x810 [ 716.455124] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 716.460585] ? ion_system_contig_heap_create+0x130/0x130 [ 716.466029] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 716.471040] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 716.475875] ion_alloc+0x204/0x810 [ 716.479418] ? ion_dma_buf_release+0x40/0x40 [ 716.483836] ? __might_fault+0x177/0x1b0 [ 716.487899] ion_ioctl+0xea/0x1f0 [ 716.491354] ? ion_query_heaps+0x360/0x360 [ 716.495601] ? ion_query_heaps+0x360/0x360 [ 716.499833] do_vfs_ioctl+0x75a/0xff0 [ 716.503626] ? ioctl_preallocate+0x1a0/0x1a0 [ 716.508032] ? lock_downgrade+0x740/0x740 [ 716.512178] ? __fget+0x225/0x360 [ 716.515619] ? do_vfs_ioctl+0xff0/0xff0 [ 716.519601] ? security_file_ioctl+0x83/0xb0 [ 716.524002] SyS_ioctl+0x7f/0xb0 [ 716.527371] ? do_vfs_ioctl+0xff0/0xff0 [ 716.531335] do_syscall_64+0x1d5/0x640 [ 716.535217] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 716.540486] RIP: 0033:0x466459 [ 716.543677] RSP: 002b:00007fd43b697188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 716.551384] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 716.558643] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 716.565939] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 716.573196] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 716.580546] R13: 00007ffdec314c5f R14: 00007fd43b697300 R15: 0000000000022000 [ 716.587821] CPU: 0 PID: 22841 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 716.595706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.605068] Call Trace: [ 716.607657] dump_stack+0x1b2/0x281 [ 716.611287] warn_alloc.cold+0x96/0x1cc [ 716.615258] ? zone_watermark_ok_safe+0x220/0x220 [ 716.620089] ? usleep_range+0x130/0x130 [ 716.624234] ? try_to_free_pages+0x23f/0x6e0 [ 716.628660] ? _find_next_bit+0xdb/0x100 [ 716.632721] ? run_timer_softirq+0x5a0/0x5a0 [ 716.637135] __alloc_pages_nodemask+0x2127/0x2720 [ 716.641979] ? lock_acquire+0x170/0x3f0 [ 716.645951] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 716.650811] ? ion_page_pool_alloc+0x9e/0x1b0 [ 716.655323] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 716.660773] alloc_pages_current+0x155/0x260 [ 716.665177] ion_page_pool_alloc+0x118/0x1b0 [ 716.669579] ion_system_heap_allocate+0x133/0x8c0 [ 716.674420] ? ion_alloc+0x187/0x810 [ 716.678126] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 716.683568] ? ion_system_contig_heap_create+0x130/0x130 [ 716.689012] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 716.694028] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 716.698869] ion_alloc+0x204/0x810 [ 716.702404] ? ion_dma_buf_release+0x40/0x40 [ 716.706805] ? __might_fault+0x177/0x1b0 [ 716.710885] ion_ioctl+0xea/0x1f0 [ 716.714337] ? ion_query_heaps+0x360/0x360 [ 716.718565] ? ion_query_heaps+0x360/0x360 [ 716.722806] do_vfs_ioctl+0x75a/0xff0 [ 716.726609] ? ioctl_preallocate+0x1a0/0x1a0 [ 716.731008] ? lock_downgrade+0x740/0x740 [ 716.735159] ? __fget+0x225/0x360 [ 716.738604] ? do_vfs_ioctl+0xff0/0xff0 [ 716.742572] ? security_file_ioctl+0x83/0xb0 [ 716.746971] SyS_ioctl+0x7f/0xb0 [ 716.750329] ? do_vfs_ioctl+0xff0/0xff0 [ 716.754318] do_syscall_64+0x1d5/0x640 [ 716.758220] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 716.763415] RIP: 0033:0x466459 [ 716.766612] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 716.774310] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 716.781569] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 716.788832] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 716.796095] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 716.803353] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 716.818232] CPU: 1 PID: 22110 Comm: in:imklog Not tainted 4.14.227-syzkaller #0 [ 716.819861] warn_alloc_show_mem: 1 callbacks suppressed [ 716.819864] Mem-Info: [ 716.825785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.831192] active_anon:13248 inactive_anon:37202 isolated_anon:0 [ 716.831192] active_file:48 inactive_file:0 isolated_file:0 [ 716.831192] unevictable:0 dirty:1 writeback:0 unstable:0 [ 716.831192] slab_reclaimable:12129 slab_unreclaimable:111621 [ 716.831192] mapped:52743 shmem:37647 pagetables:770 bounce:0 [ 716.831192] free:13819 free_pcp:30 free_cma:0 [ 716.833524] Call Trace: [ 716.847021] Node 0 active_anon:51784kB inactive_anon:95600kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140764kB dirty:0kB writeback:0kB shmem:97032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 716.875937] dump_stack+0x1b2/0x281 [ 716.875949] dump_header+0x178/0x82f [ 716.875959] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 716.875967] ? ___ratelimit+0x2cd/0x530 [ 716.875978] oom_kill_process.cold+0x10/0xb18 [ 716.879105] Node 1 active_anon:1208kB inactive_anon:53208kB active_file:184kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70208kB dirty:4kB writeback:0kB shmem:53556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 716.906594] out_of_memory+0xe3e/0x1190 [ 716.906607] ? oom_killer_disable+0x1c0/0x1c0 [ 716.906615] ? mutex_trylock+0x152/0x1a0 [ 716.906628] __alloc_pages_nodemask+0x23e1/0x2720 [ 716.910264] Node 0 [ 716.913955] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 716.919066] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 716.922993] alloc_pages_current+0x155/0x260 [ 716.927451] lowmem_reserve[]: [ 716.957136] filemap_fault+0xea3/0x1980 [ 716.957155] ext4_filemap_fault+0x84/0xb0 [ 716.957165] __do_fault+0xfa/0x380 [ 716.957177] __handle_mm_fault+0x2497/0x4620 [ 716.961160] 0 [ 716.965731] ? vm_insert_page+0x7c0/0x7c0 [ 716.969803] 2717 [ 716.974599] ? lock_downgrade+0x740/0x740 [ 716.976807] 2718 [ 716.981654] handle_mm_fault+0x391/0x860 [ 716.981668] __do_page_fault+0x549/0xad0 [ 716.981680] ? spurious_fault+0x640/0x640 [ 717.007307] 2718 [ 717.011678] ? do_page_fault+0x60/0x500 [ 717.011688] ? page_fault+0x2f/0x50 [ 717.011698] page_fault+0x45/0x50 [ 717.014783] 2718 [ 717.018738] RIP: 1fa0:0x1f9f [ 717.018743] RSP: 0000:0000563f890e49d0 EFLAGS: 7f57d2992da0 [ 717.317745] IPVS: ftp: loaded support on port[0] = 21 [ 717.329115] Node 0 DMA32 free:45328kB min:36200kB low:45248kB high:54296kB active_anon:51520kB inactive_anon:95600kB active_file:108kB inactive_file:908kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7616kB pagetables:2668kB bounce:0kB free_pcp:536kB local_pcp:204kB free_cma:0kB [ 717.478683] lowmem_reserve[]: 0 0 0 0 0 [ 717.511354] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 717.564213] lowmem_reserve[]: 0 0 0 0 0 [ 717.571778] Node 1 Normal free:27080kB min:53696kB low:67120kB high:80544kB active_anon:1868kB inactive_anon:53208kB active_file:1004kB inactive_file:1116kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:412kB bounce:0kB free_pcp:180kB local_pcp:84kB free_cma:0kB [ 717.607722] lowmem_reserve[]: 0 0 0 0 0 [ 717.611736] Node 0 DMA: 4*4kB (ME) 6*8kB (UM) 4*16kB (UME) 6*32kB (UME) 5*64kB (UME) 11*128kB (UME) 3*256kB (ME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11008kB [ 717.624810] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 717.632257] Node 0 DMA32: 1098*4kB (UMEH) 691*8kB (UMEH) 253*16kB (UMEH) 38*32kB (ME) 31*64kB (UMEH) 7*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18064kB [ 717.648643] Mem-Info: [ 717.667070] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 717.667814] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 717.674546] CPU: 1 PID: 22873 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 717.683013] Node 1 [ 717.690773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.690777] Call Trace: [ 717.690795] dump_stack+0x1b2/0x281 [ 717.690809] warn_alloc.cold+0x96/0x1cc [ 717.690823] ? zone_watermark_ok_safe+0x220/0x220 [ 717.693035] Normal: [ 717.702390] __alloc_pages_nodemask+0x2127/0x2720 [ 717.702407] ? lock_acquire+0x170/0x3f0 [ 717.704964] 108*4kB [ 717.708579] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 717.708597] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 717.708609] ? __mutex_unlock_slowpath+0x75/0x770 [ 717.712560] (UME) [ 717.717402] alloc_pages_current+0x155/0x260 [ 717.719718] 84*8kB [ 717.724526] ion_page_pool_alloc+0x118/0x1b0 [ 717.728486] (UME) [ 717.730955] ion_system_heap_allocate+0x133/0x8c0 [ 717.735769] 58*16kB [ 717.741209] ? _raw_spin_unlock+0x29/0x40 [ 717.741220] ? _ion_heap_freelist_drain+0x6e/0x410 [ 717.741230] ? ion_system_contig_heap_create+0x130/0x130 [ 717.741243] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 717.746060] (UME) [ 717.748198] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 717.748210] ion_alloc+0x27a/0x810 [ 717.748225] ? ion_dma_buf_release+0x40/0x40 [ 717.752612] 58*32kB [ 717.754835] ? __might_fault+0x177/0x1b0 [ 717.759249] (UME) [ 717.761363] ion_ioctl+0xea/0x1f0 [ 717.769242] 58*64kB [ 717.771531] ? ion_query_heaps+0x360/0x360 [ 717.775661] (UM) [ 717.780576] ? ion_query_heaps+0x360/0x360 [ 717.780587] do_vfs_ioctl+0x75a/0xff0 [ 717.780598] ? ioctl_preallocate+0x1a0/0x1a0 [ 717.780608] ? lock_downgrade+0x740/0x740 [ 717.780621] ? __fget+0x225/0x360 [ 717.786047] 9*128kB [ 717.791045] ? do_vfs_ioctl+0xff0/0xff0 [ 717.791056] ? security_file_ioctl+0x83/0xb0 [ 717.791066] SyS_ioctl+0x7f/0xb0 [ 717.791075] ? do_vfs_ioctl+0xff0/0xff0 [ 717.793204] (UM) [ 717.798032] do_syscall_64+0x1d5/0x640 [ 717.798049] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 717.798059] RIP: 0033:0x466459 [ 717.801601] 2*256kB [ 717.805988] RSP: 002b:00007fd43b697188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 717.808410] (M) [ 717.812410] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 717.812418] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 717.814593] 32*512kB [ 717.818021] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 717.818026] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 717.818031] R13: 00007ffdec314c5f R14: 00007fd43b697300 R15: 0000000000022000 [ 717.825452] active_anon:13352 inactive_anon:37202 isolated_anon:0 [ 717.825452] active_file:39 inactive_file:17 isolated_file:0 [ 717.825452] unevictable:0 dirty:0 writeback:0 unstable:0 [ 717.825452] slab_reclaimable:12129 slab_unreclaimable:112276 [ 717.825452] mapped:52761 shmem:37647 pagetables:770 bounce:0 [ 717.825452] free:13872 free_pcp:0 free_cma:0 [ 717.826658] (UM) 1*1024kB [ 717.830958] Node 0 active_anon:51540kB inactive_anon:95600kB active_file:16kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140764kB dirty:0kB writeback:0kB shmem:97032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 717.830972] Node 1 active_anon:1868kB inactive_anon:53208kB active_file:140kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70280kB dirty:0kB writeback:0kB shmem:53556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 717.830976] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 717.830994] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 717.831013] Node 0 DMA32 free:17968kB min:36200kB low:45248kB high:54296kB active_anon:51520kB inactive_anon:95600kB active_file:108kB inactive_file:392kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7616kB pagetables:2668kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 717.853723] (E) [ 717.896138] lowmem_reserve[]: [ 717.917236] 0*2048kB [ 717.933337] 0 [ 717.972119] 0*4096kB [ 718.017166] 0 [ 718.027619] warn_alloc_show_mem: 1 callbacks suppressed [ 718.027623] Mem-Info: [ 718.061899] 0 [ 718.097455] = 26672kB [ 718.110342] 0 0 [ 718.112327] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 718.121956] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 718.150629] lowmem_reserve[]: 0 0 0 0 0 [ 718.154638] Node 1 Normal free:26672kB min:53696kB low:67120kB high:80544kB active_anon:1872kB inactive_anon:53220kB active_file:68kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:472kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 718.158612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 718.196719] active_anon:13336 inactive_anon:37205 isolated_anon:0 [ 718.196719] active_file:18 inactive_file:17 isolated_file:0 [ 718.196719] unevictable:0 dirty:0 writeback:0 unstable:0 [ 718.196719] slab_reclaimable:12158 slab_unreclaimable:112292 [ 718.196719] mapped:52752 shmem:37651 pagetables:792 bounce:0 [ 718.196719] free:13936 free_pcp:0 free_cma:0 [ 718.207106] lowmem_reserve[]: [ 718.236031] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 718.251757] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 718.260410] Node 0 active_anon:51472kB inactive_anon:95600kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140764kB dirty:0kB writeback:0kB shmem:97032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 718.277228] 0 [ 718.293320] 37686 total pagecache pages [ 718.299134] 0 pages in swap cache [ 718.302638] Swap cache stats: add 0, delete 0, find 0/0 [ 718.311933] Free swap = 0kB [ 718.315382] Total swap = 0kB [ 718.319043] 2097051 pages RAM [ 718.322143] 0 pages HighMem/MovableOnly [ 718.326105] 363841 pages reserved [ 718.333088] Node 1 active_anon:1872kB inactive_anon:53220kB active_file:68kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70244kB dirty:0kB writeback:0kB shmem:53572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 718.333761] 0 [ 718.366056] 0 pages cma reserved [ 718.378301] 0 0 0 [ 718.380477] Node 0 DMA: 4*4kB (ME) 6*8kB (UM) 4*16kB (UME) 6*32kB (UME) 5*64kB (UME) 11*128kB (UME) 3*256kB (ME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11008kB [ 718.387598] Node 0 DMA free:11008kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 718.438032] Node 0 DMA32: 1135*4kB (UMEH) 2104*8kB (UMEH) 2707*16kB (UMEH) 38*32kB (ME) 34*64kB (UMEH) 8*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 69100kB [ 718.441133] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 718.463845] Node 0 DMA32 free:71032kB min:36200kB low:45248kB high:54296kB active_anon:51452kB inactive_anon:95600kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7616kB pagetables:2696kB bounce:0kB free_pcp:1336kB local_pcp:664kB free_cma:0kB [ 718.535487] lowmem_reserve[]: 0 0 0 0 0 [ 718.575215] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 718.607623] Node 1 Normal: 108*4kB (UME) 84*8kB (UME) 58*16kB (UME) 58*32kB (UME) 58*64kB (UM) 9*128kB (UM) 2*256kB (M) 32*512kB (UM) 1*1024kB (E) 0*2048kB 0*4096kB = 26672kB [ 718.609001] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 718.688974] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 718.767705] lowmem_reserve[]: 0 0 0 0 0 [ 718.770771] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 718.774505] Node 1 [ 718.784194] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 718.801973] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 718.816152] Normal free:27176kB min:53696kB low:67120kB high:80544kB active_anon:1872kB inactive_anon:53220kB active_file:68kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:472kB bounce:0kB free_pcp:724kB local_pcp:40kB free_cma:0kB [ 718.849496] 39373 total pagecache pages [ 718.888527] 0 pages in swap cache [ 718.893496] chnl_net:caif_netlink_parms(): no params data found [ 718.907930] Swap cache stats: add 0, delete 0, find 0/0 [ 718.913302] Free swap = 0kB [ 718.941306] lowmem_reserve[]: 0 0 0 0 0 [ 718.945315] Node 0 DMA: 4*4kB (ME) 6*8kB (UM) 4*16kB (UME) 6*32kB (UME) 5*64kB (UME) 11*128kB (UME) 3*256kB (ME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11008kB [ 718.947788] Total swap = 0kB [ 718.987987] 2097051 pages RAM [ 718.991114] 0 pages HighMem/MovableOnly [ 718.995083] 363841 pages reserved [ 719.011855] Node 0 DMA32: 737*4kB (UMEH) 534*8kB (UMEH) 174*16kB (UEH) 727*32kB (UEH) 233*64kB (UMEH) 3*128kB (MH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 48564kB [ 719.028675] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 719.051844] 0 pages cma reserved [ 719.055831] Out of memory (oom_kill_allocating_task): Kill process 22110 (in:imklog) score 0 or sacrifice child [ 719.087680] Node 1 Normal: 27*4kB (UME) 78*8kB (UME) 198*16kB (UME) 368*32kB (UME) 790*64kB (UM) 27*128kB (UM) 4*256kB (UM) 32*512kB (UM) 1*1024kB (E) 0*2048kB 0*4096kB = 88124kB [ 719.110717] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 719.111517] Killed process 22102 (rsyslogd) total-vm:254332kB, anon-rss:824kB, file-rss:0kB, shmem-rss:0kB [ 719.139212] oom_reaper: reaped process 22102 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 719.158876] Bluetooth: hci5 command 0x0409 tx timeout [ 719.166998] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 719.198493] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 719.247947] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 719.256558] 39406 total pagecache pages [ 719.278008] 0 pages in swap cache [ 719.281490] Swap cache stats: add 0, delete 0, find 0/0 [ 719.308118] Free swap = 0kB [ 719.311161] Total swap = 0kB [ 719.314278] 2097051 pages RAM [ 719.317435] 0 pages HighMem/MovableOnly [ 719.346151] 363841 pages reserved [ 719.357804] 0 pages cma reserved [ 719.977730] systemd-cgroups invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 720.004025] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 720.022965] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 720.028224] CPU: 0 PID: 23016 Comm: systemd-cgroups Not tainted 4.14.227-syzkaller #0 [ 720.036183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 720.045536] Call Trace: [ 720.048134] dump_stack+0x1b2/0x281 [ 720.051766] dump_header+0x178/0x82f [ 720.055484] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 720.060587] ? ___ratelimit+0x2cd/0x530 [ 720.064550] oom_kill_process.cold+0x10/0xb18 [ 720.069043] out_of_memory+0xe3e/0x1190 [ 720.073009] ? oom_killer_disable+0x1c0/0x1c0 [ 720.077494] ? mutex_trylock+0x152/0x1a0 [ 720.081547] __alloc_pages_nodemask+0x23e1/0x2720 [ 720.086390] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 720.091236] alloc_pages_current+0x155/0x260 [ 720.095632] filemap_fault+0xea3/0x1980 [ 720.099605] ext4_filemap_fault+0x84/0xb0 [ 720.103740] __do_fault+0xfa/0x380 [ 720.107274] __handle_mm_fault+0x2497/0x4620 [ 720.111676] ? vm_insert_page+0x7c0/0x7c0 [ 720.115812] ? userfaultfd_unmap_prep+0x450/0x450 [ 720.120656] handle_mm_fault+0x391/0x860 [ 720.124707] __do_page_fault+0x549/0xad0 [ 720.128759] ? spurious_fault+0x640/0x640 [ 720.132906] ? do_page_fault+0x60/0x500 [ 720.136871] ? page_fault+0x2f/0x50 [ 720.140483] page_fault+0x45/0x50 [ 720.143920] RIP: 37ebd9f0:0x7f5b7f902170 [ 720.147983] RSP: 7f8fa8b0:0000000000000002 EFLAGS: 7ffc37ebd9d8 [ 720.160878] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 720.176188] CPU: 1 PID: 22841 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 720.184076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 720.189908] Mem-Info: [ 720.193426] Call Trace: [ 720.195842] active_anon:13263 inactive_anon:37205 isolated_anon:0 [ 720.195842] active_file:38 inactive_file:0 isolated_file:2 [ 720.195842] unevictable:0 dirty:0 writeback:0 unstable:0 [ 720.195842] slab_reclaimable:12202 slab_unreclaimable:113739 [ 720.195842] mapped:52794 shmem:37652 pagetables:801 bounce:0 [ 720.195842] free:13871 free_pcp:215 free_cma:0 [ 720.198412] dump_stack+0x1b2/0x281 [ 720.198426] warn_alloc.cold+0x96/0x1cc [ 720.198450] ? zone_watermark_ok_safe+0x220/0x220 [ 720.231612] Node 0 active_anon:51236kB inactive_anon:95604kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140764kB dirty:0kB writeback:0kB shmem:97036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 720.235207] __alloc_pages_nodemask+0x2127/0x2720 [ 720.239263] Node 1 active_anon:1816kB inactive_anon:53216kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:70412kB dirty:0kB writeback:0kB shmem:53572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 720.244057] ? io_schedule_timeout+0x140/0x140 [ 720.271585] Node 0 [ 720.276386] ? lock_acquire+0x170/0x3f0 [ 720.303545] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 720.308013] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 720.308032] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 720.310265] lowmem_reserve[]: [ 720.314232] ? __mutex_unlock_slowpath+0x75/0x770 [ 720.339859] 0 [ 720.344659] alloc_pages_current+0x155/0x260 [ 720.350094] 2717 [ 720.353171] ion_page_pool_alloc+0x118/0x1b0 [ 720.357995] 2718 [ 720.359790] ion_system_heap_allocate+0x133/0x8c0 [ 720.364385] 2718 [ 720.366449] ? _raw_spin_unlock+0x29/0x40 [ 720.370867] 2718 [ 720.372896] ? _ion_heap_freelist_drain+0x6e/0x410 [ 720.379858] ? ion_system_contig_heap_create+0x130/0x130 [ 720.383980] Node 0 [ 720.386043] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 720.390978] DMA32 free:17912kB min:36200kB low:45248kB high:54296kB active_anon:51216kB inactive_anon:95604kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7584kB pagetables:2628kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 720.396401] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 720.398632] lowmem_reserve[]: [ 720.403619] ion_alloc+0x27a/0x810 [ 720.431416] 0 [ 720.436219] ? ion_dma_buf_release+0x40/0x40 [ 720.439313] 0 [ 720.442818] ? __might_fault+0x177/0x1b0 [ 720.444593] 0 [ 720.448994] ion_ioctl+0xea/0x1f0 [ 720.449005] ? ion_query_heaps+0x360/0x360 [ 720.449019] ? ion_query_heaps+0x360/0x360 [ 720.450827] 0 [ 720.454889] do_vfs_ioctl+0x75a/0xff0 [ 720.456666] 0 [ 720.460107] ? ioctl_preallocate+0x1a0/0x1a0 [ 720.460117] ? lock_downgrade+0x740/0x740 [ 720.460130] ? __fget+0x225/0x360 [ 720.460139] ? do_vfs_ioctl+0xff0/0xff0 [ 720.468581] ? security_file_ioctl+0x83/0xb0 [ 720.468591] SyS_ioctl+0x7f/0xb0 [ 720.468599] ? do_vfs_ioctl+0xff0/0xff0 [ 720.468611] do_syscall_64+0x1d5/0x640 [ 720.470389] Node 0 [ 720.474182] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 720.475963] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 720.480345] RIP: 0033:0x466459 [ 720.480349] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 720.480359] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 720.480364] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 720.480369] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 720.480376] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 720.484511] lowmem_reserve[]: [ 720.487946] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 720.497653] Mem-Info: [ 720.535535] 0 [ 720.543046] active_anon:13263 inactive_anon:37205 isolated_anon:0 [ 720.543046] active_file:38 inactive_file:0 isolated_file:2 [ 720.543046] unevictable:0 dirty:0 writeback:0 unstable:0 [ 720.543046] slab_reclaimable:12202 slab_unreclaimable:113505 [ 720.543046] mapped:52794 shmem:37652 pagetables:801 bounce:0 [ 720.543046] free:13876 free_pcp:60 free_cma:0 [ 720.549496] 0 [ 720.551436] Node 0 active_anon:51236kB inactive_anon:95604kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140764kB dirty:0kB writeback:0kB shmem:97036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 720.561928] 0 [ 720.565551] Node 1 active_anon:1816kB inactive_anon:53216kB active_file:148kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:70412kB dirty:0kB writeback:0kB shmem:53572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 720.572980] 0 0 [ 720.572992] Node 1 Normal free:26492kB min:53696kB low:67120kB high:80544kB active_anon:1816kB inactive_anon:53216kB active_file:440kB inactive_file:524kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:576kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 720.573013] lowmem_reserve[]: 0 0 0 0 0 [ 720.573034] Node 0 DMA: 4*4kB (ME) 4*8kB (M) 4*16kB (UME) 5*32kB (UME) 5*64kB (UME) 11*128kB (UME) 3*256kB (ME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10960kB [ 720.573115] Node 0 DMA32: 1053*4kB (MEH) 666*8kB (MEH) 254*16kB (MEH) 45*32kB (UMEH) 29*64kB (MEH) 9*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18052kB [ 720.573181] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 720.573231] Node 1 Normal: 164*4kB (M) 104*8kB (M) 64*16kB (UME) 385*32kB (UME) 42*64kB (M) 7*128kB (UM) 3*256kB (M) 15*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26864kB [ 720.573310] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 720.573316] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 720.573322] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 720.573328] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 720.573332] 37707 total pagecache pages [ 720.573341] 0 pages in swap cache [ 720.573346] Swap cache stats: add 0, delete 0, find 0/0 [ 720.573350] Free swap = 0kB [ 720.573353] Total swap = 0kB [ 720.573359] 2097051 pages RAM [ 720.573363] 0 pages HighMem/MovableOnly [ 720.573366] 363841 pages reserved [ 720.573370] 0 pages cma reserved [ 720.573377] Out of memory (oom_kill_allocating_task): Kill process 23016 (systemd-cgroups) score 0 or sacrifice child [ 720.573401] Killed process 23016 (systemd-cgroups) total-vm:37788kB, anon-rss:376kB, file-rss:0kB, shmem-rss:0kB [ 720.574166] oom_reaper: reaped process 23016 (systemd-cgroups), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 720.582338] Node 0 [ 720.690492] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 720.718420] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 720.887617] syz-executor.0: [ 720.915761] (null) [ 720.918434] syz-executor.5: [ 720.921445] , order=0, oom_score_adj=0 [ 720.923522] page allocation failure: order:0 [ 720.926522] syz-fuzzer cpuset= [ 720.934967] syz-executor.1: [ 720.938192] / mems_allowed=0-1 [ 720.944392] CPU: 1 PID: 14657 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 720.947656] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 720.951913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 720.951958] (null) [ 720.959034] Call Trace: [ 720.959054] dump_stack+0x1b2/0x281 [ 720.959071] dump_header+0x178/0x82f [ 720.980487] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 720.985586] ? ___ratelimit+0x2cd/0x530 [ 720.987953] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 720.989562] oom_kill_process.cold+0x10/0xb18 [ 720.989581] out_of_memory+0xe3e/0x1190 [ 720.999485] syz-executor.5 cpuset= [ 721.003938] ? oom_killer_disable+0x1c0/0x1c0 [ 721.008167] / [ 721.011427] ? mutex_trylock+0x152/0x1a0 [ 721.015905] mems_allowed=0-1 [ 721.017643] __alloc_pages_nodemask+0x23e1/0x2720 [ 721.017665] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 721.017689] alloc_pages_current+0x155/0x260 [ 721.021731] (null) [ 721.024809] filemap_fault+0xea3/0x1980 [ 721.029655] syz-executor.0 cpuset= [ 721.034461] ext4_filemap_fault+0x84/0xb0 [ 721.047590] / [ 721.048439] __do_fault+0xfa/0x380 [ 721.052561] mems_allowed=0-1 [ 721.054369] __handle_mm_fault+0x2497/0x4620 [ 721.065357] ? vm_insert_page+0x7c0/0x7c0 [ 721.069502] handle_mm_fault+0x391/0x860 [ 721.073551] __do_page_fault+0x549/0xad0 [ 721.077602] ? spurious_fault+0x640/0x640 [ 721.081740] ? do_page_fault+0x60/0x500 [ 721.085714] ? page_fault+0x2f/0x50 [ 721.089328] page_fault+0x45/0x50 [ 721.092766] RIP: 34a780:0xb1de3e7b71 [ 721.096462] RSP: 0232:000000c0006b5e40 EFLAGS: 00000003 [ 721.096486] CPU: 0 PID: 22873 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 721.099260] page allocation failure: order:0 [ 721.101881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 721.109799] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 721.114153] Call Trace: [ 721.123536] (null) [ 721.130594] dump_stack+0x1b2/0x281 [ 721.130608] warn_alloc.cold+0x96/0x1cc [ 721.130620] ? zone_watermark_ok_safe+0x220/0x220 [ 721.130630] ? usleep_range+0x130/0x130 [ 721.130641] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 721.133221] syz-executor.1 cpuset= [ 721.135359] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 721.139006] / [ 721.142925] ? run_timer_softirq+0x5a0/0x5a0 [ 721.147801] mems_allowed=0-1 [ 721.151710] __alloc_pages_nodemask+0x2127/0x2720 [ 721.179370] ? lock_acquire+0x170/0x3f0 [ 721.183341] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 721.187632] lowmem_reserve[]: [ 721.188172] ? ion_page_pool_alloc+0x9e/0x1b0 [ 721.188175] 0 2717 [ 721.191288] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 721.195775] 2718 [ 721.198004] alloc_pages_current+0x155/0x260 [ 721.198018] ion_page_pool_alloc+0x118/0x1b0 [ 721.198030] ion_system_heap_allocate+0x133/0x8c0 [ 721.198041] ? _raw_spin_unlock+0x29/0x40 [ 721.223259] ? _ion_heap_freelist_drain+0x6e/0x410 [ 721.227633] 2718 [ 721.228194] ? ion_system_contig_heap_create+0x130/0x130 [ 721.228196] 2718 [ 721.230270] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 721.235691] Node 0 [ 721.237738] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 721.237750] ion_alloc+0x27a/0x810 [ 721.237764] ? ion_dma_buf_release+0x40/0x40 [ 721.237777] ? __might_fault+0x177/0x1b0 [ 721.237789] ion_ioctl+0xea/0x1f0 [ 721.257624] DMA32 free:18260kB min:36200kB low:45248kB high:54296kB active_anon:51008kB inactive_anon:95604kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7584kB pagetables:2628kB bounce:0kB free_pcp:152kB local_pcp:32kB free_cma:0kB [ 721.257831] ? ion_query_heaps+0x360/0x360 [ 721.261862] lowmem_reserve[]: [ 721.265307] ? ion_query_heaps+0x360/0x360 [ 721.304841] do_vfs_ioctl+0x75a/0xff0 [ 721.308638] ? ioctl_preallocate+0x1a0/0x1a0 [ 721.313041] ? lock_downgrade+0x740/0x740 [ 721.317182] ? __fget+0x225/0x360 [ 721.320643] ? do_vfs_ioctl+0xff0/0xff0 [ 721.324611] ? security_file_ioctl+0x83/0xb0 [ 721.327639] 0 0 [ 721.329011] SyS_ioctl+0x7f/0xb0 [ 721.329019] ? do_vfs_ioctl+0xff0/0xff0 [ 721.330981] 0 [ 721.334335] do_syscall_64+0x1d5/0x640 [ 721.338334] Mem-Info: [ 721.340077] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 721.343947] active_anon:13164 inactive_anon:37205 isolated_anon:0 [ 721.343947] active_file:17 inactive_file:17 isolated_file:0 [ 721.343947] unevictable:0 dirty:0 writeback:0 unstable:0 [ 721.343947] slab_reclaimable:12202 slab_unreclaimable:113415 [ 721.343947] mapped:52773 shmem:37652 pagetables:801 bounce:0 [ 721.343947] free:14005 free_pcp:38 free_cma:0 [ 721.346353] RIP: 0033:0x466459 [ 721.357630] 0 [ 721.384703] RSP: 002b:00007fd43b697188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 721.384714] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 721.384718] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 721.384723] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 721.384728] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 721.384732] R13: 00007ffdec314c5f R14: 00007fd43b697300 R15: 0000000000022000 [ 721.401372] systemd-cgroups: [ 721.404896] CPU: 1 PID: 22875 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 721.412146] Bluetooth: hci5 command 0x041b tx timeout [ 721.419351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 721.419356] Call Trace: [ 721.419375] dump_stack+0x1b2/0x281 [ 721.419389] warn_alloc.cold+0x96/0x1cc [ 721.439451] page allocation failure: order:0 [ 721.444863] ? zone_watermark_ok_safe+0x220/0x220 [ 721.457600] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 721.459397] ? usleep_range+0x130/0x130 [ 721.461963] (null) [ 721.465575] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 721.487596] systemd-cgroups cpuset= [ 721.489548] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 721.489560] ? run_timer_softirq+0x5a0/0x5a0 [ 721.491698] / [ 721.496798] __alloc_pages_nodemask+0x2127/0x2720 [ 721.507698] mems_allowed=0-1 [ 721.509825] ? lock_acquire+0x170/0x3f0 [ 721.523395] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 721.528251] ? ion_page_pool_alloc+0x9e/0x1b0 [ 721.532743] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 721.538211] alloc_pages_current+0x155/0x260 [ 721.542610] ion_page_pool_alloc+0x118/0x1b0 [ 721.547009] ion_system_heap_allocate+0x133/0x8c0 [ 721.551847] ? ion_alloc+0x187/0x810 [ 721.555551] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 721.560992] ? ion_system_contig_heap_create+0x130/0x130 [ 721.566471] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 721.571485] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 721.576322] ion_alloc+0x204/0x810 [ 721.579872] ? ion_dma_buf_release+0x40/0x40 [ 721.584276] ? __might_fault+0x177/0x1b0 [ 721.588336] ion_ioctl+0xea/0x1f0 [ 721.591782] ? ion_query_heaps+0x360/0x360 [ 721.596017] ? ion_query_heaps+0x360/0x360 [ 721.600245] do_vfs_ioctl+0x75a/0xff0 [ 721.604047] ? ioctl_preallocate+0x1a0/0x1a0 [ 721.608460] ? lock_downgrade+0x740/0x740 [ 721.612618] ? __fget+0x225/0x360 [ 721.616059] ? do_vfs_ioctl+0xff0/0xff0 [ 721.620027] ? security_file_ioctl+0x83/0xb0 [ 721.624424] SyS_ioctl+0x7f/0xb0 [ 721.627781] ? do_vfs_ioctl+0xff0/0xff0 [ 721.631748] do_syscall_64+0x1d5/0x640 [ 721.635632] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 721.640825] RIP: 0033:0x466459 [ 721.644088] RSP: 002b:00007f878dccd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 721.651802] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 721.659074] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 721.666330] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 721.673586] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 721.680843] R13: 00007fff67b70adf R14: 00007f878dccd300 R15: 0000000000022000 [ 721.688119] CPU: 0 PID: 23016 Comm: systemd-cgroups Not tainted 4.14.227-syzkaller #0 [ 721.688648] Node 0 active_anon:51028kB inactive_anon:95604kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140764kB dirty:0kB writeback:0kB shmem:97036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 721.696091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 721.724820] Node 1 active_anon:1628kB inactive_anon:53216kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70328kB dirty:0kB writeback:0kB shmem:53572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 721.732915] Call Trace: [ 721.732933] dump_stack+0x1b2/0x281 [ 721.732944] warn_alloc.cold+0x96/0x1cc [ 721.732955] ? zone_watermark_ok_safe+0x220/0x220 [ 721.732963] ? usleep_range+0x130/0x130 [ 721.732971] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 721.732983] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 721.760257] 0 [ 721.762744] ? run_timer_softirq+0x5a0/0x5a0 [ 721.770313] __alloc_pages_nodemask+0x2127/0x2720 [ 721.770333] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 721.770356] alloc_pages_current+0x155/0x260 [ 721.770370] filemap_fault+0xea3/0x1980 [ 721.775211] Node 0 [ 721.779185] ext4_filemap_fault+0x84/0xb0 [ 721.779196] __do_fault+0xfa/0x380 [ 721.779204] __handle_mm_fault+0x2497/0x4620 [ 721.779214] ? vm_insert_page+0x7c0/0x7c0 [ 721.779225] ? userfaultfd_unmap_prep+0x450/0x450 [ 721.779242] handle_mm_fault+0x391/0x860 [ 721.784339] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 721.789339] __do_page_fault+0x549/0xad0 [ 721.789351] ? spurious_fault+0x640/0x640 [ 721.789358] ? do_page_fault+0x60/0x500 [ 721.789367] ? page_fault+0x2f/0x50 [ 721.789374] page_fault+0x45/0x50 [ 721.789382] RIP: 37ebd9f0:0x7f5b7f902170 [ 721.789386] RSP: 7f8fa8b0:0000000000000002 EFLAGS: 7ffc37ebd9d8 [ 721.807682] CPU: 0 PID: 22837 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 721.809781] Node 0 [ 721.813691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 721.813697] Call Trace: [ 721.815946] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 721.820076] dump_stack+0x1b2/0x281 [ 721.820089] warn_alloc.cold+0x96/0x1cc [ 721.820100] ? zone_watermark_ok_safe+0x220/0x220 [ 721.820109] ? usleep_range+0x130/0x130 [ 721.820118] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 721.820130] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 721.820139] ? run_timer_softirq+0x5a0/0x5a0 [ 721.820153] __alloc_pages_nodemask+0x2127/0x2720 [ 721.820168] ? lock_acquire+0x170/0x3f0 [ 721.827637] lowmem_reserve[]: [ 721.828097] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 721.832214] 0 [ 721.837044] ? ion_page_pool_alloc+0x9e/0x1b0 [ 721.841227] lowmem_reserve[]: [ 721.865986] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 721.866005] alloc_pages_current+0x155/0x260 [ 721.866020] ion_page_pool_alloc+0x118/0x1b0 [ 721.866031] ion_system_heap_allocate+0x133/0x8c0 [ 721.866041] ? ion_alloc+0x187/0x810 [ 721.866051] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 721.866064] ? ion_system_contig_heap_create+0x130/0x130 [ 721.870162] 2717 [ 721.874260] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 721.874273] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 721.878291] 2718 [ 721.881868] ion_alloc+0x204/0x810 [ 721.885306] 2718 [ 721.889357] ? ion_dma_buf_release+0x40/0x40 [ 721.889369] ? __might_fault+0x177/0x1b0 [ 721.889381] ion_ioctl+0xea/0x1f0 [ 721.889391] ? ion_query_heaps+0x360/0x360 [ 721.889404] ? ion_query_heaps+0x360/0x360 [ 721.889413] do_vfs_ioctl+0x75a/0xff0 [ 721.889425] ? ioctl_preallocate+0x1a0/0x1a0 [ 721.895469] 2718 [ 721.903332] ? lock_downgrade+0x740/0x740 [ 721.903346] ? __fget+0x225/0x360 [ 721.903355] ? do_vfs_ioctl+0xff0/0xff0 [ 721.903365] ? security_file_ioctl+0x83/0xb0 [ 721.903375] SyS_ioctl+0x7f/0xb0 [ 721.903384] ? do_vfs_ioctl+0xff0/0xff0 [ 721.905621] 0 [ 721.914972] do_syscall_64+0x1d5/0x640 [ 721.914988] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 721.914996] RIP: 0033:0x466459 [ 721.915001] RSP: 002b:00007f243cc84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 721.915011] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 721.915015] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 721.915020] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 721.915025] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 721.915031] R13: 00007ffeefc8439f R14: 00007f243cc84300 R15: 0000000000022000 [ 721.923567] Mem-Info: [ 722.027621] active_anon:13164 inactive_anon:37205 isolated_anon:0 [ 722.027621] active_file:17 inactive_file:17 isolated_file:0 [ 722.027621] unevictable:0 dirty:0 writeback:0 unstable:0 [ 722.027621] slab_reclaimable:12202 slab_unreclaimable:113416 [ 722.027621] mapped:52773 shmem:37652 pagetables:801 bounce:0 [ 722.027621] free:25843 free_pcp:373 free_cma:0 [ 722.035400] 0 [ 722.036572] Node 0 active_anon:51028kB inactive_anon:95604kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140764kB dirty:0kB writeback:0kB shmem:97036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 722.038617] 0 [ 722.043616] Node 1 active_anon:1628kB inactive_anon:53216kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70328kB dirty:0kB writeback:0kB shmem:53572kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 722.081384] 0 [ 722.197604] Node 0 [ 722.208116] Node 0 [ 722.267752] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 722.307682] DMA32 free:102924kB min:36200kB low:45248kB high:54296kB active_anon:51008kB inactive_anon:95604kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7584kB pagetables:2628kB bounce:0kB free_pcp:1440kB local_pcp:668kB free_cma:0kB [ 722.358948] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 722.407771] 0 [ 722.409605] Node 1 Normal free:463344kB min:53696kB low:67120kB high:80544kB active_anon:1628kB inactive_anon:53216kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:576kB bounce:0kB free_pcp:1360kB local_pcp:640kB free_cma:0kB [ 722.427610] Node 0 DMA32 free:225312kB min:36200kB low:45248kB high:54296kB active_anon:51008kB inactive_anon:95604kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7584kB pagetables:2628kB bounce:0kB free_pcp:1284kB local_pcp:620kB free_cma:0kB [ 722.481455] lowmem_reserve[]: [ 722.518426] lowmem_reserve[]: 0 0 0 0 0 [ 722.525562] Node 0 DMA: 4*4kB (ME) 4*8kB (M) 4*16kB (UME) 5*32kB (UME) 5*64kB (UME) 11*128kB (UME) 3*256kB (ME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10960kB [ 722.557735] lowmem_reserve[]: 0 0 0 0 0 [ 722.577713] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 722.581405] 0 [ 722.603341] lowmem_reserve[]: 0 0 0 0 0 [ 722.603362] Node 1 Normal free:652108kB min:53696kB low:67120kB high:80544kB active_anon:1628kB inactive_anon:53216kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:576kB bounce:0kB free_pcp:1264kB local_pcp:624kB free_cma:0kB [ 722.603381] lowmem_reserve[]: 0 0 0 0 0 [ 722.603398] Node 0 DMA: 4*4kB (ME) 4*8kB (M) 4*16kB (UME) 5*32kB (UME) 5*64kB (UME) 11*128kB (UME) 3*256kB (ME) 2*512kB (UE) [ 722.609129] Node 0 [ 722.609230] 3*1024kB [ 722.642196] 0 [ 722.667606] (UME) 2*2048kB (UM) 0*4096kB = 10960kB [ 722.677673] DMA32: 1354*4kB [ 722.707618] Node 0 [ 722.711801] (UME) [ 722.711913] DMA32: 1385*4kB [ 722.714161] 1176*8kB [ 722.716289] (UME) [ 722.719379] 0 [ 722.721794] 1259*8kB [ 722.723864] 0 [ 722.725645] (UME) 630*16kB (UME) 307*32kB (UME) 2708*64kB (UME) 477*128kB (UM) 5*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 271164kB [ 722.732436] (UME) [ 722.742362] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 722.767610] 0 [ 722.769461] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 722.771912] Node 1 [ 722.795051] 589*16kB (UME) 272*32kB (UME) 2621*64kB (UME) 464*128kB (UM) 5*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 261368kB [ 722.801073] Normal: [ 722.809342] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 722.822450] lowmem_reserve[]: 0 0 0 0 0 [ 722.826447] Node 1 Normal free:738708kB min:53696kB low:67120kB high:80544kB active_anon:1628kB inactive_anon:53216kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:576kB bounce:0kB free_pcp:1332kB local_pcp:712kB free_cma:0kB [ 722.867692] Node 1 Normal: 2596*4kB (UM) 1118*8kB (UM) 1082*16kB (UME) 1997*32kB (UME) 4312*64kB (UM) 1584*128kB (UM) 200*256kB (UM) 19*512kB (UM) 122*1024kB (U) 0*2048kB 0*4096kB = 765120kB [ 722.877655] 2600*4kB (UM) 1196*8kB (UM) 1158*16kB (UME) 2073*32kB (UME) 4444*64kB (UM) 1591*128kB (UM) 201*256kB (UM) 19*512kB (UM) 122*1024kB (U) 0*2048kB 0*4096kB = 779008kB [ 722.885408] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 722.885418] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 722.927632] lowmem_reserve[]: 0 0 0 0 0 [ 722.931638] Node 0 DMA: 4*4kB (ME) 4*8kB (M) 4*16kB (UME) 5*32kB (UME) 5*64kB (UME) 11*128kB (UME) 3*256kB (ME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10960kB [ 722.967630] Node 0 DMA32: 1517*4kB (UME) 1443*8kB (UME) 744*16kB (UME) 699*32kB (UME) 2816*64kB (UME) 485*128kB (UM) 5*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 295468kB [ 722.987670] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 722.999358] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 723.017738] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 723.028563] 37686 total pagecache pages [ 723.032539] 0 pages in swap cache [ 723.035979] Swap cache stats: add 0, delete 0, find 0/0 [ 723.047707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 723.051377] Node 1 [ 723.056550] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 723.056557] Normal: [ 723.077693] Free swap = 0kB [ 723.087611] Total swap = 0kB [ 723.090631] 2097051 pages RAM [ 723.093722] 0 pages HighMem/MovableOnly [ 723.097799] 363841 pages reserved [ 723.101255] 0 pages cma reserved [ 723.101386] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 723.104622] 4574*4kB (UM) 2021*8kB (UM) 1850*16kB (UME) 2741*32kB (UME) 5211*64kB (UM) 1694*128kB (UM) 202*256kB (UM) 18*512kB (UM) 127*1024kB (U) 0*2048kB 0*4096kB = 893088kB [ 723.141396] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 723.153598] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 723.207608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 723.216202] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 723.257648] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 723.257651] 37686 total pagecache pages [ 723.257661] 0 pages in swap cache [ 723.266428] 37686 total pagecache pages [ 723.327710] Swap cache stats: add 0, delete 0, find 0/0 [ 723.338047] Free swap = 0kB [ 723.341065] Total swap = 0kB [ 723.344073] 2097051 pages RAM [ 723.347159] 0 pages HighMem/MovableOnly [ 723.357657] 0 pages in swap cache [ 723.367619] 363841 pages reserved [ 723.371081] 0 pages cma reserved [ 723.371400] Swap cache stats: add 0, delete 0, find 0/0 [ 723.391235] Free swap = 0kB [ 723.394264] Total swap = 0kB [ 723.397274] 2097051 pages RAM [ 723.400442] 0 pages HighMem/MovableOnly [ 723.404406] 363841 pages reserved [ 723.447616] 0 pages cma reserved [ 723.451007] Out of memory (oom_kill_allocating_task): Kill process 14657 (syz-fuzzer) score 0 or sacrifice child [ 723.477629] Bluetooth: hci5 command 0x040f tx timeout [ 723.497723] Killed process 22871 (syz-executor.4) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 723.514993] oom_reaper: reaped process 22875 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 723.565184] oom_reaper: reaped process 22837 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 725.155990] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 725.181263] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 725.199496] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 725.205243] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 725.210982] CPU: 1 PID: 22837 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 725.219128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 725.228497] Call Trace: [ 725.231085] dump_stack+0x1b2/0x281 [ 725.234712] warn_alloc.cold+0x96/0x1cc [ 725.238686] ? zone_watermark_ok_safe+0x220/0x220 [ 725.243541] __alloc_pages_nodemask+0x2127/0x2720 [ 725.248395] ? __schedule+0x893/0x1de0 [ 725.252305] ? lock_acquire+0x170/0x3f0 [ 725.256287] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 725.261136] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 725.266591] ? __mutex_unlock_slowpath+0x75/0x770 [ 725.271442] alloc_pages_current+0x155/0x260 [ 725.275856] ion_page_pool_alloc+0x118/0x1b0 [ 725.280293] ion_system_heap_allocate+0x133/0x8c0 [ 725.285162] ? _raw_spin_unlock+0x29/0x40 [ 725.289309] ? _ion_heap_freelist_drain+0x6e/0x410 [ 725.294234] ? ion_system_contig_heap_create+0x130/0x130 [ 725.299686] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 725.304732] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 725.309579] ion_alloc+0x27a/0x810 [ 725.313121] ? ion_dma_buf_release+0x40/0x40 [ 725.317531] ? __might_fault+0x177/0x1b0 [ 725.321634] ion_ioctl+0xea/0x1f0 [ 725.325091] ? ion_query_heaps+0x360/0x360 [ 725.329333] ? ion_query_heaps+0x360/0x360 [ 725.333568] do_vfs_ioctl+0x75a/0xff0 [ 725.337371] ? ioctl_preallocate+0x1a0/0x1a0 [ 725.341783] ? lock_downgrade+0x740/0x740 [ 725.345935] ? __fget+0x225/0x360 [ 725.349389] ? do_vfs_ioctl+0xff0/0xff0 [ 725.353385] ? security_file_ioctl+0x83/0xb0 [ 725.357793] SyS_ioctl+0x7f/0xb0 [ 725.361160] ? do_vfs_ioctl+0xff0/0xff0 [ 725.365136] do_syscall_64+0x1d5/0x640 [ 725.369202] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 725.374388] RIP: 0033:0x466459 [ 725.377593] RSP: 002b:00007f243cc84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 725.385316] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 725.392587] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 725.399857] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 725.407123] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 725.414398] R13: 00007ffeefc8439f R14: 00007f243cc84300 R15: 0000000000022000 [ 725.423034] CPU: 1 PID: 22875 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 725.430920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 725.440267] Call Trace: [ 725.442863] dump_stack+0x1b2/0x281 [ 725.446497] warn_alloc.cold+0x96/0x1cc [ 725.450481] ? zone_watermark_ok_safe+0x220/0x220 [ 725.455368] __alloc_pages_nodemask+0x2127/0x2720 [ 725.460248] ? ___preempt_schedule+0x16/0x18 [ 725.464667] ? lock_acquire+0x170/0x3f0 [ 725.468654] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 725.473508] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 725.478963] ? __mutex_unlock_slowpath+0x75/0x770 [ 725.483815] alloc_pages_current+0x155/0x260 [ 725.488261] ion_page_pool_alloc+0x118/0x1b0 [ 725.492670] ion_system_heap_allocate+0x133/0x8c0 [ 725.497514] ? _raw_spin_unlock+0x29/0x40 [ 725.501674] ? _ion_heap_freelist_drain+0x6e/0x410 [ 725.506612] ? ion_system_contig_heap_create+0x130/0x130 [ 725.512067] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 725.517080] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 725.521932] ion_alloc+0x27a/0x810 [ 725.525478] ? ion_dma_buf_release+0x40/0x40 [ 725.529887] ? __might_fault+0x177/0x1b0 [ 725.533949] ion_ioctl+0xea/0x1f0 [ 725.537398] ? ion_query_heaps+0x360/0x360 [ 725.541635] ? ion_query_heaps+0x360/0x360 [ 725.545867] do_vfs_ioctl+0x75a/0xff0 [ 725.549668] ? ioctl_preallocate+0x1a0/0x1a0 [ 725.554078] ? lock_downgrade+0x740/0x740 [ 725.558225] ? __fget+0x225/0x360 [ 725.561677] ? do_vfs_ioctl+0xff0/0xff0 [ 725.565649] ? security_file_ioctl+0x83/0xb0 [ 725.570080] SyS_ioctl+0x7f/0xb0 [ 725.573449] ? do_vfs_ioctl+0xff0/0xff0 [ 725.577423] do_syscall_64+0x1d5/0x640 [ 725.581320] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 725.586506] RIP: 0033:0x466459 [ 725.589690] RSP: 002b:00007f878dccd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 725.597394] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 725.604656] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 725.611922] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 725.619274] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 725.626542] R13: 00007fff67b70adf R14: 00007f878dccd300 R15: 0000000000022000 [ 725.635701] warn_alloc_show_mem: 3 callbacks suppressed [ 725.635704] Mem-Info: [ 725.643661] active_anon:13128 inactive_anon:37203 isolated_anon:0 [ 725.643661] active_file:2047 inactive_file:3356 isolated_file:0 [ 725.643661] unevictable:0 dirty:11 writeback:0 unstable:0 [ 725.643661] slab_reclaimable:12249 slab_unreclaimable:114566 [ 725.643661] mapped:47890 shmem:37648 pagetables:711 bounce:0 [ 725.643661] free:93568 free_pcp:88 free_cma:0 [ 725.678848] Node 0 active_anon:51708kB inactive_anon:95608kB active_file:8112kB inactive_file:13376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:154412kB dirty:36kB writeback:0kB shmem:97040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 725.711591] Node 1 active_anon:804kB inactive_anon:53204kB active_file:76kB inactive_file:748kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37548kB dirty:8kB writeback:0kB shmem:53552kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 725.740697] Node 0 DMA free:11032kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 725.788902] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 725.794091] Node 0 DMA32 free:44624kB min:36200kB low:45248kB high:54296kB active_anon:51588kB inactive_anon:95608kB active_file:8208kB inactive_file:13716kB unevictable:0kB writepending:36kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7552kB pagetables:2540kB bounce:0kB free_pcp:372kB local_pcp:120kB free_cma:0kB [ 725.824826] lowmem_reserve[]: 0 0 0 0 0 [ 725.847735] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 725.891612] lowmem_reserve[]: 0 0 0 0 0 [ 725.895629] Node 1 Normal free:189772kB min:53696kB low:67120kB high:80544kB active_anon:1304kB inactive_anon:53204kB active_file:376kB inactive_file:3048kB unevictable:0kB writepending:304kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:304kB bounce:0kB free_pcp:808kB local_pcp:588kB free_cma:0kB [ 725.926250] lowmem_reserve[]: 0 0 0 0 0 [ 725.931779] Node 0 DMA: 132*4kB (UME) 43*8kB (UM) 13*16kB (UME) 7*32kB (UME) 4*64kB (ME) 4*128kB (UME) 3*256kB (ME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11032kB [ 725.948612] Node 0 DMA32: 2*4kB (UM) 95*8kB (U) 176*16kB (UME) 1238*32kB (UME) 26*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44864kB [ 725.962561] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 725.974429] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (ME) 4047*32kB (UME) 7*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 130004kB [ 725.988778] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 725.998386] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 726.007019] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 726.017267] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 726.026603] 43995 total pagecache pages [ 726.031244] 0 pages in swap cache [ 726.034714] Swap cache stats: add 0, delete 0, find 0/0 [ 726.041272] Free swap = 0kB [ 726.044300] Total swap = 0kB [ 726.047327] 2097051 pages RAM [ 726.051863] 0 pages HighMem/MovableOnly [ 726.056499] 363841 pages reserved [ 726.060068] 0 pages cma reserved [ 726.265252] bond0 (unregistering): Released all slaves [ 726.474382] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 726.497658] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 726.502919] CPU: 1 PID: 22875 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 726.510794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 726.520167] Call Trace: [ 726.522755] dump_stack+0x1b2/0x281 [ 726.526380] dump_header+0x178/0x82f [ 726.530091] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 726.535187] ? ___ratelimit+0x2cd/0x530 [ 726.539159] oom_kill_process.cold+0x10/0xb18 [ 726.543661] out_of_memory+0xe3e/0x1190 [ 726.547639] ? oom_killer_disable+0x1c0/0x1c0 [ 726.552141] ? mutex_trylock+0x152/0x1a0 [ 726.556462] __alloc_pages_nodemask+0x23e1/0x2720 [ 726.561308] ? lock_acquire+0x170/0x3f0 [ 726.565301] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 726.570135] ? ion_page_pool_alloc+0x9e/0x1b0 [ 726.574630] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 726.580077] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 726.584919] alloc_pages_current+0x155/0x260 [ 726.589332] ion_page_pool_alloc+0x118/0x1b0 [ 726.593736] ion_system_heap_allocate+0x133/0x8c0 [ 726.598666] ? _raw_spin_unlock+0x29/0x40 [ 726.602804] ? _ion_heap_freelist_drain+0x6e/0x410 [ 726.607730] ? ion_system_contig_heap_create+0x130/0x130 [ 726.613173] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 726.618183] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 726.623017] ion_alloc+0x27a/0x810 [ 726.630306] ? ion_dma_buf_release+0x40/0x40 [ 726.634712] ? __might_fault+0x177/0x1b0 [ 726.638771] ion_ioctl+0xea/0x1f0 [ 726.642217] ? ion_query_heaps+0x360/0x360 [ 726.646447] ? ion_query_heaps+0x360/0x360 [ 726.650675] do_vfs_ioctl+0x75a/0xff0 [ 726.654469] ? ioctl_preallocate+0x1a0/0x1a0 [ 726.658870] ? lock_downgrade+0x740/0x740 [ 726.663010] ? __fget+0x225/0x360 [ 726.666452] ? do_vfs_ioctl+0xff0/0xff0 [ 726.670418] ? security_file_ioctl+0x83/0xb0 [ 726.674816] SyS_ioctl+0x7f/0xb0 [ 726.678356] ? do_vfs_ioctl+0xff0/0xff0 [ 726.682343] do_syscall_64+0x1d5/0x640 [ 726.686243] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 726.691423] RIP: 0033:0x466459 [ 726.694602] RSP: 002b:00007f878dccd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 726.702303] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 726.709561] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 726.716821] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 726.724077] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 726.731425] R13: 00007fff67b70adf R14: 00007f878dccd300 R15: 0000000000022000 [ 726.744826] Mem-Info: [ 726.747254] active_anon:13213 inactive_anon:37203 isolated_anon:0 [ 726.747254] active_file:46 inactive_file:87 isolated_file:0 [ 726.747254] unevictable:0 dirty:86 writeback:0 unstable:0 [ 726.747254] slab_reclaimable:12248 slab_unreclaimable:113461 [ 726.747254] mapped:44159 shmem:37648 pagetables:723 bounce:0 [ 726.747254] free:13881 free_pcp:0 free_cma:0 [ 726.827413] Node 0 active_anon:51560kB inactive_anon:95604kB active_file:80kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139376kB dirty:40kB writeback:0kB shmem:97036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 726.870890] Node 1 active_anon:1292kB inactive_anon:53208kB active_file:20kB inactive_file:264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37260kB dirty:304kB writeback:0kB shmem:53556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 726.926111] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 726.959842] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 726.964905] Node 0 DMA32 free:17768kB min:36200kB low:45248kB high:54296kB active_anon:51540kB inactive_anon:95604kB active_file:52kB inactive_file:0kB unevictable:0kB writepending:40kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7552kB pagetables:2568kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 727.007368] lowmem_reserve[]: 0 0 0 0 0 [ 727.013999] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 727.045479] lowmem_reserve[]: 0 0 0 0 0 [ 727.049522] Node 1 Normal free:26328kB min:53696kB low:67120kB high:80544kB active_anon:1292kB inactive_anon:53208kB active_file:192kB inactive_file:192kB unevictable:0kB writepending:292kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:324kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 727.084959] lowmem_reserve[]: 0 0 0 0 0 [ 727.089700] Node 0 DMA: 118*4kB (UME) 43*8kB (UM) 13*16kB (UME) 7*32kB (UME) 4*64kB (ME) 4*128kB (UME) 3*256kB (ME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10976kB [ 727.107623] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 727.113825] Node 0 DMA32: 850*4kB (ME) 683*8kB (UME) 250*16kB (ME) 63*32kB (UME) 29*64kB (M) 8*128kB (M) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18016kB [ 727.146200] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 727.147608] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 727.168566] Node 1 Normal: 40*4kB (M) 20*8kB (UM) 5*16kB (UME) 788*32kB (UME) 13*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26448kB [ 727.177616] CPU: 0 PID: 22841 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 727.190222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 727.192184] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 727.199738] Call Trace: [ 727.199757] dump_stack+0x1b2/0x281 [ 727.199771] warn_alloc.cold+0x96/0x1cc [ 727.199783] ? zone_watermark_ok_safe+0x220/0x220 [ 727.199794] ? usleep_range+0x130/0x130 [ 727.199802] ? try_to_free_pages+0x23f/0x6e0 [ 727.199812] ? _find_next_bit+0xdb/0x100 [ 727.199823] ? run_timer_softirq+0x5a0/0x5a0 [ 727.199838] __alloc_pages_nodemask+0x2127/0x2720 [ 727.219577] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 727.223648] ? lock_acquire+0x170/0x3f0 [ 727.237339] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 727.240444] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 727.240456] ? ion_page_pool_alloc+0x9e/0x1b0 [ 727.240473] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 727.240492] alloc_pages_current+0x155/0x260 [ 727.240505] ion_page_pool_alloc+0x118/0x1b0 [ 727.240516] ion_system_heap_allocate+0x133/0x8c0 [ 727.240527] ? _raw_spin_unlock+0x29/0x40 [ 727.240538] ? _ion_heap_freelist_drain+0x6e/0x410 [ 727.257394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 727.257886] ? ion_system_contig_heap_create+0x130/0x130 [ 727.257898] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 727.257910] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 727.257921] ion_alloc+0x27a/0x810 [ 727.257936] ? ion_dma_buf_release+0x40/0x40 [ 727.257950] ? __might_fault+0x177/0x1b0 [ 727.266797] 37753 total pagecache pages [ 727.271639] ion_ioctl+0xea/0x1f0 [ 727.271649] ? ion_query_heaps+0x360/0x360 [ 727.271660] ? ion_query_heaps+0x360/0x360 [ 727.271670] do_vfs_ioctl+0x75a/0xff0 [ 727.271681] ? ioctl_preallocate+0x1a0/0x1a0 [ 727.271690] ? lock_downgrade+0x740/0x740 [ 727.271702] ? __fget+0x225/0x360 [ 727.271710] ? do_vfs_ioctl+0xff0/0xff0 [ 727.271721] ? security_file_ioctl+0x83/0xb0 [ 727.271731] SyS_ioctl+0x7f/0xb0 [ 727.271738] ? do_vfs_ioctl+0xff0/0xff0 [ 727.271750] do_syscall_64+0x1d5/0x640 [ 727.271767] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 727.271776] RIP: 0033:0x466459 [ 727.271781] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 727.288161] 0 pages in swap cache [ 727.290761] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 727.295586] Swap cache stats: add 0, delete 0, find 0/0 [ 727.299720] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 727.299726] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 727.299730] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 727.299735] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 727.320930] warn_alloc_show_mem: 1 callbacks suppressed [ 727.320934] Mem-Info: [ 727.332504] Free swap = 0kB [ 727.465465] Total swap = 0kB [ 727.468527] 2097051 pages RAM [ 727.471623] 0 pages HighMem/MovableOnly [ 727.475581] 363841 pages reserved [ 727.479319] 0 pages cma reserved [ 727.480013] active_anon:13213 inactive_anon:37203 isolated_anon:0 [ 727.480013] active_file:1 inactive_file:68 isolated_file:0 [ 727.480013] unevictable:0 dirty:70 writeback:0 unstable:0 [ 727.480013] slab_reclaimable:12245 slab_unreclaimable:113404 [ 727.480013] mapped:44130 shmem:37648 pagetables:723 bounce:0 [ 727.480013] free:13826 free_pcp:36 free_cma:0 [ 727.482710] Out of memory (oom_kill_allocating_task): Kill process 22875 (syz-executor.1) score 0 or sacrifice child [ 727.526915] Killed process 22875 (syz-executor.1) total-vm:93384kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 727.537151] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 727.539885] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 727.558840] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 727.567609] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 727.577422] CPU: 0 PID: 7964 Comm: syz-fuzzer Not tainted 4.14.227-syzkaller #0 [ 727.584867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 727.594211] Call Trace: [ 727.596798] dump_stack+0x1b2/0x281 [ 727.600423] dump_header+0x178/0x82f [ 727.604477] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 727.609574] ? ___ratelimit+0x2cd/0x530 [ 727.613547] oom_kill_process.cold+0x10/0xb18 [ 727.618043] out_of_memory+0xe3e/0x1190 [ 727.622013] ? oom_killer_disable+0x1c0/0x1c0 [ 727.626501] ? mutex_trylock+0x152/0x1a0 [ 727.630559] __alloc_pages_nodemask+0x23e1/0x2720 [ 727.635539] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 727.640441] alloc_pages_current+0x155/0x260 [ 727.644852] filemap_fault+0xea3/0x1980 [ 727.648837] ext4_filemap_fault+0x84/0xb0 [ 727.652999] __do_fault+0xfa/0x380 [ 727.656554] __handle_mm_fault+0x2497/0x4620 [ 727.660963] ? vm_insert_page+0x7c0/0x7c0 [ 727.665109] ? lock_downgrade+0x740/0x740 [ 727.669264] handle_mm_fault+0x391/0x860 [ 727.673325] __do_page_fault+0x549/0xad0 [ 727.677379] ? spurious_fault+0x640/0x640 [ 727.681517] ? do_page_fault+0x60/0x500 [ 727.685481] ? page_fault+0x2f/0x50 [ 727.689126] page_fault+0x45/0x50 [ 727.692568] RIP: 0000:0x940aec [ 727.695741] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 727.695764] CPU: 1 PID: 22875 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 727.703736] Node 0 active_anon:51560kB inactive_anon:95604kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139272kB dirty:0kB writeback:0kB shmem:97036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 727.710105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 727.710110] Call Trace: [ 727.710128] dump_stack+0x1b2/0x281 [ 727.710142] warn_alloc.cold+0x96/0x1cc [ 727.710156] ? zone_watermark_ok_safe+0x220/0x220 [ 727.738110] Node 1 active_anon:1292kB inactive_anon:53208kB active_file:12kB inactive_file:252kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37248kB dirty:280kB writeback:0kB shmem:53556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 727.747425] ? wait_for_completion_io+0x10/0x10 [ 727.750924] Node 0 [ 727.754648] __alloc_pages_nodemask+0x2127/0x2720 [ 727.758689] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 727.763496] ? lock_acquire+0x170/0x3f0 [ 727.790988] lowmem_reserve[]: [ 727.795618] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 727.797850] 0 [ 727.802859] ? ion_page_pool_alloc+0x9e/0x1b0 [ 727.828519] Mem-Info: [ 727.832463] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 727.835632] active_anon:13213 inactive_anon:37203 isolated_anon:0 [ 727.835632] active_file:5 inactive_file:65 isolated_file:0 [ 727.835632] unevictable:0 dirty:70 writeback:0 unstable:0 [ 727.835632] slab_reclaimable:12245 slab_unreclaimable:113404 [ 727.835632] mapped:44130 shmem:37648 pagetables:723 bounce:0 [ 727.835632] free:13826 free_pcp:36 free_cma:0 [ 727.840465] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 727.840486] alloc_pages_current+0x155/0x260 [ 727.840502] ion_page_pool_alloc+0x118/0x1b0 [ 727.842310] 2717 [ 727.847215] ion_system_heap_allocate+0x133/0x8c0 [ 727.849643] Node 0 active_anon:51560kB inactive_anon:95604kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139272kB dirty:0kB writeback:0kB shmem:97036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 727.855050] ? _raw_spin_unlock+0x29/0x40 [ 727.888249] 2718 [ 727.893034] ? _ion_heap_freelist_drain+0x6e/0x410 [ 727.897414] 2718 [ 727.901810] ? ion_system_contig_heap_create+0x130/0x130 [ 727.901821] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 727.901832] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 727.901848] ion_alloc+0x27a/0x810 [ 727.903893] 2718 [ 727.908725] ? ion_dma_buf_release+0x40/0x40 [ 727.908738] ? __might_fault+0x177/0x1b0 [ 727.908751] ion_ioctl+0xea/0x1f0 [ 727.936311] Node 1 active_anon:1292kB inactive_anon:53208kB active_file:12kB inactive_file:252kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37248kB dirty:280kB writeback:0kB shmem:53556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 727.940418] ? ion_query_heaps+0x360/0x360 [ 727.940432] ? ion_query_heaps+0x360/0x360 [ 727.940467] do_vfs_ioctl+0x75a/0xff0 [ 727.942503] Node 0 [ 727.947435] ? ioctl_preallocate+0x1a0/0x1a0 [ 727.955079] ? lock_downgrade+0x740/0x740 [ 727.955095] ? __fget+0x225/0x360 [ 727.960151] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 727.964965] ? do_vfs_ioctl+0xff0/0xff0 [ 727.968549] lowmem_reserve[]: [ 727.970601] ? security_file_ioctl+0x83/0xb0 [ 727.974991] 0 [ 727.979131] SyS_ioctl+0x7f/0xb0 [ 727.979142] ? do_vfs_ioctl+0xff0/0xff0 [ 727.979153] do_syscall_64+0x1d5/0x640 [ 727.979171] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 727.982617] Node 0 [ 728.010107] RIP: 0033:0x466459 [ 728.010113] RSP: 002b:00007f878dccd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 728.010122] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 728.010126] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 728.010131] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 728.010136] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 728.010141] R13: 00007fff67b70adf R14: 00007f878dccd300 R15: 0000000000022000 [ 728.144573] 2717 2718 2718 2718 [ 728.148045] Node 0 DMA32 free:59436kB min:36200kB low:45248kB high:54296kB active_anon:51540kB inactive_anon:95604kB active_file:8kB inactive_file:108kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7520kB pagetables:2568kB bounce:0kB free_pcp:388kB local_pcp:148kB free_cma:0kB [ 728.178328] lowmem_reserve[]: 0 0 0 0 0 [ 728.184292] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 728.210515] lowmem_reserve[]: 0 0 0 0 0 [ 728.215214] Node 1 Normal free:154792kB min:53696kB low:67120kB high:80544kB active_anon:1292kB inactive_anon:53208kB active_file:76kB inactive_file:2928kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:324kB bounce:0kB free_pcp:40kB local_pcp:0kB free_cma:0kB [ 728.244821] lowmem_reserve[]: 0 0 0 0 0 [ 728.248984] Node 0 DMA: 118*4kB (UME) 43*8kB (UM) 13*16kB (UME) 7*32kB (UME) 4*64kB (ME) 4*128kB (UME) 3*256kB (ME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10976kB [ 728.265193] Node 0 DMA32: 452*4kB (ME) 782*8kB (UME) 268*16kB (UME) 73*32kB (UME) 2113*64kB (UM) 30*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 154016kB [ 728.281253] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 728.293372] Node 1 Normal: 0*4kB 1*8kB (U) 2*16kB (UE) 788*32kB (UME) 12*64kB (U) 0*128kB 1*256kB (M) 1*512kB (M) 125*1024kB (U) 0*2048kB 0*4096kB = 154792kB [ 728.308731] DMA32 free:189760kB min:36200kB low:45248kB high:54296kB active_anon:51540kB inactive_anon:95604kB active_file:108kB inactive_file:2508kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7520kB pagetables:2568kB bounce:0kB free_pcp:144kB local_pcp:228kB free_cma:0kB [ 728.338132] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 728.347426] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 728.356563] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 728.365972] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 728.375416] lowmem_reserve[]: 0 0 0 0 0 [ 728.380066] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 728.406145] 39382 total pagecache pages [ 728.411675] 0 pages in swap cache [ 728.416274] Swap cache stats: add 0, delete 0, find 0/0 [ 728.437960] Free swap = 0kB [ 728.441937] Total swap = 0kB [ 728.445453] 2097051 pages RAM [ 728.457643] 0 pages HighMem/MovableOnly [ 728.461633] 363841 pages reserved [ 728.465074] 0 pages cma reserved [ 728.469291] lowmem_reserve[]: 0 0 0 0 0 [ 728.473315] Node 1 Normal free:154792kB min:53696kB low:67120kB high:80544kB active_anon:1292kB inactive_anon:53208kB active_file:76kB inactive_file:2928kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:324kB bounce:0kB free_pcp:40kB local_pcp:0kB free_cma:0kB [ 728.502819] Out of memory (oom_kill_allocating_task): Kill process 7964 (syz-fuzzer) score 0 or sacrifice child [ 728.513909] Killed process 22379 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 728.524931] lowmem_reserve[]: 0 0 0 0 0 [ 728.536704] oom_reaper: reaped process 22379 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 728.548512] Node 0 DMA: 118*4kB (UME) 45*8kB (UM) 15*16kB (UME) 7*32kB (UME) 18*64kB (UME) 11*128kB (UME) 3*256kB (ME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 12816kB [ 728.622602] Node 0 DMA32: 474*4kB (UME) 568*8kB (UE) 212*16kB (UME) 41*32kB (UME) 2592*64kB (UME) 1284*128kB (UM) 84*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 362888kB [ 728.685144] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 728.714888] Node 1 Normal: 0*4kB 49*8kB (U) 26*16kB (UE) 789*32kB (UME) 2189*64kB (UM) 25*128kB (U) 4*256kB (UM) 1*512kB (M) 125*1024kB (U) 0*2048kB 0*4096kB = 298888kB [ 728.731081] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 728.740880] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 728.750170] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 728.759498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 728.769986] 40529 total pagecache pages [ 728.784236] 0 pages in swap cache [ 728.787760] Swap cache stats: add 0, delete 0, find 0/0 [ 728.797891] Free swap = 0kB [ 728.800967] Total swap = 0kB [ 728.804113] 2097051 pages RAM [ 728.807256] 0 pages HighMem/MovableOnly [ 728.811928] 363841 pages reserved [ 728.815387] 0 pages cma reserved [ 729.340406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.347130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.369453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.376171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.408738] device bridge_slave_1 left promiscuous mode [ 729.414360] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.430370] device bridge_slave_0 left promiscuous mode [ 729.441470] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.483541] device veth1_macvtap left promiscuous mode [ 729.490292] device veth0_macvtap left promiscuous mode [ 729.497084] device veth1_vlan left promiscuous mode [ 729.521457] device veth0_vlan left promiscuous mode [ 729.704193] device hsr_slave_1 left promiscuous mode [ 729.714248] device hsr_slave_0 left promiscuous mode [ 729.735277] team0 (unregistering): Port device team_slave_1 removed [ 729.745768] team0 (unregistering): Port device team_slave_0 removed 05:09:50 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x121800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) 05:09:50 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x121800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) 05:09:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) [ 729.760286] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 729.772754] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 729.849105] bond0 (unregistering): Released all slaves [ 730.563737] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 730.584651] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 730.596564] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 730.605334] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 730.611001] CPU: 1 PID: 23061 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 730.618884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 730.628231] Call Trace: [ 730.630822] dump_stack+0x1b2/0x281 [ 730.636187] warn_alloc.cold+0x96/0x1cc [ 730.640182] ? zone_watermark_ok_safe+0x220/0x220 [ 730.645038] __alloc_pages_nodemask+0x2127/0x2720 [ 730.651184] ? _raw_spin_unlock_irq+0x24/0x80 [ 730.655680] ? lock_acquire+0x170/0x3f0 [ 730.659672] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 730.664518] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 730.669965] ? __mutex_unlock_slowpath+0x75/0x770 [ 730.674813] alloc_pages_current+0x155/0x260 [ 730.679222] ion_page_pool_alloc+0x118/0x1b0 [ 730.683626] ion_system_heap_allocate+0x133/0x8c0 [ 730.688464] ? ion_alloc+0x187/0x810 [ 730.692174] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 730.697624] ? ion_system_contig_heap_create+0x130/0x130 [ 730.703072] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 730.708086] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 730.712927] ion_alloc+0x204/0x810 [ 730.716469] ? ion_dma_buf_release+0x40/0x40 [ 730.720876] ? __might_fault+0x177/0x1b0 [ 730.724937] ion_ioctl+0xea/0x1f0 [ 730.728417] ? ion_query_heaps+0x360/0x360 [ 730.732677] ? ion_query_heaps+0x360/0x360 [ 730.736909] do_vfs_ioctl+0x75a/0xff0 [ 730.740707] ? ioctl_preallocate+0x1a0/0x1a0 [ 730.745106] ? lock_downgrade+0x740/0x740 [ 730.749254] ? __fget+0x225/0x360 [ 730.752701] ? do_vfs_ioctl+0xff0/0xff0 [ 730.756671] ? security_file_ioctl+0x83/0xb0 [ 730.761090] SyS_ioctl+0x7f/0xb0 [ 730.764467] ? do_vfs_ioctl+0xff0/0xff0 [ 730.768442] do_syscall_64+0x1d5/0x640 [ 730.772351] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 730.777532] RIP: 0033:0x466459 [ 730.780722] RSP: 002b:00007f243cc84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 730.788423] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 730.795685] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 730.802946] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 730.810212] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 730.817497] R13: 00007ffeefc8439f R14: 00007f243cc84300 R15: 0000000000022000 [ 730.837126] CPU: 1 PID: 23062 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 730.845036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 730.854381] Call Trace: [ 730.856970] dump_stack+0x1b2/0x281 [ 730.860605] warn_alloc.cold+0x96/0x1cc [ 730.864572] ? zone_watermark_ok_safe+0x220/0x220 [ 730.869425] __alloc_pages_nodemask+0x2127/0x2720 [ 730.874261] ? __schedule+0x893/0x1de0 [ 730.878149] ? lock_acquire+0x170/0x3f0 [ 730.882138] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 730.886992] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 730.892442] ? __mutex_unlock_slowpath+0x75/0x770 [ 730.897280] ? retint_kernel+0x2d/0x2d [ 730.901168] alloc_pages_current+0x155/0x260 [ 730.906880] ion_page_pool_alloc+0x118/0x1b0 [ 730.911303] ion_system_heap_allocate+0x133/0x8c0 [ 730.916138] ? ion_alloc+0x187/0x810 [ 730.919843] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 730.925324] ? ion_system_contig_heap_create+0x130/0x130 [ 730.930770] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 730.935784] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 730.940623] ion_alloc+0x204/0x810 [ 730.944162] ? ion_dma_buf_release+0x40/0x40 [ 730.948570] ? __might_fault+0x177/0x1b0 [ 730.952627] ion_ioctl+0xea/0x1f0 [ 730.956078] ? ion_query_heaps+0x360/0x360 [ 730.960310] ? ion_query_heaps+0x360/0x360 [ 730.964539] do_vfs_ioctl+0x75a/0xff0 [ 730.968612] ? ioctl_preallocate+0x1a0/0x1a0 [ 730.973027] ? lock_downgrade+0x740/0x740 [ 730.977175] ? __fget+0x225/0x360 [ 730.980624] ? do_vfs_ioctl+0xff0/0xff0 [ 730.984600] ? security_file_ioctl+0x83/0xb0 [ 730.989010] SyS_ioctl+0x7f/0xb0 [ 730.992364] ? do_vfs_ioctl+0xff0/0xff0 [ 730.996334] do_syscall_64+0x1d5/0x640 [ 731.000229] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 731.005456] RIP: 0033:0x466459 [ 731.008637] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 731.016342] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 731.023603] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 731.030864] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 731.038124] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 731.045386] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 731.070594] warn_alloc_show_mem: 1 callbacks suppressed [ 731.070598] Mem-Info: [ 731.091068] active_anon:13287 inactive_anon:37203 isolated_anon:0 [ 731.091068] active_file:1641 inactive_file:4227 isolated_file:0 [ 731.091068] unevictable:0 dirty:71 writeback:0 unstable:0 [ 731.091068] slab_reclaimable:12231 slab_unreclaimable:112905 [ 731.091068] mapped:50355 shmem:37648 pagetables:696 bounce:0 [ 731.091068] free:164234 free_pcp:369 free_cma:0 [ 731.168349] Node 0 active_anon:51888kB inactive_anon:95604kB active_file:6516kB inactive_file:13940kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:187584kB dirty:272kB writeback:0kB shmem:97036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 731.203254] Node 1 active_anon:1260kB inactive_anon:53208kB active_file:48kB inactive_file:2968kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39636kB dirty:12kB writeback:0kB shmem:53556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 731.233640] Node 0 DMA free:11196kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 731.263388] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 731.268496] Node 0 DMA32 free:269476kB min:36200kB low:45248kB high:54296kB active_anon:51868kB inactive_anon:95604kB active_file:6516kB inactive_file:13940kB unevictable:0kB writepending:272kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7552kB pagetables:2660kB bounce:0kB free_pcp:880kB local_pcp:188kB free_cma:0kB [ 731.301180] lowmem_reserve[]: 0 0 0 0 0 [ 731.305189] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 731.339999] lowmem_reserve[]: 0 0 0 0 0 [ 731.344118] Node 1 Normal free:506372kB min:53696kB low:67120kB high:80544kB active_anon:1260kB inactive_anon:53208kB active_file:48kB inactive_file:2968kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:272kB bounce:0kB free_pcp:716kB local_pcp:0kB free_cma:0kB [ 731.407674] lowmem_reserve[]: 0 0 0 0 0 [ 731.411695] Node 0 DMA: 128*4kB (UME) 51*8kB (UM) 14*16kB (UME) 6*32kB (UME) 8*64kB (UME) 12*128kB (UME) 3*256kB (ME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11320kB [ 731.447657] Node 0 DMA32: 3454*4kB (UME) 6953*8kB (UME) 2172*16kB (UME) 1966*32kB (UME) 2309*64kB (UM) 198*128kB (U) 3*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 340992kB [ 731.477657] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 731.497942] Node 1 Normal: 18237*4kB (UM) 11107*8kB (UM) 6635*16kB (UME) 5267*32kB (UME) 1131*64kB (U) 92*128kB (U) 17*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 526044kB [ 731.529481] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 731.552545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 731.572836] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 731.595197] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 731.617094] 43450 total pagecache pages [ 731.619623] IPVS: ftp: loaded support on port[0] = 21 [ 731.627047] 0 pages in swap cache [ 731.636358] Swap cache stats: add 0, delete 0, find 0/0 [ 731.652647] Free swap = 0kB [ 731.680428] Total swap = 0kB [ 731.686859] 2097051 pages RAM [ 731.694423] 0 pages HighMem/MovableOnly [ 731.703997] 363841 pages reserved [ 731.711908] 0 pages cma reserved [ 731.924982] chnl_net:caif_netlink_parms(): no params data found [ 732.037710] Bluetooth: hci4 command 0x0409 tx timeout [ 732.171301] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.189124] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.212111] device bridge_slave_0 entered promiscuous mode [ 732.229382] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.246387] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.265796] device bridge_slave_1 entered promiscuous mode [ 732.327185] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 732.351378] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 732.433843] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 732.456749] team0: Port device team_slave_0 added [ 732.476221] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 732.495577] team0: Port device team_slave_1 added [ 732.553755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.566719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.626335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.655146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.672181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.723105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.741208] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 732.749096] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 732.782713] device hsr_slave_0 entered promiscuous mode [ 732.789414] device hsr_slave_1 entered promiscuous mode [ 732.795698] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 732.810019] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 732.973860] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 733.024005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.036310] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 733.047063] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 733.057355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 733.066641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 733.081416] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 733.087497] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.119571] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 733.126609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 733.139101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 733.146985] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.153390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.190502] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 733.198576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 733.205706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 733.228908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 733.236560] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.242967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.270433] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 733.289008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 733.299314] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 733.306144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 733.334359] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 733.351181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 733.360095] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 733.393383] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 733.402662] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 733.418987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 733.426991] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 733.467326] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 733.500538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 733.518255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 733.528805] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 733.537046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 733.577065] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 733.584187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 733.602862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 733.613827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 733.805150] oom_reaper: reaped process 23062 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 733.852973] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 733.899785] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 733.904936] CPU: 1 PID: 23071 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 733.912815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 733.922168] Call Trace: [ 733.924762] dump_stack+0x1b2/0x281 [ 733.928397] dump_header+0x178/0x82f [ 733.932110] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 733.937215] ? ___ratelimit+0x2cd/0x530 [ 733.941190] oom_kill_process.cold+0x10/0xb18 [ 733.945695] out_of_memory+0xe3e/0x1190 [ 733.949664] ? oom_killer_disable+0x1c0/0x1c0 [ 733.954151] ? mutex_trylock+0x152/0x1a0 [ 733.958205] __alloc_pages_nodemask+0x23e1/0x2720 [ 733.963761] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 733.968607] alloc_pages_current+0x155/0x260 [ 733.973003] filemap_fault+0xea3/0x1980 [ 733.976978] ext4_filemap_fault+0x84/0xb0 [ 733.981133] __do_fault+0xfa/0x380 [ 733.984664] __handle_mm_fault+0x2497/0x4620 [ 733.989091] ? vm_insert_page+0x7c0/0x7c0 [ 733.993233] ? __fsnotify_inode_delete+0x20/0x20 [ 733.997978] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 734.004643] handle_mm_fault+0x391/0x860 [ 734.008720] __do_page_fault+0x549/0xad0 [ 734.012770] ? spurious_fault+0x640/0x640 [ 734.016914] ? do_page_fault+0x60/0x500 [ 734.020874] ? page_fault+0x2f/0x50 [ 734.024493] page_fault+0x45/0x50 [ 734.027948] RIP: 56ca68: (null) [ 734.031990] RSP: ced19e38:0000000000000003 EFLAGS: ffffffff [ 734.041723] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 734.057862] Mem-Info: [ 734.061696] active_anon:13326 inactive_anon:37203 isolated_anon:0 [ 734.061696] active_file:16 inactive_file:15 isolated_file:0 [ 734.061696] unevictable:0 dirty:0 writeback:0 unstable:0 [ 734.061696] slab_reclaimable:12223 slab_unreclaimable:112700 [ 734.061696] mapped:52881 shmem:37648 pagetables:740 bounce:0 [ 734.061696] free:13912 free_pcp:91 free_cma:0 [ 734.067445] syz-executor.2 cpuset= [ 734.106577] Node 0 active_anon:52004kB inactive_anon:95604kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:97036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 734.111851] / [ 734.144362] Bluetooth: hci4 command 0x041b tx timeout [ 734.154279] mems_allowed=0-1 [ 734.157415] CPU: 1 PID: 23062 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 734.161964] Node 1 active_anon:1300kB inactive_anon:53208kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37436kB dirty:0kB writeback:0kB shmem:53556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 734.165287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 734.192676] Node 0 [ 734.201862] Call Trace: [ 734.201881] dump_stack+0x1b2/0x281 [ 734.201896] warn_alloc.cold+0x96/0x1cc [ 734.204125] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 734.206695] ? zone_watermark_ok_safe+0x220/0x220 [ 734.210348] lowmem_reserve[]: [ 734.214286] ? usleep_range+0x130/0x130 [ 734.239895] 0 [ 734.244710] ? try_to_free_pages+0x23f/0x6e0 [ 734.247836] 2717 [ 734.251769] ? _find_next_bit+0xdb/0x100 [ 734.253540] 2718 [ 734.257935] ? run_timer_softirq+0x5a0/0x5a0 [ 734.257952] __alloc_pages_nodemask+0x2127/0x2720 [ 734.257971] ? lock_acquire+0x170/0x3f0 [ 734.260019] 2718 [ 734.264099] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 734.266125] 2718 [ 734.270521] ? ion_page_pool_alloc+0x9e/0x1b0 [ 734.270536] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 734.270556] alloc_pages_current+0x155/0x260 [ 734.270569] ion_page_pool_alloc+0x118/0x1b0 [ 734.279351] ion_system_heap_allocate+0x133/0x8c0 [ 734.281388] Node 0 [ 734.286215] ? ion_alloc+0x187/0x810 [ 734.288285] DMA32 free:19528kB min:36200kB low:45248kB high:54296kB active_anon:51984kB inactive_anon:95604kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7584kB pagetables:2688kB bounce:0kB free_pcp:236kB local_pcp:128kB free_cma:0kB [ 734.292728] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 734.298175] lowmem_reserve[]: [ 734.302590] ? ion_system_contig_heap_create+0x130/0x130 [ 734.306967] 0 [ 734.311815] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 734.311827] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 734.311839] ion_alloc+0x204/0x810 [ 734.311857] ? ion_dma_buf_release+0x40/0x40 [ 734.314092] 0 [ 734.317792] ? __might_fault+0x177/0x1b0 [ 734.317807] ion_ioctl+0xea/0x1f0 [ 734.317818] ? ion_query_heaps+0x360/0x360 [ 734.346299] 0 [ 734.351710] ? ion_query_heaps+0x360/0x360 [ 734.351726] do_vfs_ioctl+0x75a/0xff0 [ 734.354928] 0 [ 734.360376] ? ioctl_preallocate+0x1a0/0x1a0 [ 734.360386] ? lock_downgrade+0x740/0x740 [ 734.360403] ? __fget+0x225/0x360 [ 734.362189] 0 [ 734.367194] ? do_vfs_ioctl+0xff0/0xff0 [ 734.375544] ? security_file_ioctl+0x83/0xb0 [ 734.379947] Node 0 [ 734.381709] SyS_ioctl+0x7f/0xb0 [ 734.385752] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 734.389177] ? do_vfs_ioctl+0xff0/0xff0 [ 734.389190] do_syscall_64+0x1d5/0x640 [ 734.389208] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 734.393414] lowmem_reserve[]: [ 734.395218] RIP: 0033:0x466459 [ 734.399577] 0 [ 734.403327] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 734.405114] 0 [ 734.409500] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 734.409506] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 734.409511] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 734.409516] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 734.409521] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 734.421077] warn_alloc_show_mem: 1 callbacks suppressed [ 734.421080] Mem-Info: [ 734.441422] 0 [ 734.469354] active_anon:13326 inactive_anon:37203 isolated_anon:0 [ 734.469354] active_file:16 inactive_file:15 isolated_file:0 [ 734.469354] unevictable:0 dirty:0 writeback:0 unstable:0 [ 734.469354] slab_reclaimable:12223 slab_unreclaimable:112285 [ 734.469354] mapped:52881 shmem:37648 pagetables:740 bounce:0 [ 734.469354] free:14328 free_pcp:84 free_cma:0 [ 734.491787] 0 [ 734.503818] Node 0 active_anon:52004kB inactive_anon:95604kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:97036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 734.522495] 0 [ 734.535248] Node 1 active_anon:1300kB inactive_anon:53208kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37436kB dirty:0kB writeback:0kB shmem:53556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 734.578079] Node 0 [ 734.621040] Node 1 Normal free:26832kB min:53696kB low:67120kB high:80544kB active_anon:1300kB inactive_anon:53208kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:272kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 734.647127] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 734.679019] lowmem_reserve[]: 0 0 0 0 0 [ 734.711598] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 734.712125] Node 0 [ 734.716647] Node 0 [ 734.716650] DMA: 4*4kB (ME) 5*8kB (UM) 7*16kB (UME) 19*32kB (UME) 11*64kB (UME) 12*128kB (UME) 3*256kB (ME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10952kB [ 734.732912] DMA32 free:19528kB min:36200kB low:45248kB high:54296kB active_anon:51984kB inactive_anon:95604kB active_file:156kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7584kB pagetables:2688kB bounce:0kB free_pcp:168kB local_pcp:80kB free_cma:0kB [ 734.758314] Node 0 DMA32: 886*4kB (UME) 781*8kB (UME) 290*16kB (UME) 77*32kB (UME) 32*64kB (UM) 5*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19584kB [ 734.791446] lowmem_reserve[]: [ 734.804051] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 734.804102] Node 1 Normal: 64*4kB (UM) 46*8kB (UM) 20*16kB (ME) 7*32kB (UME) 1*64kB (U) 92*128kB (U) 34*256kB (U) 10*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26832kB [ 734.804179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 734.804185] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 734.804191] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 734.804200] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 734.820907] 0 [ 734.843041] 37679 total pagecache pages [ 734.864614] 0 [ 734.880411] 0 pages in swap cache [ 734.885263] 0 [ 734.885663] Swap cache stats: add 0, delete 0, find 0/0 [ 734.885669] 0 [ 734.887460] Free swap = 0kB [ 734.887466] Total swap = 0kB [ 734.906942] 0 [ 734.911531] 2097051 pages RAM [ 734.913592] Node 0 [ 734.914636] 0 pages HighMem/MovableOnly [ 734.914658] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 734.916887] 363841 pages reserved [ 734.935008] lowmem_reserve[]: [ 734.956506] 0 pages cma reserved [ 734.963365] 0 0 0 0 0 [ 734.965178] Out of memory (oom_kill_allocating_task): Kill process 23071 (syz-executor.0) score 0 or sacrifice child [ 734.965889] Node 1 [ 734.985228] Killed process 23071 (syz-executor.0) total-vm:84924kB, anon-rss:76kB, file-rss:34252kB, shmem-rss:0kB [ 734.993688] Normal free:26832kB min:53696kB low:67120kB high:80544kB active_anon:1300kB inactive_anon:53208kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:272kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 735.015604] oom_reaper: reaped process 23071 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 735.041849] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 735.070370] systemd-udevd cpuset=/ mems_allowed=0-1 [ 735.075425] CPU: 1 PID: 4623 Comm: systemd-udevd Not tainted 4.14.227-syzkaller #0 [ 735.083127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 735.092478] Call Trace: [ 735.095072] dump_stack+0x1b2/0x281 [ 735.098708] dump_header+0x178/0x82f [ 735.102434] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 735.107617] ? ___ratelimit+0x2cd/0x530 [ 735.111584] oom_kill_process.cold+0x10/0xb18 [ 735.116069] ? lock_downgrade+0x740/0x740 [ 735.120209] out_of_memory+0x2dc/0x1190 [ 735.124175] ? oom_killer_disable+0x1c0/0x1c0 [ 735.128656] ? mutex_trylock+0x152/0x1a0 [ 735.132705] __alloc_pages_nodemask+0x23e1/0x2720 [ 735.137547] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 735.142393] alloc_pages_current+0x155/0x260 [ 735.146794] filemap_fault+0xea3/0x1980 [ 735.150766] ext4_filemap_fault+0x84/0xb0 [ 735.154906] __do_fault+0xfa/0x380 [ 735.158435] __handle_mm_fault+0x2497/0x4620 [ 735.162832] ? ep_poll+0x1ab/0xa50 [ 735.166357] ? vm_insert_page+0x7c0/0x7c0 [ 735.170517] handle_mm_fault+0x391/0x860 [ 735.174570] __do_page_fault+0x549/0xad0 [ 735.178626] ? spurious_fault+0x640/0x640 [ 735.182761] ? do_page_fault+0x60/0x500 [ 735.186723] ? page_fault+0x2f/0x50 [ 735.190337] page_fault+0x45/0x50 [ 735.193782] RIP: 0001:0xffffffffffffffff [ 735.197841] RSP: fd30600:00007ffd3e46d340 EFLAGS: 7ffd3e46d1d0 [ 735.210782] lowmem_reserve[]: 0 0 0 0 0 [ 735.223103] Node 0 DMA: 4*4kB (ME) 5*8kB (UM) 7*16kB (UME) 19*32kB (UME) 11*64kB (UME) 12*128kB (UME) 3*256kB (ME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10952kB [ 735.228563] Mem-Info: [ 735.243708] Node 0 DMA32: 885*4kB (ME) 765*8kB (UME) 291*16kB (UME) 77*32kB (UME) 32*64kB (UM) 6*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19596kB [ 735.261897] active_anon:13318 inactive_anon:37203 isolated_anon:0 [ 735.261897] active_file:15 inactive_file:17 isolated_file:0 [ 735.261897] unevictable:0 dirty:0 writeback:0 unstable:0 [ 735.261897] slab_reclaimable:12223 slab_unreclaimable:112295 [ 735.261897] mapped:52881 shmem:37648 pagetables:718 bounce:0 [ 735.261897] free:14390 free_pcp:50 free_cma:0 [ 735.262794] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 735.312644] Node 1 Normal: 71*4kB (UM) 45*8kB (M) 20*16kB (ME) 7*32kB (UME) 1*64kB (U) 93*128kB (U) 34*256kB (U) 10*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 26980kB [ 735.313834] Node 0 active_anon:52000kB inactive_anon:95604kB active_file:156kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174088kB dirty:0kB writeback:0kB shmem:97036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 735.338444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 735.375970] Node 1 active_anon:1272kB inactive_anon:53208kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37436kB dirty:0kB writeback:0kB shmem:53556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 735.376053] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 735.415644] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 735.422810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 735.453377] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 735.461538] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 735.466279] Node 0 DMA32 free:19648kB min:36200kB low:45248kB high:54296kB active_anon:51980kB inactive_anon:95604kB active_file:140kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7584kB pagetables:2600kB bounce:0kB free_pcp:192kB local_pcp:104kB free_cma:0kB [ 735.476424] 37680 total pagecache pages [ 735.519251] 0 pages in swap cache [ 735.522714] Swap cache stats: add 0, delete 0, find 0/0 [ 735.527002] lowmem_reserve[]: 0 0 0 0 0 [ 735.532211] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 735.536312] Free swap = 0kB [ 735.569700] Total swap = 0kB [ 735.572732] 2097051 pages RAM [ 735.573854] lowmem_reserve[]: [ 735.575827] 0 pages HighMem/MovableOnly [ 735.575834] 0 [ 735.585331] 363841 pages reserved [ 735.592099] 0 0 0 0 [ 735.592769] 0 pages cma reserved [ 735.594439] Node 1 Normal free:61584kB min:53696kB low:67120kB high:80544kB active_anon:1272kB inactive_anon:53208kB active_file:4kB inactive_file:608kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:272kB bounce:0kB free_pcp:0kB local_pcp:40kB free_cma:0kB [ 735.674036] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 735.718073] lowmem_reserve[]: 0 0 0 0 0 [ 735.718275] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 735.722083] Node 0 [ 735.757774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 735.766765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 735.767695] DMA: 3*4kB (UME) 1*8kB (M) 6*16kB (UME) 16*32kB (UE) 20*64kB (UME) 11*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11764kB [ 735.803659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.857667] Node 0 DMA32: 412*4kB (UE) 591*8kB (UME) 210*16kB (UME) 46*32kB (UME) 2164*64kB (UME) 233*128kB (UM) 106*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 206664kB [ 735.897972] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 735.937675] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 6*16kB (UME) 7*32kB (UME) 7309*64kB (UM) 1396*128kB (U) 189*256kB (U) 19*512kB (U) 40*1024kB (U) 0*2048kB 0*4096kB = 745872kB [ 735.987640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 735.996585] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 736.049663] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 736.060503] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 736.072201] 39669 total pagecache pages [ 736.076270] 0 pages in swap cache [ 736.082413] Swap cache stats: add 0, delete 0, find 0/0 [ 736.096484] Free swap = 0kB [ 736.107119] Total swap = 0kB [ 736.119252] 2097051 pages RAM [ 736.122368] 0 pages HighMem/MovableOnly [ 736.126327] 363841 pages reserved [ 736.145161] 0 pages cma reserved [ 736.160372] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 736.167403] Out of memory: Kill process 23059 (syz-executor.5) score 1004 or sacrifice child [ 736.185368] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 736.193215] Killed process 23061 (syz-executor.5) total-vm:93252kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 736.204861] Bluetooth: hci4 command 0x040f tx timeout [ 736.214528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 736.223486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 736.281631] oom_reaper: reaped process 23061 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 736.306856] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 736.319880] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 736.327406] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 736.358435] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 736.375003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 736.386523] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 736.420140] device veth0_vlan entered promiscuous mode [ 736.428539] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 736.443263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 736.453331] device veth1_vlan entered promiscuous mode [ 736.490948] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 736.502512] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 736.552531] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 736.563033] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 736.604024] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 736.612099] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 736.648297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 736.656085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 736.690496] device veth0_macvtap entered promiscuous mode [ 736.696880] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 736.748029] device veth1_macvtap entered promiscuous mode [ 736.762102] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 736.773622] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 736.786188] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 736.798726] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 736.811634] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 736.820753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 736.832522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.842548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 736.853125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.863498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 736.874311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.884150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 736.894566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.905765] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 736.918004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.924625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 736.938486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 736.949663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 736.977828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.986960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 737.017654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.026813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 737.037848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.047068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 737.058129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.069425] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 737.076545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.086157] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 737.095926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 737.157977] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 737.182300] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 737.187441] CPU: 0 PID: 23062 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 737.195319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 737.204671] Call Trace: [ 737.207263] dump_stack+0x1b2/0x281 [ 737.210913] warn_alloc.cold+0x96/0x1cc [ 737.214890] ? zone_watermark_ok_safe+0x220/0x220 [ 737.219742] __alloc_pages_nodemask+0x2127/0x2720 [ 737.224584] ? io_schedule_timeout+0x140/0x140 [ 737.229166] ? lock_acquire+0x170/0x3f0 [ 737.233139] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 737.237988] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 737.243438] ? __mutex_unlock_slowpath+0x75/0x770 [ 737.248287] alloc_pages_current+0x155/0x260 [ 737.252703] ion_page_pool_alloc+0x118/0x1b0 [ 737.257112] ion_system_heap_allocate+0x133/0x8c0 [ 737.261961] ? _raw_spin_unlock+0x29/0x40 [ 737.266108] ? _ion_heap_freelist_drain+0x6e/0x410 [ 737.271034] ? ion_system_contig_heap_create+0x130/0x130 [ 737.276477] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 737.281511] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 737.286348] ion_alloc+0x27a/0x810 [ 737.290064] ? ion_dma_buf_release+0x40/0x40 [ 737.294467] ? __might_fault+0x177/0x1b0 [ 737.298523] ion_ioctl+0xea/0x1f0 [ 737.301973] ? ion_query_heaps+0x360/0x360 [ 737.306214] ? ion_query_heaps+0x360/0x360 [ 737.310450] do_vfs_ioctl+0x75a/0xff0 [ 737.314250] ? ioctl_preallocate+0x1a0/0x1a0 [ 737.318679] ? lock_downgrade+0x740/0x740 [ 737.322849] ? __fget+0x225/0x360 [ 737.326308] ? do_vfs_ioctl+0xff0/0xff0 [ 737.330291] ? security_file_ioctl+0x83/0xb0 [ 737.334703] SyS_ioctl+0x7f/0xb0 [ 737.338069] ? do_vfs_ioctl+0xff0/0xff0 [ 737.342035] do_syscall_64+0x1d5/0x640 [ 737.345918] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 737.351104] RIP: 0033:0x466459 [ 737.354293] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 737.361991] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 737.369271] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 737.376534] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 737.383797] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 737.391058] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 737.420999] Mem-Info: [ 737.430555] active_anon:13301 inactive_anon:37203 isolated_anon:12 [ 737.430555] active_file:1314 inactive_file:1128 isolated_file:0 [ 737.430555] unevictable:0 dirty:31 writeback:0 unstable:0 [ 737.430555] slab_reclaimable:12231 slab_unreclaimable:111719 [ 737.430555] mapped:54833 shmem:37650 pagetables:718 bounce:0 [ 737.430555] free:101244 free_pcp:226 free_cma:0 [ 737.488406] Node 0 active_anon:52132kB inactive_anon:95604kB active_file:4916kB inactive_file:3852kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:181412kB dirty:124kB writeback:0kB shmem:97044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 737.518170] Node 1 active_anon:1372kB inactive_anon:53208kB active_file:340kB inactive_file:860kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38220kB dirty:0kB writeback:0kB shmem:53556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 737.577722] Node 0 DMA free:11012kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:776kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 737.604556] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 737.610348] Node 0 DMA32 free:196676kB min:36200kB low:45248kB high:54296kB active_anon:51912kB inactive_anon:95604kB active_file:4372kB inactive_file:3464kB unevictable:0kB writepending:124kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7616kB pagetables:2600kB bounce:0kB free_pcp:1392kB local_pcp:684kB free_cma:0kB [ 737.641233] lowmem_reserve[]: 0 0 0 0 0 [ 737.645244] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 737.671477] lowmem_reserve[]: 0 0 0 0 0 [ 737.675486] Node 1 Normal free:818136kB min:53696kB low:67120kB high:80544kB active_anon:1372kB inactive_anon:53208kB active_file:340kB inactive_file:844kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:272kB bounce:0kB free_pcp:384kB local_pcp:120kB free_cma:0kB [ 737.704757] lowmem_reserve[]: 0 0 0 0 0 [ 737.708844] Node 0 DMA: 53*4kB (UME) 34*8kB (UM) 14*16kB (UME) 18*32kB (UME) 14*64kB (UME) 11*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11012kB [ 737.725438] Node 0 DMA32: 363*4kB (UME) 498*8kB (UE) 177*16kB (UE) 1112*32kB (UME) 2118*64kB (U) 162*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 200396kB [ 737.740964] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 737.752042] Node 1 Normal: 2475*4kB (U) 7634*8kB (UM) 5214*16kB (UE) 5073*32kB (UME) 6504*64kB (UM) 978*128kB (U) 158*256kB (U) 7*512kB (UM) 85*1024kB (U) 0*2048kB 0*4096kB = 989244kB [ 737.769227] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 737.778312] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 737.786903] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 737.796255] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 737.807507] 40264 total pagecache pages [ 737.811572] 0 pages in swap cache [ 737.815024] Swap cache stats: add 0, delete 0, find 0/0 [ 737.820611] Free swap = 0kB [ 737.823723] Total swap = 0kB [ 737.826740] 2097051 pages RAM [ 737.830065] 0 pages HighMem/MovableOnly [ 737.834074] 363841 pages reserved [ 737.837593] 0 pages cma reserved [ 738.278021] Bluetooth: hci4 command 0x0419 tx timeout 05:09:59 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x121800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) r1 = msgget$private(0x0, 0x320) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/99) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x480000, 0x0) 05:09:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x121800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) r1 = msgget$private(0x0, 0x320) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/99) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 05:09:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:09:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x121800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) 05:09:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:09:59 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x121800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) r1 = msgget$private(0x0, 0x320) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/99) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) 05:09:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 05:09:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xf}) 05:09:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xf}) [ 739.736905] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 739.737023] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 739.785284] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 739.839177] CPU: 0 PID: 23311 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 739.844882] syz-executor.2 cpuset= [ 739.847077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 739.847081] Call Trace: [ 739.847103] dump_stack+0x1b2/0x281 [ 739.847117] warn_alloc.cold+0x96/0x1cc [ 739.847134] ? zone_watermark_ok_safe+0x220/0x220 [ 739.870749] / [ 739.870913] __alloc_pages_nodemask+0x2127/0x2720 [ 739.882294] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 739.887154] ? migrate_swap_stop+0x880/0x880 [ 739.890741] mems_allowed=0-1 [ 739.891564] ? lock_acquire+0x170/0x3f0 [ 739.899750] ? wake_up_q+0x82/0xd0 [ 739.903326] ? __mutex_unlock_slowpath+0x261/0x770 [ 739.908263] alloc_pages_current+0x155/0x260 [ 739.911479] syz-executor.1: [ 739.912670] ion_page_pool_alloc+0x118/0x1b0 [ 739.912683] ion_system_heap_allocate+0x133/0x8c0 [ 739.912694] ? ion_alloc+0x187/0x810 [ 739.912705] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 739.912719] ? ion_system_contig_heap_create+0x130/0x130 [ 739.916974] page allocation failure: order:4 [ 739.920156] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 739.920168] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 739.920180] ion_alloc+0x204/0x810 [ 739.920194] ? ion_dma_buf_release+0x40/0x40 [ 739.920207] ? __might_fault+0x177/0x1b0 [ 739.920221] ion_ioctl+0xea/0x1f0 [ 739.920232] ? ion_query_heaps+0x360/0x360 [ 739.920246] ? ion_query_heaps+0x360/0x360 [ 739.920255] do_vfs_ioctl+0x75a/0xff0 [ 739.920267] ? ioctl_preallocate+0x1a0/0x1a0 [ 739.920276] ? lock_downgrade+0x740/0x740 [ 739.920290] ? __fget+0x225/0x360 [ 739.920299] ? do_vfs_ioctl+0xff0/0xff0 [ 739.920310] ? security_file_ioctl+0x83/0xb0 [ 739.920320] SyS_ioctl+0x7f/0xb0 [ 739.946787] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 739.949386] ? do_vfs_ioctl+0xff0/0xff0 [ 739.949399] do_syscall_64+0x1d5/0x640 [ 739.949417] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 739.949426] RIP: 0033:0x466459 [ 739.949431] RSP: 002b:00007efda8f67188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 739.949441] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 739.949447] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 739.949452] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 739.949457] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 739.949462] R13: 00007ffd7d99bd4f R14: 00007efda8f67300 R15: 0000000000022000 [ 740.074704] CPU: 1 PID: 23327 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 740.082612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.091961] Call Trace: [ 740.094551] dump_stack+0x1b2/0x281 [ 740.098182] warn_alloc.cold+0x96/0x1cc [ 740.102244] ? zone_watermark_ok_safe+0x220/0x220 [ 740.107098] __alloc_pages_nodemask+0x2127/0x2720 [ 740.111936] ? __schedule+0x893/0x1de0 [ 740.115825] ? lock_acquire+0x170/0x3f0 [ 740.119803] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 740.124651] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 740.130102] ? __mutex_unlock_slowpath+0x75/0x770 [ 740.134947] alloc_pages_current+0x155/0x260 [ 740.139354] ion_page_pool_alloc+0x118/0x1b0 [ 740.143774] ion_system_heap_allocate+0x133/0x8c0 [ 740.148627] ? ion_alloc+0x187/0x810 [ 740.152338] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 740.157813] ? ion_system_contig_heap_create+0x130/0x130 [ 740.163260] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 740.168278] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 740.173121] ion_alloc+0x204/0x810 [ 740.176666] ? ion_dma_buf_release+0x40/0x40 [ 740.181077] ? __might_fault+0x177/0x1b0 [ 740.185139] ion_ioctl+0xea/0x1f0 [ 740.188593] ? ion_query_heaps+0x360/0x360 [ 740.192834] ? ion_query_heaps+0x360/0x360 [ 740.197075] do_vfs_ioctl+0x75a/0xff0 [ 740.200876] ? ioctl_preallocate+0x1a0/0x1a0 [ 740.205282] ? lock_downgrade+0x740/0x740 [ 740.209436] ? __fget+0x225/0x360 [ 740.212889] ? do_vfs_ioctl+0xff0/0xff0 [ 740.216862] ? security_file_ioctl+0x83/0xb0 [ 740.221268] SyS_ioctl+0x7f/0xb0 [ 740.224637] ? do_vfs_ioctl+0xff0/0xff0 [ 740.228613] do_syscall_64+0x1d5/0x640 [ 740.232513] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 740.237977] RIP: 0033:0x466459 [ 740.241160] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 740.248865] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 740.256136] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 740.263409] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 740.268219] Mem-Info: [ 740.270674] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 740.270679] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 740.406198] active_anon:13399 inactive_anon:37203 isolated_anon:0 [ 740.406198] active_file:1768 inactive_file:1722 isolated_file:0 [ 740.406198] unevictable:0 dirty:83 writeback:0 unstable:0 [ 740.406198] slab_reclaimable:12248 slab_unreclaimable:112132 [ 740.406198] mapped:55462 shmem:37650 pagetables:772 bounce:0 [ 740.406198] free:249846 free_pcp:59 free_cma:0 [ 740.417694] (null) [ 740.467705] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 740.472862] CPU: 1 PID: 23328 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 740.480734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.490085] Call Trace: [ 740.492678] dump_stack+0x1b2/0x281 [ 740.496308] warn_alloc.cold+0x96/0x1cc [ 740.500283] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 740.505304] ? zone_watermark_ok_safe+0x220/0x220 [ 740.510163] __alloc_pages_nodemask+0x2127/0x2720 [ 740.515008] ? __schedule+0x893/0x1de0 [ 740.518902] ? lock_acquire+0x170/0x3f0 [ 740.522878] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 740.524552] Node 0 active_anon:52192kB inactive_anon:95600kB active_file:6420kB inactive_file:4484kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181956kB dirty:280kB writeback:0kB shmem:97040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 740.527727] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 740.527741] ? __mutex_unlock_slowpath+0x75/0x770 [ 740.527756] alloc_pages_current+0x155/0x260 [ 740.527772] ion_page_pool_alloc+0x118/0x1b0 [ 740.527784] ion_system_heap_allocate+0x133/0x8c0 [ 740.579800] ? ion_alloc+0x187/0x810 [ 740.583865] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 740.589314] ? ion_system_contig_heap_create+0x130/0x130 [ 740.594761] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 740.599777] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 740.604621] ion_alloc+0x204/0x810 [ 740.608165] ? ion_dma_buf_release+0x40/0x40 [ 740.612591] ? __might_fault+0x177/0x1b0 [ 740.616670] ion_ioctl+0xea/0x1f0 [ 740.620143] ? ion_query_heaps+0x360/0x360 [ 740.624391] ? ion_query_heaps+0x360/0x360 [ 740.628623] do_vfs_ioctl+0x75a/0xff0 [ 740.630135] Node 1 active_anon:1404kB inactive_anon:53212kB active_file:652kB inactive_file:2404kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39892kB dirty:52kB writeback:0kB shmem:53560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 740.632434] ? ioctl_preallocate+0x1a0/0x1a0 [ 740.632444] ? lock_downgrade+0x740/0x740 [ 740.632459] ? __fget+0x225/0x360 [ 740.632469] ? do_vfs_ioctl+0xff0/0xff0 [ 740.632482] ? security_file_ioctl+0x83/0xb0 [ 740.680231] SyS_ioctl+0x7f/0xb0 [ 740.683616] ? do_vfs_ioctl+0xff0/0xff0 [ 740.687592] do_syscall_64+0x1d5/0x640 [ 740.691658] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 740.696840] RIP: 0033:0x466459 [ 740.700023] RSP: 002b:00007f878dccd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 740.707729] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 740.714999] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 740.722304] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 740.729569] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 740.731058] Node 0 [ 740.736835] R13: 00007fff67b70adf R14: 00007f878dccd300 R15: 0000000000022000 [ 740.765493] DMA free:11240kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:780kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 740.846833] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 740.866545] Node 0 DMA32 free:88416kB min:36200kB low:45248kB high:54296kB active_anon:52172kB inactive_anon:95600kB active_file:5640kB inactive_file:4484kB unevictable:0kB writepending:280kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7680kB pagetables:2728kB bounce:0kB free_pcp:864kB local_pcp:688kB free_cma:0kB [ 740.959175] lowmem_reserve[]: 0 0 0 0 0 [ 740.972149] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 741.053802] lowmem_reserve[]: 0 0 0 0 0 [ 741.067003] Node 1 Normal free:1652288kB min:53696kB low:67120kB high:80544kB active_anon:1404kB inactive_anon:53212kB active_file:652kB inactive_file:2404kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:360kB bounce:0kB free_pcp:180kB local_pcp:0kB free_cma:0kB [ 741.155006] lowmem_reserve[]: 0 0 0 0 0 [ 741.163627] Node 0 DMA: 8*4kB (UM) 7*8kB (UM) 4*16kB (UME) 3*32kB (ME) 2*64kB (ME) 8*128kB (UE) 4*256kB (UE) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11128kB [ 741.196848] Node 0 DMA32: 816*4kB (UE) 10288*8kB (UE) 1781*16kB (UE) 1040*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 147344kB [ 741.225297] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 741.248351] Node 1 Normal: 175*4kB (UM) 18*8kB (UM) 7042*16kB (UM) 6510*32kB (UE) 3085*64kB (UM) 4793*128kB (UM) 1202*256kB (UM) 99*512kB (U) 19*1024kB (U) 4*2048kB (U) 0*4096kB = 1518828kB [ 741.292647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 741.318710] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 741.340889] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 741.357329] warn_alloc_show_mem: 1 callbacks suppressed [ 741.357333] Mem-Info: [ 741.368692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 741.375195] active_anon:13399 inactive_anon:37203 isolated_anon:0 [ 741.375195] active_file:1818 inactive_file:1722 isolated_file:0 [ 741.375195] unevictable:0 dirty:100 writeback:0 unstable:0 [ 741.375195] slab_reclaimable:12246 slab_unreclaimable:111920 [ 741.375195] mapped:55471 shmem:37650 pagetables:772 bounce:0 [ 741.375195] free:392105 free_pcp:390 free_cma:0 [ 741.396208] 41224 total pagecache pages [ 741.450411] Node 0 active_anon:52192kB inactive_anon:95600kB active_file:6620kB inactive_file:4484kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181956kB dirty:348kB writeback:0kB shmem:97040kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 741.457227] 0 pages in swap cache [ 741.508497] Node 1 active_anon:1404kB inactive_anon:53212kB active_file:652kB inactive_file:2404kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39928kB dirty:52kB writeback:0kB shmem:53560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 741.533889] Swap cache stats: add 0, delete 0, find 0/0 [ 741.565736] Free swap = 0kB [ 741.568881] Node 0 DMA free:11156kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:780kB inactive_file:0kB unevictable:0kB writepending:12kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 741.575452] Total swap = 0kB [ 741.625500] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 741.634140] 2097051 pages RAM [ 741.641195] Node 0 DMA32 free:105564kB min:36200kB low:45248kB high:54296kB active_anon:52172kB inactive_anon:95600kB active_file:5640kB inactive_file:4484kB unevictable:0kB writepending:336kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7648kB pagetables:2728kB bounce:0kB free_pcp:780kB local_pcp:148kB free_cma:0kB [ 741.672314] 0 pages HighMem/MovableOnly [ 741.680841] 363841 pages reserved [ 741.688960] 0 pages cma reserved [ 741.734467] lowmem_reserve[]: 0 0 0 0 0 [ 741.747514] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 741.832895] lowmem_reserve[]: 0 0 0 0 0 [ 741.846363] Node 1 Normal free:1097012kB min:53696kB low:67120kB high:80544kB active_anon:1404kB inactive_anon:53212kB active_file:652kB inactive_file:2404kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:360kB bounce:0kB free_pcp:872kB local_pcp:692kB free_cma:0kB [ 741.970767] lowmem_reserve[]: 0 0 0 0 0 [ 741.986585] Node 0 DMA: 21*4kB (UM) 7*8kB (UM) 5*16kB (UME) 3*32kB (ME) 2*64kB (ME) 8*128kB (UE) 4*256kB (UE) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11196kB [ 742.024760] Node 0 DMA32: 68*4kB (UE) 510*8kB (UE) 172*16kB (UME) 3709*32kB (UME) 41*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 128416kB [ 742.055956] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 742.081384] Node 1 Normal: 3756*4kB (UM) 4096*8kB (UM) 4106*16kB (UM) 4065*32kB (UE) 3171*64kB (UM) 2695*128kB (UM) 1265*256kB (UM) 110*512kB (U) 19*1024kB (U) 4*2048kB (U) 0*4096kB = 1199280kB [ 742.124805] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 742.146857] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 742.168046] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 742.190194] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 742.213701] 41790 total pagecache pages [ 742.235951] 0 pages in swap cache [ 742.243915] Swap cache stats: add 0, delete 0, find 0/0 [ 742.260231] Free swap = 0kB [ 742.266588] Total swap = 0kB [ 742.276293] 2097051 pages RAM [ 742.284120] 0 pages HighMem/MovableOnly [ 742.296347] 363841 pages reserved [ 742.304361] 0 pages cma reserved 05:10:04 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0xf}) 05:10:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x121800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) 05:10:04 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x121800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) r1 = msgget$private(0x0, 0x320) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/99) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) [ 745.696842] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 745.767810] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 745.786495] CPU: 0 PID: 23354 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 745.794392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 745.803833] Call Trace: [ 745.806423] dump_stack+0x1b2/0x281 [ 745.810050] warn_alloc.cold+0x96/0x1cc [ 745.814018] ? zone_watermark_ok_safe+0x220/0x220 [ 745.818871] __alloc_pages_nodemask+0x2127/0x2720 [ 745.823717] ? lock_acquire+0x170/0x3f0 [ 745.827693] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 745.832541] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 745.838011] ? __mutex_unlock_slowpath+0x75/0x770 [ 745.842852] ? alloc_pages_current+0x37/0x260 [ 745.847345] alloc_pages_current+0x155/0x260 [ 745.851753] ion_page_pool_alloc+0x118/0x1b0 [ 745.856169] ion_system_heap_allocate+0x133/0x8c0 [ 745.861007] ? ion_alloc+0x187/0x810 [ 745.864762] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 745.870211] ? ion_system_contig_heap_create+0x130/0x130 [ 745.875653] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 745.880662] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 745.885500] ion_alloc+0x204/0x810 [ 745.889038] ? ion_dma_buf_release+0x40/0x40 [ 745.893441] ? __might_fault+0x177/0x1b0 [ 745.897503] ion_ioctl+0xea/0x1f0 [ 745.900964] ? ion_query_heaps+0x360/0x360 [ 745.905197] ? ion_query_heaps+0x360/0x360 [ 745.909432] do_vfs_ioctl+0x75a/0xff0 [ 745.913229] ? ioctl_preallocate+0x1a0/0x1a0 [ 745.917628] ? lock_downgrade+0x740/0x740 [ 745.921781] ? __fget+0x225/0x360 [ 745.925227] ? do_vfs_ioctl+0xff0/0xff0 [ 745.929199] ? security_file_ioctl+0x83/0xb0 [ 745.933605] SyS_ioctl+0x7f/0xb0 [ 745.936967] ? do_vfs_ioctl+0xff0/0xff0 [ 745.940940] do_syscall_64+0x1d5/0x640 [ 745.944838] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 745.950025] RIP: 0033:0x466459 [ 745.953208] RSP: 002b:00007f243cc84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 745.960927] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 745.968195] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 745.975458] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 745.982725] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 745.990075] R13: 00007ffeefc8439f R14: 00007f243cc84300 R15: 0000000000022000 [ 746.051139] oom_reaper: reaped process 23328 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 746.089863] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 746.131144] in:imklog cpuset=/ mems_allowed=0-1 [ 746.135855] CPU: 1 PID: 23040 Comm: in:imklog Not tainted 4.14.227-syzkaller #0 [ 746.136506] Mem-Info: [ 746.143289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 746.143293] Call Trace: [ 746.143313] dump_stack+0x1b2/0x281 [ 746.143325] dump_header+0x178/0x82f [ 746.145737] active_anon:13331 inactive_anon:37203 isolated_anon:0 [ 746.145737] active_file:14 inactive_file:6 isolated_file:0 [ 746.145737] unevictable:0 dirty:0 writeback:0 unstable:0 [ 746.145737] slab_reclaimable:12279 slab_unreclaimable:112229 [ 746.145737] mapped:44244 shmem:37648 pagetables:751 bounce:0 [ 746.145737] free:13754 free_pcp:88 free_cma:0 [ 746.155066] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 746.155076] ? ___ratelimit+0x2cd/0x530 [ 746.155086] oom_kill_process.cold+0x10/0xb18 [ 746.155104] out_of_memory+0xe3e/0x1190 [ 746.157685] Node 0 active_anon:51628kB inactive_anon:95600kB active_file:32kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139288kB dirty:0kB writeback:0kB shmem:97032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 746.161272] ? oom_killer_disable+0x1c0/0x1c0 [ 746.164977] Node 1 active_anon:1696kB inactive_anon:53212kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37688kB dirty:0kB writeback:0kB shmem:53560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 746.198025] ? mutex_trylock+0x152/0x1a0 [ 746.198038] __alloc_pages_nodemask+0x23e1/0x2720 [ 746.198058] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 746.198080] alloc_pages_current+0x155/0x260 [ 746.203161] Node 0 [ 746.207653] filemap_fault+0xea3/0x1980 [ 746.207674] ext4_filemap_fault+0x84/0xb0 [ 746.212159] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 746.216103] __do_fault+0xfa/0x380 [ 746.243702] lowmem_reserve[]: [ 746.248154] __handle_mm_fault+0x2497/0x4620 [ 746.248166] ? vm_insert_page+0x7c0/0x7c0 [ 746.248178] ? lock_downgrade+0x740/0x740 [ 746.275372] 0 [ 746.279426] handle_mm_fault+0x391/0x860 [ 746.279441] __do_page_fault+0x549/0xad0 [ 746.284262] 2717 [ 746.289204] ? spurious_fault+0x640/0x640 [ 746.289213] ? do_page_fault+0x60/0x500 [ 746.289222] ? page_fault+0x2f/0x50 [ 746.289232] page_fault+0x45/0x50 [ 746.293619] 2718 [ 746.295844] RIP: 1fa0:0x1f9f [ 746.299828] 2718 [ 746.304010] RSP: 0000:0000563fd664d9d0 EFLAGS: 7f7afc354da0 [ 746.329768] 2718 [ 746.389190] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 746.449247] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 746.467682] CPU: 0 PID: 23328 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 746.475577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 746.482570] Mem-Info: [ 746.484927] Call Trace: [ 746.487338] active_anon:13331 inactive_anon:37203 isolated_anon:0 [ 746.487338] active_file:97 inactive_file:94 isolated_file:0 [ 746.487338] unevictable:0 dirty:0 writeback:0 unstable:0 [ 746.487338] slab_reclaimable:12279 slab_unreclaimable:112229 [ 746.487338] mapped:44369 shmem:37648 pagetables:751 bounce:0 [ 746.487338] free:30892 free_pcp:375 free_cma:0 [ 746.489906] dump_stack+0x1b2/0x281 [ 746.489919] warn_alloc.cold+0x96/0x1cc [ 746.489931] ? zone_watermark_ok_safe+0x220/0x220 [ 746.489941] ? usleep_range+0x130/0x130 [ 746.489949] ? try_to_free_pages+0x23f/0x6e0 [ 746.489958] ? _find_next_bit+0xdb/0x100 [ 746.489975] ? run_timer_softirq+0x5a0/0x5a0 [ 746.489992] __alloc_pages_nodemask+0x2127/0x2720 [ 746.490008] ? lock_acquire+0x170/0x3f0 [ 746.490022] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 746.490049] ? ion_page_pool_alloc+0x9e/0x1b0 [ 746.526677] Node 0 active_anon:51628kB inactive_anon:95600kB active_file:32kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139288kB dirty:0kB writeback:0kB shmem:97032kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 746.527006] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 746.531034] Node 1 active_anon:1696kB inactive_anon:53212kB active_file:356kB inactive_file:376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38188kB dirty:0kB writeback:0kB shmem:53560kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 746.535780] ? retint_kernel+0x2d/0x2d [ 746.567717] Node 0 [ 746.570988] alloc_pages_current+0x155/0x260 [ 746.641918] ion_page_pool_alloc+0x118/0x1b0 [ 746.642548] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 746.646326] ion_system_heap_allocate+0x133/0x8c0 [ 746.676930] ? ion_alloc+0x187/0x810 [ 746.680655] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 746.686103] ? ion_system_contig_heap_create+0x130/0x130 [ 746.691550] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 746.696575] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 746.699623] lowmem_reserve[]: 0 [ 746.701415] ion_alloc+0x204/0x810 [ 746.701429] ? ion_dma_buf_release+0x40/0x40 [ 746.704687] 2717 [ 746.708221] ? __might_fault+0x177/0x1b0 [ 746.708233] ion_ioctl+0xea/0x1f0 [ 746.708244] ? ion_query_heaps+0x360/0x360 [ 746.708256] ? ion_query_heaps+0x360/0x360 [ 746.708267] do_vfs_ioctl+0x75a/0xff0 [ 746.708279] ? ioctl_preallocate+0x1a0/0x1a0 [ 746.708289] ? lock_downgrade+0x740/0x740 [ 746.708301] ? __fget+0x225/0x360 [ 746.708310] ? do_vfs_ioctl+0xff0/0xff0 [ 746.708321] ? security_file_ioctl+0x83/0xb0 [ 746.708331] SyS_ioctl+0x7f/0xb0 [ 746.715802] 2718 [ 746.718826] ? do_vfs_ioctl+0xff0/0xff0 [ 746.718839] do_syscall_64+0x1d5/0x640 [ 746.718856] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 746.718864] RIP: 0033:0x466459 [ 746.718869] RSP: 002b:00007f878dccd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.718880] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 746.718887] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 746.725909] 2718 [ 746.726563] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 746.751408] 2718 [ 746.754883] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 746.773440] R13: 00007fff67b70adf R14: 00007f878dccd300 R15: 0000000000022000 [ 746.776615] Node 0 [ 746.938124] Node 0 DMA32 free:162164kB min:36200kB low:45248kB high:54296kB active_anon:51608kB inactive_anon:95600kB active_file:32kB inactive_file:536kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7552kB pagetables:2496kB bounce:0kB free_pcp:164kB local_pcp:128kB free_cma:0kB [ 746.971593] DMA32 free:176828kB min:36200kB low:45248kB high:54296kB active_anon:51608kB inactive_anon:95600kB active_file:32kB inactive_file:536kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7552kB pagetables:2496kB bounce:0kB free_pcp:240kB local_pcp:128kB free_cma:0kB [ 747.046990] lowmem_reserve[]: 0 0 [ 747.047007] lowmem_reserve[]: [ 747.047009] 0 0 0 [ 747.055750] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 747.087447] 0 0 0 0 0 [ 747.090147] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 747.092597] lowmem_reserve[]: [ 747.115841] lowmem_reserve[]: [ 747.128984] 0 0 0 0 0 [ 747.134592] Node 1 Normal free:284048kB min:53696kB low:67120kB high:80544kB active_anon:1676kB inactive_anon:53212kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:508kB bounce:0kB free_pcp:1364kB local_pcp:732kB free_cma:0kB [ 747.136008] 0 [ 747.183851] lowmem_reserve[]: 0 0 0 0 0 [ 747.224262] Node 0 DMA: 3*4kB (M) 4*8kB (M) 3*16kB (ME) 4*32kB (ME) 4*64kB (ME) 2*128kB (ME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10972kB [ 747.264058] 0 0 0 0 [ 747.268142] Node 0 DMA32: 711*4kB (UME) 732*8kB (ME) 375*16kB (UME) 241*32kB (UME) 2082*64kB (UME) 447*128kB (UME) 32*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 221068kB [ 747.268518] Node 1 Normal free:429848kB min:53696kB low:67120kB high:80544kB active_anon:1676kB inactive_anon:53212kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:508kB bounce:0kB free_pcp:1324kB local_pcp:620kB free_cma:0kB [ 747.323649] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 747.387670] Node 1 Normal: 3914*4kB (UM) 2214*8kB (UM) 2301*16kB (UM) 2032*32kB (UME) 3129*64kB (UM) 428*128kB (UM) 81*256kB (UM) 41*512kB (UM) 5*1024kB (UM) 1*2048kB (M) 0*4096kB = 439144kB [ 747.429036] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 747.442352] lowmem_reserve[]: 0 0 0 0 0 [ 747.452965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 747.458454] Node 0 DMA: 3*4kB (M) 4*8kB (M) 3*16kB (ME) 4*32kB (ME) 4*64kB (ME) 2*128kB (ME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10972kB [ 747.485157] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 747.524455] Node 0 DMA32: 507*4kB (E) 494*8kB (UE) 175*16kB (UME) 16*32kB (UE) 1662*64kB (UME) 447*128kB (UME) 32*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 181068kB [ 747.537686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 747.567692] 39345 total pagecache pages [ 747.571696] 0 pages in swap cache [ 747.575140] Swap cache stats: add 0, delete 0, find 0/0 [ 747.580615] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 747.601651] Free swap = 0kB [ 747.627698] Total swap = 0kB [ 747.630772] 2097051 pages RAM [ 747.633868] 0 pages HighMem/MovableOnly [ 747.638790] 363841 pages reserved [ 747.642246] 0 pages cma reserved [ 747.645603] Out of memory (oom_kill_allocating_task): Kill process 23040 (in:imklog) score 0 or sacrifice child [ 747.655927] Node 1 Normal: 6387*4kB (UM) 2567*8kB (UM) 2648*16kB (UM) 2358*32kB (UME) 3787*64kB (UM) 595*128kB (UM) 89*256kB (UM) 42*512kB (UM) 16*1024kB (UM) 1*2048kB (M) 0*4096kB = 545156kB [ 747.668657] Killed process 23024 (rsyslogd) total-vm:254332kB, anon-rss:868kB, file-rss:0kB, shmem-rss:0kB [ 747.697710] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 747.717661] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 747.726324] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 747.778331] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 747.810720] 40603 total pagecache pages [ 747.822908] 0 pages in swap cache [ 747.827213] Swap cache stats: add 0, delete 0, find 0/0 [ 747.833749] Free swap = 0kB [ 747.837540] Total swap = 0kB [ 747.842017] 2097051 pages RAM [ 747.846617] 0 pages HighMem/MovableOnly [ 747.865625] 363841 pages reserved [ 747.871101] 0 pages cma reserved [ 748.330188] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 748.347804] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 748.352974] CPU: 0 PID: 23328 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 748.360859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 748.370211] Call Trace: [ 748.372810] dump_stack+0x1b2/0x281 [ 748.376549] warn_alloc.cold+0x96/0x1cc [ 748.380523] ? zone_watermark_ok_safe+0x220/0x220 [ 748.385377] __alloc_pages_nodemask+0x2127/0x2720 [ 748.390218] ? retint_kernel+0x2d/0x2d [ 748.394108] ? lock_acquire+0x170/0x3f0 [ 748.398091] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 748.402941] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 748.408392] ? __mutex_unlock_slowpath+0x75/0x770 [ 748.413239] alloc_pages_current+0x155/0x260 [ 748.417648] ion_page_pool_alloc+0x118/0x1b0 [ 748.422054] ion_system_heap_allocate+0x133/0x8c0 [ 748.426894] ? _raw_spin_unlock+0x29/0x40 [ 748.431049] ? _ion_heap_freelist_drain+0x6e/0x410 [ 748.435980] ? ion_system_contig_heap_create+0x130/0x130 [ 748.441435] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 748.446477] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 748.451323] ion_alloc+0x27a/0x810 [ 748.454870] ? ion_dma_buf_release+0x40/0x40 [ 748.459296] ? __might_fault+0x177/0x1b0 [ 748.463366] ion_ioctl+0xea/0x1f0 [ 748.466818] ? ion_query_heaps+0x360/0x360 [ 748.471144] ? ion_query_heaps+0x360/0x360 [ 748.475381] do_vfs_ioctl+0x75a/0xff0 [ 748.479186] ? ioctl_preallocate+0x1a0/0x1a0 [ 748.483600] ? lock_downgrade+0x740/0x740 [ 748.487753] ? __fget+0x225/0x360 [ 748.491211] ? do_vfs_ioctl+0xff0/0xff0 [ 748.495204] ? security_file_ioctl+0x83/0xb0 [ 748.499617] SyS_ioctl+0x7f/0xb0 [ 748.502978] ? do_vfs_ioctl+0xff0/0xff0 [ 748.506962] do_syscall_64+0x1d5/0x640 [ 748.510880] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 748.516066] RIP: 0033:0x466459 [ 748.519249] RSP: 002b:00007f878dccd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 748.526963] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 748.534232] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 748.541502] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 748.548762] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 748.556028] R13: 00007fff67b70adf R14: 00007f878dccd300 R15: 0000000000022000 [ 748.577661] warn_alloc_show_mem: 1 callbacks suppressed [ 748.577665] Mem-Info: [ 748.585455] active_anon:13232 inactive_anon:37203 isolated_anon:0 [ 748.585455] active_file:1552 inactive_file:2247 isolated_file:12 [ 748.585455] unevictable:0 dirty:24 writeback:25 unstable:0 [ 748.585455] slab_reclaimable:12338 slab_unreclaimable:112699 [ 748.585455] mapped:55413 shmem:37648 pagetables:747 bounce:0 [ 748.585455] free:129826 free_pcp:231 free_cma:0 [ 748.621736] Node 0 active_anon:52036kB inactive_anon:95604kB active_file:6164kB inactive_file:8984kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:183964kB dirty:68kB writeback:100kB shmem:97036kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 748.657800] Node 1 active_anon:892kB inactive_anon:53208kB active_file:44kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37688kB dirty:28kB writeback:0kB shmem:53556kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 748.684867] Node 0 DMA free:11596kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 748.711981] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 748.717025] Node 0 DMA32 free:318292kB min:36200kB low:45248kB high:54296kB active_anon:52016kB inactive_anon:95604kB active_file:5976kB inactive_file:9280kB unevictable:0kB writepending:68kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7680kB pagetables:2656kB bounce:0kB free_pcp:676kB local_pcp:620kB free_cma:0kB [ 748.757670] lowmem_reserve[]: 0 0 0 0 0 [ 748.761677] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 748.817684] lowmem_reserve[]: 0 0 0 0 0 [ 748.821726] Node 1 Normal free:293680kB min:53696kB low:67120kB high:80544kB active_anon:892kB inactive_anon:53208kB active_file:44kB inactive_file:4kB unevictable:0kB writepending:28kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:332kB bounce:0kB free_pcp:744kB local_pcp:0kB free_cma:0kB [ 748.877685] lowmem_reserve[]: 0 0 0 0 0 [ 748.881716] Node 0 DMA: 44*4kB (UM) 5*8kB (UM) 4*16kB (UME) 6*32kB (UME) 12*64kB (UME) 2*128kB (ME) 6*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11736kB [ 748.927680] Node 0 DMA32: 249*4kB (ME) 568*8kB (ME) 188*16kB (ME) 2625*32kB (UME) 1827*64kB (U) 129*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 226244kB [ 748.967679] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 748.988189] Node 1 Normal: 7794*4kB (UM) 4621*8kB (UM) 4564*16kB (UM) 4357*32kB (UME) 2730*64kB (U) 93*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 467728kB [ 749.017700] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 749.026573] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 749.047660] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 749.056511] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 749.100849] 41456 total pagecache pages [ 749.104859] 0 pages in swap cache [ 749.120963] Swap cache stats: add 0, delete 0, find 0/0 [ 749.126343] Free swap = 0kB [ 749.140870] Total swap = 0kB [ 749.143914] 2097051 pages RAM [ 749.147011] 0 pages HighMem/MovableOnly [ 749.164783] 363841 pages reserved [ 749.168326] 0 pages cma reserved 05:10:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x121800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) r1 = msgget$private(0x0, 0x320) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/99) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 05:10:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x121800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) r1 = msgget$private(0x0, 0x320) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/99) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) 05:10:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 05:10:11 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x121800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) r1 = msgget$private(0x0, 0x320) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/99) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x480000, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, r3}}, 0x18) msgget(0x3, 0x120) 05:10:11 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x121800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0xf, 0x1}) r1 = msgget$private(0x0, 0x320) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/99) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000140)}}, 0x18) 05:10:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 05:10:11 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 05:10:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x1fc, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x30}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x109, 0x2a, [@mesh_chsw={0x76, 0x6, {0x9, 0xf8, 0x1e, 0x4}}, @measure_req={0x26, 0xc0, {0x40, 0x0, 0xe, "32c54ad71cc0cf4ee38859820d46fa399170bdb891c5d782aa78c5106e5369197776714595233aa76ec83a88c098db67bb00f873d3825ca63807b0393371593d751dd76bae875f152c930a71a20ad9e77dfdb3acc8c60cb3aaa584b3f38623c982184f57ed6ca9cec1ad8bfb24d5f759c1841d7c93be2d846c08ae432d3adb13dfbec8bcc0f4eb019024bb3cf647795789687e2deaffa05df9a47a75a4d5d96ee01c4f4e84b5c9a6e93eb490cd36eddc1439ed08abbdea17e532c3ac82"}}, @dsss={0x3, 0x1, 0x74}, @rann={0x7e, 0x15, {{0x0, 0x5}, 0x8, 0x0, @broadcast, 0x9, 0x100, 0x55}}, @prep={0x83, 0x1f, @not_ext={{}, 0x9, 0x1f, @device_b, 0x0, "", 0x8000, 0x7, @device_b, 0x3}}]}, @NL80211_ATTR_IE={0xc0, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0x7, 0x88, @device_a, 0x4, @device_b, 0xff, 0x400, @device_b, 0x1}}, @challenge={0x10, 0x1, 0x87}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0xff, 0x80, @device_b, 0x8000, 0x200, 0x5}}, @perr={0x84, 0x5b, {0x72, 0x5, [@ext={{}, @device_a, 0x1000, @device_b, 0x1d}, @ext={{}, @device_a, 0x7088, @device_a, 0x12}, @ext={{}, @broadcast, 0x8, @broadcast, 0x1b}, @not_ext={{}, @device_a, 0x3f, "", 0x33}, @ext={{}, @device_a, 0x4, @broadcast, 0x6}]}}, @gcr_ga={0xbd, 0x6}, @chsw_timing={0x68, 0x4, {0x400, 0xf801}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @cf={0x4, 0x6, {0xce, 0x0, 0x6, 0x8}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x1, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4}]}, 0x18}}, 0x0) 05:10:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r1, 0x9, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x1fc, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x30}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x109, 0x2a, [@mesh_chsw={0x76, 0x6, {0x9, 0xf8, 0x1e, 0x4}}, @measure_req={0x26, 0xc0, {0x40, 0x0, 0xe, "32c54ad71cc0cf4ee38859820d46fa399170bdb891c5d782aa78c5106e5369197776714595233aa76ec83a88c098db67bb00f873d3825ca63807b0393371593d751dd76bae875f152c930a71a20ad9e77dfdb3acc8c60cb3aaa584b3f38623c982184f57ed6ca9cec1ad8bfb24d5f759c1841d7c93be2d846c08ae432d3adb13dfbec8bcc0f4eb019024bb3cf647795789687e2deaffa05df9a47a75a4d5d96ee01c4f4e84b5c9a6e93eb490cd36eddc1439ed08abbdea17e532c3ac82"}}, @dsss={0x3, 0x1, 0x74}, @rann={0x7e, 0x15, {{0x0, 0x5}, 0x8, 0x0, @broadcast, 0x9, 0x100, 0x55}}, @prep={0x83, 0x1f, @not_ext={{}, 0x9, 0x1f, @device_b, 0x0, "", 0x8000, 0x7, @device_b, 0x3}}]}, @NL80211_ATTR_IE={0xc0, 0x2a, [@prep={0x83, 0x25, @ext={{}, 0x7, 0x88, @device_a, 0x4, @device_b, 0xff, 0x400, @device_b, 0x1}}, @challenge={0x10, 0x1, 0x87}, @rann={0x7e, 0x15, {{0x0, 0x8}, 0xff, 0x80, @device_b, 0x8000, 0x200, 0x5}}, @perr={0x84, 0x5b, {0x72, 0x5, [@ext={{}, @device_a, 0x1000, @device_b, 0x1d}, @ext={{}, @device_a, 0x7088, @device_a, 0x12}, @ext={{}, @broadcast, 0x8, @broadcast, 0x1b}, @not_ext={{}, @device_a, 0x3f, "", 0x33}, @ext={{}, @device_a, 0x4, @broadcast, 0x6}]}}, @gcr_ga={0xbd, 0x6}, @chsw_timing={0x68, 0x4, {0x400, 0xf801}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @cf={0x4, 0x6, {0xce, 0x0, 0x6, 0x8}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x1, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4}]}, 0x18}}, 0x0) [ 752.144141] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 752.164434] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 752.176472] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 752.185390] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 752.190717] CPU: 1 PID: 23384 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 752.198727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.208079] Call Trace: [ 752.210671] dump_stack+0x1b2/0x281 [ 752.214303] warn_alloc.cold+0x96/0x1cc [ 752.218279] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 752.223296] ? zone_watermark_ok_safe+0x220/0x220 [ 752.228178] __alloc_pages_nodemask+0x2127/0x2720 [ 752.233027] ? lock_acquire+0x170/0x3f0 [ 752.237046] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 752.241906] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 752.247362] ? __mutex_unlock_slowpath+0x75/0x770 [ 752.252301] alloc_pages_current+0x155/0x260 [ 752.256722] ion_page_pool_alloc+0x118/0x1b0 [ 752.261143] ion_system_heap_allocate+0x133/0x8c0 [ 752.265995] ? ion_alloc+0x187/0x810 [ 752.269719] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 752.275177] ? ion_system_contig_heap_create+0x130/0x130 [ 752.280631] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 752.285660] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 752.290511] ion_alloc+0x204/0x810 [ 752.294079] ? ion_dma_buf_release+0x40/0x40 [ 752.298489] ? __might_fault+0x177/0x1b0 [ 752.302575] ion_ioctl+0xea/0x1f0 [ 752.306031] ? ion_query_heaps+0x360/0x360 [ 752.310269] ? ion_query_heaps+0x360/0x360 [ 752.314503] do_vfs_ioctl+0x75a/0xff0 [ 752.318328] ? ioctl_preallocate+0x1a0/0x1a0 [ 752.322736] ? lock_downgrade+0x740/0x740 [ 752.326888] ? __fget+0x225/0x360 [ 752.330345] ? do_vfs_ioctl+0xff0/0xff0 [ 752.334320] ? security_file_ioctl+0x83/0xb0 [ 752.338744] SyS_ioctl+0x7f/0xb0 [ 752.342115] ? do_vfs_ioctl+0xff0/0xff0 [ 752.346095] do_syscall_64+0x1d5/0x640 [ 752.350000] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 752.355190] RIP: 0033:0x466459 [ 752.358377] RSP: 002b:00007f878dccd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.366199] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 752.373474] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 752.380755] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 752.388189] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 752.395450] R13: 00007fff67b70adf R14: 00007f878dccd300 R15: 0000000000022000 [ 752.422173] CPU: 1 PID: 23383 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 752.430080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.439432] Call Trace: [ 752.442023] dump_stack+0x1b2/0x281 [ 752.445654] warn_alloc.cold+0x96/0x1cc [ 752.449631] ? zone_watermark_ok_safe+0x220/0x220 [ 752.454493] __alloc_pages_nodemask+0x2127/0x2720 [ 752.459339] ? io_schedule_timeout+0x140/0x140 [ 752.463929] ? lock_acquire+0x170/0x3f0 [ 752.468014] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 752.472904] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 752.478469] ? __mutex_unlock_slowpath+0x75/0x770 [ 752.483318] alloc_pages_current+0x155/0x260 [ 752.487738] ion_page_pool_alloc+0x118/0x1b0 [ 752.493816] ion_system_heap_allocate+0x133/0x8c0 [ 752.498664] ? ion_alloc+0x187/0x810 [ 752.502403] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 752.507857] ? ion_system_contig_heap_create+0x130/0x130 [ 752.513315] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 752.518335] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 752.523194] ion_alloc+0x204/0x810 [ 752.526742] ? ion_dma_buf_release+0x40/0x40 [ 752.531157] ? __might_fault+0x177/0x1b0 [ 752.535244] ion_ioctl+0xea/0x1f0 [ 752.538692] ? ion_query_heaps+0x360/0x360 [ 752.542922] ? ion_query_heaps+0x360/0x360 [ 752.547145] do_vfs_ioctl+0x75a/0xff0 [ 752.550962] ? ioctl_preallocate+0x1a0/0x1a0 [ 752.555361] ? lock_downgrade+0x740/0x740 [ 752.559517] ? __fget+0x225/0x360 [ 752.562959] ? do_vfs_ioctl+0xff0/0xff0 [ 752.566924] ? security_file_ioctl+0x83/0xb0 [ 752.571322] SyS_ioctl+0x7f/0xb0 [ 752.574678] ? do_vfs_ioctl+0xff0/0xff0 [ 752.578682] do_syscall_64+0x1d5/0x640 [ 752.582568] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 752.587763] RIP: 0033:0x466459 [ 752.590941] RSP: 002b:00007f243cc84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 752.598664] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 752.605924] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 752.613619] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 752.620877] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 752.628135] R13: 00007ffeefc8439f R14: 00007f243cc84300 R15: 0000000000022000 [ 752.643183] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 752.647286] Mem-Info: [ 752.662020] active_anon:13257 inactive_anon:37203 isolated_anon:24 [ 752.662020] active_file:1087 inactive_file:1098 isolated_file:32 [ 752.662020] unevictable:0 dirty:14 writeback:25 unstable:0 [ 752.662020] slab_reclaimable:12429 slab_unreclaimable:114265 [ 752.662020] mapped:55051 shmem:37648 pagetables:771 bounce:0 [ 752.662020] free:75545 free_pcp:189 free_cma:0 [ 752.675191] syz-executor.4 cpuset= [ 752.697476] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 752.732211] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 752.734003] Node 0 active_anon:52528kB inactive_anon:95612kB active_file:4344kB inactive_file:4368kB unevictable:0kB isolated(anon):48kB isolated(file):128kB mapped:182516kB dirty:48kB writeback:100kB shmem:97044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 752.742891] CPU: 0 PID: 23380 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 752.773842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.783195] Call Trace: [ 752.785796] dump_stack+0x1b2/0x281 [ 752.789429] warn_alloc.cold+0x96/0x1cc [ 752.793402] ? zone_watermark_ok_safe+0x220/0x220 [ 752.798257] __alloc_pages_nodemask+0x2127/0x2720 [ 752.799295] Node 1 active_anon:500kB inactive_anon:53200kB active_file:4kB inactive_file:24kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:37688kB dirty:8kB writeback:0kB shmem:53548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 752.803107] ? lock_acquire+0x170/0x3f0 [ 752.803126] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 752.803144] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 752.844744] ? __mutex_unlock_slowpath+0x75/0x770 [ 752.849609] alloc_pages_current+0x155/0x260 [ 752.854025] ion_page_pool_alloc+0x118/0x1b0 [ 752.858444] ion_system_heap_allocate+0x133/0x8c0 [ 752.863300] ? ion_alloc+0x187/0x810 [ 752.864976] Node 0 [ 752.867010] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 752.867023] ? ion_system_contig_heap_create+0x130/0x130 [ 752.867034] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 752.867047] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 752.873827] DMA free:11116kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 752.874710] ion_alloc+0x204/0x810 [ 752.886899] lowmem_reserve[]: [ 752.889979] ? ion_dma_buf_release+0x40/0x40 [ 752.889993] ? __might_fault+0x177/0x1b0 [ 752.890007] ion_ioctl+0xea/0x1f0 [ 752.890017] ? ion_query_heaps+0x360/0x360 [ 752.890030] ? ion_query_heaps+0x360/0x360 [ 752.890039] do_vfs_ioctl+0x75a/0xff0 [ 752.890050] ? ioctl_preallocate+0x1a0/0x1a0 [ 752.890060] ? lock_downgrade+0x740/0x740 [ 752.890073] ? __fget+0x225/0x360 [ 752.921543] / [ 752.922286] ? do_vfs_ioctl+0xff0/0xff0 [ 752.932313] mems_allowed=0-1 [ 752.934181] ? security_file_ioctl+0x83/0xb0 [ 752.934194] SyS_ioctl+0x7f/0xb0 [ 752.934203] ? do_vfs_ioctl+0xff0/0xff0 [ 752.934215] do_syscall_64+0x1d5/0x640 [ 752.972789] 0 [ 752.974994] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 752.975006] RIP: 0033:0x466459 [ 752.992602] 2717 [ 752.992986] RSP: 002b:00007f9149019188 EFLAGS: 00000246 [ 752.992994] 2718 [ 752.995031] ORIG_RAX: 0000000000000010 [ 752.995038] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 752.995042] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 752.995048] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 752.995054] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 752.995059] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 753.044236] CPU: 1 PID: 23381 Comm: syz-executor.4 Not tainted 4.14.227-syzkaller #0 [ 753.052124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.061473] Call Trace: [ 753.064071] dump_stack+0x1b2/0x281 [ 753.067699] warn_alloc.cold+0x96/0x1cc [ 753.071672] ? zone_watermark_ok_safe+0x220/0x220 [ 753.076523] __alloc_pages_nodemask+0x2127/0x2720 [ 753.081370] ? __schedule+0x893/0x1de0 [ 753.085254] ? lock_acquire+0x170/0x3f0 [ 753.089228] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 753.094283] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 753.099727] ? __mutex_unlock_slowpath+0x75/0x770 [ 753.104568] alloc_pages_current+0x155/0x260 [ 753.108972] ion_page_pool_alloc+0x118/0x1b0 [ 753.113373] ion_system_heap_allocate+0x133/0x8c0 [ 753.118205] ? ion_alloc+0x187/0x810 [ 753.121928] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 753.127397] ? ion_system_contig_heap_create+0x130/0x130 [ 753.132857] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 753.137866] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 753.142716] ion_alloc+0x204/0x810 [ 753.146259] ? ion_dma_buf_release+0x40/0x40 [ 753.150662] ? __might_fault+0x177/0x1b0 [ 753.154719] ion_ioctl+0xea/0x1f0 [ 753.158163] ? ion_query_heaps+0x360/0x360 [ 753.162401] ? ion_query_heaps+0x360/0x360 [ 753.166627] do_vfs_ioctl+0x75a/0xff0 [ 753.170424] ? ioctl_preallocate+0x1a0/0x1a0 [ 753.174847] ? lock_downgrade+0x740/0x740 [ 753.179005] ? __fget+0x225/0x360 [ 753.182450] ? do_vfs_ioctl+0xff0/0xff0 [ 753.186414] ? security_file_ioctl+0x83/0xb0 [ 753.190827] SyS_ioctl+0x7f/0xb0 [ 753.194201] ? do_vfs_ioctl+0xff0/0xff0 [ 753.198165] do_syscall_64+0x1d5/0x640 [ 753.202053] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 753.207234] RIP: 0033:0x466459 [ 753.210409] RSP: 002b:00007efda8f67188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 753.218109] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 753.225371] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 753.232635] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 753.239910] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 753.247169] R13: 00007ffd7d99bd4f R14: 00007efda8f67300 R15: 0000000000022000 [ 753.309393] 2718 2718 [ 753.314228] Node 0 DMA32 free:67804kB min:36200kB low:45248kB high:54296kB active_anon:52532kB inactive_anon:95612kB active_file:4348kB inactive_file:4356kB unevictable:0kB writepending:76kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7744kB pagetables:2900kB bounce:0kB free_pcp:896kB local_pcp:228kB free_cma:0kB [ 753.375934] lowmem_reserve[]: 0 0 0 0 0 [ 753.384551] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 753.438127] lowmem_reserve[]: 0 0 0 0 0 [ 753.446694] Node 1 Normal free:245412kB min:53696kB low:67120kB high:80544kB active_anon:500kB inactive_anon:53200kB active_file:28kB inactive_file:108kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:184kB bounce:0kB free_pcp:828kB local_pcp:168kB free_cma:0kB [ 753.506908] lowmem_reserve[]: 0 0 0 0 0 [ 753.515528] Node 0 DMA: 26*4kB (UM) 6*8kB (UM) 6*16kB (UME) 7*32kB (UME) 6*64kB (UME) 3*128kB (UME) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11224kB [ 753.548162] Node 0 DMA32: 135*4kB (ME) 11306*8kB (UME) 2816*16kB (UME) 933*32kB (UME) 397*64kB (U) 32*128kB (U) 8*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 197452kB [ 753.577492] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 753.602797] Node 1 Normal: 800*4kB (UM) 588*8kB (UM) 2673*16kB (U) 3956*32kB (UME) 644*64kB (UM) 11*128kB (U) 0*256kB 50*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 245488kB [ 753.636206] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 753.649707] warn_alloc_show_mem: 2 callbacks suppressed [ 753.649710] Mem-Info: [ 753.657591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 753.678109] active_anon:13263 inactive_anon:37203 isolated_anon:0 [ 753.678109] active_file:1094 inactive_file:1116 isolated_file:1 [ 753.678109] unevictable:0 dirty:22 writeback:0 unstable:0 [ 753.678109] slab_reclaimable:12425 slab_unreclaimable:114298 [ 753.678109] mapped:55018 shmem:37648 pagetables:771 bounce:0 [ 753.678109] free:109337 free_pcp:287 free_cma:0 [ 753.714320] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 753.733292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 753.752025] 39836 total pagecache pages [ 753.760551] 0 pages in swap cache [ 753.767441] Swap cache stats: add 0, delete 0, find 0/0 [ 753.773278] Free swap = 0kB [ 753.774287] Node 0 active_anon:52552kB inactive_anon:95612kB active_file:4348kB inactive_file:4356kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:182324kB dirty:76kB writeback:0kB shmem:97044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 753.776390] Total swap = 0kB [ 753.807955] 2097051 pages RAM [ 753.820066] 0 pages HighMem/MovableOnly [ 753.828604] 363841 pages reserved [ 753.835466] 0 pages cma reserved [ 753.871170] Node 1 active_anon:500kB inactive_anon:53200kB active_file:28kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37748kB dirty:12kB writeback:0kB shmem:53548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 753.978936] Node 0 DMA free:11744kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 754.038280] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 754.057971] Node 0 DMA32 free:145100kB min:36200kB low:45248kB high:54296kB active_anon:52532kB inactive_anon:95612kB active_file:4348kB inactive_file:4356kB unevictable:0kB writepending:108kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7744kB pagetables:2900kB bounce:0kB free_pcp:736kB local_pcp:180kB free_cma:0kB [ 754.098052] lowmem_reserve[]: 0 0 0 0 0 [ 754.115554] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 754.165413] lowmem_reserve[]: 0 0 0 0 0 [ 754.182391] Node 1 Normal free:400112kB min:53696kB low:67120kB high:80544kB active_anon:500kB inactive_anon:53200kB active_file:28kB inactive_file:108kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:184kB bounce:0kB free_pcp:860kB local_pcp:168kB free_cma:0kB [ 754.227043] lowmem_reserve[]: 0 0 0 0 0 [ 754.267711] Node 0 DMA: 3*4kB (M) 5*8kB (UM) 6*16kB (UME) 7*32kB (UME) 6*64kB (UME) 3*128kB (UME) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11124kB [ 754.286799] Node 0 DMA32: 137*4kB (UME) 503*8kB (ME) 177*16kB (UME) 17*32kB (ME) 442*64kB (U) 50*128kB (U) 10*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45196kB [ 754.320310] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 754.380917] Node 1 Normal: 16*4kB (UM) 40*8kB (UM) 5883*16kB (UM) 6599*32kB (UME) 1010*64kB (UM) 20*128kB (U) 7*256kB (U) 51*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 400784kB [ 754.420932] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 754.429853] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 754.457710] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 754.466612] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 754.487693] 39844 total pagecache pages [ 754.491726] 0 pages in swap cache [ 754.495221] Swap cache stats: add 0, delete 0, find 0/0 [ 754.517787] Free swap = 0kB [ 754.520827] Total swap = 0kB [ 754.523864] 2097051 pages RAM [ 754.526958] 0 pages HighMem/MovableOnly [ 754.541161] 363841 pages reserved [ 754.549245] 0 pages cma reserved [ 755.341547] oom_reaper: reaped process 23384 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 755.387035] oom_reaper: reaped process 23383 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 755.419805] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 755.447670] systemd-journal cpuset=/ mems_allowed=0-1 [ 755.452932] CPU: 0 PID: 22106 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 755.460896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.467701] syz-executor.1: [ 755.470242] Call Trace: [ 755.470247] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 755.473270] dump_stack+0x1b2/0x281 [ 755.475843] (null) [ 755.485721] dump_header+0x178/0x82f [ 755.485733] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 755.485740] ? ___ratelimit+0x2cd/0x530 [ 755.485750] oom_kill_process.cold+0x10/0xb18 [ 755.485766] out_of_memory+0xe3e/0x1190 [ 755.485778] ? oom_killer_disable+0x1c0/0x1c0 [ 755.485786] ? mutex_trylock+0x152/0x1a0 [ 755.485796] __alloc_pages_nodemask+0x23e1/0x2720 [ 755.485817] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 755.485841] alloc_pages_current+0x155/0x260 [ 755.485851] filemap_fault+0xea3/0x1980 [ 755.485870] ext4_filemap_fault+0x84/0xb0 [ 755.485882] __do_fault+0xfa/0x380 [ 755.515787] syz-executor.1 cpuset= [ 755.517390] __handle_mm_fault+0x2497/0x4620 [ 755.522772] / [ 755.526264] ? vm_insert_page+0x7c0/0x7c0 [ 755.540508] mems_allowed=0-1 [ 755.543565] ? check_stack_object+0x86/0xa0 [ 755.568250] handle_mm_fault+0x391/0x860 [ 755.572314] __do_page_fault+0x549/0xad0 [ 755.576375] ? spurious_fault+0x640/0x640 [ 755.580517] ? do_page_fault+0x60/0x500 [ 755.584483] ? page_fault+0x2f/0x50 [ 755.588103] page_fault+0x45/0x50 [ 755.591553] RIP: a59c040:0x7ffdb6dbe400 [ 755.595514] RSP: b6dbe440:000000000000000d EFLAGS: ffffffff [ 755.595538] CPU: 1 PID: 23384 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 755.601912] Mem-Info: [ 755.609116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.609121] Call Trace: [ 755.609139] dump_stack+0x1b2/0x281 [ 755.609153] warn_alloc.cold+0x96/0x1cc [ 755.611555] active_anon:13244 inactive_anon:37203 isolated_anon:0 [ 755.611555] active_file:56 inactive_file:10 isolated_file:0 [ 755.611555] unevictable:0 dirty:0 writeback:0 unstable:0 [ 755.611555] slab_reclaimable:12424 slab_unreclaimable:114011 [ 755.611555] mapped:52981 shmem:37648 pagetables:771 bounce:0 [ 755.611555] free:13933 free_pcp:109 free_cma:0 [ 755.620912] ? zone_watermark_ok_safe+0x220/0x220 [ 755.620923] ? usleep_range+0x130/0x130 [ 755.620931] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 755.620943] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 755.620954] ? run_timer_softirq+0x5a0/0x5a0 [ 755.623530] Node 0 active_anon:52456kB inactive_anon:95612kB active_file:112kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174136kB dirty:0kB writeback:0kB shmem:97044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 755.627139] __alloc_pages_nodemask+0x2127/0x2720 [ 755.631116] Node 1 active_anon:520kB inactive_anon:53200kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37788kB dirty:0kB writeback:0kB shmem:53548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 755.665197] ? lock_acquire+0x170/0x3f0 [ 755.665214] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 755.665225] ? ion_page_pool_alloc+0x9e/0x1b0 [ 755.665240] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 755.670089] Node 0 [ 755.674034] ? __alloc_pages_nodemask+0x27a/0x2720 [ 755.679164] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 755.684133] alloc_pages_current+0x155/0x260 [ 755.688537] lowmem_reserve[]: [ 755.716277] ion_page_pool_alloc+0x118/0x1b0 [ 755.716288] ion_system_heap_allocate+0x133/0x8c0 [ 755.716298] ? ion_alloc+0x187/0x810 [ 755.716309] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 755.716322] ? ion_system_contig_heap_create+0x130/0x130 [ 755.721170] 0 [ 755.748218] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 755.748231] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 755.748244] ion_alloc+0x204/0x810 [ 755.748259] ? ion_dma_buf_release+0x40/0x40 [ 755.752217] 2717 [ 755.757051] ? __might_fault+0x177/0x1b0 [ 755.761541] 2718 [ 755.766979] ion_ioctl+0xea/0x1f0 [ 755.769214] 2718 [ 755.774109] ? ion_query_heaps+0x360/0x360 [ 755.799809] 2718 [ 755.804182] ? ion_query_heaps+0x360/0x360 [ 755.811639] do_vfs_ioctl+0x75a/0xff0 [ 755.811653] ? ioctl_preallocate+0x1a0/0x1a0 [ 755.811662] ? lock_downgrade+0x740/0x740 [ 755.811675] ? __fget+0x225/0x360 [ 755.816492] Node 0 [ 755.820200] ? do_vfs_ioctl+0xff0/0xff0 [ 755.820210] ? security_file_ioctl+0x83/0xb0 [ 755.820220] SyS_ioctl+0x7f/0xb0 [ 755.820229] ? do_vfs_ioctl+0xff0/0xff0 [ 755.820240] do_syscall_64+0x1d5/0x640 [ 755.825688] DMA32 free:17988kB min:36200kB low:45248kB high:54296kB active_anon:52436kB inactive_anon:95612kB active_file:52kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7744kB pagetables:2900kB bounce:0kB free_pcp:296kB local_pcp:120kB free_cma:0kB [ 755.831127] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 755.831136] RIP: 0033:0x466459 [ 755.831141] RSP: 002b:00007f878dccd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 755.831150] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 755.831155] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 755.831163] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 755.832948] lowmem_reserve[]: [ 755.837946] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 755.837951] R13: 00007fff67b70adf R14: 00007f878dccd300 R15: 0000000000022000 [ 755.862399] Mem-Info: [ 755.866526] syz-executor.5: [ 755.875014] active_anon:13244 inactive_anon:37203 isolated_anon:0 [ 755.875014] active_file:56 inactive_file:10 isolated_file:0 [ 755.875014] unevictable:0 dirty:0 writeback:0 unstable:0 [ 755.875014] slab_reclaimable:12424 slab_unreclaimable:114011 [ 755.875014] mapped:52981 shmem:37648 pagetables:771 bounce:0 [ 755.875014] free:13933 free_pcp:109 free_cma:0 [ 755.875178] page allocation failure: order:0 [ 755.884484] Node 0 active_anon:52456kB inactive_anon:95612kB active_file:112kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174136kB dirty:0kB writeback:0kB shmem:97044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 755.890156] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 755.897152] Node 1 active_anon:520kB inactive_anon:53200kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:37788kB dirty:0kB writeback:0kB shmem:53548kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 755.897158] Node 0 [ 755.903581] (null) [ 755.912370] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 755.917123] 0 [ 755.948606] lowmem_reserve[]: [ 755.955777] syz-executor.5 cpuset= [ 755.957325] 0 [ 755.964643] / mems_allowed=0-1 [ 755.964663] CPU: 0 PID: 23383 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 755.964669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.964673] Call Trace: [ 755.964689] dump_stack+0x1b2/0x281 [ 755.964703] warn_alloc.cold+0x96/0x1cc [ 755.964715] ? zone_watermark_ok_safe+0x220/0x220 [ 755.964725] ? usleep_range+0x130/0x130 [ 755.964734] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 755.964746] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 755.964757] ? run_timer_softirq+0x5a0/0x5a0 [ 755.964772] __alloc_pages_nodemask+0x2127/0x2720 [ 755.964787] ? lock_acquire+0x170/0x3f0 [ 755.964803] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 755.964814] ? ion_page_pool_alloc+0x9e/0x1b0 [ 755.964829] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 755.964848] alloc_pages_current+0x155/0x260 [ 755.964860] ion_page_pool_alloc+0x118/0x1b0 [ 755.979715] 2717 [ 755.982484] ion_system_heap_allocate+0x133/0x8c0 [ 755.994940] 0 [ 755.997003] ? ion_alloc+0x187/0x810 [ 756.001563] 0 [ 756.002426] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 756.062974] 2718 [ 756.070068] ? ion_system_contig_heap_create+0x130/0x130 [ 756.070080] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 756.070091] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 756.070103] ion_alloc+0x204/0x810 [ 756.070118] ? ion_dma_buf_release+0x40/0x40 [ 756.070131] ? __might_fault+0x177/0x1b0 [ 756.070143] ion_ioctl+0xea/0x1f0 [ 756.070153] ? ion_query_heaps+0x360/0x360 [ 756.070166] ? ion_query_heaps+0x360/0x360 [ 756.087724] 2718 [ 756.104322] do_vfs_ioctl+0x75a/0xff0 [ 756.104336] ? ioctl_preallocate+0x1a0/0x1a0 [ 756.104345] ? lock_downgrade+0x740/0x740 [ 756.104357] ? __fget+0x225/0x360 [ 756.104365] ? do_vfs_ioctl+0xff0/0xff0 [ 756.104376] ? security_file_ioctl+0x83/0xb0 [ 756.104386] SyS_ioctl+0x7f/0xb0 [ 756.104394] ? do_vfs_ioctl+0xff0/0xff0 [ 756.104404] do_syscall_64+0x1d5/0x640 [ 756.104420] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 756.118951] 2718 [ 756.134796] RIP: 0033:0x466459 [ 756.134801] RSP: 002b:00007f243cc84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 756.134809] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 756.134814] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 756.134819] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 756.134824] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 756.134829] R13: 00007ffeefc8439f R14: 00007f243cc84300 R15: 0000000000022000 [ 756.394769] 0 0 [ 756.396752] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 756.448446] lowmem_reserve[]: 0 0 0 0 0 [ 756.452574] Node 1 Normal free:173340kB min:53696kB low:67120kB high:80544kB active_anon:800kB inactive_anon:53200kB active_file:1304kB inactive_file:5804kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:480kB bounce:0kB free_pcp:500kB local_pcp:324kB free_cma:0kB [ 756.486733] lowmem_reserve[]: 0 0 0 0 0 [ 756.491207] Node 0 DMA: 2*4kB (UE) 2*8kB (ME) 1*16kB (M) 2*32kB (UE) 7*64kB (UME) 4*128kB (UME) 5*256kB (UME) 3*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11048kB [ 756.507163] Node 0 DMA32: 713*4kB (ME) 919*8kB (UME) 234*16kB (ME) 40*32kB (UME) 182*64kB (UM) 33*128kB (U) 12*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34172kB [ 756.536169] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 756.571751] Node 1 Normal: 1*4kB (U) 2*8kB (ME) 1*16kB (U) 2*32kB (UE) 2186*64kB (U) 96*128kB (UM) 69*256kB (UE) 53*512kB (UE) 30*1024kB (U) 0*2048kB 0*4096kB = 227812kB [ 756.614745] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 756.624355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 756.653567] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 756.677702] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 756.686468] 40101 total pagecache pages [ 756.691501] 0 pages in swap cache [ 756.695011] Swap cache stats: add 0, delete 0, find 0/0 [ 756.700820] Free swap = 0kB [ 756.718088] Total swap = 0kB [ 756.723781] 2097051 pages RAM [ 756.727180] 0 pages HighMem/MovableOnly [ 756.741605] 363841 pages reserved [ 756.757955] 0 pages cma reserved [ 756.761350] Out of memory (oom_kill_allocating_task): Kill process 22106 (systemd-journal) score 0 or sacrifice child [ 756.800856] Killed process 22106 (systemd-journal) total-vm:46096kB, anon-rss:480kB, file-rss:0kB, shmem-rss:2880kB [ 756.827693] Node 0 DMA32 free:40216kB min:36200kB low:45248kB high:54296kB active_anon:52192kB inactive_anon:95612kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7744kB pagetables:2900kB bounce:0kB free_pcp:1048kB local_pcp:320kB free_cma:0kB [ 756.909027] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 756.919049] IPVS: ftp: loaded support on port[0] = 21 [ 756.927233] lowmem_reserve[]: 0 0 0 0 0 [ 756.941330] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 756.959539] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 757.025153] systemd[1]: Stopped Journal Service. [ 757.025279] lowmem_reserve[]: 0 0 0 0 0 [ 757.034435] Node 1 Normal free:212668kB min:53696kB low:67120kB high:80544kB active_anon:1344kB inactive_anon:53204kB active_file:4156kB inactive_file:5800kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:244kB bounce:0kB free_pcp:340kB local_pcp:192kB free_cma:0kB [ 757.129079] systemd[1]: Starting Journal Service... [ 757.177753] lowmem_reserve[]: 0 0 0 0 0 [ 757.177777] Node 0 DMA: 2*4kB (UM) 3*8kB (ME) 2*16kB (M) 4*32kB (UME) 3*64kB (ME) 3*128kB (UE) 4*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11008kB [ 757.230005] oom_reaper: reaped process 23380 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 757.264185] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 757.283289] Node 0 DMA32: 670*4kB (UME) 706*8kB (UME) 241*16kB (UME) 42*32kB (UME) 14*64kB (MH) 1*128kB (U) 14*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18136kB [ 757.299151] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 757.302219] (journald) invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 757.304289] CPU: 0 PID: 23383 Comm: syz-executor.5 Not tainted 4.14.227-syzkaller #0 [ 757.304298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 757.321162] Node 0 [ 757.322371] Call Trace: [ 757.331851] , order=0, oom_score_adj=0 [ 757.333940] dump_stack+0x1b2/0x281 [ 757.336501] (journald) cpuset= [ 757.340476] warn_alloc.cold+0x96/0x1cc [ 757.340488] ? zone_watermark_ok_safe+0x220/0x220 [ 757.340510] __alloc_pages_nodemask+0x2127/0x2720 [ 757.340521] ? lock_acquire+0x170/0x3f0 [ 757.340533] ? lock_acquire+0x170/0x3f0 [ 757.340548] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 757.340567] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 757.340578] ? __mutex_unlock_slowpath+0x75/0x770 [ 757.340592] alloc_pages_current+0x155/0x260 [ 757.340606] ion_page_pool_alloc+0x118/0x1b0 [ 757.350554] Normal: [ 757.351353] ion_system_heap_allocate+0x133/0x8c0 [ 757.356180] 0*4kB [ 757.361038] ? _raw_spin_unlock+0x29/0x40 [ 757.361048] ? _ion_heap_freelist_drain+0x6e/0x410 [ 757.361058] ? ion_system_contig_heap_create+0x130/0x130 [ 757.361069] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 757.361081] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 757.361092] ion_alloc+0x27a/0x810 [ 757.361107] ? ion_dma_buf_release+0x40/0x40 [ 757.361119] ? __might_fault+0x177/0x1b0 [ 757.366786] / [ 757.369068] ion_ioctl+0xea/0x1f0 [ 757.375892] 0*8kB [ 757.379330] ? ion_query_heaps+0x360/0x360 [ 757.379344] ? ion_query_heaps+0x360/0x360 [ 757.379355] do_vfs_ioctl+0x75a/0xff0 [ 757.379368] ? ioctl_preallocate+0x1a0/0x1a0 [ 757.379378] ? lock_downgrade+0x740/0x740 [ 757.379390] ? __fget+0x225/0x360 [ 757.379399] ? do_vfs_ioctl+0xff0/0xff0 [ 757.379412] ? security_file_ioctl+0x83/0xb0 [ 757.386925] 0*16kB [ 757.388632] SyS_ioctl+0x7f/0xb0 [ 757.388641] ? do_vfs_ioctl+0xff0/0xff0 [ 757.388653] do_syscall_64+0x1d5/0x640 [ 757.388671] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 757.388680] RIP: 0033:0x466459 [ 757.388685] RSP: 002b:00007f243cc84188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 757.388695] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 757.388700] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 757.388709] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 757.395878] mems_allowed=0-1 [ 757.400233] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 757.400239] R13: 00007ffeefc8439f R14: 00007f243cc84300 R15: 0000000000022000 [ 757.466887] warn_alloc_show_mem: 1 callbacks suppressed [ 757.466891] Mem-Info: [ 757.472759] 0*32kB [ 757.490048] syz-executor.2: [ 757.497053] 0*64kB [ 757.498196] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 757.498211] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 757.498233] CPU: 0 PID: 23380 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 757.498239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 757.498243] Call Trace: [ 757.498259] dump_stack+0x1b2/0x281 [ 757.498272] warn_alloc.cold+0x96/0x1cc [ 757.498284] ? zone_watermark_ok_safe+0x220/0x220 [ 757.498293] ? usleep_range+0x130/0x130 [ 757.498303] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 757.498315] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 757.498325] ? run_timer_softirq+0x5a0/0x5a0 [ 757.498340] __alloc_pages_nodemask+0x2127/0x2720 [ 757.498353] ? lock_acquire+0x170/0x3f0 [ 757.498369] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 757.498382] ? ion_page_pool_alloc+0x9e/0x1b0 [ 757.501559] 0*128kB [ 757.509264] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 757.509277] ? __sanitizer_cov_trace_pc+0x3d/0x50 [ 757.509291] alloc_pages_current+0x155/0x260 [ 757.509305] ion_page_pool_alloc+0x118/0x1b0 [ 757.509315] ion_system_heap_allocate+0x133/0x8c0 [ 757.509326] ? ion_alloc+0x187/0x810 [ 757.509336] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 757.509346] ? ion_system_contig_heap_create+0x130/0x130 [ 757.509357] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 757.509367] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 757.509379] ion_alloc+0x204/0x810 [ 757.509392] ? ion_dma_buf_release+0x40/0x40 [ 757.522052] 0*256kB [ 757.523928] ? __might_fault+0x177/0x1b0 [ 757.534063] 0*512kB [ 757.534296] ion_ioctl+0xea/0x1f0 [ 757.546082] 0*1024kB [ 757.548898] ? ion_query_heaps+0x360/0x360 [ 757.548912] ? ion_query_heaps+0x360/0x360 [ 757.548923] do_vfs_ioctl+0x75a/0xff0 [ 757.548935] ? ioctl_preallocate+0x1a0/0x1a0 [ 757.548945] ? lock_downgrade+0x740/0x740 [ 757.548958] ? __fget+0x225/0x360 [ 757.548966] ? do_vfs_ioctl+0xff0/0xff0 [ 757.548977] ? security_file_ioctl+0x83/0xb0 [ 757.548988] SyS_ioctl+0x7f/0xb0 [ 757.557497] 0*2048kB [ 757.558987] ? do_vfs_ioctl+0xff0/0xff0 [ 757.558999] do_syscall_64+0x1d5/0x640 [ 757.559016] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 757.559024] RIP: 0033:0x466459 [ 757.559028] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 757.559037] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 757.559041] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 757.559045] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 757.559049] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 757.559053] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 757.562026] active_anon:13253 inactive_anon:37204 isolated_anon:0 [ 757.562026] active_file:38 inactive_file:6 isolated_file:0 [ 757.562026] unevictable:0 dirty:19 writeback:0 unstable:0 [ 757.562026] slab_reclaimable:12495 slab_unreclaimable:114428 [ 757.562026] mapped:52257 shmem:37652 pagetables:806 bounce:0 [ 757.562026] free:13768 free_pcp:0 free_cma:0 [ 757.567126] 0*4096kB [ 757.577584] Node 0 active_anon:51648kB inactive_anon:95612kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174124kB dirty:4kB writeback:0kB shmem:97044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 757.588068] CPU: 1 PID: 23440 Comm: (journald) Not tainted 4.14.227-syzkaller #0 [ 757.590868] Node 1 active_anon:1364kB inactive_anon:53204kB active_file:108kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34904kB dirty:72kB writeback:0kB shmem:53564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 757.597734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 757.597738] Call Trace: [ 757.597755] dump_stack+0x1b2/0x281 [ 757.597768] dump_header+0x178/0x82f [ 757.597780] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 757.600347] Node 0 [ 757.603959] ? ___ratelimit+0x2cd/0x530 [ 757.607945] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 757.612735] oom_kill_process.cold+0x10/0xb18 [ 757.616684] lowmem_reserve[]: [ 757.621780] out_of_memory+0xe3e/0x1190 [ 757.621793] ? oom_killer_disable+0x1c0/0x1c0 [ 757.621804] ? mutex_trylock+0x152/0x1a0 [ 757.637675] 0 [ 757.639983] __alloc_pages_nodemask+0x23e1/0x2720 [ 757.644800] 2717 [ 757.649316] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 757.649341] alloc_pages_current+0x155/0x260 [ 757.657667] 2718 [ 757.661914] filemap_fault+0xea3/0x1980 [ 757.666302] 2718 [ 757.670705] ext4_filemap_fault+0x84/0xb0 [ 757.670717] __do_fault+0xfa/0x380 [ 757.670726] __handle_mm_fault+0x2497/0x4620 [ 757.697682] 2718 [ 757.699955] ? vm_insert_page+0x7c0/0x7c0 [ 757.707856] ? __might_fault+0x177/0x1b0 [ 757.707867] ? _copy_to_user+0x82/0xd0 [ 757.707885] handle_mm_fault+0x391/0x860 [ 757.707898] __do_page_fault+0x549/0xad0 [ 757.717695] Node 0 [ 757.719995] ? spurious_fault+0x640/0x640 [ 757.722396] DMA32 free:17884kB min:36200kB low:45248kB high:54296kB active_anon:51636kB inactive_anon:95612kB active_file:0kB inactive_file:68kB unevictable:0kB writepending:4kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7712kB pagetables:2812kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 757.726628] ? do_page_fault+0x60/0x500 [ 757.747692] lowmem_reserve[]: [ 757.750560] ? page_fault+0x2f/0x50 [ 757.754972] 0 [ 757.758323] page_fault+0x45/0x50 [ 757.758332] RIP: 0000:0x25402800cf [ 757.758336] RSP: d6ceb860:00007fff94d811e0 EFLAGS: 55e9d6bc79c8 [ 757.771125] = 0kB [ 757.827684] 0 [ 757.859079] Node 1 [ 758.017682] 0 [ 758.107749] Mem-Info: [ 758.157729] active_anon:13262 inactive_anon:37204 isolated_anon:0 [ 758.157729] active_file:16 inactive_file:630 isolated_file:0 [ 758.157729] unevictable:0 dirty:0 writeback:0 unstable:0 [ 758.157729] slab_reclaimable:12523 slab_unreclaimable:114463 [ 758.157729] mapped:52631 shmem:37652 pagetables:803 bounce:0 [ 758.157729] free:155819 free_pcp:385 free_cma:0 [ 758.210441] Node 0 active_anon:51584kB inactive_anon:95612kB active_file:4kB inactive_file:1592kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175108kB dirty:0kB writeback:0kB shmem:97044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 758.270336] Normal: 687*4kB (UME) 75*8kB (UME) 111*16kB (UME) 162*32kB (UM) 3088*64kB (UME) 604*128kB (UME) 131*256kB (UME) 51*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 344900kB [ 758.290551] Node 1 active_anon:1464kB inactive_anon:53204kB active_file:60kB inactive_file:928kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35416kB dirty:0kB writeback:0kB shmem:53564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 758.297707] 0 [ 758.341073] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 758.357695] 0 [ 758.359689] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 758.361027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 758.396784] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 758.430470] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 758.437698] lowmem_reserve[]: 0 0 0 0 0 [ 758.439394] lowmem_reserve[]: [ 758.443322] Node 1 [ 758.443325] 0 2717 [ 758.446435] Normal free:257704kB min:53696kB low:67120kB high:80544kB active_anon:1464kB inactive_anon:53204kB active_file:60kB inactive_file:928kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:400kB bounce:0kB free_pcp:1308kB local_pcp:680kB free_cma:0kB [ 758.452119] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 758.491902] 2718 2718 2718 [ 758.510371] Node 0 DMA32 free:240916kB min:36200kB low:45248kB high:54296kB active_anon:51572kB inactive_anon:95612kB active_file:4kB inactive_file:1592kB unevictable:0kB writepending:0kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7712kB pagetables:2812kB bounce:0kB free_pcp:1364kB local_pcp:740kB free_cma:0kB [ 758.539782] Bluetooth: hci5 command 0x0409 tx timeout [ 758.548690] lowmem_reserve[]: 0 0 0 0 0 [ 758.552716] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 758.557700] lowmem_reserve[]: [ 758.601061] 38306 total pagecache pages [ 758.608198] 0 pages in swap cache [ 758.611659] Swap cache stats: add 0, delete 0, find 0/0 [ 758.617025] Free swap = 0kB [ 758.627692] 0 0 0 0 0 [ 758.630223] Node 0 DMA: 82*4kB (UM) 19*8kB (UME) 11*16kB (UM) 9*32kB (UME) 4*64kB (UME) 2*128kB (UE) 2*256kB (ME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11184kB [ 758.640832] Total swap = 0kB [ 758.661018] lowmem_reserve[]: 0 0 0 0 0 [ 758.665032] Node 1 Normal free:176164kB min:53696kB low:67120kB high:80544kB active_anon:1464kB inactive_anon:53204kB active_file:60kB inactive_file:928kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:400kB bounce:0kB free_pcp:1324kB local_pcp:620kB free_cma:0kB [ 758.677692] Node 0 [ 758.701032] 2097051 pages RAM [ 758.706372] 0 pages HighMem/MovableOnly [ 758.721015] 363841 pages reserved [ 758.724485] 0 pages cma reserved [ 758.737710] DMA32: 19930*4kB (UE) 9484*8kB (UME) 6700*16kB (UME) 3267*32kB (UME) 47*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 370472kB [ 758.758161] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 758.769526] Node 1 Normal: 3942*4kB (U) 4803*8kB (UM) 3216*16kB (UM) 2260*32kB (UM) 300*64kB (U) 0*128kB 0*256kB 0*512kB 56*1024kB (U) 2*2048kB (U) 0*4096kB = 258608kB [ 758.787705] lowmem_reserve[]: 0 0 0 0 0 [ 758.791723] Node 0 DMA: 82*4kB (UM) 19*8kB (UME) 11*16kB (UM) 9*32kB (UME) 3*64kB (ME) 1*128kB (E) 2*256kB (ME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10992kB [ 758.798016] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 758.847885] Node 0 DMA32: 24275*4kB (UE) 9901*8kB (UME) 6961*16kB (UME) 3289*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 392932kB [ 758.877705] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 758.886299] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 758.907707] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 758.937706] Node 1 Normal: 5936*4kB (U) 4910*8kB (UM) 3331*16kB (UM) 2353*32kB (UM) 1*64kB (U) 1*128kB (U) 0*256kB 0*512kB 24*1024kB (U) 2*2048kB (U) 0*4096kB = 220480kB [ 758.953142] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 758.967689] 38306 total pagecache pages [ 758.971683] 0 pages in swap cache [ 758.975124] Swap cache stats: add 0, delete 0, find 0/0 [ 758.987700] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 758.996640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 759.017686] Free swap = 0kB [ 759.020716] Total swap = 0kB [ 759.023728] 2097051 pages RAM [ 759.026820] 0 pages HighMem/MovableOnly [ 759.037680] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 759.047573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 759.056515] 363841 pages reserved [ 759.067979] 0 pages cma reserved [ 759.097704] 38328 total pagecache pages [ 759.101724] 0 pages in swap cache [ 759.105184] Swap cache stats: add 0, delete 0, find 0/0 [ 759.127689] Free swap = 0kB [ 759.130757] Total swap = 0kB [ 759.133785] 2097051 pages RAM [ 759.136876] 0 pages HighMem/MovableOnly [ 759.147723] 363841 pages reserved [ 759.151192] 0 pages cma reserved [ 759.154555] Out of memory (oom_kill_allocating_task): Kill process 23440 ((journald)) score 0 or sacrifice child [ 759.197735] Killed process 23440 ((journald)) total-vm:139492kB, anon-rss:2028kB, file-rss:0kB, shmem-rss:0kB [ 759.238672] oom_reaper: reaped process 23440 ((journald)), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 759.282849] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 759.297728] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 759.311038] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 759.331997] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 759.337742] CPU: 0 PID: 23380 Comm: syz-executor.2 Not tainted 4.14.227-syzkaller #0 [ 759.348947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 759.358308] Call Trace: [ 759.360905] dump_stack+0x1b2/0x281 [ 759.364542] warn_alloc.cold+0x96/0x1cc [ 759.368535] ? zone_watermark_ok_safe+0x220/0x220 [ 759.373447] __alloc_pages_nodemask+0x2127/0x2720 [ 759.377751] syz-executor.1 cpuset=/ [ 759.378297] ? lock_acquire+0x170/0x3f0 [ 759.378302] mems_allowed=0-1 [ 759.388965] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 759.393822] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 759.399290] ? __mutex_unlock_slowpath+0x75/0x770 [ 759.404129] alloc_pages_current+0x155/0x260 [ 759.408554] ion_page_pool_alloc+0x118/0x1b0 [ 759.412978] ion_system_heap_allocate+0x133/0x8c0 [ 759.417821] ? _raw_spin_unlock+0x29/0x40 [ 759.421982] ? _ion_heap_freelist_drain+0x6e/0x410 [ 759.426902] ? ion_system_contig_heap_create+0x130/0x130 [ 759.432346] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 759.437366] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 759.442215] ion_alloc+0x27a/0x810 [ 759.445763] ? ion_dma_buf_release+0x40/0x40 [ 759.450173] ? __might_fault+0x177/0x1b0 [ 759.454241] ion_ioctl+0xea/0x1f0 [ 759.457685] ? ion_query_heaps+0x360/0x360 [ 759.461914] ? ion_query_heaps+0x360/0x360 [ 759.466160] do_vfs_ioctl+0x75a/0xff0 [ 759.470565] ? ioctl_preallocate+0x1a0/0x1a0 [ 759.475095] ? lock_downgrade+0x740/0x740 [ 759.479289] ? __fget+0x225/0x360 [ 759.482746] ? do_vfs_ioctl+0xff0/0xff0 [ 759.486723] ? security_file_ioctl+0x83/0xb0 [ 759.491740] SyS_ioctl+0x7f/0xb0 [ 759.495093] ? do_vfs_ioctl+0xff0/0xff0 [ 759.499058] do_syscall_64+0x1d5/0x640 [ 759.503549] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 759.508732] RIP: 0033:0x466459 [ 759.511915] RSP: 002b:00007f9149019188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 759.519640] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 759.526915] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 759.534180] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 759.541439] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 759.548715] R13: 00007ffe1d057aaf R14: 00007f9149019300 R15: 0000000000022000 [ 759.556802] systemd[1]: Failed to start Journal Service. [ 759.578306] systemd[1]: systemd-journald.service: Unit entered failed state. [ 759.594447] CPU: 1 PID: 23384 Comm: syz-executor.1 Not tainted 4.14.227-syzkaller #0 [ 759.602347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 759.611826] Call Trace: [ 759.614425] dump_stack+0x1b2/0x281 [ 759.618057] warn_alloc.cold+0x96/0x1cc [ 759.622059] ? zone_watermark_ok_safe+0x220/0x220 [ 759.626923] __alloc_pages_nodemask+0x2127/0x2720 [ 759.631766] ? lock_acquire+0x170/0x3f0 [ 759.635744] ? lock_acquire+0x170/0x3f0 [ 759.639725] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 759.644575] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 759.650027] ? __mutex_unlock_slowpath+0x75/0x770 [ 759.654878] alloc_pages_current+0x155/0x260 [ 759.659291] ion_page_pool_alloc+0x118/0x1b0 [ 759.663698] ion_system_heap_allocate+0x133/0x8c0 [ 759.668632] ? _raw_spin_unlock+0x29/0x40 [ 759.672782] ? _ion_heap_freelist_drain+0x6e/0x410 [ 759.677717] ? ion_system_contig_heap_create+0x130/0x130 [ 759.683181] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 759.688201] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 759.693064] ion_alloc+0x27a/0x810 [ 759.696610] ? ion_dma_buf_release+0x40/0x40 [ 759.701022] ? __might_fault+0x177/0x1b0 [ 759.705090] ion_ioctl+0xea/0x1f0 [ 759.708541] ? ion_query_heaps+0x360/0x360 [ 759.712781] ? ion_query_heaps+0x360/0x360 [ 759.717018] do_vfs_ioctl+0x75a/0xff0 [ 759.720818] ? ioctl_preallocate+0x1a0/0x1a0 [ 759.725226] ? lock_downgrade+0x740/0x740 [ 759.729555] ? __fget+0x225/0x360 [ 759.733006] ? do_vfs_ioctl+0xff0/0xff0 [ 759.737002] ? security_file_ioctl+0x83/0xb0 [ 759.741408] SyS_ioctl+0x7f/0xb0 [ 759.744774] ? do_vfs_ioctl+0xff0/0xff0 [ 759.748751] do_syscall_64+0x1d5/0x640 [ 759.752645] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 759.757834] RIP: 0033:0x466459 [ 759.761019] RSP: 002b:00007f878dccd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 759.768722] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 759.775990] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 759.777677] warn_alloc_show_mem: 1 callbacks suppressed [ 759.777681] Mem-Info: [ 759.783253] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 759.798277] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 759.798547] active_anon:13238 inactive_anon:37204 isolated_anon:0 [ 759.798547] active_file:544 inactive_file:886 isolated_file:0 [ 759.798547] unevictable:0 dirty:22 writeback:0 unstable:0 [ 759.798547] slab_reclaimable:12523 slab_unreclaimable:114384 [ 759.798547] mapped:53248 shmem:37652 pagetables:766 bounce:0 [ 759.798547] free:123303 free_pcp:140 free_cma:0 [ 759.805542] R13: 00007fff67b70adf R14: 00007f878dccd300 R15: 0000000000022000 [ 759.840150] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 759.861356] Node 0 active_anon:51588kB inactive_anon:95612kB active_file:1816kB inactive_file:4340kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:178376kB dirty:88kB writeback:0kB shmem:97044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 759.879515] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 759.951333] systemd[1]: Stopped Journal Service. [ 759.984275] Node 1 active_anon:1364kB inactive_anon:53204kB active_file:460kB inactive_file:304kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:35416kB dirty:0kB writeback:0kB shmem:53564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 760.043526] chnl_net:caif_netlink_parms(): no params data found [ 760.061210] syz-executor.0: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 760.071907] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 760.077261] CPU: 0 PID: 23360 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 760.085224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 760.094575] Call Trace: [ 760.097164] dump_stack+0x1b2/0x281 [ 760.100793] warn_alloc.cold+0x96/0x1cc [ 760.104768] ? zone_watermark_ok_safe+0x220/0x220 [ 760.109611] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 760.115083] ? wake_all_kswapds+0x175/0x360 [ 760.119403] __alloc_pages_nodemask+0x2127/0x2720 [ 760.124238] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 760.129245] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 760.134263] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 760.139113] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 760.144040] ? cache_alloc_refill+0x2fa/0x350 [ 760.148528] ? ____cache_alloc_node+0x156/0x1d0 [ 760.153187] cache_grow_begin+0x91/0x630 [ 760.157241] ? cache_grow_begin+0x91/0x630 [ 760.161469] fallback_alloc+0x207/0x2c0 [ 760.165434] __kmalloc+0x213/0x400 [ 760.168963] ? batadv_hash_new+0xaa/0x270 [ 760.173103] batadv_hash_new+0xaa/0x270 [ 760.177068] ? batadv_hash_set_lock_class+0x9a/0xf0 [ 760.182098] batadv_tt_init+0x2b2/0x390 [ 760.186070] batadv_mesh_init+0x478/0x630 [ 760.190224] batadv_softif_init_late+0xa26/0xc90 [ 760.194973] ? batadv_get_strings+0x40/0x40 [ 760.199283] ? dev_valid_name+0x1a0/0x1a0 [ 760.203421] ? batadv_get_strings+0x40/0x40 [ 760.207733] register_netdevice+0x291/0xe40 [ 760.212047] ? netdev_change_features+0xa0/0xa0 [ 760.216705] ? rtnl_create_link+0x129/0x890 [ 760.221017] rtnl_newlink+0x14dc/0x1830 [ 760.224978] ? rtnl_newlink+0x43d/0x1830 [ 760.229028] ? __lock_acquire+0x5fc/0x3f20 [ 760.233275] ? trace_hardirqs_on+0x10/0x10 [ 760.237497] ? rtnl_dellink+0x6a0/0x6a0 [ 760.241459] ? trace_hardirqs_on+0x10/0x10 [ 760.245680] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 760.251554] ? deref_stack_reg+0x124/0x1a0 [ 760.255815] ? lock_acquire+0x170/0x3f0 [ 760.259792] ? lock_downgrade+0x740/0x740 [ 760.263933] ? rtnl_dellink+0x6a0/0x6a0 [ 760.267897] rtnetlink_rcv_msg+0x3be/0xb10 [ 760.272125] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 760.276610] ? __netlink_lookup+0x345/0x5d0 [ 760.280942] netlink_rcv_skb+0x125/0x390 [ 760.285005] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 760.289490] ? netlink_ack+0x9a0/0x9a0 [ 760.293375] netlink_unicast+0x437/0x610 [ 760.297427] ? netlink_sendskb+0xd0/0xd0 [ 760.301478] ? __check_object_size+0x179/0x230 [ 760.306051] netlink_sendmsg+0x62e/0xb80 [ 760.310104] ? nlmsg_notify+0x170/0x170 [ 760.314082] ? security_socket_sendmsg+0x83/0xb0 [ 760.318839] ? nlmsg_notify+0x170/0x170 [ 760.322809] sock_sendmsg+0xb5/0x100 [ 760.327820] SyS_sendto+0x1c7/0x2c0 [ 760.331441] ? SyS_getpeername+0x220/0x220 [ 760.335689] ? up_read+0x17/0x30 [ 760.339056] ? __do_page_fault+0x159/0xad0 [ 760.343277] ? do_syscall_64+0x4c/0x640 [ 760.347241] ? SyS_getpeername+0x220/0x220 [ 760.351472] do_syscall_64+0x1d5/0x640 [ 760.355357] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 760.360537] RIP: 0033:0x4193ec [ 760.363714] RSP: 002b:00007fff16dc82c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 760.371433] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193ec [ 760.378708] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 760.385964] RBP: 0000000000000000 R08: 00007fff16dc8314 R09: 000000000000000c [ 760.393220] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 760.400488] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 760.428203] Node 0 DMA free:11044kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 760.487703] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 760.492912] Node 0 DMA32 free:45040kB min:36200kB low:45248kB high:54296kB active_anon:51776kB inactive_anon:95612kB active_file:2572kB inactive_file:3396kB unevictable:0kB writepending:116kB present:3129332kB managed:2788156kB mlocked:0kB kernel_stack:7776kB pagetables:2948kB bounce:0kB free_pcp:964kB local_pcp:252kB free_cma:0kB [ 760.557687] lowmem_reserve[]: 0 0 0 0 0 [ 760.561835] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 760.597806] Bluetooth: hci5 command 0x041b tx timeout [ 760.617862] lowmem_reserve[]: 0 0 0 0 0 [ 760.621869] Node 1 Normal free:69952kB min:53696kB low:67120kB high:80544kB active_anon:1472kB inactive_anon:53204kB active_file:1932kB inactive_file:1292kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:264kB bounce:0kB free_pcp:236kB local_pcp:184kB free_cma:0kB [ 760.713854] lowmem_reserve[]: 0 0 0 0 0 [ 760.721405] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 760.737714] Node 0 DMA: 118*4kB (UM) 23*8kB (UME) 14*16kB (UM) 9*32kB (UME) 3*64kB (ME) 1*128kB (E) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10960kB [ 760.749061] systemd-journal cpuset=/ mems_allowed=0-1 [ 760.770294] Node 0 DMA32: 362*4kB (UMEH) 386*8kB (ME) 108*16kB (MEH) 382*32kB (UMEH) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18488kB [ 760.771443] CPU: 1 PID: 23504 Comm: systemd-journal Not tainted 4.14.227-syzkaller #0 [ 760.792192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 760.801980] Call Trace: [ 760.804582] dump_stack+0x1b2/0x281 [ 760.808209] dump_header+0x178/0x82f [ 760.809121] Node 0 Normal: [ 760.812013] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 760.812024] ? ___ratelimit+0x2cd/0x530 [ 760.814968] 0*4kB [ 760.820058] oom_kill_process.cold+0x10/0xb18 [ 760.820076] out_of_memory+0xe3e/0x1190 [ 760.820089] ? oom_killer_disable+0x1c0/0x1c0 [ 760.820100] ? mutex_trylock+0x152/0x1a0 [ 760.843143] __alloc_pages_nodemask+0x23e1/0x2720 [ 760.847991] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 760.852825] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 760.857580] ? retint_kernel+0x2d/0x2d [ 760.861466] cache_grow_begin+0x91/0x630 [ 760.865517] ? cache_grow_begin+0x91/0x630 [ 760.869742] fallback_alloc+0x207/0x2c0 [ 760.874317] kmem_cache_alloc+0x1e5/0x3c0 [ 760.878454] getname_flags+0xc8/0x550 [ 760.882245] user_path_at_empty+0x2a/0x50 [ 760.886410] vfs_statx+0xd1/0x180 [ 760.889855] ? cp_compat_stat+0x890/0x890 [ 760.894094] SyS_newlstat+0x83/0xe0 [ 760.897707] ? SyS_newstat+0xe0/0xe0 [ 760.901401] ? __secure_computing+0xe5/0x3e0 [ 760.905825] ? syscall_trace_enter+0x486/0xc20 [ 760.910657] ? syscall_slow_exit_work+0x560/0x560 [ 760.915489] ? do_syscall_64+0x4c/0x640 [ 760.919455] ? SyS_newstat+0xe0/0xe0 [ 760.923166] do_syscall_64+0x1d5/0x640 [ 760.927053] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 760.932230] RIP: 0033:0x7fc3f3f0d335 [ 760.935925] RSP: 002b:00007ffe7484abc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 760.943621] RAX: ffffffffffffffda RBX: 00005638285971c0 RCX: 00007fc3f3f0d335 [ 760.951140] RDX: 00007ffe7484ac00 RSI: 00007ffe7484ac00 RDI: 00005638285961c0 [ 760.958393] RBP: 00007ffe7484acc0 R08: 0000000000000003 R09: 0000000000001010 [ 760.965651] R10: 0000000000000030 R11: 0000000000000246 R12: 00005638285961c0 [ 760.972905] R13: 00005638285961c4 R14: 0000563828596121 R15: 0000563828596124 [ 760.980311] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 761.007735] Node 1 Normal: 24*4kB (UME) 34*8kB (UME) 21*16kB (ME) 808*32kB (UME) 2*64kB (UE) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26688kB [ 761.025446] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 761.034368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 761.043025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 761.049009] Mem-Info: [ 761.052146] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 761.054316] active_anon:13309 inactive_anon:37204 isolated_anon:0 [ 761.054316] active_file:24 inactive_file:21 isolated_file:27 [ 761.054316] unevictable:0 dirty:0 writeback:22 unstable:0 [ 761.054316] slab_reclaimable:12597 slab_unreclaimable:114606 [ 761.054316] mapped:52247 shmem:37652 pagetables:791 bounce:0 [ 761.054316] free:14106 free_pcp:181 free_cma:0 [ 761.062887] 37728 total pagecache pages [ 761.062898] 0 pages in swap cache [ 761.062903] Swap cache stats: add 0, delete 0, find 0/0 [ 761.062907] Free swap = 0kB [ 761.062911] Total swap = 0kB [ 761.062917] 2097051 pages RAM [ 761.062920] 0 pages HighMem/MovableOnly [ 761.062923] 363841 pages reserved [ 761.062926] 0 pages cma reserved [ 761.067291] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 761.100490] Node 0 active_anon:51708kB inactive_anon:95612kB active_file:44kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174156kB dirty:0kB writeback:80kB shmem:97044kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 761.104060] ------------[ cut here ]------------ [ 761.109978] Node 1 active_anon:1528kB inactive_anon:53204kB active_file:52kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:34832kB dirty:0kB writeback:8kB shmem:53564kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 761.112244] WARNING: CPU: 0 PID: 23360 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 761.115228] Node 0 [ 761.118309] Kernel panic - not syncing: panic_on_warn set ... [ 761.118309] [ 761.118318] CPU: 0 PID: 23360 Comm: syz-executor.0 Not tainted 4.14.227-syzkaller #0 [ 761.118322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 761.118325] Call Trace: [ 761.118341] dump_stack+0x1b2/0x281 [ 761.118353] panic+0x1f9/0x42d [ 761.118361] ? add_taint.cold+0x16/0x16 [ 761.118372] ? debug_print_object.cold+0xa7/0xdb [ 761.118382] ? debug_print_object.cold+0xa7/0xdb [ 761.118389] __warn.cold+0x20/0x44 [ 761.118398] ? ist_end_non_atomic+0x10/0x10 [ 761.118406] ? debug_print_object.cold+0xa7/0xdb [ 761.118415] report_bug+0x208/0x250 [ 761.118426] do_error_trap+0x195/0x2d0 [ 761.118435] ? math_error+0x2d0/0x2d0 [ 761.118450] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 761.118463] invalid_op+0x1b/0x40 [ 761.142342] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 761.166928] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 761.166933] RSP: 0018:ffff888034e4f248 EFLAGS: 00010086 [ 761.166940] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 761.166943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffed10069c9e3f [ 761.166947] RBP: ffffffff878b6e80 R08: 0000000000000061 R09: 0000000000000001 [ 761.166950] R10: 0000000000000000 R11: ffff8880ab622200 R12: 0000000000000000 [ 761.166954] R13: 0000000000000000 R14: ffff88802c3cd630 R15: 1ffff110069c9e52 [ 761.166973] ? debug_print_object.cold+0xa7/0xdb [ 761.166982] debug_object_assert_init+0x1d3/0x2d0 [ 761.166994] ? debug_object_active_state+0x330/0x330 [ 761.167000] ? rtnl_newlink+0x14dc/0x1830 [ 761.167013] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 761.167021] ? netlink_rcv_skb+0x125/0x390 [ 761.167034] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 761.167044] del_timer+0x5d/0xe0 [ 761.167052] ? process_timeout+0x20/0x20 [ 761.167065] try_to_grab_pending+0x243/0x610 [ 761.167074] __cancel_work_timer+0x90/0x460 [ 761.167081] ? work_on_cpu_safe+0x70/0x70 [ 761.167095] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 761.167107] batadv_nc_mesh_free+0x41/0x120 [ 761.167117] batadv_mesh_free+0x70/0x150 [ 761.167125] batadv_mesh_init+0x561/0x630 [ 761.167132] batadv_softif_init_late+0xa26/0xc90 [ 761.167139] ? batadv_get_strings+0x40/0x40 [ 761.167147] ? dev_valid_name+0x1a0/0x1a0 [ 761.167155] ? batadv_get_strings+0x40/0x40 [ 761.167163] register_netdevice+0x291/0xe40 [ 761.167173] ? netdev_change_features+0xa0/0xa0 [ 761.167182] ? rtnl_create_link+0x129/0x890 [ 761.167192] rtnl_newlink+0x14dc/0x1830 [ 761.167198] ? rtnl_newlink+0x43d/0x1830 [ 761.167206] ? __lock_acquire+0x5fc/0x3f20 [ 761.167220] ? trace_hardirqs_on+0x10/0x10 [ 761.167226] ? rtnl_dellink+0x6a0/0x6a0 [ 761.167233] ? trace_hardirqs_on+0x10/0x10 [ 761.167242] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 761.167253] ? deref_stack_reg+0x124/0x1a0 [ 761.174343] syz-executor.1: [ 761.199185] ? lock_acquire+0x170/0x3f0 [ 761.199193] ? lock_downgrade+0x740/0x740 [ 761.199202] ? rtnl_dellink+0x6a0/0x6a0 [ 761.199210] rtnetlink_rcv_msg+0x3be/0xb10 [ 761.199220] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 761.199229] ? __netlink_lookup+0x345/0x5d0 [ 761.199241] netlink_rcv_skb+0x125/0x390 [ 761.199249] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 761.199261] ? netlink_ack+0x9a0/0x9a0 [ 761.237755] lowmem_reserve[]: [ 761.237875] netlink_unicast+0x437/0x610 [ 761.241471] 0 [ 761.244651] ? netlink_sendskb+0xd0/0xd0 [ 761.258052] page allocation failure: order:0 [ 761.258094] ? __check_object_size+0x179/0x230 [ 761.261616] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 761.265923] netlink_sendmsg+0x62e/0xb80 [ 761.280198] 2717 [ 761.281954] ? nlmsg_notify+0x170/0x170 [ 761.286763] 2718 [ 761.290211] ? security_socket_sendmsg+0x83/0xb0 [ 761.290219] ? nlmsg_notify+0x170/0x170 [ 761.290228] sock_sendmsg+0xb5/0x100 [ 761.290237] SyS_sendto+0x1c7/0x2c0 [ 761.290245] ? SyS_getpeername+0x220/0x220 [ 761.290270] ? up_read+0x17/0x30 [ 761.290279] ? __do_page_fault+0x159/0xad0 [ 761.290288] ? do_syscall_64+0x4c/0x640 [ 761.290295] ? SyS_getpeername+0x220/0x220 [ 761.290303] do_syscall_64+0x1d5/0x640 [ 761.290318] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 761.290328] RIP: 0033:0x4193ec [ 761.325528] (null) [ 761.326882] RSP: 002b:00007fff16dc82c0 EFLAGS: 00000293 [ 761.334254] syz-executor.1 cpuset= [ 761.341445] ORIG_RAX: 000000000000002c [ 761.341451] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193ec [ 761.341454] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 761.341459] RBP: 0000000000000000 R08: 00007fff16dc8314 R09: 000000000000000c [ 761.341462] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 761.341466] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 761.349397] Kernel Offset: disabled [ 761.685914] Rebooting in 86400 seconds..