728kB [ 1646.722998] Node 1 Normal: 0*4kB 1*8kB (U) 2*16kB (UM) 834*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26728kB [ 1646.729019] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1646.750381] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1646.752541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1646.765797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1646.773594] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1646.785233] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1646.787731] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1646.799111] 25426 total pagecache pages [ 1646.812981] 0 pages in swap cache [ 1646.815984] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1646.816451] Swap cache stats: add 0, delete 0, find 0/0 [ 1646.816454] Free swap = 0kB [ 1646.816457] Total swap = 0kB [ 1646.816463] 2097051 pages RAM [ 1646.816466] 0 pages HighMem/MovableOnly [ 1646.816469] 363849 pages reserved [ 1646.816472] 0 pages cma reserved [ 1646.816478] Out of memory (oom_kill_allocating_task): Kill process 5452 (syz-executor.1) score 0 or sacrifice child [ 1646.816503] Killed process 8208 (syz-executor.1) total-vm:93252kB, anon-rss:2192kB, file-rss:34820kB, shmem-rss:0kB [ 1646.839383] 25426 total pagecache pages [ 1646.847499] warn_alloc_show_mem: 1 callbacks suppressed [ 1646.847501] Mem-Info: [ 1646.873480] 0 pages in swap cache [ 1646.899644] oom_reaper: reaped process 8208 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1646.909042] active_anon:17619 inactive_anon:24288 isolated_anon:0 [ 1646.909042] active_file:22 inactive_file:0 isolated_file:0 [ 1646.909042] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1646.909042] slab_reclaimable:12963 slab_unreclaimable:112557 [ 1646.909042] mapped:52905 shmem:25365 pagetables:796 bounce:0 [ 1646.909042] free:14061 free_pcp:2 free_cma:0 [ 1646.921376] Swap cache stats: add 0, delete 0, find 0/0 [ 1646.944451] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1646.960008] Free swap = 0kB [ 1646.977002] Node 0 active_anon:67520kB inactive_anon:79552kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186080kB dirty:0kB writeback:0kB shmem:83716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1646.982952] Total swap = 0kB [ 1647.012310] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1647.018892] 2097051 pages RAM [ 1647.019280] CPU: 1 PID: 5452 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1647.021982] 0 pages HighMem/MovableOnly [ 1647.029766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1647.029769] Call Trace: [ 1647.029785] dump_stack+0x1b2/0x281 [ 1647.029795] dump_header+0x178/0x82f [ 1647.029806] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1647.029814] ? ___ratelimit+0x2cd/0x530 [ 1647.029824] oom_kill_process.cold+0x10/0xa40 [ 1647.029840] out_of_memory+0xe3e/0x1190 [ 1647.029852] ? oom_killer_disable+0x1c0/0x1c0 [ 1647.044364] 363849 pages reserved [ 1647.045740] ? mutex_trylock+0x152/0x1a0 [ 1647.049376] 0 pages cma reserved [ 1647.053039] __alloc_pages_nodemask+0x23e1/0x2720 [ 1647.089031] Node 1 active_anon:2944kB inactive_anon:17600kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25468kB dirty:0kB writeback:0kB shmem:17744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1647.090646] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1647.122429] alloc_pages_current+0x155/0x260 [ 1647.126832] filemap_fault+0x11a1/0x1ad0 [ 1647.130887] ext4_filemap_fault+0x84/0xb0 [ 1647.135023] __do_fault+0xfa/0x380 [ 1647.138560] __handle_mm_fault+0x2497/0x4620 [ 1647.142957] ? vm_insert_page+0x7c0/0x7c0 [ 1647.147092] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1647.151485] ? nanosleep_copyout+0x100/0x100 [ 1647.155891] ? mark_held_locks+0xa6/0xf0 [ 1647.159952] handle_mm_fault+0x455/0x9c0 [ 1647.164010] __do_page_fault+0x549/0xad0 [ 1647.168065] ? spurious_fault+0x640/0x640 [ 1647.169246] Node 0 [ 1647.172216] ? do_page_fault+0x60/0x500 [ 1647.172227] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1647.172231] lowmem_reserve[]: [ 1647.174458] ? page_fault+0x2f/0x50 [ 1647.187201] syz-executor.1: [ 1647.203994] page_fault+0x45/0x50 [ 1647.204002] RIP: 190e2e:0x4 [ 1647.204006] RSP: 004f:00007fff82dde11c EFLAGS: 00000032 [ 1647.221116] Mem-Info: [ 1647.221722] 0 2717 2718 2718 2718 [ 1647.232843] Node 0 DMA32 free:17932kB min:36200kB low:45248kB high:54296kB active_anon:67520kB inactive_anon:79552kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2728kB bounce:0kB free_pcp:264kB local_pcp:144kB free_cma:0kB [ 1647.235717] active_anon:17616 inactive_anon:24288 isolated_anon:0 [ 1647.235717] active_file:15 inactive_file:16 isolated_file:0 [ 1647.235717] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1647.235717] slab_reclaimable:12963 slab_unreclaimable:112558 [ 1647.235717] mapped:52887 shmem:25365 pagetables:795 bounce:0 [ 1647.235717] free:13938 free_pcp:66 free_cma:0 [ 1647.263786] page allocation failure: order:0 [ 1647.295117] Node 0 active_anon:67520kB inactive_anon:79552kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186080kB dirty:0kB writeback:0kB shmem:83716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1647.295131] Node 1 active_anon:2944kB inactive_anon:17600kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25468kB dirty:0kB writeback:0kB shmem:17744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1647.324664] lowmem_reserve[]: [ 1647.327213] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1647.327231] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1647.327249] Node 0 DMA32 free:17932kB min:36200kB low:45248kB high:54296kB active_anon:67520kB inactive_anon:79552kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2728kB bounce:0kB free_pcp:256kB local_pcp:120kB free_cma:0kB [ 1647.327267] lowmem_reserve[]: [ 1647.371362] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1647.383992] 0 [ 1647.414082] 0 [ 1647.420736] 0 0 0 0 [ 1647.433826] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1647.434592] 0 [ 1647.463195] lowmem_reserve[]: 0 0 0 0 0 [ 1647.469007] Node 1 Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:2944kB inactive_anon:17600kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:452kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1647.473777] (null) [ 1647.507706] 0 0 0 [ 1647.509088] lowmem_reserve[]: [ 1647.509872] Node 0 [ 1647.509875] 0 0 [ 1647.512966] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1647.515172] 0 0 [ 1647.520330] syz-executor.1 cpuset= [ 1647.552182] lowmem_reserve[]: [ 1647.553987] 0 [ 1647.555715] 0 0 0 0 0 [ 1647.563232] Node 1 [ 1647.563234] Node 0 DMA: [ 1647.565458] Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:2944kB inactive_anon:17600kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:452kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1647.565464] 1*4kB [ 1647.571367] lowmem_reserve[]: [ 1647.602145] / mems_allowed=0-1 [ 1647.608502] CPU: 0 PID: 8208 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1647.610868] (U) [ 1647.616278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1647.616281] Call Trace: [ 1647.616299] dump_stack+0x1b2/0x281 [ 1647.616311] warn_alloc.cold+0x96/0x1cc [ 1647.616322] ? zone_watermark_ok_safe+0x220/0x220 [ 1647.620307] 1*8kB [ 1647.628076] ? usleep_range+0x130/0x130 [ 1647.628085] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1647.628095] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1647.628105] ? run_timer_softirq+0x5a0/0x5a0 [ 1647.630668] (E) [ 1647.634285] __alloc_pages_nodemask+0x2127/0x2720 [ 1647.638259] 1*16kB [ 1647.643064] ? lock_acquire+0x170/0x3f0 [ 1647.645213] (U) [ 1647.649174] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1647.649183] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1647.649198] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1647.654278] 2*32kB [ 1647.659280] alloc_pages_current+0x155/0x260 [ 1647.659290] ion_page_pool_alloc+0x118/0x1b0 [ 1647.659299] ion_system_heap_allocate+0x133/0x8c0 [ 1647.663678] (UE) [ 1647.665636] ? _raw_spin_unlock+0x29/0x40 [ 1647.670466] 4*64kB [ 1647.672665] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1647.676638] (UE) [ 1647.678575] ? ion_system_contig_heap_create+0x130/0x130 [ 1647.683395] 9*128kB (UE) [ 1647.687875] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1647.687885] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1647.687894] ion_alloc+0x27a/0x810 [ 1647.693335] 3*256kB [ 1647.695555] ? ion_dma_buf_release+0x40/0x40 [ 1647.699947] (UE) [ 1647.704317] ? __might_fault+0x177/0x1b0 [ 1647.709141] 3*512kB [ 1647.711172] ion_ioctl+0xea/0x1f0 [ 1647.715288] (UE) [ 1647.717511] ? ion_query_heaps+0x360/0x360 [ 1647.717523] ? lock_acquire+0x170/0x3f0 [ 1647.717532] ? ion_query_heaps+0x360/0x360 [ 1647.722431] 1*1024kB [ 1647.724473] do_vfs_ioctl+0x75a/0xff0 [ 1647.729918] (E) [ 1647.732645] ? ioctl_preallocate+0x1a0/0x1a0 [ 1647.737653] 3*2048kB [ 1647.742731] ? lock_downgrade+0x740/0x740 [ 1647.746252] (UM) [ 1647.748548] ? __fget+0x225/0x360 [ 1647.752921] 0*4096kB [ 1647.754965] ? do_vfs_ioctl+0xff0/0xff0 [ 1647.759013] = 10972kB [ 1647.761302] ? security_file_ioctl+0x83/0xb0 [ 1647.764723] Node 0 [ 1647.766794] SyS_ioctl+0x7f/0xb0 [ 1647.766818] ? do_vfs_ioctl+0xff0/0xff0 [ 1647.766829] do_syscall_64+0x1d5/0x640 [ 1647.766844] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1647.771045] DMA32: [ 1647.774994] RIP: 0033:0x4665d9 [ 1647.779224] 681*4kB [ 1647.781595] RSP: 002b:00007f2b0c972188 EFLAGS: 00000246 [ 1647.785365] (UME) [ 1647.787313] ORIG_RAX: 0000000000000010 [ 1647.787323] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1647.787328] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1647.787334] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1647.791734] 563*8kB [ 1647.794115] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1647.794121] R13: 00007fff82ddde5f R14: 00007f2b0c972300 R15: 0000000000022000 [ 1647.798253] (ME) [ 1647.804385] 0 [ 1647.822615] 255*16kB [ 1647.830598] 0 [ 1647.839849] (UME) [ 1647.841726] 0 [ 1647.844057] 61*32kB [ 1647.852906] 0 [ 1647.862904] (ME) [ 1647.873494] 0 [ 1647.892264] 39*64kB [ 1647.906673] (UM) [ 1647.908785] Node 0 [ 1647.910562] 15*128kB [ 1647.912598] DMA: [ 1647.914395] (UM) [ 1647.920335] 1*4kB [ 1647.928298] 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17932kB [ 1647.932410] (U) 1*8kB (E) 1*16kB (U) 2*32kB (UE) 4*64kB (UE) 9*128kB (UE) 3*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 10972kB [ 1647.940986] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1647.965751] Node 0 [ 1647.973651] Node 1 [ 1647.973654] DMA32: 681*4kB [ 1647.975884] Normal: [ 1647.988758] (UME) [ 1647.988847] 0*4kB [ 1647.991073] 563*8kB [ 1647.993209] 0*8kB [ 1647.995335] (ME) [ 1648.001408] 2*16kB (UM) 838*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26848kB [ 1648.009924] 255*16kB (UME) 61*32kB (ME) 39*64kB (UM) 15*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17932kB [ 1648.016677] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1648.034249] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1648.040186] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1648.045686] Node 1 [ 1648.061515] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1648.065010] Normal: 0*4kB 0*8kB 2*16kB (UM) 838*32kB (UM) 0*64kB 0*128kB [ 1648.074450] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1648.074455] 25396 total pagecache pages [ 1648.091278] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26848kB [ 1648.101643] 0 pages in swap cache [ 1648.104406] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1648.105107] Swap cache stats: add 0, delete 0, find 0/0 [ 1648.124549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1648.127074] Free swap = 0kB [ 1648.134961] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1648.142927] Total swap = 0kB [ 1648.148093] 2097051 pages RAM [ 1648.151179] 0 pages HighMem/MovableOnly [ 1648.154068] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1648.155135] 363849 pages reserved [ 1648.164127] Mem-Info: [ 1648.175062] 0 pages cma reserved [ 1648.178445] Out of memory (oom_kill_allocating_task): Kill process 5452 (syz-executor.1) score 0 or sacrifice child [ 1648.179664] active_anon:17616 inactive_anon:24288 isolated_anon:0 [ 1648.179664] active_file:6 inactive_file:6 isolated_file:0 [ 1648.179664] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1648.179664] slab_reclaimable:12937 slab_unreclaimable:112536 [ 1648.179664] mapped:52887 shmem:25365 pagetables:795 bounce:0 [ 1648.179664] free:13938 free_pcp:64 free_cma:0 [ 1648.195935] Killed process 5452 (syz-executor.1) total-vm:93120kB, anon-rss:104kB, file-rss:34500kB, shmem-rss:0kB [ 1648.225420] 25396 total pagecache pages [ 1648.240762] 0 pages in swap cache [ 1648.244207] Swap cache stats: add 0, delete 0, find 0/0 [ 1648.264348] oom_reaper: reaped process 5452 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1648.274265] Free swap = 0kB [ 1648.281555] Total swap = 0kB [ 1648.284570] 2097051 pages RAM [ 1648.289204] 0 pages HighMem/MovableOnly [ 1648.293168] 363849 pages reserved [ 1648.299977] 0 pages cma reserved [ 1648.324485] oom_reaper: reaped process 8197 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1648.334429] Node 0 active_anon:67420kB inactive_anon:79552kB active_file:20kB inactive_file:1420kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186680kB dirty:0kB writeback:0kB shmem:83716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1648.388067] Node 1 active_anon:2944kB inactive_anon:17600kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25468kB dirty:0kB writeback:0kB shmem:17744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1648.419417] Node 0 DMA free:11244kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1648.449917] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1648.454965] Node 0 DMA32 free:108156kB min:36200kB low:45248kB high:54296kB active_anon:67820kB inactive_anon:79552kB active_file:120kB inactive_file:8420kB unevictable:0kB writepending:296kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2580kB bounce:0kB free_pcp:268kB local_pcp:228kB free_cma:0kB [ 1648.496584] lowmem_reserve[]: 0 0 0 0 0 [ 1648.500620] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1648.596525] lowmem_reserve[]: 0 0 0 0 0 [ 1648.600545] Node 1 Normal free:549920kB min:53696kB low:67120kB high:80544kB active_anon:2944kB inactive_anon:17600kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:452kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 1648.695850] lowmem_reserve[]: 0 0 0 0 0 [ 1648.699874] Node 0 DMA: 1*4kB (U) 2*8kB (UE) 1*16kB (U) 2*32kB (UE) 2*64kB (UE) 3*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11108kB [ 1648.754816] Node 0 DMA32: 104*4kB (UME) 374*8kB (ME) 167*16kB (E) 23*32kB (UE) 126*64kB (UE) 194*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39968kB [ 1648.778837] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 15:40:56 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) [ 1648.810017] Node 1 Normal: 2*4kB (UM) 1*8kB (U) 2*16kB (UM) 0*32kB 5400*64kB (UM) 171*128kB (U) 12*256kB (U) 0*512kB 8*1024kB (U) 0*2048kB 0*4096kB = 378800kB [ 1648.826692] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1648.845824] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1648.854414] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1648.886154] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1648.894815] 27832 total pagecache pages [ 1648.913053] 0 pages in swap cache [ 1648.917038] Swap cache stats: add 0, delete 0, find 0/0 [ 1648.922427] Free swap = 0kB [ 1648.925461] Total swap = 0kB [ 1648.939062] 2097051 pages RAM [ 1648.942181] 0 pages HighMem/MovableOnly [ 1648.956097] 363849 pages reserved [ 1648.959563] 0 pages cma reserved [ 1649.037977] syz-executor.1 (5452) used greatest stack depth: 24512 bytes left [ 1649.548925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1649.562365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1649.592503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1649.617761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1649.633296] device bridge_slave_1 left promiscuous mode [ 1649.644485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1649.660676] device bridge_slave_0 left promiscuous mode [ 1649.692365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.709055] device veth1_macvtap left promiscuous mode [ 1649.714444] device veth0_macvtap left promiscuous mode [ 1649.735729] device veth1_vlan left promiscuous mode [ 1649.740780] device veth0_vlan left promiscuous mode [ 1649.914445] device hsr_slave_1 left promiscuous mode [ 1649.931212] device hsr_slave_0 left promiscuous mode [ 1649.963762] team0 (unregistering): Port device team_slave_1 removed [ 1649.988891] team0 (unregistering): Port device team_slave_0 removed [ 1650.008131] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1650.028749] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1650.101835] bond0 (unregistering): Released all slaves 15:40:58 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a}) 15:40:58 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)) 15:40:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 15:40:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) 15:40:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) 15:40:58 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) 15:40:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x0, 0x2}) 15:40:58 executing program 4: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x181001, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r2, 0x800c5011, &(0x7f0000000140)) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f00000002c0)=0x1) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f00000002c0)=0x1) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r5, 0xc0045003, &(0x7f00000002c0)=0x1) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f00000002c0)=0x1) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f00000002c0)=0x1) ioctl$SNDCTL_DSP_GETFMTS(r2, 0x8004500b, &(0x7f0000000100)=0x3) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x6, 0x80000000, 0x0, 0x1}) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000003, 0x10, r0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f00000000c0)="a4", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 15:40:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x0, 0x2}) 15:40:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x0, 0x2}) 15:40:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a}) 15:40:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a}) [ 1651.898763] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1651.905877] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1651.914169] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1651.936336] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1651.939978] syz-executor.5 cpuset= [ 1651.941452] CPU: 0 PID: 8248 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1651.941457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1651.941460] Call Trace: [ 1651.941480] dump_stack+0x1b2/0x281 [ 1651.941492] warn_alloc.cold+0x96/0x1cc [ 1651.945052] / [ 1651.952790] ? zone_watermark_ok_safe+0x220/0x220 [ 1651.964605] syz-executor.2 cpuset= [ 1651.964705] __alloc_pages_nodemask+0x2127/0x2720 [ 1651.968373] / [ 1651.972244] ? __schedule+0x893/0x1de0 [ 1651.973985] mems_allowed=0-1 [ 1651.978753] ? lock_acquire+0x170/0x3f0 [ 1651.978767] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1651.978782] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1651.982336] mems_allowed=0-1 [ 1651.987123] ? __mutex_unlock_slowpath+0x75/0x770 [ 1651.987137] alloc_pages_current+0x155/0x260 [ 1651.987149] ion_page_pool_alloc+0x118/0x1b0 [ 1651.987158] ion_system_heap_allocate+0x133/0x8c0 [ 1651.987167] ? ion_alloc+0x187/0x810 [ 1652.035146] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1652.040575] ? ion_system_contig_heap_create+0x130/0x130 [ 1652.046011] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1652.051006] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1652.055826] ion_alloc+0x204/0x810 [ 1652.059345] ? ion_dma_buf_release+0x40/0x40 [ 1652.063735] ? __might_fault+0x177/0x1b0 [ 1652.067876] ion_ioctl+0xea/0x1f0 [ 1652.071304] ? ion_query_heaps+0x360/0x360 [ 1652.075518] ? lock_acquire+0x170/0x3f0 [ 1652.079471] ? ion_query_heaps+0x360/0x360 [ 1652.083686] do_vfs_ioctl+0x75a/0xff0 [ 1652.087468] ? ioctl_preallocate+0x1a0/0x1a0 [ 1652.091850] ? lock_downgrade+0x740/0x740 [ 1652.095977] ? __fget+0x225/0x360 [ 1652.099405] ? do_vfs_ioctl+0xff0/0xff0 [ 1652.103357] ? security_file_ioctl+0x83/0xb0 [ 1652.107745] SyS_ioctl+0x7f/0xb0 [ 1652.111097] ? do_vfs_ioctl+0xff0/0xff0 [ 1652.115067] do_syscall_64+0x1d5/0x640 [ 1652.118943] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1652.124107] RIP: 0033:0x4665d9 [ 1652.127271] RSP: 002b:00007f264b33c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1652.134953] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1652.142200] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1652.149449] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1652.156699] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1652.163946] R13: 00007ffed4ba430f R14: 00007f264b33c300 R15: 0000000000022000 [ 1652.171208] CPU: 1 PID: 8242 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1652.179007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1652.188353] Call Trace: [ 1652.190938] dump_stack+0x1b2/0x281 [ 1652.194561] warn_alloc.cold+0x96/0x1cc [ 1652.198532] ? zone_watermark_ok_safe+0x220/0x220 [ 1652.203386] __alloc_pages_nodemask+0x2127/0x2720 [ 1652.208230] ? lock_acquire+0x170/0x3f0 [ 1652.212228] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1652.217073] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1652.222520] ? __mutex_unlock_slowpath+0x75/0x770 [ 1652.227380] alloc_pages_current+0x155/0x260 [ 1652.231783] ion_page_pool_alloc+0x118/0x1b0 [ 1652.236182] ion_system_heap_allocate+0x133/0x8c0 [ 1652.241018] ? ion_alloc+0x187/0x810 [ 1652.244726] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1652.250165] ? ion_system_contig_heap_create+0x130/0x130 [ 1652.255628] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1652.260727] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1652.265565] ion_alloc+0x204/0x810 [ 1652.269098] ? ion_dma_buf_release+0x40/0x40 [ 1652.273590] ? __might_fault+0x177/0x1b0 [ 1652.277644] ion_ioctl+0xea/0x1f0 [ 1652.281087] ? ion_query_heaps+0x360/0x360 [ 1652.285318] ? lock_acquire+0x170/0x3f0 [ 1652.289279] ? ion_query_heaps+0x360/0x360 [ 1652.293507] do_vfs_ioctl+0x75a/0xff0 [ 1652.297306] ? ioctl_preallocate+0x1a0/0x1a0 [ 1652.301703] ? lock_downgrade+0x740/0x740 [ 1652.305845] ? __fget+0x225/0x360 [ 1652.309301] ? do_vfs_ioctl+0xff0/0xff0 [ 1652.313267] ? security_file_ioctl+0x83/0xb0 [ 1652.317668] SyS_ioctl+0x7f/0xb0 [ 1652.321029] ? do_vfs_ioctl+0xff0/0xff0 [ 1652.324994] do_syscall_64+0x1d5/0x640 [ 1652.328878] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1652.334053] RIP: 0033:0x4665d9 [ 1652.337244] RSP: 002b:00007f28a7fcb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1652.344992] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1652.352433] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1652.359868] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1652.367121] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1652.374365] R13: 00007ffd6449ea9f R14: 00007f28a7fcb300 R15: 0000000000022000 [ 1652.401385] CPU: 1 PID: 8240 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1652.409279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1652.418618] Call Trace: [ 1652.421197] dump_stack+0x1b2/0x281 [ 1652.424827] warn_alloc.cold+0x96/0x1cc [ 1652.428801] ? zone_watermark_ok_safe+0x220/0x220 [ 1652.433646] __alloc_pages_nodemask+0x2127/0x2720 [ 1652.438481] ? __schedule+0x893/0x1de0 [ 1652.442457] ? lock_acquire+0x170/0x3f0 [ 1652.446450] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1652.451297] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1652.456747] ? __mutex_unlock_slowpath+0x75/0x770 [ 1652.461590] alloc_pages_current+0x155/0x260 [ 1652.466000] ion_page_pool_alloc+0x118/0x1b0 [ 1652.470428] ion_system_heap_allocate+0x133/0x8c0 [ 1652.475265] ? ion_alloc+0x187/0x810 [ 1652.475753] Mem-Info: [ 1652.478985] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1652.481391] active_anon:18282 inactive_anon:24287 isolated_anon:0 [ 1652.481391] active_file:1504 inactive_file:5582 isolated_file:0 [ 1652.481391] unevictable:0 dirty:139 writeback:0 unstable:0 [ 1652.481391] slab_reclaimable:12842 slab_unreclaimable:111457 [ 1652.481391] mapped:57685 shmem:25362 pagetables:750 bounce:0 [ 1652.481391] free:199092 free_pcp:332 free_cma:0 [ 1652.486809] ? ion_system_contig_heap_create+0x130/0x130 [ 1652.486818] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1652.486828] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1652.486838] ion_alloc+0x204/0x810 [ 1652.486851] ? ion_dma_buf_release+0x40/0x40 [ 1652.486861] ? __might_fault+0x177/0x1b0 [ 1652.486872] ion_ioctl+0xea/0x1f0 [ 1652.486890] ? ion_query_heaps+0x360/0x360 [ 1652.555686] ? lock_acquire+0x170/0x3f0 [ 1652.559661] ? ion_query_heaps+0x360/0x360 [ 1652.563907] do_vfs_ioctl+0x75a/0xff0 [ 1652.565736] Node 0 active_anon:70032kB inactive_anon:79548kB active_file:4224kB inactive_file:17932kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:201744kB dirty:500kB writeback:0kB shmem:83704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1652.567700] ? ioctl_preallocate+0x1a0/0x1a0 [ 1652.600417] ? lock_downgrade+0x740/0x740 [ 1652.604589] ? __fget+0x225/0x360 [ 1652.608043] ? do_vfs_ioctl+0xff0/0xff0 [ 1652.612025] ? security_file_ioctl+0x83/0xb0 [ 1652.616428] SyS_ioctl+0x7f/0xb0 [ 1652.619784] ? do_vfs_ioctl+0xff0/0xff0 [ 1652.623765] do_syscall_64+0x1d5/0x640 [ 1652.625748] Node 1 active_anon:3096kB inactive_anon:17600kB active_file:1792kB inactive_file:4396kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28996kB dirty:56kB writeback:0kB shmem:17744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1652.627645] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1652.660381] RIP: 0033:0x4665d9 [ 1652.663561] RSP: 002b:00007fc5352ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1652.671265] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1652.678537] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1652.685797] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1652.693057] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1652.695732] Node 0 [ 1652.700318] R13: 00007ffebfcb1a4f R14: 00007fc5352ac300 R15: 0000000000022000 [ 1652.700337] DMA free:11388kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1652.775832] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1652.782721] Node 0 DMA32 free:693208kB min:36200kB low:45248kB high:54296kB active_anon:67984kB inactive_anon:79548kB active_file:4224kB inactive_file:17632kB unevictable:0kB writepending:500kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2480kB bounce:0kB free_pcp:1004kB local_pcp:848kB free_cma:0kB [ 1652.816964] lowmem_reserve[]: 0 0 0 0 0 [ 1652.821327] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1652.848225] lowmem_reserve[]: 0 0 0 0 0 [ 1652.852296] Node 1 Normal free:322308kB min:53696kB low:67120kB high:80544kB active_anon:3096kB inactive_anon:17600kB active_file:1792kB inactive_file:4396kB unevictable:0kB writepending:56kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:520kB bounce:0kB free_pcp:664kB local_pcp:664kB free_cma:0kB [ 1652.882981] lowmem_reserve[]: 0 0 0 0 0 [ 1652.887727] Node 0 DMA: 45*4kB (U) 13*8kB (UE) 36*16kB (U) 23*32kB (UE) 7*64kB (UE) 7*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (UM) 0*4096kB = 11388kB [ 1652.903940] Node 0 DMA32: 283*4kB (ME) 378*8kB (UME) 9403*16kB (UME) 7684*32kB (UME) 2362*64kB (UM) 223*128kB (U) 6*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 581740kB [ 1652.920883] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1652.932374] Node 1 Normal: 6928*4kB (UM) 6221*8kB (U) 3406*16kB (U) 3213*32kB (UM) 1313*64kB (U) 28*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 322408kB [ 1652.948025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1652.957642] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1652.967024] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1652.977649] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1652.986986] 32441 total pagecache pages [ 1652.991219] 0 pages in swap cache [ 1653.000132] Swap cache stats: add 0, delete 0, find 0/0 [ 1653.013119] Free swap = 0kB [ 1653.019500] Total swap = 0kB [ 1653.026668] 2097051 pages RAM [ 1653.033076] 0 pages HighMem/MovableOnly [ 1653.039280] 363849 pages reserved [ 1653.049474] 0 pages cma reserved [ 1653.864551] cron invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1653.878925] cron cpuset=/ mems_allowed=0-1 [ 1653.884220] CPU: 1 PID: 7692 Comm: cron Not tainted 4.14.232-syzkaller #0 [ 1653.891126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1653.900452] Call Trace: [ 1653.903018] dump_stack+0x1b2/0x281 [ 1653.906634] dump_header+0x178/0x82f [ 1653.910345] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1653.915440] ? ___ratelimit+0x2cd/0x530 [ 1653.919419] oom_kill_process.cold+0x10/0xa40 [ 1653.923915] out_of_memory+0xe3e/0x1190 [ 1653.927881] ? oom_killer_disable+0x1c0/0x1c0 [ 1653.932364] ? mutex_trylock+0x152/0x1a0 [ 1653.936518] __alloc_pages_nodemask+0x23e1/0x2720 [ 1653.941349] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1653.946272] alloc_pages_current+0x155/0x260 [ 1653.950751] filemap_fault+0x11a1/0x1ad0 [ 1653.954791] ext4_filemap_fault+0x84/0xb0 [ 1653.958914] __do_fault+0xfa/0x380 [ 1653.962481] __handle_mm_fault+0x2497/0x4620 [ 1653.966887] ? vm_insert_page+0x7c0/0x7c0 [ 1653.971020] ? cp_compat_stat+0x890/0x890 [ 1653.975145] ? mark_held_locks+0xa6/0xf0 [ 1653.979181] handle_mm_fault+0x455/0x9c0 [ 1653.983222] __do_page_fault+0x549/0xad0 [ 1653.987269] ? spurious_fault+0x640/0x640 [ 1653.991398] ? do_page_fault+0x60/0x500 [ 1653.995392] ? page_fault+0x2f/0x50 [ 1653.998995] page_fault+0x45/0x50 [ 1654.002417] RIP: 0001: (null) [ 1654.006278] RSP: 5ca38418:0000559ebb9a6700 EFLAGS: 7f695d0273a0 [ 1654.019305] Mem-Info: [ 1654.031415] active_anon:18343 inactive_anon:24287 isolated_anon:0 [ 1654.031415] active_file:31 inactive_file:1 isolated_file:0 [ 1654.031415] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1654.031415] slab_reclaimable:12842 slab_unreclaimable:111236 [ 1654.031415] mapped:53022 shmem:25362 pagetables:794 bounce:0 [ 1654.031415] free:25025 free_pcp:159 free_cma:0 [ 1654.072549] Node 0 active_anon:70188kB inactive_anon:79548kB active_file:120kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186620kB dirty:0kB writeback:0kB shmem:83704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1654.106223] Node 1 active_anon:3184kB inactive_anon:17600kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25468kB dirty:0kB writeback:0kB shmem:17744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1654.141978] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1654.175310] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1654.194554] Node 0 DMA32 free:35408kB min:36200kB low:45248kB high:54296kB active_anon:68140kB inactive_anon:79548kB active_file:68kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2656kB bounce:0kB free_pcp:636kB local_pcp:416kB free_cma:0kB [ 1654.234836] lowmem_reserve[]: 0 0 0 0 0 [ 1654.238893] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1654.274090] lowmem_reserve[]: 0 0 0 0 0 [ 1654.278134] Node 1 Normal free:53248kB min:53696kB low:67120kB high:80544kB active_anon:3184kB inactive_anon:17600kB active_file:24kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:520kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1654.310471] lowmem_reserve[]: 0 0 0 0 0 [ 1654.314642] Node 0 DMA: 1*4kB (U) 2*8kB (UE) 32*16kB (U) 23*32kB (UE) 7*64kB (UE) 7*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (UM) 0*4096kB = 11060kB [ 1654.343010] Node 0 DMA32: 740*4kB (UME) 592*8kB (ME) 255*16kB (UME) 88*32kB (UME) 48*64kB (M) 123*128kB (UM) 9*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35712kB [ 1654.366496] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1654.383184] Node 1 Normal: 36*4kB (UM) 19*8kB (M) 15*16kB (UM) 13*32kB (M) 725*64kB (UM) 33*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 53368kB [ 1654.405399] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1654.430519] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1654.443207] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1654.462981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1654.485475] 25398 total pagecache pages [ 1654.490723] 0 pages in swap cache [ 1654.494161] Swap cache stats: add 0, delete 0, find 0/0 [ 1654.503834] Free swap = 0kB [ 1654.517370] Total swap = 0kB [ 1654.520389] 2097051 pages RAM [ 1654.523562] 0 pages HighMem/MovableOnly [ 1654.538930] 363849 pages reserved [ 1654.542386] 0 pages cma reserved [ 1654.552022] Out of memory (oom_kill_allocating_task): Kill process 7692 (cron) score 0 or sacrifice child [ 1654.565066] Killed process 7692 (cron) total-vm:27996kB, anon-rss:244kB, file-rss:0kB, shmem-rss:0kB [ 1654.590087] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1654.645868] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1654.651011] CPU: 0 PID: 6443 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1654.658796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1654.668131] Call Trace: [ 1654.670724] dump_stack+0x1b2/0x281 [ 1654.674335] dump_header+0x178/0x82f [ 1654.678038] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1654.683130] ? ___ratelimit+0x2cd/0x530 [ 1654.687124] oom_kill_process.cold+0x10/0xa40 [ 1654.691599] out_of_memory+0xe3e/0x1190 [ 1654.695551] ? oom_killer_disable+0x1c0/0x1c0 [ 1654.700026] ? mutex_trylock+0x152/0x1a0 [ 1654.704063] __alloc_pages_nodemask+0x23e1/0x2720 [ 1654.708885] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1654.713725] alloc_pages_current+0x155/0x260 [ 1654.718113] filemap_fault+0x11a1/0x1ad0 [ 1654.722157] ext4_filemap_fault+0x84/0xb0 [ 1654.726282] __do_fault+0xfa/0x380 [ 1654.729804] __handle_mm_fault+0x2497/0x4620 [ 1654.734189] ? vm_insert_page+0x7c0/0x7c0 [ 1654.738312] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1654.742734] ? nanosleep_copyout+0x100/0x100 [ 1654.747153] ? mark_held_locks+0xa6/0xf0 [ 1654.751188] handle_mm_fault+0x455/0x9c0 [ 1654.755234] __do_page_fault+0x549/0xad0 [ 1654.759283] ? spurious_fault+0x640/0x640 [ 1654.763422] ? do_page_fault+0x60/0x500 [ 1654.767384] ? page_fault+0x2f/0x50 [ 1654.770979] page_fault+0x45/0x50 [ 1654.774405] RIP: 19349d:0x3 [ 1654.777308] RSP: 002e:00007ffd6449ed5c EFLAGS: 00000032 [ 1654.784671] Mem-Info: [ 1654.804881] active_anon:18343 inactive_anon:24287 isolated_anon:0 [ 1654.804881] active_file:56 inactive_file:0 isolated_file:0 [ 1654.804881] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1654.804881] slab_reclaimable:12842 slab_unreclaimable:111238 [ 1654.804881] mapped:53001 shmem:25362 pagetables:794 bounce:0 [ 1654.804881] free:25066 free_pcp:30 free_cma:0 [ 1654.846180] Node 0 active_anon:70188kB inactive_anon:79548kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186536kB dirty:0kB writeback:0kB shmem:83704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1654.877984] Node 1 active_anon:3184kB inactive_anon:17600kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25468kB dirty:0kB writeback:0kB shmem:17744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1654.907128] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1654.933994] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1654.939067] Node 0 DMA32 free:36036kB min:36200kB low:45248kB high:54296kB active_anon:68140kB inactive_anon:79548kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2656kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1654.967651] lowmem_reserve[]: 0 0 0 0 0 [ 1654.971626] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1654.997198] lowmem_reserve[]: 0 0 0 0 0 [ 1655.001178] Node 1 Normal free:53368kB min:53696kB low:67120kB high:80544kB active_anon:3184kB inactive_anon:17600kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:520kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1655.029438] lowmem_reserve[]: 0 0 0 0 0 [ 1655.033403] Node 0 DMA: 1*4kB (U) 2*8kB (UE) 32*16kB (U) 23*32kB (UE) 7*64kB (UE) 7*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (UM) 0*4096kB = 11060kB [ 1655.048581] Node 0 DMA32: 913*4kB (UME) 596*8kB (UME) 254*16kB (UME) 86*32kB (UME) 49*64kB (UM) 120*128kB (UM) 9*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36036kB [ 1655.063881] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1655.074633] Node 1 Normal: 36*4kB (UM) 19*8kB (M) 15*16kB (UM) 13*32kB (M) 725*64kB (UM) 33*128kB (UM) 1*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 53368kB [ 1655.089792] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1655.098653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1655.107360] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1655.116217] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1655.124791] 25396 total pagecache pages [ 1655.132062] 0 pages in swap cache [ 1655.135511] Swap cache stats: add 0, delete 0, find 0/0 [ 1655.152268] Free swap = 0kB [ 1655.155282] Total swap = 0kB [ 1655.160262] 2097051 pages RAM [ 1655.163355] 0 pages HighMem/MovableOnly [ 1655.171816] 363849 pages reserved [ 1655.175260] 0 pages cma reserved [ 1655.186680] Out of memory (oom_kill_allocating_task): Kill process 6443 (syz-executor.5) score 0 or sacrifice child [ 1655.204981] Killed process 8242 (syz-executor.5) total-vm:93252kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 1655.251848] oom_reaper: reaped process 8242 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1655.303120] oom_reaper: reaped process 8240 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1655.329672] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1655.372843] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1655.382216] CPU: 1 PID: 4706 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1655.390010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1655.399371] Call Trace: [ 1655.401953] dump_stack+0x1b2/0x281 [ 1655.405564] dump_header+0x178/0x82f [ 1655.409611] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1655.414689] ? ___ratelimit+0x2cd/0x530 [ 1655.415743] syz-executor.2: page allocation failure: order:0 [ 1655.418732] oom_kill_process.cold+0x10/0xa40 [ 1655.418748] out_of_memory+0xe3e/0x1190 [ 1655.424520] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1655.428991] ? oom_killer_disable+0x1c0/0x1c0 [ 1655.428997] ? mutex_trylock+0x152/0x1a0 [ 1655.429006] __alloc_pages_nodemask+0x23e1/0x2720 [ 1655.429024] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1655.429046] alloc_pages_current+0x155/0x260 [ 1655.437615] (null) [ 1655.440067] filemap_fault+0x11a1/0x1ad0 [ 1655.444536] syz-executor.2 cpuset= [ 1655.448584] ext4_filemap_fault+0x84/0xb0 [ 1655.448594] __do_fault+0xfa/0x380 [ 1655.448602] __handle_mm_fault+0x2497/0x4620 [ 1655.448611] ? vm_insert_page+0x7c0/0x7c0 [ 1655.448618] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1655.448624] ? nanosleep_copyout+0x100/0x100 [ 1655.448638] ? mark_held_locks+0xa6/0xf0 [ 1655.453470] / [ 1655.458268] handle_mm_fault+0x455/0x9c0 [ 1655.466334] mems_allowed=0-1 [ 1655.468836] __do_page_fault+0x549/0xad0 [ 1655.514225] ? spurious_fault+0x640/0x640 [ 1655.518371] ? do_page_fault+0x60/0x500 [ 1655.522336] ? page_fault+0x2f/0x50 [ 1655.525956] page_fault+0x45/0x50 [ 1655.529396] RIP: 19349c:0x6 [ 1655.532305] RSP: 0051:00007ffebfcb1d0c EFLAGS: 00000032 [ 1655.532321] CPU: 0 PID: 8240 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1655.545455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1655.546631] Mem-Info: [ 1655.554821] Call Trace: [ 1655.557245] active_anon:17732 inactive_anon:24287 isolated_anon:0 [ 1655.557245] active_file:45 inactive_file:12 isolated_file:0 [ 1655.557245] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1655.557245] slab_reclaimable:12828 slab_unreclaimable:110851 [ 1655.557245] mapped:52997 shmem:25362 pagetables:794 bounce:0 [ 1655.557245] free:13806 free_pcp:60 free_cma:0 [ 1655.559809] dump_stack+0x1b2/0x281 [ 1655.592989] Node 0 active_anon:67744kB inactive_anon:79548kB active_file:132kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186520kB dirty:0kB writeback:0kB shmem:83704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1655.596559] warn_alloc.cold+0x96/0x1cc [ 1655.596571] ? zone_watermark_ok_safe+0x220/0x220 [ 1655.624243] Node 1 active_anon:3184kB inactive_anon:17600kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25468kB dirty:0kB writeback:0kB shmem:17744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1655.628168] ? usleep_range+0x130/0x130 [ 1655.628177] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1655.628188] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1655.632999] Node 0 [ 1655.660049] ? run_timer_softirq+0x5a0/0x5a0 [ 1655.660065] __alloc_pages_nodemask+0x2127/0x2720 [ 1655.660079] ? lock_acquire+0x170/0x3f0 [ 1655.664038] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1655.669118] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1655.669126] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1655.669141] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1655.674124] lowmem_reserve[]: [ 1655.676345] ? alloc_pages_current+0x73/0x260 [ 1655.676357] alloc_pages_current+0x155/0x260 [ 1655.680742] 0 [ 1655.685575] ion_page_pool_alloc+0x118/0x1b0 [ 1655.689530] 2717 [ 1655.715000] ion_system_heap_allocate+0x133/0x8c0 [ 1655.715010] ? ion_alloc+0x187/0x810 [ 1655.715021] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1655.719845] 2718 [ 1655.724328] ? ion_system_contig_heap_create+0x130/0x130 [ 1655.729782] 2718 [ 1655.732850] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1655.737337] 2718 [ 1655.741714] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1655.747975] ion_alloc+0x204/0x810 [ 1655.747987] ? ion_dma_buf_release+0x40/0x40 [ 1655.747998] ? __might_fault+0x177/0x1b0 [ 1655.750031] Node 0 [ 1655.754940] ion_ioctl+0xea/0x1f0 [ 1655.758651] DMA32 free:17536kB min:36200kB low:45248kB high:54296kB active_anon:67740kB inactive_anon:79548kB active_file:32kB inactive_file:92kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2656kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1655.764054] ? ion_query_heaps+0x360/0x360 [ 1655.766102] lowmem_reserve[]: [ 1655.771518] ? lock_acquire+0x170/0x3f0 [ 1655.773550] 0 [ 1655.778554] ? ion_query_heaps+0x360/0x360 [ 1655.778563] do_vfs_ioctl+0x75a/0xff0 [ 1655.778577] ? ioctl_preallocate+0x1a0/0x1a0 [ 1655.780625] 0 [ 1655.785452] ? lock_downgrade+0x740/0x740 [ 1655.788974] 0 [ 1655.793347] ? __fget+0x225/0x360 [ 1655.797384] 0 [ 1655.799591] ? do_vfs_ioctl+0xff0/0xff0 [ 1655.803015] 0 [ 1655.831290] ? security_file_ioctl+0x83/0xb0 [ 1655.831301] SyS_ioctl+0x7f/0xb0 [ 1655.831310] ? do_vfs_ioctl+0xff0/0xff0 [ 1655.831327] do_syscall_64+0x1d5/0x640 [ 1655.838642] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1655.838649] RIP: 0033:0x4665d9 [ 1655.838653] RSP: 002b:00007fc5352ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1655.838661] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1655.838668] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1655.842616] Node 0 [ 1655.844396] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1655.848625] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1655.852376] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1655.852382] R13: 00007ffebfcb1a4f R14: 00007fc5352ac300 R15: 0000000000022000 [ 1655.856793] lowmem_reserve[]: [ 1655.879965] warn_alloc_show_mem: 2 callbacks suppressed [ 1655.879968] Mem-Info: [ 1655.880291] syz-executor.5: [ 1655.883636] active_anon:17732 inactive_anon:24287 isolated_anon:0 [ 1655.883636] active_file:38 inactive_file:19 isolated_file:0 [ 1655.883636] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1655.883636] slab_reclaimable:12828 slab_unreclaimable:110851 [ 1655.883636] mapped:52997 shmem:25362 pagetables:794 bounce:0 [ 1655.883636] free:13813 free_pcp:60 free_cma:0 [ 1655.907737] page allocation failure: order:0 [ 1655.924737] Node 0 active_anon:67736kB inactive_anon:79548kB active_file:64kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186520kB dirty:0kB writeback:0kB shmem:83704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1655.938591] 0 [ 1655.965556] Node 1 active_anon:3168kB inactive_anon:17600kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25468kB dirty:0kB writeback:0kB shmem:17744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1655.988282] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1656.027044] Node 0 [ 1656.066168] 0 [ 1656.088017] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1656.103310] 0 [ 1656.126234] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1656.132201] 0 [ 1656.133050] Node 0 [ 1656.133051] 0 [ 1656.134845] DMA32 free:17552kB min:36200kB low:45248kB high:54296kB active_anon:67736kB inactive_anon:79548kB active_file:164kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2580kB bounce:0kB free_pcp:112kB local_pcp:0kB free_cma:0kB [ 1656.143212] Node 1 [ 1656.176565] lowmem_reserve[]: 0 0 0 0 0 [ 1656.182773] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1656.183078] (null) [ 1656.217721] lowmem_reserve[]: 0 0 0 0 0 [ 1656.221707] Node 1 Normal free:26732kB min:53696kB low:67120kB high:80544kB active_anon:3168kB inactive_anon:17600kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:520kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1656.226675] Normal free:26732kB min:53696kB low:67120kB high:80544kB active_anon:3168kB inactive_anon:17600kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:520kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1656.258250] lowmem_reserve[]: 0 0 0 0 0 [ 1656.291966] Node 0 DMA: 2*4kB (U) 2*8kB (UE) 0*16kB 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10968kB [ 1656.294016] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1656.320464] CPU: 1 PID: 8242 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1656.323815] Node 0 [ 1656.328238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1656.328241] Call Trace: [ 1656.328259] dump_stack+0x1b2/0x281 [ 1656.328271] warn_alloc.cold+0x96/0x1cc [ 1656.328281] ? zone_watermark_ok_safe+0x220/0x220 [ 1656.328289] ? usleep_range+0x130/0x130 [ 1656.328297] ? try_to_free_pages+0x23f/0x6e0 [ 1656.328305] ? _find_next_bit+0xdb/0x100 [ 1656.328313] ? run_timer_softirq+0x5a0/0x5a0 [ 1656.328326] __alloc_pages_nodemask+0x2127/0x2720 [ 1656.349667] DMA32: [ 1656.350010] ? lock_acquire+0x170/0x3f0 [ 1656.354831] 898*4kB [ 1656.358787] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1656.358796] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1656.358811] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1656.358829] alloc_pages_current+0x155/0x260 [ 1656.358839] ion_page_pool_alloc+0x118/0x1b0 [ 1656.358848] ion_system_heap_allocate+0x133/0x8c0 [ 1656.358857] ? ion_alloc+0x187/0x810 [ 1656.358866] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1656.358875] ? ion_system_contig_heap_create+0x130/0x130 [ 1656.379368] (UME) [ 1656.382715] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1656.385010] 571*8kB [ 1656.389940] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1656.389951] ion_alloc+0x204/0x810 [ 1656.389963] ? ion_dma_buf_release+0x40/0x40 [ 1656.389974] ? __might_fault+0x177/0x1b0 [ 1656.389984] ion_ioctl+0xea/0x1f0 [ 1656.389993] ? ion_query_heaps+0x360/0x360 [ 1656.390004] ? lock_acquire+0x170/0x3f0 [ 1656.390011] ? ion_query_heaps+0x360/0x360 [ 1656.390021] do_vfs_ioctl+0x75a/0xff0 [ 1656.390030] ? ioctl_preallocate+0x1a0/0x1a0 [ 1656.390041] ? lock_downgrade+0x740/0x740 [ 1656.390053] ? __fget+0x225/0x360 [ 1656.410079] (ME) [ 1656.413588] ? do_vfs_ioctl+0xff0/0xff0 [ 1656.432650] 231*16kB [ 1656.435262] ? security_file_ioctl+0x83/0xb0 [ 1656.445246] (ME) [ 1656.445921] SyS_ioctl+0x7f/0xb0 [ 1656.445929] ? do_vfs_ioctl+0xff0/0xff0 [ 1656.445939] do_syscall_64+0x1d5/0x640 [ 1656.445953] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1656.445960] RIP: 0033:0x4665d9 [ 1656.445965] RSP: 002b:00007f28a7fcb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1656.445972] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1656.445976] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1656.445981] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1656.445987] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1656.469575] 66*32kB [ 1656.470314] R13: 00007ffd6449ea9f R14: 00007f28a7fcb300 R15: 0000000000022000 [ 1656.474090] (UME) [ 1656.487621] lowmem_reserve[]: [ 1656.502375] 40*64kB [ 1656.509109] 0 [ 1656.530008] (UM) [ 1656.541660] 0 [ 1656.556316] 8*128kB [ 1656.568374] 0 [ 1656.582916] (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17552kB [ 1656.591343] 0 0 [ 1656.593931] Node 0 DMA: 2*4kB (U) 2*8kB (UE) 0*16kB 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10968kB [ 1656.604380] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1656.618498] Node 0 DMA32: 898*4kB (UME) 571*8kB (ME) 231*16kB (ME) 66*32kB (UME) 40*64kB (UM) 8*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17552kB [ 1656.635270] Node 1 Normal: 33*4kB (M) 19*8kB (UM) 13*16kB (UM) 14*32kB (UM) 307*64kB (UM) 32*128kB (UM) 0*256kB 0*512kB 2*1024kB (M) 0*2048kB 0*4096kB = 26732kB [ 1656.647696] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1656.668959] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1656.674931] Node 1 Normal: 33*4kB (M) 19*8kB (UM) 13*16kB (UM) 14*32kB (UM) 307*64kB (UM) 32*128kB (UM) 0*256kB 0*512kB 2*1024kB (M) 0*2048kB 0*4096kB = 26732kB [ 1656.690754] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1656.716022] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1656.729451] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1656.785463] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1656.789255] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1656.822145] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1656.869279] 27653 total pagecache pages [ 1656.880821] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1656.889703] 0 pages in swap cache [ 1656.897625] Swap cache stats: add 0, delete 0, find 0/0 [ 1656.902990] Free swap = 0kB [ 1656.906112] 27801 total pagecache pages [ 1656.931673] 0 pages in swap cache [ 1656.945689] Swap cache stats: add 0, delete 0, find 0/0 [ 1656.955357] Free swap = 0kB [ 1656.958460] Total swap = 0kB [ 1656.961654] 2097051 pages RAM [ 1656.964754] 0 pages HighMem/MovableOnly [ 1656.965838] Total swap = 0kB [ 1656.978386] 363849 pages reserved [ 1656.981854] 0 pages cma reserved [ 1656.986103] 2097051 pages RAM [ 1656.989200] 0 pages HighMem/MovableOnly [ 1656.993156] 363849 pages reserved [ 1657.025671] 0 pages cma reserved [ 1657.029052] Out of memory (oom_kill_allocating_task): Kill process 4706 (syz-executor.2) score 0 or sacrifice child [ 1657.048678] Killed process 4706 (syz-executor.2) total-vm:93120kB, anon-rss:104kB, file-rss:33528kB, shmem-rss:0kB [ 1657.114407] oom_reaper: reaped process 4706 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1657.555073] IPVS: ftp: loaded support on port[0] = 21 [ 1657.944642] chnl_net:caif_netlink_parms(): no params data found 15:41:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a}) 15:41:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) 15:41:05 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) [ 1658.260132] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1658.271706] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1658.304694] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1658.309695] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1658.330689] CPU: 1 PID: 8388 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1658.338512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1658.347859] Call Trace: [ 1658.350448] dump_stack+0x1b2/0x281 [ 1658.354075] warn_alloc.cold+0x96/0x1cc [ 1658.358048] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1658.363065] ? zone_watermark_ok_safe+0x220/0x220 [ 1658.367962] __alloc_pages_nodemask+0x2127/0x2720 [ 1658.372797] ? __schedule+0x893/0x1de0 [ 1658.376680] ? lock_acquire+0x170/0x3f0 [ 1658.380653] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1658.385505] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1658.390957] ? __mutex_unlock_slowpath+0x75/0x770 [ 1658.395803] alloc_pages_current+0x155/0x260 [ 1658.400210] ion_page_pool_alloc+0x118/0x1b0 [ 1658.404612] ion_system_heap_allocate+0x133/0x8c0 [ 1658.409443] ? ion_alloc+0x187/0x810 [ 1658.413151] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1658.418594] ? ion_system_contig_heap_create+0x130/0x130 [ 1658.424038] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1658.429057] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1658.433896] ion_alloc+0x204/0x810 [ 1658.437440] ? ion_dma_buf_release+0x40/0x40 [ 1658.441846] ? __might_fault+0x177/0x1b0 [ 1658.445926] ion_ioctl+0xea/0x1f0 [ 1658.449373] ? ion_query_heaps+0x360/0x360 [ 1658.453601] ? lock_acquire+0x170/0x3f0 [ 1658.457565] ? ion_query_heaps+0x360/0x360 [ 1658.461792] do_vfs_ioctl+0x75a/0xff0 [ 1658.465580] ? ioctl_preallocate+0x1a0/0x1a0 [ 1658.469971] ? lock_downgrade+0x740/0x740 [ 1658.474120] ? __fget+0x225/0x360 [ 1658.477571] ? do_vfs_ioctl+0xff0/0xff0 [ 1658.481536] ? security_file_ioctl+0x83/0xb0 [ 1658.485947] SyS_ioctl+0x7f/0xb0 [ 1658.489308] ? do_vfs_ioctl+0xff0/0xff0 [ 1658.493282] do_syscall_64+0x1d5/0x640 [ 1658.497159] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1658.502369] RIP: 0033:0x4665d9 [ 1658.505547] RSP: 002b:00007f264b33c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1658.513241] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1658.520495] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1658.527751] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1658.535006] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1658.542263] R13: 00007ffed4ba430f R14: 00007f264b33c300 R15: 0000000000022000 [ 1658.549536] CPU: 0 PID: 8240 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1658.557338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1658.566693] Call Trace: [ 1658.569297] dump_stack+0x1b2/0x281 [ 1658.572936] warn_alloc.cold+0x96/0x1cc [ 1658.576914] ? zone_watermark_ok_safe+0x220/0x220 [ 1658.581791] __alloc_pages_nodemask+0x2127/0x2720 [ 1658.586769] ? __schedule+0x893/0x1de0 [ 1658.590674] ? lock_acquire+0x170/0x3f0 [ 1658.594655] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1658.599512] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1658.604975] ? __mutex_unlock_slowpath+0x75/0x770 [ 1658.609840] alloc_pages_current+0x155/0x260 [ 1658.614266] ion_page_pool_alloc+0x118/0x1b0 [ 1658.618687] ion_system_heap_allocate+0x133/0x8c0 [ 1658.623543] ? _raw_spin_unlock+0x29/0x40 [ 1658.627697] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1658.632633] ? ion_system_contig_heap_create+0x130/0x130 [ 1658.638087] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1658.643115] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1658.647971] ion_alloc+0x27a/0x810 [ 1658.651641] ? ion_dma_buf_release+0x40/0x40 [ 1658.656064] ? __might_fault+0x177/0x1b0 [ 1658.660152] ion_ioctl+0xea/0x1f0 [ 1658.663605] ? ion_query_heaps+0x360/0x360 [ 1658.667855] ? lock_acquire+0x170/0x3f0 [ 1658.671847] ? ion_query_heaps+0x360/0x360 [ 1658.676092] do_vfs_ioctl+0x75a/0xff0 [ 1658.679900] ? ioctl_preallocate+0x1a0/0x1a0 [ 1658.684313] ? lock_downgrade+0x740/0x740 [ 1658.684406] warn_alloc_show_mem: 1 callbacks suppressed [ 1658.684409] Mem-Info: [ 1658.688446] ? __fget+0x225/0x360 [ 1658.688455] ? do_vfs_ioctl+0xff0/0xff0 [ 1658.688466] ? security_file_ioctl+0x83/0xb0 [ 1658.688475] SyS_ioctl+0x7f/0xb0 [ 1658.693877] active_anon:17749 inactive_anon:24290 isolated_anon:0 [ 1658.693877] active_file:1396 inactive_file:1006 isolated_file:0 [ 1658.693877] unevictable:0 dirty:9 writeback:0 unstable:0 [ 1658.693877] slab_reclaimable:12828 slab_unreclaimable:113606 [ 1658.693877] mapped:54684 shmem:25366 pagetables:715 bounce:0 [ 1658.693877] free:25607 free_pcp:331 free_cma:0 [ 1658.696214] ? do_vfs_ioctl+0xff0/0xff0 [ 1658.696226] do_syscall_64+0x1d5/0x640 [ 1658.696238] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1658.696245] RIP: 0033:0x4665d9 [ 1658.696249] RSP: 002b:00007fc5352ac188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1658.700032] Node 0 active_anon:67636kB inactive_anon:79552kB active_file:5504kB inactive_file:3932kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:193240kB dirty:32kB writeback:0kB shmem:83712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1658.703802] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1658.703807] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1658.703812] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1658.703816] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1658.703820] R13: 00007ffebfcb1a4f R14: 00007fc5352ac300 R15: 0000000000022000 [ 1658.834711] Node 1 active_anon:3360kB inactive_anon:17608kB active_file:80kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25496kB dirty:4kB writeback:0kB shmem:17752kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1658.862532] Node 0 DMA free:11140kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:64kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1658.889435] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1658.894717] Node 0 DMA32 free:128828kB min:36200kB low:45248kB high:54296kB active_anon:67632kB inactive_anon:79552kB active_file:5496kB inactive_file:4120kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2344kB bounce:0kB free_pcp:696kB local_pcp:0kB free_cma:0kB [ 1658.897172] syz-executor.5: [ 1658.929729] lowmem_reserve[]: 0 0 0 0 0 [ 1658.937601] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1658.949243] page allocation failure: order:4 [ 1658.968139] lowmem_reserve[]: 0 0 0 0 0 [ 1658.977485] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1658.990072] Node 1 Normal free:106816kB min:53696kB low:67120kB high:80544kB active_anon:3372kB inactive_anon:17608kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:724kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1658.992844] syz-executor.5 cpuset= [ 1659.026230] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1659.029903] lowmem_reserve[]: 0 0 0 0 0 [ 1659.049922] Node 0 DMA: 35*4kB (U) 3*8kB (UME) 2*16kB (UM) 2*32kB (ME) 2*64kB (UE) 3*128kB (UME) 4*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11012kB [ 1659.060549] syz-executor.4 cpuset= [ 1659.069492] Node 0 [ 1659.071106] / [ 1659.073024] DMA32: 4305*4kB (UME) 11651*8kB (UME) 4781*16kB (UME) 2166*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 256236kB [ 1659.079693] mems_allowed=0-1 [ 1659.091634] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1659.096958] / mems_allowed=0-1 [ 1659.118781] CPU: 0 PID: 8393 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1659.125635] Node 1 [ 1659.126594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1659.126600] Normal: [ 1659.128811] Call Trace: [ 1659.138166] 2830*4kB [ 1659.140478] dump_stack+0x1b2/0x281 [ 1659.143027] (UM) [ 1659.145435] warn_alloc.cold+0x96/0x1cc [ 1659.155057] ? zone_watermark_ok_safe+0x220/0x220 [ 1659.159925] __alloc_pages_nodemask+0x2127/0x2720 [ 1659.164766] ? lock_acquire+0x170/0x3f0 [ 1659.165617] 3085*8kB (UM) 2056*16kB [ 1659.168754] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1659.168770] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1659.172454] (UM) [ 1659.177276] ? __mutex_unlock_slowpath+0x75/0x770 [ 1659.177285] ? cache_alloc_refill+0x1da/0x350 [ 1659.177294] alloc_pages_current+0x155/0x260 [ 1659.177306] ion_page_pool_alloc+0x118/0x1b0 [ 1659.177315] ion_system_heap_allocate+0x133/0x8c0 [ 1659.177324] ? ion_alloc+0x187/0x810 [ 1659.197055] 1183*32kB [ 1659.198621] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1659.198632] ? ion_system_contig_heap_create+0x130/0x130 [ 1659.198640] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1659.198650] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1659.198660] ion_alloc+0x204/0x810 [ 1659.198671] ? ion_dma_buf_release+0x40/0x40 [ 1659.198681] ? __might_fault+0x177/0x1b0 [ 1659.210135] (UM) [ 1659.211630] ion_ioctl+0xea/0x1f0 [ 1659.211639] ? ion_query_heaps+0x360/0x360 [ 1659.211652] ? lock_acquire+0x170/0x3f0 [ 1659.211659] ? ion_query_heaps+0x360/0x360 [ 1659.211669] do_vfs_ioctl+0x75a/0xff0 [ 1659.211680] ? ioctl_preallocate+0x1a0/0x1a0 [ 1659.211689] ? lock_downgrade+0x740/0x740 [ 1659.219680] 1*64kB [ 1659.225043] ? __fget+0x225/0x360 [ 1659.225054] ? do_vfs_ioctl+0xff0/0xff0 [ 1659.225065] ? security_file_ioctl+0x83/0xb0 [ 1659.225075] SyS_ioctl+0x7f/0xb0 [ 1659.225082] ? do_vfs_ioctl+0xff0/0xff0 [ 1659.225093] do_syscall_64+0x1d5/0x640 [ 1659.225107] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1659.245436] (U) [ 1659.246956] RIP: 0033:0x4665d9 [ 1659.246960] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1659.246969] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1659.246975] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1659.249016] 0*128kB [ 1659.252446] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1659.275617] 0*256kB [ 1659.277137] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1659.279351] 0*512kB [ 1659.282781] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1659.285789] CPU: 0 PID: 8242 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1659.305612] 0*1024kB [ 1659.307681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1659.309662] 0*2048kB [ 1659.312831] Call Trace: [ 1659.335608] 0*4096kB [ 1659.337557] dump_stack+0x1b2/0x281 [ 1659.344798] = 106816kB [ 1659.347235] warn_alloc.cold+0x96/0x1cc [ 1659.347246] ? zone_watermark_ok_safe+0x220/0x220 [ 1659.347267] __alloc_pages_nodemask+0x2127/0x2720 [ 1659.375615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1659.383609] ? lock_acquire+0x170/0x3f0 [ 1659.396488] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1659.397118] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1659.401064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1659.405901] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1659.405913] ? __mutex_unlock_slowpath+0x75/0x770 [ 1659.405927] alloc_pages_current+0x155/0x260 [ 1659.405938] ion_page_pool_alloc+0x118/0x1b0 [ 1659.425621] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1659.432242] ion_system_heap_allocate+0x133/0x8c0 [ 1659.446383] 28207 total pagecache pages [ 1659.451357] ? _raw_spin_unlock+0x29/0x40 [ 1659.466472] 0 pages in swap cache [ 1659.473525] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1659.486360] Swap cache stats: add 0, delete 0, find 0/0 [ 1659.488425] ? ion_system_contig_heap_create+0x130/0x130 [ 1659.491847] Free swap = 0kB [ 1659.496765] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1659.496793] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1659.496804] ion_alloc+0x27a/0x810 [ 1659.496816] ? ion_dma_buf_release+0x40/0x40 [ 1659.515623] Total swap = 0kB [ 1659.520449] ? __might_fault+0x177/0x1b0 [ 1659.523969] 2097051 pages RAM [ 1659.528363] ion_ioctl+0xea/0x1f0 [ 1659.528373] ? ion_query_heaps+0x360/0x360 [ 1659.528387] ? lock_acquire+0x170/0x3f0 [ 1659.528396] ? ion_query_heaps+0x360/0x360 [ 1659.545605] 0 pages HighMem/MovableOnly [ 1659.546171] do_vfs_ioctl+0x75a/0xff0 [ 1659.550130] 363849 pages reserved [ 1659.554342] ? ioctl_preallocate+0x1a0/0x1a0 [ 1659.569909] ? lock_downgrade+0x740/0x740 [ 1659.574061] ? __fget+0x225/0x360 [ 1659.575603] 0 pages cma reserved [ 1659.577504] ? do_vfs_ioctl+0xff0/0xff0 [ 1659.584827] ? security_file_ioctl+0x83/0xb0 [ 1659.589243] SyS_ioctl+0x7f/0xb0 [ 1659.592609] ? do_vfs_ioctl+0xff0/0xff0 [ 1659.596576] do_syscall_64+0x1d5/0x640 [ 1659.600458] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1659.605656] RIP: 0033:0x4665d9 [ 1659.608837] RSP: 002b:00007f28a7fcb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1659.616715] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1659.623992] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1659.631265] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1659.638524] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1659.645786] R13: 00007ffd6449ea9f R14: 00007f28a7fcb300 R15: 0000000000022000 [ 1659.658355] Bluetooth: hci5 command 0x0409 tx timeout [ 1659.663673] warn_alloc_show_mem: 1 callbacks suppressed [ 1659.663675] Mem-Info: [ 1659.672805] active_anon:17751 inactive_anon:24290 isolated_anon:0 [ 1659.672805] active_file:1360 inactive_file:1489 isolated_file:0 [ 1659.672805] unevictable:0 dirty:15 writeback:0 unstable:0 [ 1659.672805] slab_reclaimable:12828 slab_unreclaimable:114767 [ 1659.672805] mapped:55085 shmem:25365 pagetables:778 bounce:0 [ 1659.672805] free:30069 free_pcp:270 free_cma:0 [ 1659.775653] Node 0 active_anon:67632kB inactive_anon:79552kB active_file:5424kB inactive_file:5940kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:194872kB dirty:60kB writeback:0kB shmem:83708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1659.857688] Node 1 active_anon:3372kB inactive_anon:17608kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25468kB dirty:0kB writeback:0kB shmem:17752kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1659.889004] Node 0 DMA free:11012kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1659.951226] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1659.965455] Node 0 DMA32 free:158968kB min:36200kB low:45248kB high:54296kB active_anon:67640kB inactive_anon:79552kB active_file:5440kB inactive_file:5928kB unevictable:0kB writepending:8kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2388kB bounce:0kB free_pcp:928kB local_pcp:240kB free_cma:0kB [ 1660.019211] lowmem_reserve[]: 0 0 0 0 0 [ 1660.023306] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1660.065641] lowmem_reserve[]: 0 0 0 0 0 [ 1660.069724] Node 1 Normal free:154044kB min:53696kB low:67120kB high:80544kB active_anon:3372kB inactive_anon:17608kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:724kB bounce:0kB free_pcp:816kB local_pcp:108kB free_cma:0kB [ 1660.128565] lowmem_reserve[]: 0 0 0 0 0 [ 1660.138468] Node 0 DMA: 46*4kB (U) 15*8kB (UME) 38*16kB (UM) 24*32kB (UME) 2*64kB (UE) 4*128kB (UME) 4*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 12560kB [ 1660.170885] Node 0 DMA32: 61*4kB (ME) 388*8kB (UE) 186*16kB (UE) 28*32kB (ME) 564*64kB (UM) 11*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44724kB [ 1660.204414] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1660.230023] Node 1 Normal: 2*4kB (M) 1*8kB (M) 283*16kB (UM) 2759*32kB (UM) 721*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 138976kB [ 1660.254278] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1660.280499] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1660.297770] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1660.325127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1660.346916] 28236 total pagecache pages [ 1660.355337] 0 pages in swap cache [ 1660.366393] Swap cache stats: add 0, delete 0, find 0/0 [ 1660.380866] Free swap = 0kB [ 1660.390640] Total swap = 0kB [ 1660.400615] 2097051 pages RAM [ 1660.407188] 0 pages HighMem/MovableOnly [ 1660.416575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1660.420545] 363849 pages reserved [ 1660.432991] 0 pages cma reserved [ 1660.435111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.529264] oom_reaper: reaped process 8393 (syz-executor.4), now anon-rss:0kB, file-rss:8kB, shmem-rss:0kB [ 1660.619088] device bridge_slave_0 entered promiscuous mode [ 1660.632989] bridge0: port 2(bridge_slave_1) entered blocking state [ 1660.649347] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.669758] device bridge_slave_1 entered promiscuous mode [ 1660.761905] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1660.800098] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1660.875371] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1660.898023] team0: Port device team_slave_0 added [ 1660.914236] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1660.940247] team0: Port device team_slave_1 added [ 1660.997583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1661.012654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1661.038609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1661.069051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1661.082988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1661.143456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1661.174567] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1661.197777] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1661.253228] device hsr_slave_0 entered promiscuous mode [ 1661.266486] device hsr_slave_1 entered promiscuous mode [ 1661.282849] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1661.296726] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1661.552288] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1661.628366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1661.648351] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1661.681280] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1661.687542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1661.694666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1661.721563] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1661.728678] Bluetooth: hci5 command 0x041b tx timeout [ 1661.733945] 8021q: adding VLAN 0 to HW filter on device team0 [ 1661.761136] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1661.778826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1661.788037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1661.806326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1661.812701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1661.848827] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1661.856476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1661.863635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1661.886426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1661.894079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1661.900446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1661.928096] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1661.936181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1661.947634] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1661.975184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1661.984730] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1661.995961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1662.003635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1662.048059] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1662.056536] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1662.063436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1662.093863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 15:41:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) 15:41:09 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000480)={r2, 0x1e}) [ 1662.146539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1662.155289] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1662.186035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1662.193883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1662.219721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1662.246110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1662.267420] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1662.273474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1662.373396] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1662.399067] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1662.420756] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1662.431000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1662.483360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1662.780855] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1662.798440] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1662.805573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1662.813412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1662.953077] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1662.966825] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1662.973566] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1663.026261] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1663.033280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1663.046011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1663.054011] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1663.086002] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1663.094879] device veth0_vlan entered promiscuous mode [ 1663.102507] device veth1_vlan entered promiscuous mode [ 1663.109128] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1663.116059] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1663.149695] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1663.151929] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1663.153506] device veth0_macvtap entered promiscuous mode [ 1663.154080] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1663.160753] device veth1_macvtap entered promiscuous mode [ 1663.161418] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1663.163835] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1663.189703] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1663.191104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1663.191108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.191114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1663.191117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.191122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1663.191124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.191130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1663.191132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.191137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1663.191139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.191989] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1663.192062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1663.193373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1663.193377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.193382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1663.193385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.193389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1663.193391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.193397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1663.193400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.193404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1663.193407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1663.194193] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1663.194210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1663.795894] Bluetooth: hci5 command 0x040f tx timeout [ 1663.961218] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1663.986135] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1663.993563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1664.014534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1664.059771] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1664.068677] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1664.099025] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1664.128734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1664.142027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1664.189462] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1664.203423] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1664.232578] oom_reaper: reaped process 8388 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1664.265469] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1664.270649] CPU: 0 PID: 8482 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1664.278443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1664.286196] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1664.287785] Call Trace: [ 1664.287786] (null), order=0, oom_score_adj=0 [ 1664.297828] dump_stack+0x1b2/0x281 [ 1664.297840] warn_alloc.cold+0x96/0x1cc [ 1664.306760] syz-executor.1 cpuset= [ 1664.308494] ? zone_watermark_ok_safe+0x220/0x220 [ 1664.312457] / [ 1664.315989] __alloc_pages_nodemask+0x2127/0x2720 [ 1664.320815] mems_allowed=0-1 [ 1664.322499] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1664.335392] ? lock_acquire+0x170/0x3f0 [ 1664.339350] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1664.344180] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1664.349628] ? __mutex_unlock_slowpath+0x75/0x770 [ 1664.354458] alloc_pages_current+0x155/0x260 [ 1664.358851] ion_page_pool_alloc+0x118/0x1b0 [ 1664.363248] ion_system_heap_allocate+0x133/0x8c0 [ 1664.368091] ? ion_alloc+0x187/0x810 [ 1664.371783] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1664.377218] ? ion_system_contig_heap_create+0x130/0x130 [ 1664.382661] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1664.387668] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1664.392488] ion_alloc+0x204/0x810 [ 1664.396009] ? ion_dma_buf_release+0x40/0x40 [ 1664.400407] ? __might_fault+0x177/0x1b0 [ 1664.404445] ion_ioctl+0xea/0x1f0 [ 1664.407887] ? ion_query_heaps+0x360/0x360 [ 1664.412100] ? lock_acquire+0x170/0x3f0 [ 1664.416048] ? ion_query_heaps+0x360/0x360 [ 1664.420258] do_vfs_ioctl+0x75a/0xff0 [ 1664.424037] ? ioctl_preallocate+0x1a0/0x1a0 [ 1664.428420] ? lock_downgrade+0x740/0x740 [ 1664.432547] ? __fget+0x225/0x360 [ 1664.435984] ? do_vfs_ioctl+0xff0/0xff0 [ 1664.439943] ? security_file_ioctl+0x83/0xb0 [ 1664.444329] SyS_ioctl+0x7f/0xb0 [ 1664.447672] ? do_vfs_ioctl+0xff0/0xff0 [ 1664.451625] do_syscall_64+0x1d5/0x640 [ 1664.455494] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1664.460681] RIP: 0033:0x4665d9 [ 1664.463867] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1664.471568] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1664.478819] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1664.486069] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1664.493317] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1664.500583] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1664.507841] CPU: 1 PID: 8264 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1664.515637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1664.524984] Call Trace: [ 1664.527571] dump_stack+0x1b2/0x281 [ 1664.531195] dump_header+0x178/0x82f [ 1664.534901] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1664.539999] ? ___ratelimit+0x2cd/0x530 [ 1664.543969] oom_kill_process.cold+0x10/0xa40 [ 1664.548470] out_of_memory+0xe3e/0x1190 [ 1664.552439] ? oom_killer_disable+0x1c0/0x1c0 [ 1664.556930] ? mutex_trylock+0x152/0x1a0 [ 1664.560990] __alloc_pages_nodemask+0x23e1/0x2720 [ 1664.565850] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1664.570707] alloc_pages_current+0x155/0x260 [ 1664.575108] filemap_fault+0x11a1/0x1ad0 [ 1664.579174] ext4_filemap_fault+0x84/0xb0 [ 1664.583314] __do_fault+0xfa/0x380 [ 1664.586843] __handle_mm_fault+0x2497/0x4620 [ 1664.591241] ? vm_insert_page+0x7c0/0x7c0 [ 1664.593323] warn_alloc_show_mem: 1 callbacks suppressed [ 1664.593326] Mem-Info: [ 1664.595407] ? mark_held_locks+0xa6/0xf0 [ 1664.595418] handle_mm_fault+0x455/0x9c0 [ 1664.595430] __do_page_fault+0x549/0xad0 [ 1664.595441] ? spurious_fault+0x640/0x640 [ 1664.595450] ? do_page_fault+0x60/0x500 [ 1664.600845] syz-executor.4: [ 1664.603227] ? page_fault+0x2f/0x50 [ 1664.607321] syz-executor.0: [ 1664.611301] page_fault+0x45/0x50 [ 1664.615334] page allocation failure: order:0 [ 1664.619479] RIP: 14a4370:0x3 [ 1664.619482] RSP: 14a4320:0000000000000001 EFLAGS: 00000000 [ 1664.634434] Mem-Info: [ 1664.636865] active_anon:17712 inactive_anon:24288 isolated_anon:0 [ 1664.636865] active_file:17 inactive_file:0 isolated_file:0 [ 1664.636865] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1664.636865] slab_reclaimable:12815 slab_unreclaimable:114454 [ 1664.636865] mapped:53099 shmem:25361 pagetables:775 bounce:0 [ 1664.636865] free:13833 free_pcp:359 free_cma:0 [ 1664.649137] active_anon:17712 inactive_anon:24288 isolated_anon:0 [ 1664.649137] active_file:17 inactive_file:0 isolated_file:0 [ 1664.649137] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1664.649137] slab_reclaimable:12815 slab_unreclaimable:114454 [ 1664.649137] mapped:53099 shmem:25361 pagetables:775 bounce:0 [ 1664.649137] free:13833 free_pcp:359 free_cma:0 [ 1664.649881] page allocation failure: order:0 [ 1664.652234] Node 0 active_anon:67392kB inactive_anon:79548kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:154684kB dirty:0kB writeback:0kB shmem:83704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1664.685420] Node 0 active_anon:67392kB inactive_anon:79548kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:154684kB dirty:0kB writeback:0kB shmem:83704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1664.685434] Node 1 active_anon:3456kB inactive_anon:17604kB active_file:96kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:57712kB dirty:0kB writeback:0kB shmem:17740kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1664.685438] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1664.685458] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1664.685479] Node 0 DMA32 free:17608kB min:36200kB low:45248kB high:54296kB active_anon:67388kB inactive_anon:79548kB active_file:0kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2216kB bounce:0kB free_pcp:736kB local_pcp:736kB free_cma:0kB [ 1664.685497] lowmem_reserve[]: 0 0 0 0 0 [ 1664.685514] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1664.685530] lowmem_reserve[]: 0 0 0 0 0 [ 1664.685547] Node 1 Normal free:26748kB min:53696kB low:67120kB high:80544kB active_anon:3456kB inactive_anon:17604kB active_file:44kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:884kB bounce:0kB free_pcp:700kB local_pcp:696kB free_cma:0kB [ 1664.685574] lowmem_reserve[]: [ 1664.732045] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1664.751186] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1664.780929] Node 1 active_anon:3456kB inactive_anon:17604kB active_file:96kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:57712kB dirty:0kB writeback:0kB shmem:17740kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1664.817134] 0 [ 1664.833765] (null) [ 1664.849165] (null) [ 1664.868166] Node 0 [ 1664.882130] 0 [ 1664.897660] syz-executor.0 cpuset= [ 1664.910743] 0 [ 1664.938449] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1664.948717] syz-executor.4 cpuset= [ 1664.979334] / [ 1665.019093] / [ 1665.020639] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1665.033401] Node 0 DMA32 free:17608kB min:36200kB low:45248kB high:54296kB active_anon:67388kB inactive_anon:79548kB active_file:36kB inactive_file:16kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2216kB bounce:0kB free_pcp:736kB local_pcp:0kB free_cma:0kB [ 1665.033666] 0 0 [ 1665.071947] Node 0 DMA: 1*4kB (U) 2*8kB (UE) 1*16kB (U) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10980kB [ 1665.073665] mems_allowed=0-1 [ 1665.094643] mems_allowed=0-1 [ 1665.097796] CPU: 0 PID: 8393 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1665.105579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1665.114913] Call Trace: [ 1665.115374] lowmem_reserve[]: 0 [ 1665.118444] dump_stack+0x1b2/0x281 [ 1665.118457] warn_alloc.cold+0x96/0x1cc [ 1665.121725] 0 [ 1665.125336] ? zone_watermark_ok_safe+0x220/0x220 [ 1665.135977] ? usleep_range+0x130/0x130 [ 1665.139941] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1665.145027] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1665.145352] 0 0 [ 1665.150044] ? run_timer_softirq+0x5a0/0x5a0 [ 1665.150058] __alloc_pages_nodemask+0x2127/0x2720 [ 1665.152001] 0 [ 1665.156401] ? lock_acquire+0x170/0x3f0 [ 1665.156415] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1665.171778] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1665.176266] Node 0 [ 1665.176274] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1665.176293] alloc_pages_current+0x155/0x260 [ 1665.178525] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1665.183951] ion_page_pool_alloc+0x118/0x1b0 [ 1665.205362] lowmem_reserve[]: [ 1665.213242] ion_system_heap_allocate+0x133/0x8c0 [ 1665.225363] 0 0 [ 1665.225526] ? ion_alloc+0x187/0x810 [ 1665.225536] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1665.227504] 0 [ 1665.231223] ? ion_system_contig_heap_create+0x130/0x130 [ 1665.243883] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1665.245364] 0 [ 1665.248877] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1665.248879] 0 [ 1665.250676] ion_alloc+0x204/0x810 [ 1665.260793] ? ion_dma_buf_release+0x40/0x40 [ 1665.265184] ? __might_fault+0x177/0x1b0 [ 1665.265350] Node 1 Normal free:26748kB min:53696kB low:67120kB high:80544kB active_anon:3456kB inactive_anon:17604kB active_file:20kB inactive_file:48kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:884kB bounce:0kB free_pcp:700kB local_pcp:4kB free_cma:0kB [ 1665.269234] ion_ioctl+0xea/0x1f0 [ 1665.269243] ? ion_query_heaps+0x360/0x360 [ 1665.305494] ? lock_acquire+0x170/0x3f0 [ 1665.309455] ? ion_query_heaps+0x360/0x360 [ 1665.313670] do_vfs_ioctl+0x75a/0xff0 [ 1665.317456] ? ioctl_preallocate+0x1a0/0x1a0 [ 1665.321844] ? lock_downgrade+0x740/0x740 [ 1665.325988] ? __fget+0x225/0x360 [ 1665.329434] ? do_vfs_ioctl+0xff0/0xff0 [ 1665.333389] ? security_file_ioctl+0x83/0xb0 [ 1665.335359] lowmem_reserve[]: 0 [ 1665.337780] SyS_ioctl+0x7f/0xb0 [ 1665.337788] ? do_vfs_ioctl+0xff0/0xff0 [ 1665.341046] 0 [ 1665.344403] do_syscall_64+0x1d5/0x640 [ 1665.353995] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1665.359162] RIP: 0033:0x4665d9 [ 1665.362330] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1665.365339] 0 [ 1665.370018] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1665.370023] 0 [ 1665.371800] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1665.385354] 0 [ 1665.388084] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1665.389869] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1665.404395] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1665.411669] CPU: 1 PID: 8388 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1665.419349] Node 0 [ 1665.419451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1665.419457] DMA32: [ 1665.421675] Call Trace: [ 1665.432772] 647*4kB [ 1665.433343] dump_stack+0x1b2/0x281 [ 1665.440863] (ME) 567*8kB [ 1665.441851] warn_alloc.cold+0x96/0x1cc [ 1665.441857] (UME) [ 1665.444598] ? choke_enqueue+0x300/0x2130 [ 1665.450345] 247*16kB [ 1665.450701] ? zone_watermark_ok_safe+0x220/0x220 [ 1665.454846] (UME) [ 1665.457242] ? usleep_range+0x130/0x130 [ 1665.457251] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1665.457262] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1665.457272] ? run_timer_softirq+0x5a0/0x5a0 [ 1665.457288] __alloc_pages_nodemask+0x2127/0x2720 [ 1665.457301] ? lock_acquire+0x170/0x3f0 [ 1665.457316] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1665.468628] 65*32kB [ 1665.473313] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1665.480496] (UME) [ 1665.482717] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1665.490913] 48*64kB [ 1665.491497] ? retint_kernel+0x2d/0x2d [ 1665.499438] (UM) [ 1665.503116] alloc_pages_current+0x155/0x260 [ 1665.505238] 12*128kB [ 1665.510708] ion_page_pool_alloc+0x118/0x1b0 [ 1665.510716] ion_system_heap_allocate+0x133/0x8c0 [ 1665.510725] ? ion_alloc+0x187/0x810 [ 1665.510734] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1665.510742] ? ion_system_contig_heap_create+0x130/0x130 [ 1665.510751] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1665.510760] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1665.510769] ion_alloc+0x204/0x810 [ 1665.510781] ? ion_dma_buf_release+0x40/0x40 [ 1665.519453] (UM) [ 1665.523372] ? __might_fault+0x177/0x1b0 [ 1665.525896] 0*256kB [ 1665.530248] ion_ioctl+0xea/0x1f0 [ 1665.535061] 0*512kB [ 1665.538842] ? ion_query_heaps+0x360/0x360 [ 1665.538856] ? lock_acquire+0x170/0x3f0 [ 1665.538863] ? ion_query_heaps+0x360/0x360 [ 1665.538873] do_vfs_ioctl+0x75a/0xff0 [ 1665.538885] ? ioctl_preallocate+0x1a0/0x1a0 [ 1665.538892] ? lock_downgrade+0x740/0x740 [ 1665.538904] ? __fget+0x225/0x360 [ 1665.538911] ? do_vfs_ioctl+0xff0/0xff0 [ 1665.538923] ? security_file_ioctl+0x83/0xb0 [ 1665.550129] 0*1024kB [ 1665.550225] SyS_ioctl+0x7f/0xb0 [ 1665.555212] 0*2048kB [ 1665.560040] ? do_vfs_ioctl+0xff0/0xff0 [ 1665.560052] do_syscall_64+0x1d5/0x640 [ 1665.560066] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1665.560075] RIP: 0033:0x4665d9 [ 1665.560079] RSP: 002b:00007f264b33c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1665.560087] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1665.560091] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1665.560095] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1665.560099] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1665.560103] R13: 00007ffed4ba430f R14: 00007f264b33c300 R15: 0000000000022000 [ 1665.579496] Node 0 [ 1665.586964] 0*4096kB [ 1665.597466] DMA: [ 1665.602740] = 17764kB [ 1665.603477] 1*4kB [ 1665.611153] Node 0 [ 1665.621522] (U) [ 1665.629002] Normal: [ 1665.638547] 2*8kB [ 1665.642183] 0*4kB [ 1665.644224] (UE) [ 1665.657957] 0*8kB [ 1665.670217] 1*16kB [ 1665.684054] 0*16kB [ 1665.691906] (U) [ 1665.694118] 0*32kB [ 1665.705571] 2*32kB [ 1665.713809] 0*64kB [ 1665.713961] (UE) [ 1665.716047] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1665.716074] Node 1 Normal: 81*4kB (M) 71*8kB (UM) 34*16kB (M) [ 1665.726907] 2*64kB [ 1665.735808] 26*32kB [ 1665.748234] (UE) 2*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10980kB [ 1665.753218] (M) 46*64kB (M) 18*128kB (UM) 8*256kB (M) 30*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 26972kB [ 1665.767841] Node 0 DMA32: 647*4kB (ME) 567*8kB (UME) 247*16kB (UME) 65*32kB (UME) 48*64kB (UM) 12*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17764kB [ 1665.778848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1665.797428] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1665.802929] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1665.816343] Node 1 Normal: 81*4kB (M) 71*8kB (UM) 34*16kB (M) 26*32kB (M) 46*64kB (M) 18*128kB (UM) 8*256kB (M) 30*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 26972kB [ 1665.823638] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1665.842462] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1665.847868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1665.859831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1665.863284] 25414 total pagecache pages [ 1665.876601] Bluetooth: hci5 command 0x0419 tx timeout [ 1665.878741] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1665.885149] 0 pages in swap cache [ 1665.895316] Mem-Info: [ 1665.905469] active_anon:17686 inactive_anon:24288 isolated_anon:0 [ 1665.905469] active_file:14 inactive_file:13 isolated_file:0 [ 1665.905469] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1665.905469] slab_reclaimable:12815 slab_unreclaimable:114477 [ 1665.905469] mapped:53072 shmem:25361 pagetables:775 bounce:0 [ 1665.905469] free:20747 free_pcp:343 free_cma:0 [ 1665.915320] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1665.965378] Swap cache stats: add 0, delete 0, find 0/0 [ 1665.970757] Free swap = 0kB [ 1665.973763] Total swap = 0kB [ 1665.988212] 2097051 pages RAM [ 1665.995408] 0 pages HighMem/MovableOnly [ 1665.999389] 363849 pages reserved [ 1666.002823] 0 pages cma reserved [ 1666.026479] Node 0 active_anon:67368kB inactive_anon:79548kB active_file:120kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:154676kB dirty:0kB writeback:0kB shmem:83704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1666.066835] 25967 total pagecache pages [ 1666.072153] 0 pages in swap cache [ 1666.072402] Node 1 active_anon:3376kB inactive_anon:17604kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:57712kB dirty:0kB writeback:0kB shmem:17740kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1666.085362] Swap cache stats: add 0, delete 0, find 0/0 [ 1666.106870] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1666.155365] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1666.175798] Node 0 DMA32 free:140892kB min:36200kB low:45248kB high:54296kB active_anon:67368kB inactive_anon:79548kB active_file:20kB inactive_file:3284kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2216kB bounce:0kB free_pcp:764kB local_pcp:88kB free_cma:0kB [ 1666.178996] Free swap = 0kB [ 1666.211290] lowmem_reserve[]: 0 0 0 0 0 [ 1666.231596] Total swap = 0kB [ 1666.231873] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1666.266032] 2097051 pages RAM [ 1666.268889] lowmem_reserve[]: [ 1666.269148] 0 pages HighMem/MovableOnly [ 1666.269150] 0 0 [ 1666.272286] 363849 pages reserved [ 1666.285385] 0 pages cma reserved [ 1666.288750] Out of memory (oom_kill_allocating_task): Kill process 8264 (syz-executor.1) score 0 or sacrifice child [ 1666.295210] 0 [ 1666.315583] Killed process 8264 (syz-executor.1) total-vm:93120kB, anon-rss:80kB, file-rss:34768kB, shmem-rss:0kB [ 1666.318718] 0 0 [ 1666.354485] Node 1 Normal free:128544kB min:53696kB low:67120kB high:80544kB active_anon:3376kB inactive_anon:17604kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:884kB bounce:0kB free_pcp:1392kB local_pcp:688kB free_cma:0kB [ 1666.368135] oom_reaper: reaped process 8264 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1666.449852] lowmem_reserve[]: 0 0 0 0 0 [ 1666.453875] Node 0 DMA: 12*4kB (U) 17*8kB (UE) 2*16kB (U) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11160kB [ 1666.515688] Node 0 DMA32: 3700*4kB (UME) 1027*8kB (UME) 3437*16kB (UME) 1858*32kB (UME) 343*64kB (UM) 15*128kB (UM) 1*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 161592kB [ 1666.569356] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1666.592587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1666.612553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1666.629335] Node 1 Normal: 11465*4kB (UM) 2544*8kB (UM) 605*16kB (UM) 460*32kB (UM) 1208*64kB (UM) 31*128kB (UM) 9*256kB (UM) 32*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 192628kB [ 1666.651357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1666.673069] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1666.673360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1666.684772] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1666.704240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1666.713865] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1666.729931] 26781 total pagecache pages [ 1666.734242] 0 pages in swap cache [ 1666.741667] Swap cache stats: add 0, delete 0, find 0/0 [ 1666.748802] device bridge_slave_1 left promiscuous mode [ 1666.749270] Free swap = 0kB [ 1666.754348] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.760756] Total swap = 0kB [ 1666.796056] device bridge_slave_0 left promiscuous mode [ 1666.800495] 2097051 pages RAM [ 1666.804593] 0 pages HighMem/MovableOnly [ 1666.837998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.842271] 363849 pages reserved [ 1666.849432] 0 pages cma reserved [ 1666.853238] device veth1_macvtap left promiscuous mode [ 1666.865763] device veth0_macvtap left promiscuous mode [ 1666.871210] device veth1_vlan left promiscuous mode [ 1666.886023] device veth0_vlan left promiscuous mode [ 1667.209378] device hsr_slave_1 left promiscuous mode [ 1667.221236] device hsr_slave_0 left promiscuous mode [ 1667.252604] team0 (unregistering): Port device team_slave_1 removed [ 1667.292955] team0 (unregistering): Port device team_slave_0 removed [ 1667.303297] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1667.332594] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1667.400400] bond0 (unregistering): Released all slaves [ 1667.486303] syz-executor.1 (8264) used greatest stack depth: 24024 bytes left [ 1667.708433] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1667.730203] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1667.755244] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1667.760394] CPU: 1 PID: 8393 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1667.768217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1667.777584] Call Trace: [ 1667.780171] dump_stack+0x1b2/0x281 [ 1667.783795] warn_alloc.cold+0x96/0x1cc [ 1667.787805] ? zone_watermark_ok_safe+0x220/0x220 [ 1667.792681] __alloc_pages_nodemask+0x2127/0x2720 [ 1667.797530] ? check_preemption_disabled+0x35/0x240 [ 1667.802550] ? lock_acquire+0x170/0x3f0 [ 1667.806527] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1667.811372] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1667.815236] syz-executor.0 cpuset=/ [ 1667.816830] ? __mutex_unlock_slowpath+0x75/0x770 [ 1667.816838] ? retint_kernel+0x2d/0x2d [ 1667.820590] mems_allowed=0-1 [ 1667.825370] alloc_pages_current+0x155/0x260 [ 1667.825384] ion_page_pool_alloc+0x118/0x1b0 [ 1667.825394] ion_system_heap_allocate+0x133/0x8c0 [ 1667.825406] ? _raw_spin_unlock+0x29/0x40 [ 1667.825413] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1667.825422] ? ion_system_contig_heap_create+0x130/0x130 [ 1667.825432] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1667.825441] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1667.825451] ion_alloc+0x27a/0x810 [ 1667.825464] ? ion_dma_buf_release+0x40/0x40 [ 1667.878577] ? __might_fault+0x177/0x1b0 [ 1667.882635] ion_ioctl+0xea/0x1f0 [ 1667.886093] ? ion_query_heaps+0x360/0x360 [ 1667.890321] ? lock_acquire+0x170/0x3f0 [ 1667.894283] ? ion_query_heaps+0x360/0x360 [ 1667.898528] do_vfs_ioctl+0x75a/0xff0 [ 1667.902330] ? ioctl_preallocate+0x1a0/0x1a0 [ 1667.906735] ? lock_downgrade+0x740/0x740 [ 1667.911155] ? __fget+0x225/0x360 [ 1667.914678] ? do_vfs_ioctl+0xff0/0xff0 [ 1667.918638] ? security_file_ioctl+0x83/0xb0 [ 1667.923042] SyS_ioctl+0x7f/0xb0 [ 1667.926412] ? do_vfs_ioctl+0xff0/0xff0 [ 1667.930370] do_syscall_64+0x1d5/0x640 [ 1667.934256] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1667.939480] RIP: 0033:0x4665d9 [ 1667.942665] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1667.950363] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1667.957620] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1667.964870] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1667.972130] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1667.979398] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1667.986673] CPU: 0 PID: 8388 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1667.994470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1668.003818] Call Trace: [ 1668.006405] dump_stack+0x1b2/0x281 [ 1668.010030] warn_alloc.cold+0x96/0x1cc [ 1668.014004] ? zone_watermark_ok_safe+0x220/0x220 [ 1668.015228] warn_alloc_show_mem: 1 callbacks suppressed [ 1668.015231] Mem-Info: [ 1668.018853] __alloc_pages_nodemask+0x2127/0x2720 [ 1668.018865] ? _raw_spin_unlock_irq+0x24/0x80 [ 1668.024238] active_anon:17682 inactive_anon:24288 isolated_anon:0 [ 1668.024238] active_file:1757 inactive_file:3355 isolated_file:0 [ 1668.024238] unevictable:0 dirty:46 writeback:0 unstable:0 [ 1668.024238] slab_reclaimable:12767 slab_unreclaimable:114053 [ 1668.024238] mapped:48343 shmem:25361 pagetables:705 bounce:0 [ 1668.024238] free:153376 free_pcp:401 free_cma:0 [ 1668.026605] ? lock_acquire+0x170/0x3f0 [ 1668.026618] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1668.026634] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1668.026645] ? __mutex_unlock_slowpath+0x75/0x770 [ 1668.036388] Node 0 active_anon:67528kB inactive_anon:79556kB active_file:6992kB inactive_file:13388kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:135660kB dirty:176kB writeback:0kB shmem:83712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1668.070586] alloc_pages_current+0x155/0x260 [ 1668.070598] ion_page_pool_alloc+0x118/0x1b0 [ 1668.070606] ion_system_heap_allocate+0x133/0x8c0 [ 1668.070617] ? _raw_spin_unlock+0x29/0x40 [ 1668.074612] Node 1 active_anon:3200kB inactive_anon:17596kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:57712kB dirty:8kB writeback:0kB shmem:17732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1668.079387] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1668.079396] ? ion_system_contig_heap_create+0x130/0x130 [ 1668.079404] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1668.079414] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1668.079422] ion_alloc+0x27a/0x810 [ 1668.079435] ? ion_dma_buf_release+0x40/0x40 [ 1668.088791] Node 0 [ 1668.089712] ? __might_fault+0x177/0x1b0 [ 1668.089724] ion_ioctl+0xea/0x1f0 [ 1668.117959] DMA free:11020kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1668.122296] ? ion_query_heaps+0x360/0x360 [ 1668.122312] ? lock_acquire+0x170/0x3f0 [ 1668.129612] lowmem_reserve[]: [ 1668.131513] ? ion_query_heaps+0x360/0x360 [ 1668.131523] do_vfs_ioctl+0x75a/0xff0 [ 1668.131533] ? ioctl_preallocate+0x1a0/0x1a0 [ 1668.137104] 0 [ 1668.162798] ? lock_downgrade+0x740/0x740 [ 1668.162811] ? __fget+0x225/0x360 [ 1668.162821] ? do_vfs_ioctl+0xff0/0xff0 [ 1668.162831] ? security_file_ioctl+0x83/0xb0 [ 1668.162843] SyS_ioctl+0x7f/0xb0 [ 1668.169680] 2717 [ 1668.173194] ? do_vfs_ioctl+0xff0/0xff0 [ 1668.173209] do_syscall_64+0x1d5/0x640 [ 1668.179458] 2718 [ 1668.183039] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1668.183048] RIP: 0033:0x4665d9 [ 1668.187687] 2718 [ 1668.190951] RSP: 002b:00007f264b33c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1668.190961] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1668.190970] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1668.190978] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1668.193226] 2718 [ 1668.197241] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1668.197246] R13: 00007ffed4ba430f R14: 00007f264b33c300 R15: 0000000000022000 [ 1668.342500] Node 0 DMA32 free:342760kB min:36200kB low:45248kB high:54296kB active_anon:67528kB inactive_anon:79556kB active_file:6992kB inactive_file:13388kB unevictable:0kB writepending:176kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:6976kB pagetables:1936kB bounce:0kB free_pcp:988kB local_pcp:292kB free_cma:0kB [ 1668.372577] lowmem_reserve[]: 0 0 0 0 0 [ 1668.376632] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1668.403611] lowmem_reserve[]: 0 0 0 0 0 [ 1668.407675] Node 1 Normal free:417940kB min:53696kB low:67120kB high:80544kB active_anon:3200kB inactive_anon:17596kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:884kB bounce:0kB free_pcp:716kB local_pcp:12kB free_cma:0kB [ 1668.438674] lowmem_reserve[]: 0 0 0 0 0 [ 1668.442667] Node 0 DMA: 59*4kB (U) 26*8kB (UE) 33*16kB (U) 9*32kB (UE) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11180kB [ 1668.457841] Node 0 DMA32: 12007*4kB (UE) 4634*8kB (UME) 6756*16kB (UME) 4801*32kB (UME) 753*64kB (UM) 14*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 396812kB [ 1668.473883] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1668.484691] Node 1 Normal: 12140*4kB (U) 6356*8kB (U) 3860*16kB (U) 3355*32kB (U) 2443*64kB (U) 69*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 433712kB [ 1668.499788] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1668.508674] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1668.525216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1668.534059] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1668.565180] 30473 total pagecache pages [ 1668.569174] 0 pages in swap cache [ 1668.572617] Swap cache stats: add 0, delete 0, find 0/0 [ 1668.585206] Free swap = 0kB [ 1668.588329] Total swap = 0kB [ 1668.591332] 2097051 pages RAM [ 1668.594417] 0 pages HighMem/MovableOnly [ 1668.615180] 363849 pages reserved [ 1668.618637] 0 pages cma reserved [ 1669.150142] IPVS: ftp: loaded support on port[0] = 21 [ 1669.155456] Bluetooth: hci0 command 0x0409 tx timeout [ 1669.373279] chnl_net:caif_netlink_parms(): no params data found [ 1669.549707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.565926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1669.573275] device bridge_slave_0 entered promiscuous mode [ 1669.589102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1669.599131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1669.607705] device bridge_slave_1 entered promiscuous mode [ 1669.639263] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1669.651929] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1669.685370] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1669.694138] team0: Port device team_slave_0 added [ 1669.704526] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1669.712692] team0: Port device team_slave_1 added [ 1669.727984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1669.734762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1669.747531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1669.754216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1669.766151] device bridge_slave_1 left promiscuous mode [ 1669.771654] bridge0: port 2(bridge_slave_1) entered disabled state [ 1669.786488] device bridge_slave_0 left promiscuous mode [ 1669.792000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1669.807754] device veth1_macvtap left promiscuous mode [ 1669.813066] device veth0_macvtap left promiscuous mode [ 1669.822865] device veth1_vlan left promiscuous mode [ 1669.828868] device veth0_vlan left promiscuous mode [ 1669.934588] device hsr_slave_1 left promiscuous mode [ 1669.949181] device hsr_slave_0 left promiscuous mode [ 1669.969091] team0 (unregistering): Port device team_slave_1 removed [ 1669.983399] team0 (unregistering): Port device team_slave_0 removed [ 1669.994159] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1670.008413] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1670.046515] bond0 (unregistering): Released all slaves [ 1670.087615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1670.093936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1670.123929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1670.141750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1670.150671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1670.179710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1670.191777] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1670.218620] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1670.268419] device hsr_slave_0 entered promiscuous mode [ 1670.275825] device hsr_slave_1 entered promiscuous mode [ 1670.281963] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1670.292669] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1670.418175] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1670.463195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1670.475750] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1670.484847] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1670.491673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1670.499207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1670.508756] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1670.514826] 8021q: adding VLAN 0 to HW filter on device team0 [ 1670.524591] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1670.532869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1670.544176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1670.553799] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.560225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1670.573914] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1670.582139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1670.593096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1670.601764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1670.614671] bridge0: port 2(bridge_slave_1) entered blocking state [ 1670.621096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1670.634532] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1670.642377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1670.656640] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1670.664109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1670.679294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1670.688356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1670.700953] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1670.713082] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1670.721022] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1670.728902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1670.737153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1670.747038] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1670.756592] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1670.763446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1670.771447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1670.779035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1670.787305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1670.797018] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1670.803207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1670.817910] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1670.825621] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1670.831845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1670.840371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1670.850626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1670.913919] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1670.929240] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1670.936924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1670.945546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1670.984898] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1670.992253] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1671.003486] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1671.012630] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1671.021922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1671.029830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1671.042170] device veth0_vlan entered promiscuous mode [ 1671.051960] device veth1_vlan entered promiscuous mode [ 1671.058560] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1671.065192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1671.072078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1671.079361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1671.088755] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1671.111049] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1671.128849] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1671.140459] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1671.149178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1671.159758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1671.169936] device veth0_macvtap entered promiscuous mode [ 1671.177896] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1671.187662] device veth1_macvtap entered promiscuous mode [ 1671.188549] IPVS: ftp: loaded support on port[0] = 21 [ 1671.200054] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1671.211073] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1671.235034] Bluetooth: hci0 command 0x041b tx timeout [ 1671.250710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1671.260497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.270778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1671.281093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.291060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1671.302657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.312429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1671.322812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.333574] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1671.341599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1671.351394] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1671.359913] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1671.368382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1671.382400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1671.393441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.403373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1671.414537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.424255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1671.434541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.445164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1671.454879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1671.465626] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1671.472533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1671.482936] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1671.491950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1671.600375] chnl_net:caif_netlink_parms(): no params data found [ 1671.693828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1671.700750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.709189] device bridge_slave_0 entered promiscuous mode [ 1671.717877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1671.729389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.737130] device bridge_slave_1 entered promiscuous mode [ 1671.780858] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1671.790387] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1671.816620] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1671.824307] team0: Port device team_slave_0 added [ 1671.830091] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1671.838674] team0: Port device team_slave_1 added [ 1671.860156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1671.866794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1671.892174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1671.906119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1671.925158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1671.960397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1671.988891] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1672.004363] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1672.058790] device hsr_slave_0 entered promiscuous mode [ 1672.071240] device hsr_slave_1 entered promiscuous mode [ 1672.083808] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1672.098857] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1672.249344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.255781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1672.262386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.268785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1672.320818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1672.329038] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1672.360570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1672.368000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.379502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.389750] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1672.404931] 8021q: adding VLAN 0 to HW filter on device team0 [ 1672.414229] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1672.425895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1672.433905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1672.447115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.453550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1672.466269] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1672.479858] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1672.487036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1672.499615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1672.507538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.513883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1672.526875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1672.538109] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1672.549975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1672.564326] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1672.576181] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1672.584260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1672.600600] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1672.609457] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1672.620239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1672.630318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1672.643178] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1672.651646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1672.659997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1672.669962] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1672.679679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1672.690416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1672.701363] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1672.710424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1672.733174] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1672.742563] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1672.754652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1672.763717] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1672.778074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1672.863613] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1672.879046] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1672.889534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1672.899250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1672.953662] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1672.962959] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1672.974009] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1672.988425] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1672.995786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1673.003504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1673.018445] device veth0_vlan entered promiscuous mode [ 1673.028439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1673.037023] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1673.047895] device veth1_vlan entered promiscuous mode [ 1673.053805] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1673.070015] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1673.088401] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1673.102239] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1673.110450] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1673.122391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1673.130658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1673.142591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1673.152706] device veth0_macvtap entered promiscuous mode [ 1673.164176] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1673.164840] Bluetooth: hci5 command 0x0409 tx timeout [ 1673.174306] device veth1_macvtap entered promiscuous mode [ 1673.185906] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1673.199231] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1673.209307] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1673.222323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1673.233636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.248058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1673.258773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.271705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1673.283123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.296860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1673.308295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.321981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1673.324899] Bluetooth: hci0 command 0x040f tx timeout [ 1673.334195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.351590] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1673.359690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1673.370408] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1673.378530] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1673.390086] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1673.398594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1673.412057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1673.422742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.436833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1673.448448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.460354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1673.472443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.484381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1673.498398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.507572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1673.521759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.532572] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1673.543723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1673.551272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1673.565726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 15:41:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) 15:41:21 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) 15:41:21 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) 15:41:21 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) 15:41:21 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) 15:41:21 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) [ 1674.738069] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1674.738144] syz-executor.1: [ 1674.750123] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1674.762678] syz-executor.4: [ 1674.765539] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1674.772829] page allocation failure: order:4 [ 1674.780943] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1674.801608] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1674.813255] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1674.816023] syz-executor.5 cpuset= [ 1674.820871] syz-executor.2 cpuset= [ 1674.824819] syz-executor.3 cpuset= [ 1674.829675] / [ 1674.831586] syz-executor.1 cpuset= [ 1674.836609] / [ 1674.839927] CPU: 1 PID: 9009 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1674.840345] / [ 1674.841913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1674.855310] mems_allowed=0-1 [ 1674.860733] Call Trace: [ 1674.860752] dump_stack+0x1b2/0x281 [ 1674.860766] warn_alloc.cold+0x96/0x1cc [ 1674.860778] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1674.860788] ? zone_watermark_ok_safe+0x220/0x220 [ 1674.860810] __alloc_pages_nodemask+0x2127/0x2720 [ 1674.866296] mems_allowed=0-1 [ 1674.866461] ? lock_acquire+0x170/0x3f0 [ 1674.884531] mems_allowed=0-1 [ 1674.888678] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1674.888696] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1674.888706] ? __mutex_unlock_slowpath+0x75/0x770 [ 1674.888720] alloc_pages_current+0x155/0x260 [ 1674.888733] ion_page_pool_alloc+0x118/0x1b0 [ 1674.888743] ion_system_heap_allocate+0x133/0x8c0 [ 1674.927570] ? ion_alloc+0x187/0x810 [ 1674.931275] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1674.936712] ? ion_system_contig_heap_create+0x130/0x130 [ 1674.942144] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1674.947163] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1674.952001] ion_alloc+0x204/0x810 [ 1674.955548] ? ion_dma_buf_release+0x40/0x40 [ 1674.959946] ? __might_fault+0x177/0x1b0 [ 1674.963999] ion_ioctl+0xea/0x1f0 [ 1674.967448] ? ion_query_heaps+0x360/0x360 [ 1674.971697] ? lock_acquire+0x170/0x3f0 [ 1674.975677] ? ion_query_heaps+0x360/0x360 [ 1674.979895] do_vfs_ioctl+0x75a/0xff0 [ 1674.983687] ? ioctl_preallocate+0x1a0/0x1a0 [ 1674.988086] ? lock_downgrade+0x740/0x740 [ 1674.992221] ? __fget+0x225/0x360 [ 1674.995657] ? do_vfs_ioctl+0xff0/0xff0 [ 1674.999620] ? security_file_ioctl+0x83/0xb0 [ 1675.004018] SyS_ioctl+0x7f/0xb0 [ 1675.007372] ? do_vfs_ioctl+0xff0/0xff0 [ 1675.011377] do_syscall_64+0x1d5/0x640 [ 1675.015253] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1675.020429] RIP: 0033:0x4665d9 [ 1675.023600] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1675.031297] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1675.038552] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1675.045809] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1675.053061] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1675.060310] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1675.068319] CPU: 0 PID: 9008 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1675.076122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1675.085471] Call Trace: [ 1675.085580] / [ 1675.088076] dump_stack+0x1b2/0x281 [ 1675.093408] warn_alloc.cold+0x96/0x1cc [ 1675.093683] mems_allowed=0-1 [ 1675.097384] ? zone_watermark_ok_safe+0x220/0x220 [ 1675.097409] __alloc_pages_nodemask+0x2127/0x2720 [ 1675.097431] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1675.115029] ? migrate_swap_stop+0x880/0x880 [ 1675.119428] ? lock_acquire+0x170/0x3f0 [ 1675.123414] ? wake_up_q+0x82/0xd0 [ 1675.126962] ? __mutex_unlock_slowpath+0x261/0x770 [ 1675.131898] alloc_pages_current+0x155/0x260 [ 1675.136299] ion_page_pool_alloc+0x118/0x1b0 [ 1675.140690] ion_system_heap_allocate+0x133/0x8c0 [ 1675.145516] ? ion_alloc+0x187/0x810 [ 1675.149226] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1675.154670] ? ion_system_contig_heap_create+0x130/0x130 [ 1675.160112] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1675.165139] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1675.169971] ion_alloc+0x204/0x810 [ 1675.173529] ? ion_dma_buf_release+0x40/0x40 [ 1675.177937] ? __might_fault+0x177/0x1b0 [ 1675.182003] ion_ioctl+0xea/0x1f0 [ 1675.185463] ? ion_query_heaps+0x360/0x360 [ 1675.189682] ? lock_acquire+0x170/0x3f0 [ 1675.193647] ? ion_query_heaps+0x360/0x360 [ 1675.197873] do_vfs_ioctl+0x75a/0xff0 [ 1675.201680] ? ioctl_preallocate+0x1a0/0x1a0 [ 1675.206102] ? lock_downgrade+0x740/0x740 [ 1675.210253] ? __fget+0x225/0x360 [ 1675.213698] ? do_vfs_ioctl+0xff0/0xff0 [ 1675.217660] ? security_file_ioctl+0x83/0xb0 [ 1675.222069] SyS_ioctl+0x7f/0xb0 [ 1675.225431] ? do_vfs_ioctl+0xff0/0xff0 [ 1675.229417] do_syscall_64+0x1d5/0x640 [ 1675.233298] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1675.238475] RIP: 0033:0x4665d9 [ 1675.241659] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1675.249381] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1675.256649] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1675.263904] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1675.271158] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1675.278405] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1675.285682] CPU: 1 PID: 9004 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1675.293480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1675.302828] Call Trace: [ 1675.305429] dump_stack+0x1b2/0x281 [ 1675.309067] warn_alloc.cold+0x96/0x1cc [ 1675.313041] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1675.318054] ? zone_watermark_ok_safe+0x220/0x220 [ 1675.322905] __alloc_pages_nodemask+0x2127/0x2720 [ 1675.327772] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1675.332609] ? migrate_swap_stop+0x880/0x880 [ 1675.337019] ? lock_acquire+0x170/0x3f0 [ 1675.340995] ? wake_up_q+0x82/0xd0 [ 1675.344530] ? __mutex_unlock_slowpath+0x261/0x770 [ 1675.349459] alloc_pages_current+0x155/0x260 [ 1675.353893] ion_page_pool_alloc+0x118/0x1b0 [ 1675.358298] ion_system_heap_allocate+0x133/0x8c0 [ 1675.363140] ? ion_alloc+0x187/0x810 [ 1675.366852] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1675.372306] ? ion_system_contig_heap_create+0x130/0x130 [ 1675.377761] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1675.382765] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1675.387611] ion_alloc+0x204/0x810 [ 1675.391134] ? ion_dma_buf_release+0x40/0x40 [ 1675.395530] ? __might_fault+0x177/0x1b0 [ 1675.399580] ion_ioctl+0xea/0x1f0 [ 1675.403016] ? ion_query_heaps+0x360/0x360 [ 1675.407251] ? lock_acquire+0x170/0x3f0 [ 1675.411220] ? ion_query_heaps+0x360/0x360 [ 1675.415444] do_vfs_ioctl+0x75a/0xff0 [ 1675.419239] ? ioctl_preallocate+0x1a0/0x1a0 [ 1675.423651] ? lock_downgrade+0x740/0x740 [ 1675.427798] ? __fget+0x225/0x360 [ 1675.431238] ? do_vfs_ioctl+0xff0/0xff0 [ 1675.435206] ? security_file_ioctl+0x83/0xb0 [ 1675.439607] SyS_ioctl+0x7f/0xb0 [ 1675.442954] ? do_vfs_ioctl+0xff0/0xff0 [ 1675.446916] do_syscall_64+0x1d5/0x640 [ 1675.450795] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1675.455973] RIP: 0033:0x4665d9 [ 1675.459150] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1675.466857] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1675.474137] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1675.481530] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1675.488795] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1675.496050] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1675.503343] CPU: 0 PID: 9015 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1675.511151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1675.519877] Bluetooth: hci5 command 0x041b tx timeout [ 1675.520505] Call Trace: [ 1675.528313] dump_stack+0x1b2/0x281 [ 1675.531945] warn_alloc.cold+0x96/0x1cc [ 1675.534973] Bluetooth: hci0 command 0x0419 tx timeout [ 1675.535928] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1675.535940] ? zone_watermark_ok_safe+0x220/0x220 [ 1675.535961] __alloc_pages_nodemask+0x2127/0x2720 [ 1675.555837] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1675.560688] ? migrate_swap_stop+0x880/0x880 [ 1675.565099] ? lock_acquire+0x170/0x3f0 [ 1675.569081] ? wake_up_q+0x82/0xd0 [ 1675.572627] ? __mutex_unlock_slowpath+0x261/0x770 [ 1675.577564] alloc_pages_current+0x155/0x260 [ 1675.581981] ion_page_pool_alloc+0x118/0x1b0 [ 1675.586410] ion_system_heap_allocate+0x133/0x8c0 [ 1675.591255] ? ion_alloc+0x187/0x810 [ 1675.594985] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1675.600440] ? ion_system_contig_heap_create+0x130/0x130 [ 1675.605912] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1675.610941] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1675.615825] ion_alloc+0x204/0x810 [ 1675.619373] ? ion_dma_buf_release+0x40/0x40 [ 1675.623783] ? __might_fault+0x177/0x1b0 [ 1675.627841] ion_ioctl+0xea/0x1f0 [ 1675.631291] ? ion_query_heaps+0x360/0x360 [ 1675.631737] syz-executor.0: [ 1675.635525] ? lock_acquire+0x170/0x3f0 [ 1675.635534] ? ion_query_heaps+0x360/0x360 [ 1675.635544] do_vfs_ioctl+0x75a/0xff0 [ 1675.635555] ? ioctl_preallocate+0x1a0/0x1a0 [ 1675.635564] ? lock_downgrade+0x740/0x740 [ 1675.638730] page allocation failure: order:4 [ 1675.642531] ? __fget+0x225/0x360 [ 1675.642541] ? do_vfs_ioctl+0xff0/0xff0 [ 1675.642551] ? security_file_ioctl+0x83/0xb0 [ 1675.642561] SyS_ioctl+0x7f/0xb0 [ 1675.654372] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1675.654949] ? do_vfs_ioctl+0xff0/0xff0 [ 1675.654968] do_syscall_64+0x1d5/0x640 [ 1675.654982] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1675.654991] RIP: 0033:0x4665d9 [ 1675.662090] (null) [ 1675.663508] RSP: 002b:00007f28a7fcb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1675.663519] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1675.663525] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1675.663530] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1675.663535] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1675.663543] R13: 00007ffd6449ea9f R14: 00007f28a7fcb300 R15: 0000000000022000 [ 1675.669087] syz-executor.0 cpuset= [ 1675.673867] CPU: 0 PID: 9012 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1675.682601] / [ 1675.685798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1675.689839] mems_allowed=0-1 [ 1675.693608] Call Trace: [ 1675.693627] dump_stack+0x1b2/0x281 [ 1675.693639] warn_alloc.cold+0x96/0x1cc [ 1675.693651] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1675.735445] warn_alloc_show_mem: 1 callbacks suppressed [ 1675.735449] Mem-Info: [ 1675.740860] ? zone_watermark_ok_safe+0x220/0x220 [ 1675.740884] __alloc_pages_nodemask+0x2127/0x2720 [ 1675.762826] active_anon:18353 inactive_anon:24290 isolated_anon:0 [ 1675.762826] active_file:2139 inactive_file:3494 isolated_file:0 [ 1675.762826] unevictable:0 dirty:121 writeback:0 unstable:0 [ 1675.762826] slab_reclaimable:12723 slab_unreclaimable:115109 [ 1675.762826] mapped:57671 shmem:25365 pagetables:856 bounce:0 [ 1675.762826] free:199713 free_pcp:64 free_cma:0 [ 1675.770498] ? __schedule+0x893/0x1de0 [ 1675.770514] ? lock_acquire+0x170/0x3f0 [ 1675.770529] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1675.770543] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1675.784290] Node 0 active_anon:70316kB inactive_anon:79564kB active_file:7876kB inactive_file:13780kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138328kB dirty:456kB writeback:0kB shmem:83728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1675.788767] ? __mutex_unlock_slowpath+0x75/0x770 [ 1675.788783] alloc_pages_current+0x155/0x260 [ 1675.788795] ion_page_pool_alloc+0x118/0x1b0 [ 1675.788805] ion_system_heap_allocate+0x133/0x8c0 [ 1675.800880] Node 1 active_anon:3096kB inactive_anon:17596kB active_file:680kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92356kB dirty:28kB writeback:0kB shmem:17732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1675.801367] ? ion_alloc+0x187/0x810 [ 1675.811742] Node 0 [ 1675.840046] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1675.840058] ? ion_system_contig_heap_create+0x130/0x130 [ 1675.840067] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1675.840078] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1675.840087] ion_alloc+0x204/0x810 [ 1675.840103] ? ion_dma_buf_release+0x40/0x40 [ 1675.877564] DMA free:11112kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1675.886340] ? __might_fault+0x177/0x1b0 [ 1675.886352] ion_ioctl+0xea/0x1f0 [ 1675.886360] ? ion_query_heaps+0x360/0x360 [ 1675.901683] lowmem_reserve[]: [ 1675.904815] ? lock_acquire+0x170/0x3f0 [ 1675.904825] ? ion_query_heaps+0x360/0x360 [ 1675.904835] do_vfs_ioctl+0x75a/0xff0 [ 1675.904847] ? ioctl_preallocate+0x1a0/0x1a0 [ 1675.984755] 0 [ 1675.992509] ? lock_downgrade+0x740/0x740 [ 1675.992523] ? __fget+0x225/0x360 [ 1675.992532] ? do_vfs_ioctl+0xff0/0xff0 [ 1676.022821] 2717 [ 1676.023670] ? security_file_ioctl+0x83/0xb0 [ 1676.031019] 2718 [ 1676.033020] SyS_ioctl+0x7f/0xb0 [ 1676.033029] ? do_vfs_ioctl+0xff0/0xff0 [ 1676.033042] do_syscall_64+0x1d5/0x640 [ 1676.051196] 2718 [ 1676.052804] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1676.052811] RIP: 0033:0x4665d9 [ 1676.052818] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1676.070176] 2718 [ 1676.074778] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1676.074784] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1676.074790] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1676.074796] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1676.074801] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1676.128507] CPU: 1 PID: 9010 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1676.136311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1676.145682] Call Trace: [ 1676.148275] dump_stack+0x1b2/0x281 [ 1676.151927] warn_alloc.cold+0x96/0x1cc [ 1676.155936] ? zone_watermark_ok_safe+0x220/0x220 [ 1676.160806] __alloc_pages_nodemask+0x2127/0x2720 [ 1676.165657] ? lock_acquire+0x170/0x3f0 [ 1676.169637] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1676.174483] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1676.179937] ? __mutex_unlock_slowpath+0x75/0x770 [ 1676.184782] alloc_pages_current+0x155/0x260 [ 1676.189213] ion_page_pool_alloc+0x118/0x1b0 [ 1676.193614] ion_system_heap_allocate+0x133/0x8c0 [ 1676.198449] ? ion_alloc+0x187/0x810 [ 1676.202155] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1676.207608] ? ion_system_contig_heap_create+0x130/0x130 [ 1676.213075] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1676.218093] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1676.222936] ion_alloc+0x204/0x810 [ 1676.226475] ? ion_dma_buf_release+0x40/0x40 [ 1676.230885] ? __might_fault+0x177/0x1b0 [ 1676.234949] ion_ioctl+0xea/0x1f0 [ 1676.238424] ? ion_query_heaps+0x360/0x360 [ 1676.242659] ? lock_acquire+0x170/0x3f0 [ 1676.246629] ? ion_query_heaps+0x360/0x360 [ 1676.250862] do_vfs_ioctl+0x75a/0xff0 [ 1676.254686] ? ioctl_preallocate+0x1a0/0x1a0 [ 1676.259111] ? lock_downgrade+0x740/0x740 [ 1676.263259] ? __fget+0x225/0x360 [ 1676.266729] ? do_vfs_ioctl+0xff0/0xff0 [ 1676.270708] ? security_file_ioctl+0x83/0xb0 [ 1676.275155] SyS_ioctl+0x7f/0xb0 [ 1676.278523] ? do_vfs_ioctl+0xff0/0xff0 [ 1676.282499] do_syscall_64+0x1d5/0x640 [ 1676.286404] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1676.291601] RIP: 0033:0x4665d9 [ 1676.294795] RSP: 002b:00007f264b33c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1676.302517] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1676.309777] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1676.317124] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1676.324391] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1676.331655] R13: 00007ffed4ba430f R14: 00007f264b33c300 R15: 0000000000022000 [ 1676.380606] Node 0 DMA32 free:587208kB min:36200kB low:45248kB high:54296kB active_anon:68272kB inactive_anon:79564kB active_file:7876kB inactive_file:13976kB unevictable:0kB writepending:520kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2588kB bounce:0kB free_pcp:208kB local_pcp:124kB free_cma:0kB [ 1676.421386] lowmem_reserve[]: 0 0 0 0 0 [ 1676.439505] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1676.483984] lowmem_reserve[]: 0 0 0 0 0 [ 1676.503066] Node 1 Normal free:1268972kB min:53696kB low:67120kB high:80544kB active_anon:3096kB inactive_anon:17596kB active_file:680kB inactive_file:196kB unevictable:0kB writepending:28kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:836kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1676.554025] lowmem_reserve[]: 0 0 0 0 0 [ 1676.572625] Node 0 DMA: 96*4kB (UE) 18*8kB (UE) 42*16kB (U) 22*32kB (UE) 17*64kB (UE) 4*128kB (UE) 4*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (UM) 0*4096kB = 11696kB [ 1676.604754] Node 0 DMA32: 23*4kB (EH) 355*8kB (MEH) 6924*16kB (UMEH) 3910*32kB (UEH) 25*64kB (UMEH) 649*128kB (UMEH) 161*256kB (UM) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 366772kB [ 1676.680603] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1676.735730] Node 1 Normal: 8045*4kB (UM) 2579*8kB (U) 2406*16kB (U) 2451*32kB (U) 13267*64kB (U) 2335*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1317708kB [ 1676.757828] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1676.766856] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1676.800126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1676.827816] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1676.856538] 31597 total pagecache pages [ 1676.869423] 0 pages in swap cache [ 1676.880617] Swap cache stats: add 0, delete 0, find 0/0 [ 1676.894900] Free swap = 0kB [ 1676.900213] Total swap = 0kB [ 1676.906629] 2097051 pages RAM [ 1676.911757] 0 pages HighMem/MovableOnly [ 1676.935862] 363849 pages reserved [ 1676.942843] 0 pages cma reserved [ 1677.564691] Bluetooth: hci5 command 0x040f tx timeout [ 1678.755448] oom_reaper: reaped process 9008 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1678.826448] oom_reaper: reaped process 9010 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1678.893439] oom_reaper: reaped process 9015 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1678.976351] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1679.024095] in:imklog cpuset=/ mems_allowed=0-1 [ 1679.033493] CPU: 0 PID: 7660 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1679.040850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1679.050198] Call Trace: [ 1679.052779] dump_stack+0x1b2/0x281 [ 1679.056408] dump_header+0x178/0x82f [ 1679.060110] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1679.065204] ? ___ratelimit+0x2cd/0x530 [ 1679.069171] oom_kill_process.cold+0x10/0xa40 [ 1679.073663] out_of_memory+0xe3e/0x1190 [ 1679.077637] ? oom_killer_disable+0x1c0/0x1c0 [ 1679.082117] ? mutex_trylock+0x152/0x1a0 [ 1679.086175] __alloc_pages_nodemask+0x23e1/0x2720 [ 1679.091014] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1679.095865] alloc_pages_current+0x155/0x260 [ 1679.100318] filemap_fault+0x11a1/0x1ad0 [ 1679.104379] ext4_filemap_fault+0x84/0xb0 [ 1679.108513] __do_fault+0xfa/0x380 [ 1679.112060] __handle_mm_fault+0x2497/0x4620 [ 1679.116455] ? vm_insert_page+0x7c0/0x7c0 [ 1679.120596] ? lock_downgrade+0x740/0x740 [ 1679.124739] ? mark_held_locks+0xa6/0xf0 [ 1679.128830] handle_mm_fault+0x455/0x9c0 [ 1679.132886] __do_page_fault+0x549/0xad0 [ 1679.136940] ? spurious_fault+0x640/0x640 [ 1679.141084] ? do_page_fault+0x60/0x500 [ 1679.145055] ? page_fault+0x2f/0x50 [ 1679.148671] page_fault+0x45/0x50 [ 1679.152109] RIP: 1fa0:0x1f9f [ 1679.155117] RSP: 0000:00005644422f29d0 EFLAGS: 7f8863255da0 [ 1679.178146] syz-executor.3: [ 1679.184318] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1679.199886] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1679.218336] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1679.254288] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1679.259421] CPU: 1 PID: 9008 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1679.267206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1679.276580] Call Trace: [ 1679.279165] dump_stack+0x1b2/0x281 [ 1679.282789] warn_alloc.cold+0x96/0x1cc [ 1679.286758] ? zone_watermark_ok_safe+0x220/0x220 [ 1679.291595] ? usleep_range+0x130/0x130 [ 1679.295561] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1679.300663] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1679.305675] ? run_timer_softirq+0x5a0/0x5a0 [ 1679.310082] __alloc_pages_nodemask+0x2127/0x2720 [ 1679.314932] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1679.319684] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1679.324629] ? __sanitizer_cov_trace_pc+0xe/0x50 [ 1679.329385] alloc_pages_current+0x155/0x260 [ 1679.333787] ion_page_pool_alloc+0x118/0x1b0 [ 1679.338190] ion_system_heap_allocate+0x133/0x8c0 [ 1679.343025] ? ion_alloc+0x187/0x810 [ 1679.346731] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1679.352258] ? ion_system_contig_heap_create+0x130/0x130 [ 1679.357698] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1679.362703] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1679.367532] ion_alloc+0x204/0x810 [ 1679.371065] ? ion_dma_buf_release+0x40/0x40 [ 1679.375470] ? __might_fault+0x177/0x1b0 [ 1679.379526] ion_ioctl+0xea/0x1f0 [ 1679.382965] ? ion_query_heaps+0x360/0x360 [ 1679.387360] ? lock_acquire+0x170/0x3f0 [ 1679.391325] ? ion_query_heaps+0x360/0x360 [ 1679.395555] do_vfs_ioctl+0x75a/0xff0 [ 1679.399354] ? ioctl_preallocate+0x1a0/0x1a0 [ 1679.403754] ? lock_downgrade+0x740/0x740 [ 1679.407897] ? __fget+0x225/0x360 [ 1679.411342] ? do_vfs_ioctl+0xff0/0xff0 [ 1679.415315] ? security_file_ioctl+0x83/0xb0 [ 1679.419716] SyS_ioctl+0x7f/0xb0 [ 1679.423071] ? do_vfs_ioctl+0xff0/0xff0 [ 1679.427035] do_syscall_64+0x1d5/0x640 [ 1679.430938] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1679.436120] RIP: 0033:0x4665d9 [ 1679.439305] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1679.446999] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1679.454256] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1679.461513] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1679.468776] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1679.476032] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1679.484040] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1679.489188] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1679.504231] CPU: 1 PID: 9015 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1679.512031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1679.521376] Call Trace: [ 1679.523964] dump_stack+0x1b2/0x281 [ 1679.527585] warn_alloc.cold+0x96/0x1cc [ 1679.531564] ? zone_watermark_ok_safe+0x220/0x220 [ 1679.536392] ? usleep_range+0x130/0x130 [ 1679.540382] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1679.545485] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1679.550507] ? run_timer_softirq+0x5a0/0x5a0 [ 1679.554915] __alloc_pages_nodemask+0x2127/0x2720 [ 1679.559763] ? lock_acquire+0x170/0x3f0 [ 1679.563731] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1679.568564] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1679.573058] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1679.578649] alloc_pages_current+0x155/0x260 [ 1679.583055] ion_page_pool_alloc+0x118/0x1b0 [ 1679.587472] ion_system_heap_allocate+0x133/0x8c0 [ 1679.592309] ? ion_alloc+0x187/0x810 [ 1679.596036] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1679.601477] ? ion_system_contig_heap_create+0x130/0x130 [ 1679.606920] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1679.611932] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1679.616763] ion_alloc+0x204/0x810 [ 1679.620295] ? ion_dma_buf_release+0x40/0x40 [ 1679.624698] ? __might_fault+0x177/0x1b0 [ 1679.628749] ion_ioctl+0xea/0x1f0 [ 1679.632203] ? ion_query_heaps+0x360/0x360 [ 1679.636448] ? lock_acquire+0x170/0x3f0 [ 1679.640419] ? ion_query_heaps+0x360/0x360 [ 1679.644651] do_vfs_ioctl+0x75a/0xff0 [ 1679.648446] ? ioctl_preallocate+0x1a0/0x1a0 [ 1679.652844] ? lock_downgrade+0x740/0x740 [ 1679.656983] ? __fget+0x225/0x360 [ 1679.660426] ? do_vfs_ioctl+0xff0/0xff0 [ 1679.664210] Mem-Info: [ 1679.664390] ? security_file_ioctl+0x83/0xb0 [ 1679.666794] active_anon:18205 inactive_anon:24289 isolated_anon:0 [ 1679.666794] active_file:115 inactive_file:47 isolated_file:0 [ 1679.666794] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1679.666794] slab_reclaimable:12712 slab_unreclaimable:115449 [ 1679.666794] mapped:53310 shmem:25364 pagetables:834 bounce:0 [ 1679.666794] free:204976 free_pcp:657 free_cma:0 [ 1679.671177] SyS_ioctl+0x7f/0xb0 [ 1679.707933] ? do_vfs_ioctl+0xff0/0xff0 [ 1679.711900] do_syscall_64+0x1d5/0x640 [ 1679.715795] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1679.720978] RIP: 0033:0x4665d9 [ 1679.724159] RSP: 002b:00007f28a7fcb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1679.731859] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1679.739124] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1679.746398] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1679.753656] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1679.760918] R13: 00007ffd6449ea9f R14: 00007f28a7fcb300 R15: 0000000000022000 [ 1679.768206] CPU: 0 PID: 9012 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1679.774226] Bluetooth: hci5 command 0x0419 tx timeout [ 1679.776002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1679.790543] Call Trace: [ 1679.793125] dump_stack+0x1b2/0x281 [ 1679.796746] warn_alloc.cold+0x96/0x1cc [ 1679.800717] ? zone_watermark_ok_safe+0x220/0x220 [ 1679.805558] ? usleep_range+0x130/0x130 [ 1679.809527] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1679.814635] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1679.819647] ? run_timer_softirq+0x5a0/0x5a0 [ 1679.824070] __alloc_pages_nodemask+0x2127/0x2720 [ 1679.828909] ? lock_acquire+0x170/0x3f0 [ 1679.832880] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1679.837712] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1679.842203] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1679.847649] alloc_pages_current+0x155/0x260 [ 1679.852053] ion_page_pool_alloc+0x118/0x1b0 [ 1679.856469] ion_system_heap_allocate+0x133/0x8c0 [ 1679.861308] ? ion_alloc+0x187/0x810 [ 1679.865017] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1679.870492] ? ion_system_contig_heap_create+0x130/0x130 [ 1679.875950] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1679.880980] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1679.885851] ion_alloc+0x204/0x810 [ 1679.889402] ? ion_dma_buf_release+0x40/0x40 [ 1679.893815] ? __might_fault+0x177/0x1b0 [ 1679.897868] ion_ioctl+0xea/0x1f0 [ 1679.901323] ? ion_query_heaps+0x360/0x360 [ 1679.905555] ? lock_acquire+0x170/0x3f0 [ 1679.909538] ? ion_query_heaps+0x360/0x360 [ 1679.913770] do_vfs_ioctl+0x75a/0xff0 [ 1679.917597] ? ioctl_preallocate+0x1a0/0x1a0 [ 1679.922019] ? lock_downgrade+0x740/0x740 [ 1679.926158] ? __fget+0x225/0x360 [ 1679.929601] ? do_vfs_ioctl+0xff0/0xff0 [ 1679.933567] ? security_file_ioctl+0x83/0xb0 [ 1679.937974] SyS_ioctl+0x7f/0xb0 [ 1679.941331] ? do_vfs_ioctl+0xff0/0xff0 [ 1679.945303] do_syscall_64+0x1d5/0x640 [ 1679.949229] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1679.954412] RIP: 0033:0x4665d9 [ 1679.957589] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1679.965292] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1679.972560] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1679.979818] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1679.987074] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1679.994332] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1680.014182] warn_alloc_show_mem: 5 callbacks suppressed [ 1680.014185] Mem-Info: [ 1680.021983] active_anon:18205 inactive_anon:24289 isolated_anon:0 [ 1680.021983] active_file:32 inactive_file:468 isolated_file:0 [ 1680.021983] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1680.021983] slab_reclaimable:12694 slab_unreclaimable:115189 [ 1680.021983] mapped:53467 shmem:25364 pagetables:834 bounce:0 [ 1680.021983] free:157159 free_pcp:420 free_cma:0 [ 1680.064208] Node 0 active_anon:69760kB inactive_anon:79564kB active_file:100kB inactive_file:1940kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121576kB dirty:0kB writeback:0kB shmem:83728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1680.124181] Node 1 active_anon:3060kB inactive_anon:17592kB active_file:28kB inactive_file:332kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92392kB dirty:0kB writeback:0kB shmem:17728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1680.134211] Node 0 active_anon:69760kB inactive_anon:79564kB active_file:100kB inactive_file:2040kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121676kB dirty:0kB writeback:0kB shmem:83728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1680.183274] Node 1 active_anon:3060kB inactive_anon:17592kB active_file:28kB inactive_file:932kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92792kB dirty:0kB writeback:0kB shmem:17728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1680.222140] Node 0 DMA free:11116kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1680.244146] Node 0 DMA free:11116kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1680.317623] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1680.322680] Node 0 DMA32 free:41868kB min:36200kB low:45248kB high:54296kB active_anon:67712kB inactive_anon:79564kB active_file:100kB inactive_file:2040kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2556kB bounce:0kB free_pcp:688kB local_pcp:144kB free_cma:0kB [ 1680.351879] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1680.351901] Node 0 DMA32 free:41660kB min:36200kB low:45248kB high:54296kB active_anon:67712kB inactive_anon:79564kB active_file:100kB inactive_file:2040kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2556kB bounce:0kB free_pcp:860kB local_pcp:716kB free_cma:0kB [ 1680.351918] lowmem_reserve[]: 0 0 0 0 0 [ 1680.351937] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1680.351952] lowmem_reserve[]: 0 0 0 0 0 [ 1680.351968] Node 1 Normal free:372500kB min:53696kB low:67120kB high:80544kB active_anon:3060kB inactive_anon:17592kB active_file:28kB inactive_file:1332kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:780kB bounce:0kB free_pcp:148kB local_pcp:116kB free_cma:0kB [ 1680.351984] lowmem_reserve[]: [ 1680.404187] lowmem_reserve[]: 0 0 0 0 0 [ 1680.477465] 0 [ 1680.480211] Node 0 [ 1680.480213] 0 0 [ 1680.482010] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1680.485893] 0 [ 1680.524167] lowmem_reserve[]: 0 0 0 0 0 [ 1680.529950] Node 1 Normal free:306780kB min:53696kB low:67120kB high:80544kB active_anon:3060kB inactive_anon:17592kB active_file:28kB inactive_file:1332kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:780kB bounce:0kB free_pcp:252kB local_pcp:68kB free_cma:0kB [ 1680.558954] lowmem_reserve[]: 0 0 0 0 0 [ 1680.574162] Node 0 [ 1680.574180] 0 [ 1680.584137] DMA: [ 1680.585952] 33*4kB [ 1680.587996] Node 0 [ 1680.587998] (UE) 1*8kB [ 1680.590216] DMA: [ 1680.592430] (E) [ 1680.614144] 33*4kB [ 1680.614194] 21*16kB [ 1680.616160] (UE) [ 1680.618360] (U) [ 1680.620675] 1*8kB [ 1680.622714] 22*32kB (UE) 17*64kB (UE) 3*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (UM) 0*4096kB = 11100kB [ 1680.631430] (E) [ 1680.644186] Node 0 DMA32: 298*4kB (UME) 674*8kB (UME) 226*16kB (UME) 218*32kB (UME) 338*64kB (UME) 13*128kB (UME) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 41240kB [ 1680.647654] 21*16kB (U) 22*32kB (UE) 17*64kB (UE) 3*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (UM) 0*4096kB = 11100kB [ 1680.704162] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1680.714148] Node 0 DMA32: 298*4kB (UME) 656*8kB (UME) 226*16kB (UME) 218*32kB (UME) 338*64kB (UME) 13*128kB (UME) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 41096kB [ 1680.744137] Node 1 Normal: 2*4kB (UM) 1*8kB (U) 1*16kB (U) 2304*32kB [ 1680.744189] Node 0 Normal: [ 1680.750793] (U) [ 1680.750800] 0*4kB [ 1680.753705] 2948*64kB (UM) 4*128kB (UM) 21*256kB (U) 2*512kB (U) 19*1024kB (U) 0*2048kB 0*4096kB = 288800kB [ 1680.787510] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1680.827395] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1680.833676] Node 1 Normal: 1*4kB (M) 0*8kB 0*16kB 1433*32kB (U) 2948*64kB (UM) 4*128kB (UM) 21*256kB (U) 2*512kB (U) 19*1024kB (U) 0*2048kB 0*4096kB = 260900kB [ 1680.887287] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1680.914645] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1680.923500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1680.932852] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1680.935650] 26260 total pagecache pages [ 1680.964134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1680.972721] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1680.974127] 0 pages in swap cache [ 1681.014108] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1681.022759] 26260 total pagecache pages [ 1681.027218] Swap cache stats: add 0, delete 0, find 0/0 [ 1681.032687] Free swap = 0kB [ 1681.034498] 0 pages in swap cache [ 1681.035791] Total swap = 0kB [ 1681.039769] Swap cache stats: add 0, delete 0, find 0/0 [ 1681.042152] 2097051 pages RAM [ 1681.084621] Free swap = 0kB [ 1681.087655] Total swap = 0kB [ 1681.090662] 2097051 pages RAM [ 1681.093755] 0 pages HighMem/MovableOnly [ 1681.113170] 363849 pages reserved [ 1681.116770] 0 pages cma reserved [ 1681.120175] Out of memory (oom_kill_allocating_task): Kill process 7660 (in:imklog) score 0 or sacrifice child [ 1681.130399] Killed process 7658 (rsyslogd) total-vm:254332kB, anon-rss:1284kB, file-rss:0kB, shmem-rss:0kB [ 1681.148434] oom_reaper: reaped process 9012 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1681.160457] oom_reaper: reaped process 7658 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1681.164108] 0 pages HighMem/MovableOnly [ 1681.175813] oom_reaper: reaped process 9004 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1681.194109] 363849 pages reserved [ 1681.200929] 0 pages cma reserved [ 1681.202946] kworker/u4:3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1681.242176] kworker/u4:3 cpuset=/ mems_allowed=0-1 [ 1681.257350] CPU: 1 PID: 29949 Comm: kworker/u4:3 Not tainted 4.14.232-syzkaller #0 [ 1681.265078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1681.274461] Workqueue: events_unbound call_usermodehelper_exec_work [ 1681.280863] Call Trace: [ 1681.283453] dump_stack+0x1b2/0x281 [ 1681.287096] dump_header+0x178/0x82f [ 1681.290816] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1681.295929] ? ___ratelimit+0x2cd/0x530 [ 1681.299896] oom_kill_process.cold+0x10/0xa40 [ 1681.304383] ? lock_downgrade+0x740/0x740 [ 1681.308519] out_of_memory+0x2dc/0x1190 [ 1681.312494] ? oom_killer_disable+0x1c0/0x1c0 [ 1681.316977] ? mutex_trylock+0x152/0x1a0 [ 1681.321031] __alloc_pages_nodemask+0x23e1/0x2720 [ 1681.325890] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1681.330720] ? fs_reclaim_release+0xd0/0x110 [ 1681.335135] ? kmem_cache_alloc_node+0x38b/0x410 [ 1681.339889] copy_process.part.0+0x265/0x71c0 [ 1681.344381] ? __lock_acquire+0x5fc/0x3f20 [ 1681.348613] ? calc_wheel_index+0x2d/0x1c0 [ 1681.352836] ? trace_hardirqs_on+0x10/0x10 [ 1681.357056] ? static_obj+0x50/0x50 [ 1681.360673] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1681.366115] ? __cleanup_sighand+0x40/0x40 [ 1681.370340] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1681.375779] _do_fork+0x184/0xc80 [ 1681.379229] ? fork_idle+0x270/0x270 [ 1681.382946] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1681.388048] ? process_one_work+0x6c4/0x14a0 [ 1681.392443] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1681.397894] kernel_thread+0x2f/0x40 [ 1681.401687] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1681.406950] ? call_usermodehelper+0x80/0x80 [ 1681.411362] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1681.416815] process_one_work+0x793/0x14a0 [ 1681.421061] ? work_busy+0x320/0x320 [ 1681.424776] ? worker_thread+0x158/0xff0 [ 1681.428847] ? _raw_spin_unlock_irq+0x24/0x80 [ 1681.433354] worker_thread+0x5cc/0xff0 [ 1681.437243] ? rescuer_thread+0xc80/0xc80 [ 1681.441401] kthread+0x30d/0x420 [ 1681.444757] ? kthread_create_on_node+0xd0/0xd0 [ 1681.449434] ret_from_fork+0x24/0x30 [ 1681.458874] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1681.477409] Mem-Info: [ 1681.479832] active_anon:17305 inactive_anon:24289 isolated_anon:0 [ 1681.479832] active_file:78 inactive_file:22 isolated_file:0 [ 1681.479832] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1681.479832] slab_reclaimable:12693 slab_unreclaimable:116300 [ 1681.479832] mapped:53223 shmem:25364 pagetables:834 bounce:0 [ 1681.479832] free:13952 free_pcp:30 free_cma:0 [ 1681.508938] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1681.543845] Node 0 active_anon:66960kB inactive_anon:79564kB active_file:108kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120580kB dirty:0kB writeback:0kB shmem:83728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1681.547359] syz-executor.5 cpuset= [ 1681.571718] Node 1 active_anon:2260kB inactive_anon:17592kB active_file:104kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92312kB dirty:0kB writeback:0kB shmem:17728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1681.571723] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1681.571738] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1681.571758] Node 0 DMA32 free:22364kB min:36200kB low:45248kB high:54296kB active_anon:67208kB inactive_anon:79564kB active_file:100kB inactive_file:360kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2556kB bounce:0kB free_pcp:836kB local_pcp:716kB free_cma:0kB [ 1681.571776] lowmem_reserve[]: 0 0 0 0 0 [ 1681.571795] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1681.571810] lowmem_reserve[]: 0 0 0 0 0 [ 1681.575493] / [ 1681.647484] syz-executor.3 cpuset= [ 1681.743073] Node 1 Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:2556kB inactive_anon:17592kB active_file:60kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:780kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1681.778832] mems_allowed=0-1 [ 1681.779085] / mems_allowed=0-1 [ 1681.789804] lowmem_reserve[]: 0 0 0 0 0 [ 1681.808191] CPU: 1 PID: 9012 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1681.815989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1681.825443] Call Trace: [ 1681.828038] dump_stack+0x1b2/0x281 [ 1681.831656] warn_alloc.cold+0x96/0x1cc [ 1681.835624] ? zone_watermark_ok_safe+0x220/0x220 [ 1681.840476] __alloc_pages_nodemask+0x2127/0x2720 [ 1681.845313] ? lock_acquire+0x170/0x3f0 [ 1681.849280] ? lock_acquire+0x170/0x3f0 [ 1681.853244] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1681.858073] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1681.863513] ? __mutex_unlock_slowpath+0x75/0x770 [ 1681.868344] alloc_pages_current+0x155/0x260 [ 1681.872741] ion_page_pool_alloc+0x118/0x1b0 [ 1681.877141] ion_system_heap_allocate+0x133/0x8c0 [ 1681.881974] ? _raw_spin_unlock+0x29/0x40 [ 1681.886125] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1681.891041] ? ion_system_contig_heap_create+0x130/0x130 [ 1681.896482] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1681.901475] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1681.906303] ion_alloc+0x27a/0x810 [ 1681.909832] ? ion_dma_buf_release+0x40/0x40 [ 1681.914229] ? __might_fault+0x177/0x1b0 [ 1681.918277] ion_ioctl+0xea/0x1f0 [ 1681.921718] ? ion_query_heaps+0x360/0x360 [ 1681.925949] ? lock_acquire+0x170/0x3f0 [ 1681.929907] ? ion_query_heaps+0x360/0x360 [ 1681.934129] do_vfs_ioctl+0x75a/0xff0 [ 1681.937908] ? ioctl_preallocate+0x1a0/0x1a0 [ 1681.942292] ? lock_downgrade+0x740/0x740 [ 1681.946425] ? __fget+0x225/0x360 [ 1681.949866] ? do_vfs_ioctl+0xff0/0xff0 [ 1681.953833] ? security_file_ioctl+0x83/0xb0 [ 1681.958239] SyS_ioctl+0x7f/0xb0 [ 1681.961589] ? do_vfs_ioctl+0xff0/0xff0 [ 1681.965557] do_syscall_64+0x1d5/0x640 [ 1681.969440] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1681.974615] RIP: 0033:0x4665d9 [ 1681.977783] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1681.985473] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1681.992836] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1682.000125] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1682.007394] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1682.014657] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1682.021917] CPU: 0 PID: 9015 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1682.029255] Node 0 [ 1682.029725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1682.029732] DMA: [ 1682.031984] Call Trace: [ 1682.032005] dump_stack+0x1b2/0x281 [ 1682.032018] warn_alloc.cold+0x96/0x1cc [ 1682.032029] ? zone_watermark_ok_safe+0x220/0x220 [ 1682.032051] __alloc_pages_nodemask+0x2127/0x2720 [ 1682.063217] ? lock_acquire+0x170/0x3f0 [ 1682.063981] 20*4kB (UE) 1*8kB [ 1682.067186] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1682.067203] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1682.070364] (E) [ 1682.075190] ? __mutex_unlock_slowpath+0x75/0x770 [ 1682.075205] alloc_pages_current+0x155/0x260 [ 1682.075217] ion_page_pool_alloc+0x118/0x1b0 [ 1682.075227] ion_system_heap_allocate+0x133/0x8c0 [ 1682.101039] ? _raw_spin_unlock+0x29/0x40 [ 1682.103945] 19*16kB [ 1682.105177] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1682.105182] (U) [ 1682.107487] ? ion_system_contig_heap_create+0x130/0x130 [ 1682.112395] 22*32kB [ 1682.114343] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1682.114354] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1682.114363] ion_alloc+0x27a/0x810 [ 1682.133957] (UE) 2*64kB (UE) [ 1682.135511] ? ion_dma_buf_release+0x40/0x40 [ 1682.135523] ? __might_fault+0x177/0x1b0 [ 1682.138616] 2*128kB [ 1682.142999] ion_ioctl+0xea/0x1f0 [ 1682.152771] ? ion_query_heaps+0x360/0x360 [ 1682.156997] ? lock_acquire+0x170/0x3f0 [ 1682.160982] ? ion_query_heaps+0x360/0x360 [ 1682.163972] (UE) 1*256kB [ 1682.165220] do_vfs_ioctl+0x75a/0xff0 [ 1682.165231] ? ioctl_preallocate+0x1a0/0x1a0 [ 1682.167963] (E) [ 1682.171744] ? lock_downgrade+0x740/0x740 [ 1682.177942] 2*512kB [ 1682.178104] ? __fget+0x225/0x360 [ 1682.182226] (UE) [ 1682.184539] ? do_vfs_ioctl+0xff0/0xff0 [ 1682.184549] ? security_file_ioctl+0x83/0xb0 [ 1682.184559] SyS_ioctl+0x7f/0xb0 [ 1682.187985] 2*1024kB [ 1682.190021] ? do_vfs_ioctl+0xff0/0xff0 [ 1682.193989] (UE) [ 1682.198393] do_syscall_64+0x1d5/0x640 [ 1682.201732] 3*2048kB [ 1682.204138] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1682.204144] RIP: 0033:0x4665d9 [ 1682.204149] RSP: 002b:00007f28a7fcb188 EFLAGS: 00000246 [ 1682.208116] (UM) [ 1682.210149] ORIG_RAX: 0000000000000010 [ 1682.210155] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1682.214028] 0*4096kB [ 1682.216402] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1682.221572] = 10952kB [ 1682.224737] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1682.224746] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1682.224751] R13: 00007ffd6449ea9f R14: 00007f28a7fcb300 R15: 0000000000022000 [ 1682.298978] Node 0 DMA32: 735*4kB (UME) 462*8kB (UME) 168*16kB (UME) 645*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 29964kB [ 1682.321245] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1682.321290] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1682.346470] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1682.350785] Node 1 Normal: [ 1682.351587] CPU: 0 PID: 9008 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1682.351594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1682.354588] 93*4kB [ 1682.362288] Call Trace: [ 1682.375888] warn_alloc_show_mem: 2 callbacks suppressed [ 1682.375892] Mem-Info: [ 1682.376944] dump_stack+0x1b2/0x281 [ 1682.382281] active_anon:17292 inactive_anon:24289 isolated_anon:0 [ 1682.382281] active_file:37 inactive_file:17 isolated_file:0 [ 1682.382281] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1682.382281] slab_reclaimable:12688 slab_unreclaimable:116067 [ 1682.382281] mapped:53239 shmem:25364 pagetables:803 bounce:0 [ 1682.382281] free:13812 free_pcp:124 free_cma:0 [ 1682.384677] warn_alloc.cold+0x96/0x1cc [ 1682.384686] ? zone_watermark_ok_safe+0x220/0x220 [ 1682.384705] __alloc_pages_nodemask+0x2127/0x2720 [ 1682.384715] ? lock_acquire+0x170/0x3f0 [ 1682.384725] ? lock_acquire+0x170/0x3f0 [ 1682.384739] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1682.388355] Node 0 active_anon:66948kB inactive_anon:79564kB active_file:116kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120664kB dirty:0kB writeback:0kB shmem:83728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1682.421658] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1682.421671] ? __mutex_unlock_slowpath+0x75/0x770 [ 1682.421685] alloc_pages_current+0x155/0x260 [ 1682.425666] (UM) [ 1682.430467] ion_page_pool_alloc+0x118/0x1b0 [ 1682.435330] 47*8kB [ 1682.439265] ion_system_heap_allocate+0x133/0x8c0 [ 1682.443212] (UM) [ 1682.448035] ? _raw_spin_unlock+0x29/0x40 [ 1682.448044] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1682.448053] ? ion_system_contig_heap_create+0x130/0x130 [ 1682.475992] Node 1 active_anon:2220kB inactive_anon:17592kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92292kB dirty:0kB writeback:0kB shmem:17728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1682.481373] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1682.486223] Node 0 [ 1682.490614] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1682.492659] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1682.497036] ion_alloc+0x27a/0x810 [ 1682.497049] ? ion_dma_buf_release+0x40/0x40 [ 1682.497059] ? __might_fault+0x177/0x1b0 [ 1682.497068] ion_ioctl+0xea/0x1f0 [ 1682.497077] ? ion_query_heaps+0x360/0x360 [ 1682.499334] 56*16kB [ 1682.504238] ? lock_acquire+0x170/0x3f0 [ 1682.504245] ? ion_query_heaps+0x360/0x360 [ 1682.504260] do_vfs_ioctl+0x75a/0xff0 [ 1682.506309] (UM) [ 1682.510441] ? ioctl_preallocate+0x1a0/0x1a0 [ 1682.515369] lowmem_reserve[]: [ 1682.521010] ? lock_downgrade+0x740/0x740 [ 1682.548316] 543*32kB [ 1682.553269] ? __fget+0x225/0x360 [ 1682.555491] (UM) [ 1682.560313] ? do_vfs_ioctl+0xff0/0xff0 [ 1682.585843] 0 [ 1682.589351] ? security_file_ioctl+0x83/0xb0 [ 1682.593846] 2717 [ 1682.597934] SyS_ioctl+0x7f/0xb0 [ 1682.597942] ? do_vfs_ioctl+0xff0/0xff0 [ 1682.597953] do_syscall_64+0x1d5/0x640 [ 1682.597968] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1682.601417] 0*64kB [ 1682.605616] RIP: 0033:0x4665d9 [ 1682.605621] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1682.605631] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1682.605636] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1682.605647] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1682.607945] 1*128kB [ 1682.611910] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1682.611917] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1682.616157] 2718 [ 1682.663916] syz-executor.1: [ 1682.680063] (U) [ 1682.698213] page allocation failure: order:0 [ 1682.713929] 25*256kB [ 1682.719417] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1682.722322] (U) [ 1682.724410] (null) [ 1682.724415] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1682.724437] CPU: 0 PID: 9004 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1682.724442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1682.724445] Call Trace: [ 1682.724462] dump_stack+0x1b2/0x281 [ 1682.724475] warn_alloc.cold+0x96/0x1cc [ 1682.735962] 2*512kB [ 1682.736208] ? zone_watermark_ok_safe+0x220/0x220 [ 1682.743277] (U) [ 1682.745244] ? usleep_range+0x130/0x130 [ 1682.745253] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1682.745268] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1682.747513] 2718 [ 1682.752583] ? run_timer_softirq+0x5a0/0x5a0 [ 1682.760372] 0*1024kB [ 1682.769694] __alloc_pages_nodemask+0x2127/0x2720 [ 1682.769714] ? lock_acquire+0x170/0x3f0 [ 1682.772277] 2718 [ 1682.775899] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1682.775908] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1682.775923] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1682.782198] alloc_pages_current+0x155/0x260 [ 1682.787049] 0*2048kB [ 1682.788990] ion_page_pool_alloc+0x118/0x1b0 [ 1682.792930] 0*4096kB [ 1682.798010] ion_system_heap_allocate+0x133/0x8c0 [ 1682.798020] ? ion_alloc+0x187/0x810 [ 1682.798030] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1682.803023] Node 0 [ 1682.805060] ? ion_system_contig_heap_create+0x130/0x130 [ 1682.805071] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1682.805083] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1682.809471] DMA32 free:17748kB min:36200kB low:45248kB high:54296kB active_anon:66948kB inactive_anon:79564kB active_file:84kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2540kB bounce:0kB free_pcp:492kB local_pcp:0kB free_cma:0kB [ 1682.811850] ion_alloc+0x204/0x810 [ 1682.816685] = 26572kB [ 1682.820624] ? ion_dma_buf_release+0x40/0x40 [ 1682.822660] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1682.827478] ? __might_fault+0x177/0x1b0 [ 1682.827488] ion_ioctl+0xea/0x1f0 [ 1682.827496] ? ion_query_heaps+0x360/0x360 [ 1682.831966] lowmem_reserve[]: [ 1682.837434] ? lock_acquire+0x170/0x3f0 [ 1682.837440] ? ion_query_heaps+0x360/0x360 [ 1682.837450] do_vfs_ioctl+0x75a/0xff0 [ 1682.841828] 0 [ 1682.844222] ? ioctl_preallocate+0x1a0/0x1a0 [ 1682.844230] ? lock_downgrade+0x740/0x740 [ 1682.844242] ? __fget+0x225/0x360 [ 1682.848713] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1682.851094] ? do_vfs_ioctl+0xff0/0xff0 [ 1682.855942] 0 [ 1682.859621] ? security_file_ioctl+0x83/0xb0 [ 1682.865066] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1682.867263] SyS_ioctl+0x7f/0xb0 [ 1682.872684] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1682.877673] ? do_vfs_ioctl+0xff0/0xff0 [ 1682.877683] do_syscall_64+0x1d5/0x640 [ 1682.877697] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1682.882509] 0 [ 1682.910596] RIP: 0033:0x4665d9 [ 1682.910601] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1682.910609] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1682.910613] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1682.910617] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1682.910621] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1682.910625] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1682.911735] syz-executor.5: [ 1682.927885] 25409 total pagecache pages [ 1682.963898] page allocation failure: order:0 [ 1683.047237] 0 [ 1683.147327] 0 pages in swap cache [ 1683.152621] Swap cache stats: add 0, delete 0, find 0/0 [ 1683.155354] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1683.165662] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1683.183834] Free swap = 0kB [ 1683.186865] Total swap = 0kB [ 1683.190425] 2097051 pages RAM [ 1683.194159] 0 [ 1683.196490] 0 pages HighMem/MovableOnly [ 1683.197230] CPU: 0 PID: 9015 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1683.200702] Node 0 [ 1683.208236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1683.208240] Call Trace: [ 1683.208256] dump_stack+0x1b2/0x281 [ 1683.208268] warn_alloc.cold+0x96/0x1cc [ 1683.208278] ? zone_watermark_ok_safe+0x220/0x220 [ 1683.208286] ? usleep_range+0x130/0x130 [ 1683.208294] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1683.208306] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1683.208315] ? run_timer_softirq+0x5a0/0x5a0 [ 1683.208330] __alloc_pages_nodemask+0x2127/0x2720 [ 1683.208344] ? lock_acquire+0x170/0x3f0 [ 1683.208357] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1683.208367] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1683.214855] 363849 pages reserved [ 1683.219938] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1683.219958] alloc_pages_current+0x155/0x260 [ 1683.227676] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1683.230082] ion_page_pool_alloc+0x118/0x1b0 [ 1683.241564] 0 pages cma reserved [ 1683.243938] ion_system_heap_allocate+0x133/0x8c0 [ 1683.243950] ? _raw_spin_unlock+0x29/0x40 [ 1683.243959] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1683.253826] lowmem_reserve[]: [ 1683.258178] ? ion_system_contig_heap_create+0x130/0x130 [ 1683.262165] Out of memory: Kill process 9006 (syz-executor.4) score 1004 or sacrifice child [ 1683.266945] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1683.266956] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1683.266980] ion_alloc+0x27a/0x810 [ 1683.266990] ? ion_dma_buf_release+0x40/0x40 [ 1683.267001] ? __might_fault+0x177/0x1b0 [ 1683.267010] ion_ioctl+0xea/0x1f0 [ 1683.267017] ? ion_query_heaps+0x360/0x360 [ 1683.267028] ? lock_acquire+0x170/0x3f0 [ 1683.267033] ? ion_query_heaps+0x360/0x360 [ 1683.267041] do_vfs_ioctl+0x75a/0xff0 [ 1683.267053] ? ioctl_preallocate+0x1a0/0x1a0 [ 1683.282339] Killed process 9009 (syz-executor.4) total-vm:93252kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 1683.284779] ? lock_downgrade+0x740/0x740 [ 1683.284809] ? __fget+0x225/0x360 [ 1683.284819] ? do_vfs_ioctl+0xff0/0xff0 [ 1683.309731] 0 [ 1683.314080] ? security_file_ioctl+0x83/0xb0 [ 1683.314093] SyS_ioctl+0x7f/0xb0 [ 1683.314100] ? do_vfs_ioctl+0xff0/0xff0 [ 1683.314110] do_syscall_64+0x1d5/0x640 [ 1683.314122] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1683.314129] RIP: 0033:0x4665d9 [ 1683.314133] RSP: 002b:00007f28a7fcb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1683.314142] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1683.314146] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1683.314150] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1683.314154] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1683.314161] R13: 00007ffd6449ea9f R14: 00007f28a7fcb300 R15: 0000000000022000 [ 1683.317824] 0 [ 1683.366151] warn_alloc_show_mem: 2 callbacks suppressed [ 1683.366154] Mem-Info: [ 1683.508661] oom_reaper: reaped process 9009 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1683.512577] active_anon:17342 inactive_anon:24289 isolated_anon:0 [ 1683.512577] active_file:66 inactive_file:1842 isolated_file:0 [ 1683.512577] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1683.512577] slab_reclaimable:12688 slab_unreclaimable:117199 [ 1683.512577] mapped:54611 shmem:25364 pagetables:803 bounce:0 [ 1683.512577] free:96068 free_pcp:444 free_cma:0 [ 1683.522116] 0 [ 1683.552761] Node 0 active_anon:66948kB inactive_anon:79564kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120652kB dirty:0kB writeback:0kB shmem:83728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1683.558915] 0 0 [ 1683.609306] Node 1 Normal free:387936kB min:53696kB low:67120kB high:80544kB active_anon:2420kB inactive_anon:17592kB active_file:608kB inactive_file:8608kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:820kB bounce:0kB free_pcp:748kB local_pcp:40kB free_cma:0kB [ 1683.633897] Node 1 active_anon:2420kB inactive_anon:17592kB active_file:608kB inactive_file:8808kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98592kB dirty:0kB writeback:0kB shmem:17728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1683.708614] lowmem_reserve[]: 0 0 0 0 0 [ 1683.743845] Node 0 DMA: 20*4kB (UE) 1*8kB (E) 19*16kB (U) 22*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10952kB [ 1683.753815] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1683.773769] Node 0 DMA32: 738*4kB (ME) 1169*8kB (UME) 248*16kB (UME) 274*32kB (UME) 2394*64kB (U) 2*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 178768kB [ 1683.843817] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1683.853796] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1683.860911] Node 0 DMA32 free:268996kB min:36200kB low:45248kB high:54296kB active_anon:66948kB inactive_anon:79564kB active_file:56kB inactive_file:360kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2392kB bounce:0kB free_pcp:604kB local_pcp:436kB free_cma:0kB [ 1683.890044] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 0*16kB 19*32kB (UM) 4018*64kB (U) 1615*128kB (UM) 284*256kB (UM) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 539276kB [ 1683.890108] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1683.923205] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1683.935594] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1683.948221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1683.957742] 28602 total pagecache pages [ 1683.962969] 0 pages in swap cache [ 1683.975845] Swap cache stats: add 0, delete 0, find 0/0 [ 1683.982059] Free swap = 0kB [ 1683.989400] Total swap = 0kB [ 1683.992425] 2097051 pages RAM [ 1683.993799] lowmem_reserve[]: 0 0 0 0 0 [ 1683.996481] 0 pages HighMem/MovableOnly [ 1683.999512] Node 0 [ 1684.003477] 363849 pages reserved [ 1684.003492] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1684.012498] 0 pages cma reserved [ 1684.043763] lowmem_reserve[]: 0 0 0 0 0 [ 1684.047759] Node 1 Normal free:539276kB min:53696kB low:67120kB high:80544kB active_anon:2284kB inactive_anon:17592kB active_file:2484kB inactive_file:8244kB unevictable:0kB writepending:72kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:752kB bounce:0kB free_pcp:952kB local_pcp:708kB free_cma:0kB [ 1684.079263] lowmem_reserve[]: 0 0 0 0 0 [ 1684.087470] Node 0 DMA: 20*4kB (UE) 1*8kB (E) 19*16kB (U) 22*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10952kB [ 1684.123821] Node 0 DMA32: 389*4kB (UME) 1379*8kB (UME) 1261*16kB (UME) 902*32kB (UME) 6406*64kB (U) 1004*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 600636kB [ 1684.153775] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1684.184093] Node 1 Normal: 1252*4kB (UM) 816*8kB (UM) 452*16kB (UM) 268*32kB (UM) 4018*64kB (U) 1615*128kB (UM) 284*256kB (UM) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 565968kB [ 1684.222883] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1684.243756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1684.252347] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1684.283766] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1684.295079] 28750 total pagecache pages [ 1684.299062] 0 pages in swap cache [ 1684.302504] Swap cache stats: add 0, delete 0, find 0/0 [ 1684.323749] Free swap = 0kB [ 1684.326781] Total swap = 0kB [ 1684.329789] 2097051 pages RAM [ 1684.332872] 0 pages HighMem/MovableOnly [ 1684.353812] 363849 pages reserved [ 1684.357288] 0 pages cma reserved 15:41:32 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) 15:41:32 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000480)={r3, 0x1e}) recvmsg$can_bcm(r2, 0x0, 0x0) 15:41:32 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000480)={r3, 0x1e}) recvmsg$can_bcm(r2, 0x0, 0x0) 15:41:32 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) [ 1686.202398] syz-executor.4: [ 1686.202405] syz-executor.1: [ 1686.202410] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1686.205699] syz-executor.5: [ 1686.226240] (null) [ 1686.235877] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1686.248716] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1686.262433] CPU: 0 PID: 9030 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1686.270239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1686.279572] Call Trace: [ 1686.282156] dump_stack+0x1b2/0x281 [ 1686.285768] warn_alloc.cold+0x96/0x1cc [ 1686.289723] ? zone_watermark_ok_safe+0x220/0x220 [ 1686.294552] __alloc_pages_nodemask+0x2127/0x2720 [ 1686.299375] ? __schedule+0x893/0x1de0 [ 1686.303244] ? lock_acquire+0x170/0x3f0 [ 1686.307197] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1686.312019] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1686.317454] ? __mutex_unlock_slowpath+0x75/0x770 [ 1686.322273] alloc_pages_current+0x155/0x260 [ 1686.326659] ion_page_pool_alloc+0x118/0x1b0 [ 1686.331045] ion_system_heap_allocate+0x133/0x8c0 [ 1686.335866] ? ion_alloc+0x187/0x810 [ 1686.339570] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1686.345017] ? ion_system_contig_heap_create+0x130/0x130 [ 1686.350446] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1686.355442] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1686.360264] ion_alloc+0x204/0x810 [ 1686.363783] ? ion_dma_buf_release+0x40/0x40 [ 1686.368179] ? __might_fault+0x177/0x1b0 [ 1686.372215] ion_ioctl+0xea/0x1f0 [ 1686.375651] ? ion_query_heaps+0x360/0x360 [ 1686.379871] ? lock_acquire+0x170/0x3f0 [ 1686.383822] ? ion_query_heaps+0x360/0x360 [ 1686.388034] do_vfs_ioctl+0x75a/0xff0 [ 1686.391810] ? ioctl_preallocate+0x1a0/0x1a0 [ 1686.396190] ? lock_downgrade+0x740/0x740 [ 1686.400318] ? __fget+0x225/0x360 [ 1686.403748] ? do_vfs_ioctl+0xff0/0xff0 [ 1686.407804] ? security_file_ioctl+0x83/0xb0 [ 1686.412190] SyS_ioctl+0x7f/0xb0 [ 1686.415537] ? do_vfs_ioctl+0xff0/0xff0 [ 1686.419489] do_syscall_64+0x1d5/0x640 [ 1686.423475] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1686.428651] RIP: 0033:0x4665d9 [ 1686.431825] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1686.439514] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1686.446771] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1686.454021] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1686.461276] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1686.468547] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1686.480226] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1686.491854] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1686.501300] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1686.513184] CPU: 1 PID: 9029 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1686.520957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1686.530374] Call Trace: [ 1686.532951] dump_stack+0x1b2/0x281 [ 1686.536574] warn_alloc.cold+0x96/0x1cc [ 1686.540534] ? zone_watermark_ok_safe+0x220/0x220 [ 1686.545370] __alloc_pages_nodemask+0x2127/0x2720 [ 1686.550213] ? lock_acquire+0x170/0x3f0 [ 1686.554177] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1686.559006] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1686.564438] ? __mutex_unlock_slowpath+0x75/0x770 [ 1686.569266] alloc_pages_current+0x155/0x260 [ 1686.573745] ion_page_pool_alloc+0x118/0x1b0 [ 1686.578142] ion_system_heap_allocate+0x133/0x8c0 [ 1686.582973] ? ion_alloc+0x187/0x810 [ 1686.586665] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1686.592096] ? ion_system_contig_heap_create+0x130/0x130 [ 1686.597548] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1686.602554] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1686.607391] ion_alloc+0x204/0x810 [ 1686.610912] ? ion_dma_buf_release+0x40/0x40 [ 1686.615300] ? __might_fault+0x177/0x1b0 [ 1686.619343] ion_ioctl+0xea/0x1f0 [ 1686.622774] ? ion_query_heaps+0x360/0x360 [ 1686.627019] ? lock_acquire+0x170/0x3f0 [ 1686.630975] ? ion_query_heaps+0x360/0x360 [ 1686.635189] do_vfs_ioctl+0x75a/0xff0 [ 1686.638976] ? ioctl_preallocate+0x1a0/0x1a0 [ 1686.643360] ? lock_downgrade+0x740/0x740 [ 1686.647490] ? __fget+0x225/0x360 [ 1686.650919] ? do_vfs_ioctl+0xff0/0xff0 [ 1686.654871] ? security_file_ioctl+0x83/0xb0 [ 1686.659259] SyS_ioctl+0x7f/0xb0 [ 1686.662602] ? do_vfs_ioctl+0xff0/0xff0 [ 1686.666555] do_syscall_64+0x1d5/0x640 [ 1686.670440] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1686.675611] RIP: 0033:0x4665d9 [ 1686.678787] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1686.686480] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1686.693724] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1686.700970] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1686.708215] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1686.715465] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1686.724770] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1686.731318] CPU: 1 PID: 9028 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1686.739106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1686.748439] Call Trace: [ 1686.751006] dump_stack+0x1b2/0x281 [ 1686.754615] warn_alloc.cold+0x96/0x1cc [ 1686.758563] ? zone_watermark_ok_safe+0x220/0x220 [ 1686.763395] __alloc_pages_nodemask+0x2127/0x2720 [ 1686.768211] ? ___preempt_schedule+0x16/0x18 [ 1686.772597] ? lock_acquire+0x170/0x3f0 [ 1686.776557] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1686.781389] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1686.786819] ? __mutex_unlock_slowpath+0x75/0x770 [ 1686.791643] alloc_pages_current+0x155/0x260 [ 1686.796027] ion_page_pool_alloc+0x118/0x1b0 [ 1686.800413] ion_system_heap_allocate+0x133/0x8c0 [ 1686.805236] ? ion_alloc+0x187/0x810 [ 1686.808928] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1686.814358] ? ion_system_contig_heap_create+0x130/0x130 [ 1686.819800] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1686.824819] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1686.829639] ion_alloc+0x204/0x810 [ 1686.833158] ? ion_dma_buf_release+0x40/0x40 [ 1686.837574] ? __might_fault+0x177/0x1b0 [ 1686.841623] ion_ioctl+0xea/0x1f0 [ 1686.845061] ? ion_query_heaps+0x360/0x360 [ 1686.849278] ? lock_acquire+0x170/0x3f0 [ 1686.853227] ? ion_query_heaps+0x360/0x360 [ 1686.857453] do_vfs_ioctl+0x75a/0xff0 [ 1686.861246] ? ioctl_preallocate+0x1a0/0x1a0 [ 1686.865633] ? lock_downgrade+0x740/0x740 [ 1686.869763] ? __fget+0x225/0x360 [ 1686.873202] ? do_vfs_ioctl+0xff0/0xff0 [ 1686.877178] ? security_file_ioctl+0x83/0xb0 [ 1686.881578] SyS_ioctl+0x7f/0xb0 [ 1686.884928] ? do_vfs_ioctl+0xff0/0xff0 [ 1686.888887] do_syscall_64+0x1d5/0x640 [ 1686.892757] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1686.897941] RIP: 0033:0x4665d9 [ 1686.901112] RSP: 002b:00007f28a7fcb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1686.908826] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1686.916073] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1686.923317] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1686.930604] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1686.937857] R13: 00007ffd6449ea9f R14: 00007f28a7fcb300 R15: 0000000000022000 [ 1686.950236] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1686.955805] warn_alloc_show_mem: 1 callbacks suppressed [ 1686.955808] Mem-Info: [ 1686.963699] CPU: 1 PID: 9031 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1686.967092] active_anon:17588 inactive_anon:24289 isolated_anon:0 [ 1686.967092] active_file:75 inactive_file:78 isolated_file:3 [ 1686.967092] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1686.967092] slab_reclaimable:12666 slab_unreclaimable:117298 [ 1686.967092] mapped:53390 shmem:25364 pagetables:834 bounce:0 [ 1686.967092] free:13903 free_pcp:1 free_cma:0 [ 1686.971484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1686.971487] Call Trace: [ 1686.971503] dump_stack+0x1b2/0x281 [ 1686.971523] warn_alloc.cold+0x96/0x1cc [ 1687.008651] Node 0 active_anon:68072kB inactive_anon:79568kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:120764kB dirty:0kB writeback:0kB shmem:83732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1687.013978] ? zone_watermark_ok_safe+0x220/0x220 [ 1687.013997] __alloc_pages_nodemask+0x2127/0x2720 [ 1687.014011] ? lock_acquire+0x170/0x3f0 [ 1687.014023] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1687.016629] Node 1 active_anon:2280kB inactive_anon:17588kB active_file:288kB inactive_file:304kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:92796kB dirty:0kB writeback:0kB shmem:17724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1687.020189] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1687.020202] ? __mutex_unlock_slowpath+0x75/0x770 [ 1687.027408] Node 0 [ 1687.051624] alloc_pages_current+0x155/0x260 [ 1687.051636] ion_page_pool_alloc+0x118/0x1b0 [ 1687.051644] ion_system_heap_allocate+0x133/0x8c0 [ 1687.051652] ? ion_alloc+0x187/0x810 [ 1687.051660] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1687.051667] ? ion_system_contig_heap_create+0x130/0x130 [ 1687.051676] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1687.051685] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1687.051693] ion_alloc+0x204/0x810 [ 1687.051703] ? ion_dma_buf_release+0x40/0x40 [ 1687.051714] ? __might_fault+0x177/0x1b0 [ 1687.059547] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1687.061382] ion_ioctl+0xea/0x1f0 [ 1687.061394] ? ion_query_heaps+0x360/0x360 [ 1687.192752] ? lock_acquire+0x170/0x3f0 [ 1687.196699] ? ion_query_heaps+0x360/0x360 [ 1687.200905] do_vfs_ioctl+0x75a/0xff0 [ 1687.204683] ? ioctl_preallocate+0x1a0/0x1a0 [ 1687.209066] ? lock_downgrade+0x740/0x740 [ 1687.213189] ? __fget+0x225/0x360 [ 1687.216617] ? do_vfs_ioctl+0xff0/0xff0 [ 1687.220608] ? security_file_ioctl+0x83/0xb0 [ 1687.224996] SyS_ioctl+0x7f/0xb0 [ 1687.228337] ? do_vfs_ioctl+0xff0/0xff0 [ 1687.232288] do_syscall_64+0x1d5/0x640 [ 1687.236156] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1687.241318] RIP: 0033:0x4665d9 [ 1687.244486] RSP: 002b:00007f264b33c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1687.252166] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1687.259425] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1687.266691] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1687.273935] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1687.281179] R13: 00007ffed4ba430f R14: 00007f264b33c300 R15: 0000000000022000 [ 1687.293881] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1687.298999] Node 0 DMA32 free:18980kB min:36200kB low:45248kB high:54296kB active_anon:68072kB inactive_anon:79568kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2628kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1687.332610] lowmem_reserve[]: 0 0 0 0 0 [ 1687.336716] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1687.362471] lowmem_reserve[]: 0 0 0 0 0 [ 1687.366776] Node 1 Normal free:26668kB min:53696kB low:67120kB high:80544kB active_anon:2280kB inactive_anon:17588kB active_file:420kB inactive_file:456kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:708kB bounce:0kB free_pcp:212kB local_pcp:0kB free_cma:0kB [ 1687.395673] lowmem_reserve[]: 0 0 0 0 0 [ 1687.401395] Node 0 DMA: 1*4kB (E) 1*8kB (E) 21*16kB (U) 22*32kB (UE) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10972kB [ 1687.443378] Node 0 DMA32: 769*4kB (UME) 450*8kB (ME) 184*16kB (UME) 21*32kB (ME) 28*64kB (ME) 10*128kB (UME) 14*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17972kB [ 1687.464685] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1687.475512] Node 1 Normal: 22*4kB (UM) 18*8kB (M) 14*16kB (UM) 11*32kB (UM) 16*64kB (UM) 6*128kB (UM) 2*256kB (M) 42*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 26664kB [ 1687.490755] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1687.499665] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1687.508280] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1687.517497] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1687.526178] 25414 total pagecache pages [ 1687.530170] 0 pages in swap cache [ 1687.534555] Swap cache stats: add 0, delete 0, find 0/0 [ 1687.539916] Free swap = 0kB [ 1687.542925] Total swap = 0kB [ 1687.546600] 2097051 pages RAM [ 1687.549716] 0 pages HighMem/MovableOnly [ 1687.553796] 363849 pages reserved [ 1687.557281] 0 pages cma reserved [ 1687.653860] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1687.676036] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1687.681395] CPU: 1 PID: 9031 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1687.689196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1687.698564] Call Trace: [ 1687.701148] dump_stack+0x1b2/0x281 [ 1687.704771] dump_header+0x178/0x82f [ 1687.708699] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1687.713835] ? ___ratelimit+0x2cd/0x530 [ 1687.717802] oom_kill_process.cold+0x10/0xa40 [ 1687.722296] out_of_memory+0xe3e/0x1190 [ 1687.726272] ? oom_killer_disable+0x1c0/0x1c0 [ 1687.730768] ? mutex_trylock+0x152/0x1a0 [ 1687.734856] __alloc_pages_nodemask+0x23e1/0x2720 [ 1687.739710] ? lock_acquire+0x170/0x3f0 [ 1687.743688] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1687.748648] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1687.753156] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1687.758607] alloc_pages_current+0x155/0x260 [ 1687.763007] ion_page_pool_alloc+0x118/0x1b0 [ 1687.767493] ion_system_heap_allocate+0x133/0x8c0 [ 1687.772323] ? ion_alloc+0x187/0x810 [ 1687.776028] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1687.781889] ? ion_system_contig_heap_create+0x130/0x130 [ 1687.787403] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1687.792407] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1687.797225] ion_alloc+0x204/0x810 [ 1687.800759] ? ion_dma_buf_release+0x40/0x40 [ 1687.805151] ? __might_fault+0x177/0x1b0 [ 1687.809197] ion_ioctl+0xea/0x1f0 [ 1687.812626] ? ion_query_heaps+0x360/0x360 [ 1687.816843] ? lock_acquire+0x170/0x3f0 [ 1687.820903] ? ion_query_heaps+0x360/0x360 [ 1687.825123] do_vfs_ioctl+0x75a/0xff0 [ 1687.828903] ? ioctl_preallocate+0x1a0/0x1a0 [ 1687.833292] ? lock_downgrade+0x740/0x740 [ 1687.837440] ? __fget+0x225/0x360 [ 1687.840871] ? do_vfs_ioctl+0xff0/0xff0 [ 1687.844865] ? security_file_ioctl+0x83/0xb0 [ 1687.849267] SyS_ioctl+0x7f/0xb0 [ 1687.852631] ? do_vfs_ioctl+0xff0/0xff0 [ 1687.856599] do_syscall_64+0x1d5/0x640 [ 1687.860470] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1687.865642] RIP: 0033:0x4665d9 [ 1687.868805] RSP: 002b:00007f264b33c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1687.876490] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1687.883740] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1687.890986] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1687.898232] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1687.905480] R13: 00007ffed4ba430f R14: 00007f264b33c300 R15: 0000000000022000 [ 1688.060443] Mem-Info: [ 1688.062909] active_anon:17588 inactive_anon:24289 isolated_anon:0 [ 1688.062909] active_file:40 inactive_file:0 isolated_file:0 [ 1688.062909] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1688.062909] slab_reclaimable:12664 slab_unreclaimable:116608 [ 1688.062909] mapped:53263 shmem:25364 pagetables:834 bounce:0 [ 1688.062909] free:13945 free_pcp:30 free_cma:0 [ 1688.109898] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1688.123731] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1688.127852] Node 0 active_anon:68072kB inactive_anon:79568kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120760kB dirty:0kB writeback:0kB shmem:83732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1688.161572] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1688.175855] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1688.181077] CPU: 1 PID: 9008 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1688.188856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1688.198202] Call Trace: [ 1688.200789] dump_stack+0x1b2/0x281 [ 1688.204415] warn_alloc.cold+0x96/0x1cc [ 1688.208383] ? zone_watermark_ok_safe+0x220/0x220 [ 1688.213218] ? usleep_range+0x130/0x130 [ 1688.217182] ? try_to_free_pages+0x23f/0x6e0 [ 1688.221583] ? _find_next_bit+0xdb/0x100 [ 1688.225637] ? run_timer_softirq+0x5a0/0x5a0 [ 1688.230046] __alloc_pages_nodemask+0x2127/0x2720 [ 1688.234976] ? lock_acquire+0x170/0x3f0 [ 1688.238948] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1688.243794] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1688.248285] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1688.253736] alloc_pages_current+0x155/0x260 [ 1688.258137] ion_page_pool_alloc+0x118/0x1b0 [ 1688.262533] ion_system_heap_allocate+0x133/0x8c0 [ 1688.267359] ? _raw_spin_unlock+0x29/0x40 [ 1688.271501] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1688.276458] ? ion_system_contig_heap_create+0x130/0x130 [ 1688.281892] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1688.286978] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1688.291825] ion_alloc+0x27a/0x810 [ 1688.295362] ? ion_dma_buf_release+0x40/0x40 [ 1688.299770] ? __might_fault+0x177/0x1b0 [ 1688.303824] ion_ioctl+0xea/0x1f0 [ 1688.307266] ? ion_query_heaps+0x360/0x360 [ 1688.311493] ? lock_acquire+0x170/0x3f0 [ 1688.315457] ? ion_query_heaps+0x360/0x360 [ 1688.319691] do_vfs_ioctl+0x75a/0xff0 [ 1688.323487] ? ioctl_preallocate+0x1a0/0x1a0 [ 1688.327882] ? lock_downgrade+0x740/0x740 [ 1688.332034] ? __fget+0x225/0x360 [ 1688.335481] ? do_vfs_ioctl+0xff0/0xff0 [ 1688.339465] ? security_file_ioctl+0x83/0xb0 [ 1688.343870] SyS_ioctl+0x7f/0xb0 [ 1688.347230] ? do_vfs_ioctl+0xff0/0xff0 [ 1688.351196] do_syscall_64+0x1d5/0x640 [ 1688.355083] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1688.360266] RIP: 0033:0x4665d9 [ 1688.363446] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1688.371146] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1688.378587] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1688.385850] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1688.393121] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1688.400382] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1688.427864] Node 1 active_anon:2280kB inactive_anon:17588kB active_file:132kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92292kB dirty:0kB writeback:0kB shmem:17724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1688.442054] CPU: 0 PID: 9012 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1688.461861] Node 0 [ 1688.462805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1688.462823] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1688.465110] Call Trace: [ 1688.465129] dump_stack+0x1b2/0x281 [ 1688.465142] warn_alloc.cold+0x96/0x1cc [ 1688.465154] ? zone_watermark_ok_safe+0x220/0x220 [ 1688.474498] lowmem_reserve[]: [ 1688.500144] ? usleep_range+0x130/0x130 [ 1688.500154] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1688.500168] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1688.502727] 0 [ 1688.506331] ? run_timer_softirq+0x5a0/0x5a0 [ 1688.506350] __alloc_pages_nodemask+0x2127/0x2720 [ 1688.510309] 2717 [ 1688.515161] ? lock_acquire+0x170/0x3f0 [ 1688.515177] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1688.518262] 2718 [ 1688.522214] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1688.527304] 2718 [ 1688.532297] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1688.534082] 2718 [ 1688.538492] alloc_pages_current+0x155/0x260 [ 1688.545361] ion_page_pool_alloc+0x118/0x1b0 [ 1688.549306] Node 0 [ 1688.554142] ion_system_heap_allocate+0x133/0x8c0 [ 1688.554153] ? _raw_spin_unlock+0x29/0x40 [ 1688.554162] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1688.556212] DMA32 free:18020kB min:36200kB low:45248kB high:54296kB active_anon:68072kB inactive_anon:79568kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2628kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1688.560677] ? ion_system_contig_heap_create+0x130/0x130 [ 1688.562712] lowmem_reserve[]: [ 1688.568145] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1688.568156] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1688.568167] ion_alloc+0x27a/0x810 [ 1688.570207] 0 [ 1688.574598] ? ion_dma_buf_release+0x40/0x40 [ 1688.574611] ? __might_fault+0x177/0x1b0 [ 1688.579011] 0 [ 1688.581228] ion_ioctl+0xea/0x1f0 [ 1688.586057] 0 [ 1688.590170] ? ion_query_heaps+0x360/0x360 [ 1688.595090] 0 [ 1688.623253] ? lock_acquire+0x170/0x3f0 [ 1688.623260] ? ion_query_heaps+0x360/0x360 [ 1688.623269] do_vfs_ioctl+0x75a/0xff0 [ 1688.628693] 0 [ 1688.631778] ? ioctl_preallocate+0x1a0/0x1a0 [ 1688.641691] ? lock_downgrade+0x740/0x740 [ 1688.645234] warn_alloc_show_mem: 3 callbacks suppressed [ 1688.645236] Mem-Info: [ 1688.646999] ? __fget+0x225/0x360 [ 1688.651402] active_anon:17588 inactive_anon:24289 isolated_anon:0 [ 1688.651402] active_file:40 inactive_file:0 isolated_file:0 [ 1688.651402] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1688.651402] slab_reclaimable:12664 slab_unreclaimable:116608 [ 1688.651402] mapped:53263 shmem:25364 pagetables:834 bounce:0 [ 1688.651402] free:13945 free_pcp:30 free_cma:0 [ 1688.655447] ? do_vfs_ioctl+0xff0/0xff0 [ 1688.655459] ? security_file_ioctl+0x83/0xb0 [ 1688.655469] SyS_ioctl+0x7f/0xb0 [ 1688.657257] Node 0 [ 1688.660687] ? do_vfs_ioctl+0xff0/0xff0 [ 1688.662511] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1688.666869] do_syscall_64+0x1d5/0x640 [ 1688.666885] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1688.666893] RIP: 0033:0x4665d9 [ 1688.666900] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 [ 1688.668712] Node 0 active_anon:68072kB inactive_anon:79568kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120760kB dirty:0kB writeback:0kB shmem:83732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1688.672643] ORIG_RAX: 0000000000000010 [ 1688.672651] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1688.676902] lowmem_reserve[]: [ 1688.680654] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1688.682457] 0 [ 1688.686843] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1688.686848] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1688.686852] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1688.781389] Node 1 active_anon:2280kB inactive_anon:17588kB active_file:132kB inactive_file:840kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92292kB dirty:0kB writeback:0kB shmem:17724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1688.793002] 0 [ 1688.868049] Node 0 [ 1688.877615] 0 0 0 [ 1688.911957] Node 1 Normal free:194780kB min:53696kB low:67120kB high:80544kB active_anon:2280kB inactive_anon:17588kB active_file:96kB inactive_file:3424kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:708kB bounce:0kB free_pcp:28kB local_pcp:20kB free_cma:0kB [ 1688.950458] lowmem_reserve[]: 0 0 0 0 0 [ 1688.967462] Node 0 DMA: 3*4kB (ME) 1*8kB (E) 19*16kB (UM) 22*32kB (UE) 17*64kB (UE) 4*128kB (UME) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (UM) 0*4096kB = 11076kB [ 1688.990094] DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:180kB inactive_file:1704kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1689.016664] Node 0 DMA32: 767*4kB (ME) 744*8kB (UME) 191*16kB (UME) 60*32kB (UME) 44*64kB (UME) 12*128kB (UME) 15*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 23212kB [ 1689.023220] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1689.037408] Node 0 DMA32 free:23180kB min:36200kB low:45248kB high:54296kB active_anon:68072kB inactive_anon:79568kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2628kB bounce:0kB free_pcp:704kB local_pcp:552kB free_cma:0kB [ 1689.054511] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1689.117696] lowmem_reserve[]: 0 0 0 0 0 [ 1689.132171] Node 1 Normal: 1*4kB (U) 0*8kB 1*16kB (M) 0*32kB 1428*64kB (U) 164*128kB (UM) 50*256kB (U) 49*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 150292kB [ 1689.153172] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1689.188859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1689.203184] lowmem_reserve[]: 0 0 0 0 0 [ 1689.217198] Node 1 Normal free:99600kB min:53696kB low:67120kB high:80544kB active_anon:2364kB inactive_anon:17588kB active_file:36kB inactive_file:3868kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:708kB bounce:0kB free_pcp:460kB local_pcp:272kB free_cma:0kB [ 1689.243148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1689.263192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1689.283522] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1689.292121] 26809 total pagecache pages [ 1689.313939] 0 pages in swap cache [ 1689.317419] Swap cache stats: add 0, delete 0, find 0/0 [ 1689.322774] Free swap = 0kB [ 1689.333174] Total swap = 0kB [ 1689.336213] 2097051 pages RAM [ 1689.339305] 0 pages HighMem/MovableOnly [ 1689.353824] 363849 pages reserved [ 1689.357292] 0 pages cma reserved [ 1689.359534] lowmem_reserve[]: [ 1689.360647] Out of memory (oom_kill_allocating_task): Kill process 9031 (syz-executor.0) score 0 or sacrifice child [ 1689.360653] 0 [ 1689.364279] Killed process 9031 (syz-executor.0) total-vm:93384kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 1689.393312] Bluetooth: hci1 command 0x0406 tx timeout [ 1689.402461] Bluetooth: hci3 command 0x0406 tx timeout [ 1689.407969] oom_reaper: reaped process 9031 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1689.413124] 0 0 0 0 [ 1689.420203] Node 0 DMA: 36*4kB (UME) 20*8kB (ME) 14*16kB (M) 9*32kB (UME) 19*64kB (UME) 5*128kB (UME) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (UM) 0*4096kB = 11120kB [ 1689.473342] Node 0 DMA32: 1542*4kB (UME) 1378*8kB (UME) 243*16kB (UME) 93*32kB (UME) 80*64kB (UME) 12*128kB (UME) 15*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 35576kB [ 1689.530589] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1689.547860] Node 1 Normal: 46*4kB (M) 18*8kB (UM) 6*16kB (UM) 9*32kB (UM) 17*64kB (M) 102*128kB (UM) 53*256kB (UM) 50*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 54024kB [ 1689.603198] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1689.612067] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1689.617708] oom_reaper: reaped process 9030 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1689.633201] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1689.642054] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1689.650768] 25438 total pagecache pages [ 1689.678976] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1689.683114] 0 pages in swap cache [ 1689.722176] Swap cache stats: add 0, delete 0, find 0/0 [ 1689.743080] in:imklog cpuset=/ mems_allowed=0-1 [ 1689.747789] CPU: 0 PID: 9022 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1689.755147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1689.764669] Call Trace: [ 1689.767254] dump_stack+0x1b2/0x281 [ 1689.770880] dump_header+0x178/0x82f [ 1689.774593] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1689.779690] ? ___ratelimit+0x2cd/0x530 [ 1689.783664] oom_kill_process.cold+0x10/0xa40 [ 1689.788164] out_of_memory+0xe3e/0x1190 [ 1689.792139] ? oom_killer_disable+0x1c0/0x1c0 [ 1689.796628] ? mutex_trylock+0x152/0x1a0 [ 1689.800706] __alloc_pages_nodemask+0x23e1/0x2720 [ 1689.805557] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1689.810412] alloc_pages_current+0x155/0x260 [ 1689.814823] filemap_fault+0x11a1/0x1ad0 [ 1689.818922] ext4_filemap_fault+0x84/0xb0 [ 1689.823060] __do_fault+0xfa/0x380 [ 1689.826608] __handle_mm_fault+0x2497/0x4620 [ 1689.831009] ? vm_insert_page+0x7c0/0x7c0 [ 1689.835151] ? lock_downgrade+0x740/0x740 [ 1689.839357] ? mark_held_locks+0xa6/0xf0 [ 1689.843418] ? sync_mm_rss+0xf2/0x160 [ 1689.847218] handle_mm_fault+0x455/0x9c0 [ 1689.851311] __do_page_fault+0x549/0xad0 [ 1689.855372] ? spurious_fault+0x640/0x640 [ 1689.859519] ? do_page_fault+0x60/0x500 [ 1689.863491] ? page_fault+0x2f/0x50 [ 1689.867109] page_fault+0x45/0x50 [ 1689.870554] RIP: 0000:0x1f9f [ 1689.873562] RSP: f92a80b0:00007fbdfaa9bfe6 EFLAGS: 55e3f7eaa78b [ 1689.874215] Free swap = 0kB [ 1689.883308] Total swap = 0kB [ 1689.886320] 2097051 pages RAM [ 1689.889446] 0 pages HighMem/MovableOnly [ 1689.893477] 363849 pages reserved [ 1689.896927] 0 pages cma reserved [ 1689.916282] Mem-Info: [ 1689.918778] active_anon:17578 inactive_anon:24289 isolated_anon:0 [ 1689.918778] active_file:11 inactive_file:663 isolated_file:0 [ 1689.918778] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1689.918778] slab_reclaimable:12629 slab_unreclaimable:117357 [ 1689.918778] mapped:53641 shmem:25364 pagetables:834 bounce:0 [ 1689.918778] free:44893 free_pcp:447 free_cma:0 [ 1689.953215] Node 0 active_anon:67872kB inactive_anon:79568kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120872kB dirty:0kB writeback:0kB shmem:83732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1690.033125] Node 1 active_anon:2440kB inactive_anon:17588kB active_file:36kB inactive_file:3440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94592kB dirty:0kB writeback:0kB shmem:17724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1690.063096] Node 0 DMA free:10984kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1690.103134] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1690.133115] Node 0 DMA32 free:44312kB min:36200kB low:45248kB high:54296kB active_anon:67872kB inactive_anon:79568kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2628kB bounce:0kB free_pcp:960kB local_pcp:116kB free_cma:0kB [ 1690.203073] lowmem_reserve[]: 0 0 0 0 0 [ 1690.207110] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1690.253068] lowmem_reserve[]: 0 0 0 0 0 [ 1690.273020] Node 1 Normal free:62496kB min:53696kB low:67120kB high:80544kB active_anon:2440kB inactive_anon:17588kB active_file:2052kB inactive_file:1668kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:708kB bounce:0kB free_pcp:940kB local_pcp:164kB free_cma:0kB [ 1690.313061] lowmem_reserve[]: 0 0 0 0 0 [ 1690.330021] Node 0 DMA: 6*4kB (UE) 2*8kB (UE) 0*16kB 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10984kB [ 1690.363086] Node 0 DMA32: 848*4kB (UME) 531*8kB (UME) 550*16kB (UME) 21*32kB (ME) 45*64kB (UME) 32*128kB (UME) 15*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 28952kB [ 1690.393047] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1690.423045] Node 1 Normal: 258*4kB (UM) 222*8kB (UM) 206*16kB (UM) 277*32kB (UM) 169*64kB (UM) 55*128kB (UM) 40*256kB (UM) 47*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 68152kB [ 1690.473153] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1690.482080] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1690.554764] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1690.574998] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1690.612199] 25485 total pagecache pages [ 1690.629144] 0 pages in swap cache [ 1690.632626] Swap cache stats: add 0, delete 0, find 0/0 [ 1690.664830] Free swap = 0kB [ 1690.667896] Total swap = 0kB [ 1690.671009] 2097051 pages RAM [ 1690.714674] 0 pages HighMem/MovableOnly [ 1690.718678] 363849 pages reserved [ 1690.722119] 0 pages cma reserved [ 1690.742162] Out of memory (oom_kill_allocating_task): Kill process 9022 (in:imklog) score 0 or sacrifice child [ 1690.757655] Killed process 9019 (rsyslogd) total-vm:254332kB, anon-rss:892kB, file-rss:0kB, shmem-rss:0kB [ 1690.770062] oom_reaper: reaped process 9019 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1690.788945] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1690.809658] systemd-journal cpuset=/ mems_allowed=0-1 [ 1690.813065] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1690.819266] CPU: 1 PID: 7265 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1690.834640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1690.843333] syz-executor.4 cpuset= [ 1690.843982] Call Trace: [ 1690.843983] / mems_allowed=0-1 [ 1690.847524] dump_stack+0x1b2/0x281 [ 1690.856862] dump_header+0x178/0x82f [ 1690.860555] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1690.865640] ? ___ratelimit+0x2cd/0x530 [ 1690.869594] oom_kill_process.cold+0x10/0xa40 [ 1690.874105] out_of_memory+0xe3e/0x1190 [ 1690.878067] ? oom_killer_disable+0x1c0/0x1c0 [ 1690.882538] ? mutex_trylock+0x152/0x1a0 [ 1690.886578] __alloc_pages_nodemask+0x23e1/0x2720 [ 1690.891406] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1690.896233] alloc_pages_current+0x155/0x260 [ 1690.900619] filemap_fault+0x11a1/0x1ad0 [ 1690.904682] ext4_filemap_fault+0x84/0xb0 [ 1690.908809] __do_fault+0xfa/0x380 [ 1690.912332] __handle_mm_fault+0x2497/0x4620 [ 1690.916730] ? vm_insert_page+0x7c0/0x7c0 [ 1690.920863] ? lock_downgrade+0x740/0x740 [ 1690.925255] ? mark_held_locks+0xa6/0xf0 [ 1690.929299] handle_mm_fault+0x455/0x9c0 [ 1690.933358] __do_page_fault+0x549/0xad0 [ 1690.937412] ? spurious_fault+0x640/0x640 [ 1690.941540] ? do_page_fault+0x60/0x500 [ 1690.945497] ? page_fault+0x2f/0x50 [ 1690.949100] page_fault+0x45/0x50 [ 1690.952615] RIP: 3e45c298:0x557343e48958 [ 1690.956652] RSP: 3e45c340:0000000000000001 EFLAGS: 7ffc3e45c2a0 [ 1690.957801] CPU: 0 PID: 9030 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1690.962969] syz-executor.0: [ 1690.963863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1690.971635] page allocation failure: order:0 [ 1690.974723] Call Trace: [ 1690.974738] dump_stack+0x1b2/0x281 [ 1690.974755] warn_alloc.cold+0x96/0x1cc [ 1690.991618] Mem-Info: [ 1690.994653] ? zone_watermark_ok_safe+0x220/0x220 [ 1690.994663] ? usleep_range+0x130/0x130 [ 1690.994672] ? try_to_free_pages+0x23f/0x6e0 [ 1690.998631] active_anon:17321 inactive_anon:24289 isolated_anon:0 [ 1690.998631] active_file:13 inactive_file:11 isolated_file:0 [ 1690.998631] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1690.998631] slab_reclaimable:12604 slab_unreclaimable:117504 [ 1690.998631] mapped:53313 shmem:25364 pagetables:752 bounce:0 [ 1690.998631] free:13886 free_pcp:189 free_cma:0 [ 1691.001019] ? _find_next_bit+0xdb/0x100 [ 1691.006380] Node 0 active_anon:67064kB inactive_anon:79568kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120960kB dirty:0kB writeback:0kB shmem:83732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1691.010308] ? run_timer_softirq+0x5a0/0x5a0 [ 1691.014730] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1691.047940] __alloc_pages_nodemask+0x2127/0x2720 [ 1691.047955] ? lock_acquire+0x170/0x3f0 [ 1691.052002] Node 1 active_anon:2220kB inactive_anon:17588kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92292kB dirty:0kB writeback:0kB shmem:17724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1691.079555] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1691.079566] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1691.079582] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1691.083994] (null) [ 1691.091068] alloc_pages_current+0x155/0x260 [ 1691.095907] Node 0 [ 1691.099843] ion_page_pool_alloc+0x118/0x1b0 [ 1691.126998] syz-executor.0 cpuset= [ 1691.131807] ion_system_heap_allocate+0x133/0x8c0 [ 1691.136320] / [ 1691.141734] ? ion_alloc+0x187/0x810 [ 1691.143870] mems_allowed=0-1 [ 1691.148245] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1691.152911] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1691.154841] ? ion_system_contig_heap_create+0x130/0x130 [ 1691.158367] lowmem_reserve[]: [ 1691.163275] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1691.163286] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1691.163296] ion_alloc+0x204/0x810 [ 1691.182879] 0 [ 1691.202675] ? ion_dma_buf_release+0x40/0x40 [ 1691.202686] ? __might_fault+0x177/0x1b0 [ 1691.232900] 2717 2718 [ 1691.234708] ion_ioctl+0xea/0x1f0 [ 1691.234717] ? ion_query_heaps+0x360/0x360 [ 1691.237189] 2718 [ 1691.240625] ? lock_acquire+0x170/0x3f0 [ 1691.250857] ? ion_query_heaps+0x360/0x360 [ 1691.252879] 2718 [ 1691.255073] do_vfs_ioctl+0x75a/0xff0 [ 1691.255084] ? ioctl_preallocate+0x1a0/0x1a0 [ 1691.257122] Node 0 [ 1691.260914] ? lock_downgrade+0x740/0x740 [ 1691.271627] ? __fget+0x225/0x360 [ 1691.272878] DMA32 free:18044kB min:36200kB low:45248kB high:54296kB active_anon:67064kB inactive_anon:79568kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2336kB bounce:0kB free_pcp:628kB local_pcp:356kB free_cma:0kB [ 1691.275060] ? do_vfs_ioctl+0xff0/0xff0 [ 1691.307188] ? security_file_ioctl+0x83/0xb0 [ 1691.311574] SyS_ioctl+0x7f/0xb0 [ 1691.314922] ? do_vfs_ioctl+0xff0/0xff0 [ 1691.318880] do_syscall_64+0x1d5/0x640 [ 1691.322751] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1691.327917] RIP: 0033:0x4665d9 [ 1691.331087] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1691.338773] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1691.342888] lowmem_reserve[]: [ 1691.346036] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1691.346042] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1691.349149] 0 [ 1691.356414] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1691.356420] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1691.363754] warn_alloc_show_mem: 1 callbacks suppressed [ 1691.363757] Mem-Info: [ 1691.363772] active_anon:17321 inactive_anon:24289 isolated_anon:0 [ 1691.363772] active_file:13 inactive_file:11 isolated_file:0 [ 1691.363772] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1691.363772] slab_reclaimable:12604 slab_unreclaimable:117504 [ 1691.363772] mapped:53313 shmem:25364 pagetables:752 bounce:0 [ 1691.363772] free:13886 free_pcp:225 free_cma:0 [ 1691.363785] Node 0 active_anon:67064kB inactive_anon:79568kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120960kB dirty:0kB writeback:0kB shmem:83732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1691.363814] Node 1 active_anon:2220kB inactive_anon:17588kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:92292kB dirty:0kB writeback:0kB shmem:17724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1691.363817] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1691.363839] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1691.363857] Node 0 DMA32 free:18044kB min:36200kB low:45248kB high:54296kB active_anon:67064kB inactive_anon:79568kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2336kB bounce:0kB free_pcp:716kB local_pcp:360kB free_cma:0kB [ 1691.363878] lowmem_reserve[]: 0 0 0 0 0 [ 1691.363894] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1691.363927] lowmem_reserve[]: 0 0 0 0 0 [ 1691.363942] Node 1 Normal free:26544kB min:53696kB low:67120kB high:80544kB active_anon:2220kB inactive_anon:17588kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:672kB bounce:0kB free_pcp:184kB local_pcp:180kB free_cma:0kB [ 1691.363958] lowmem_reserve[]: 0 0 0 0 0 [ 1691.363977] Node 0 DMA: 1*4kB (E) 1*8kB (E) 0*16kB 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10956kB [ 1691.364041] Node 0 DMA32: 851*4kB (UME) 539*8kB (UME) 198*16kB (UME) 22*32kB (UME) 28*64kB (ME) 9*128kB (ME) 10*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18116kB [ 1691.364101] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1691.364162] Node 1 Normal: 28*4kB (M) 22*8kB (UM) 13*16kB (M) 8*32kB (M) 17*64kB (UM) 7*128kB (UM) 5*256kB (UM) 40*512kB (U) 2*1024kB (UM) 0*2048kB 0*4096kB = 26544kB [ 1691.364238] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1691.364244] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1691.364250] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1691.364256] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1691.364260] 25388 total pagecache pages [ 1691.364275] 0 pages in swap cache [ 1691.364280] Swap cache stats: add 0, delete 0, find 0/0 [ 1691.364283] Free swap = 0kB [ 1691.364287] Total swap = 0kB [ 1691.364293] 2097051 pages RAM [ 1691.380064] CPU: 1 PID: 9031 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1691.387249] 0 pages HighMem/MovableOnly [ 1691.388530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1691.428439] 363849 pages reserved [ 1691.449418] Call Trace: [ 1691.449439] dump_stack+0x1b2/0x281 [ 1691.449452] warn_alloc.cold+0x96/0x1cc [ 1691.449463] ? zone_watermark_ok_safe+0x220/0x220 [ 1691.449471] ? usleep_range+0x130/0x130 [ 1691.449480] ? try_to_free_pages+0x23f/0x6e0 [ 1691.449490] ? _find_next_bit+0xdb/0x100 [ 1691.449500] ? run_timer_softirq+0x5a0/0x5a0 [ 1691.449515] __alloc_pages_nodemask+0x2127/0x2720 [ 1691.449530] ? lock_acquire+0x170/0x3f0 [ 1691.485473] 0 pages cma reserved [ 1691.502853] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1691.502862] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1691.502879] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1691.502897] alloc_pages_current+0x155/0x260 [ 1691.502909] ion_page_pool_alloc+0x118/0x1b0 [ 1691.502917] ion_system_heap_allocate+0x133/0x8c0 [ 1691.502926] ? ion_alloc+0x187/0x810 [ 1691.502935] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1691.502943] ? ion_system_contig_heap_create+0x130/0x130 [ 1691.502952] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1691.502961] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1691.502971] ion_alloc+0x204/0x810 [ 1691.839702] ? ion_dma_buf_release+0x40/0x40 [ 1691.844124] ? __might_fault+0x177/0x1b0 [ 1691.848192] ion_ioctl+0xea/0x1f0 [ 1691.851665] ? ion_query_heaps+0x360/0x360 [ 1691.855916] ? lock_acquire+0x170/0x3f0 [ 1691.859885] ? ion_query_heaps+0x360/0x360 [ 1691.864167] do_vfs_ioctl+0x75a/0xff0 [ 1691.867973] ? ioctl_preallocate+0x1a0/0x1a0 [ 1691.872380] ? lock_downgrade+0x740/0x740 [ 1691.876527] ? __fget+0x225/0x360 [ 1691.879974] ? do_vfs_ioctl+0xff0/0xff0 [ 1691.883954] ? security_file_ioctl+0x83/0xb0 [ 1691.888372] SyS_ioctl+0x7f/0xb0 [ 1691.891784] ? do_vfs_ioctl+0xff0/0xff0 [ 1691.895764] do_syscall_64+0x1d5/0x640 [ 1691.899654] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1691.904858] RIP: 0033:0x4665d9 [ 1691.908049] RSP: 002b:00007f264b33c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1691.915760] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1691.923026] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1691.930303] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1691.937584] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1691.944889] R13: 00007ffed4ba430f R14: 00007f264b33c300 R15: 0000000000022000 [ 1691.978538] 0 0 0 0 [ 1691.987410] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1692.052837] lowmem_reserve[]: 0 0 0 0 0 [ 1692.067165] Node 1 Normal free:140972kB min:53696kB low:67120kB high:80544kB active_anon:2220kB inactive_anon:17588kB active_file:140kB inactive_file:2436kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:672kB bounce:0kB free_pcp:808kB local_pcp:64kB free_cma:0kB [ 1692.110568] lowmem_reserve[]: 0 0 0 0 0 [ 1692.127208] Node 0 DMA: 15*4kB (UE) 6*8kB (UME) 4*16kB (U) 12*32kB (UME) 1*64kB (E) 3*128kB (UME) 3*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10988kB 15:41:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) 15:41:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000480)={r2, 0x1e}) [ 1692.157781] Node 0 DMA32: 4964*4kB (U) 1598*8kB (UE) 717*16kB (UE) 401*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 56944kB [ 1692.183318] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1692.218181] Node 1 Normal: 22149*4kB (UM) 3608*8kB (UM) 2154*16kB (U) 776*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 176756kB [ 1692.247480] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1692.248677] syz-executor.3: [ 1692.261707] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1692.272689] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1692.286562] syz-executor.4 cpuset= [ 1692.293929] page allocation failure: order:4 [ 1692.295010] / [ 1692.305644] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1692.307350] syz-executor.2 cpuset= [ 1692.309584] (null) [ 1692.319682] mems_allowed=0-1 [ 1692.325524] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1692.328328] CPU: 0 PID: 9030 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1692.338428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1692.338939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1692.347770] Call Trace: [ 1692.347787] dump_stack+0x1b2/0x281 [ 1692.347800] warn_alloc.cold+0x96/0x1cc [ 1692.347812] ? zone_watermark_ok_safe+0x220/0x220 [ 1692.371610] __alloc_pages_nodemask+0x2127/0x2720 [ 1692.376442] ? lock_acquire+0x170/0x3f0 [ 1692.380396] ? lock_acquire+0x170/0x3f0 [ 1692.384362] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1692.389212] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1692.391155] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1692.394660] ? __mutex_unlock_slowpath+0x75/0x770 [ 1692.394674] alloc_pages_current+0x155/0x260 [ 1692.394686] ion_page_pool_alloc+0x118/0x1b0 [ 1692.417074] ion_system_heap_allocate+0x133/0x8c0 [ 1692.421898] ? _raw_spin_unlock+0x29/0x40 [ 1692.426027] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1692.429540] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1692.430948] ? ion_system_contig_heap_create+0x130/0x130 [ 1692.430957] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1692.430969] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1692.454879] ion_alloc+0x27a/0x810 [ 1692.458409] ? ion_dma_buf_release+0x40/0x40 [ 1692.459126] 28166 total pagecache pages [ 1692.462806] ? __might_fault+0x177/0x1b0 [ 1692.462819] ion_ioctl+0xea/0x1f0 [ 1692.462829] ? ion_query_heaps+0x360/0x360 [ 1692.474454] 0 pages in swap cache [ 1692.478458] ? lock_acquire+0x170/0x3f0 [ 1692.478467] ? ion_query_heaps+0x360/0x360 [ 1692.489518] Swap cache stats: add 0, delete 0, find 0/0 [ 1692.490099] do_vfs_ioctl+0x75a/0xff0 [ 1692.499231] ? ioctl_preallocate+0x1a0/0x1a0 [ 1692.503634] ? lock_downgrade+0x740/0x740 [ 1692.507805] ? __fget+0x225/0x360 [ 1692.508526] Free swap = 0kB [ 1692.511255] ? do_vfs_ioctl+0xff0/0xff0 [ 1692.511265] ? security_file_ioctl+0x83/0xb0 [ 1692.511273] SyS_ioctl+0x7f/0xb0 [ 1692.525171] Total swap = 0kB [ 1692.525974] ? do_vfs_ioctl+0xff0/0xff0 [ 1692.532928] do_syscall_64+0x1d5/0x640 [ 1692.536815] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1692.537671] 2097051 pages RAM [ 1692.542003] RIP: 0033:0x4665d9 [ 1692.542009] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1692.555959] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1692.560366] 0 pages HighMem/MovableOnly [ 1692.563215] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1692.563220] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1692.563225] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1692.563230] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1692.567735] / [ 1692.586858] CPU: 1 PID: 9040 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1692.606124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1692.615473] Call Trace: [ 1692.618050] dump_stack+0x1b2/0x281 [ 1692.621655] warn_alloc.cold+0x96/0x1cc [ 1692.625609] ? zone_watermark_ok_safe+0x220/0x220 [ 1692.630443] __alloc_pages_nodemask+0x2127/0x2720 [ 1692.635295] ? lock_acquire+0x170/0x3f0 [ 1692.639265] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1692.644106] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1692.649550] ? __mutex_unlock_slowpath+0x75/0x770 [ 1692.654401] alloc_pages_current+0x155/0x260 [ 1692.658794] ion_page_pool_alloc+0x118/0x1b0 [ 1692.663218] ion_system_heap_allocate+0x133/0x8c0 [ 1692.668048] ? ion_alloc+0x187/0x810 [ 1692.671744] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1692.677183] ? ion_system_contig_heap_create+0x130/0x130 [ 1692.682609] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1692.687723] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1692.692545] ion_alloc+0x204/0x810 [ 1692.696082] ? ion_dma_buf_release+0x40/0x40 [ 1692.700476] ? __might_fault+0x177/0x1b0 [ 1692.704521] ion_ioctl+0xea/0x1f0 [ 1692.707956] ? ion_query_heaps+0x360/0x360 [ 1692.712197] ? lock_acquire+0x170/0x3f0 [ 1692.716162] ? ion_query_heaps+0x360/0x360 [ 1692.720376] do_vfs_ioctl+0x75a/0xff0 [ 1692.724158] ? ioctl_preallocate+0x1a0/0x1a0 [ 1692.728548] ? lock_downgrade+0x740/0x740 [ 1692.732680] ? __fget+0x225/0x360 [ 1692.736116] ? do_vfs_ioctl+0xff0/0xff0 [ 1692.740073] ? security_file_ioctl+0x83/0xb0 [ 1692.744559] SyS_ioctl+0x7f/0xb0 [ 1692.747903] ? do_vfs_ioctl+0xff0/0xff0 [ 1692.751866] do_syscall_64+0x1d5/0x640 [ 1692.755736] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1692.760905] RIP: 0033:0x4665d9 [ 1692.764070] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1692.771753] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1692.779030] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1692.786279] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1692.793529] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1692.800775] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1692.840138] 363849 pages reserved [ 1692.851654] 0 pages cma reserved [ 1692.855755] Out of memory (oom_kill_allocating_task): Kill process 7265 (systemd-journal) score 0 or sacrifice child [ 1692.866464] mems_allowed=0-1 [ 1692.868978] Killed process 7265 (systemd-journal) total-vm:46096kB, anon-rss:484kB, file-rss:0kB, shmem-rss:4356kB [ 1692.869659] CPU: 0 PID: 9039 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1692.884330] Mem-Info: [ 1692.887885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1692.887889] Call Trace: [ 1692.887903] dump_stack+0x1b2/0x281 [ 1692.887915] warn_alloc.cold+0x96/0x1cc [ 1692.887924] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1692.887932] ? zone_watermark_ok_safe+0x220/0x220 [ 1692.887950] __alloc_pages_nodemask+0x2127/0x2720 [ 1692.893562] active_anon:17394 inactive_anon:24289 isolated_anon:0 [ 1692.893562] active_file:871 inactive_file:942 isolated_file:64 [ 1692.893562] unevictable:0 dirty:15 writeback:0 unstable:0 [ 1692.893562] slab_reclaimable:12598 slab_unreclaimable:116979 [ 1692.893562] mapped:53925 shmem:25364 pagetables:815 bounce:0 [ 1692.893562] free:25267 free_pcp:440 free_cma:0 [ 1692.899787] ? lock_acquire+0x170/0x3f0 [ 1692.899803] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1692.899822] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1692.899837] ? __mutex_unlock_slowpath+0x75/0x770 [ 1692.899852] alloc_pages_current+0x155/0x260 [ 1692.899865] ion_page_pool_alloc+0x118/0x1b0 [ 1692.899875] ion_system_heap_allocate+0x133/0x8c0 [ 1692.899884] ? ion_alloc+0x187/0x810 [ 1692.899894] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1692.899904] ? ion_system_contig_heap_create+0x130/0x130 [ 1692.899912] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1692.899923] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1692.899933] ion_alloc+0x204/0x810 [ 1692.899946] ? ion_dma_buf_release+0x40/0x40 [ 1692.902923] Node 0 active_anon:67356kB inactive_anon:79568kB active_file:2792kB inactive_file:2980kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:122172kB dirty:24kB writeback:0kB shmem:83732kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1692.906110] ? __might_fault+0x177/0x1b0 [ 1692.906122] ion_ioctl+0xea/0x1f0 [ 1692.906130] ? ion_query_heaps+0x360/0x360 [ 1692.906142] ? lock_acquire+0x170/0x3f0 [ 1692.906149] ? ion_query_heaps+0x360/0x360 [ 1692.906159] do_vfs_ioctl+0x75a/0xff0 [ 1692.910380] Node 1 active_anon:2220kB inactive_anon:17588kB active_file:692kB inactive_file:788kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:93528kB dirty:36kB writeback:0kB shmem:17724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1692.915102] ? ioctl_preallocate+0x1a0/0x1a0 [ 1692.915111] ? lock_downgrade+0x740/0x740 [ 1692.915124] ? __fget+0x225/0x360 [ 1692.915132] ? do_vfs_ioctl+0xff0/0xff0 [ 1692.915143] ? security_file_ioctl+0x83/0xb0 [ 1692.915153] SyS_ioctl+0x7f/0xb0 [ 1692.915160] ? do_vfs_ioctl+0xff0/0xff0 [ 1692.915171] do_syscall_64+0x1d5/0x640 [ 1692.915185] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1692.921355] Node 0 [ 1692.924840] RIP: 0033:0x4665d9 [ 1692.924845] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1692.924855] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1692.924860] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1692.924865] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1692.924870] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1692.924876] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1692.931415] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1692.967743] DMA free:11024kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:24kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1693.069235] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1693.113114] lowmem_reserve[]: [ 1693.290217] systemd[1]: Stopped Journal Service. [ 1693.346785] 0 2717 2718 2718 2718 [ 1693.354665] systemd[1]: Starting Journal Service... [ 1693.374765] Node 0 DMA32 free:148588kB min:36200kB low:45248kB high:54296kB active_anon:67572kB inactive_anon:79568kB active_file:3140kB inactive_file:3832kB unevictable:0kB writepending:48kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2720kB bounce:0kB free_pcp:1248kB local_pcp:548kB free_cma:0kB [ 1693.431135] lowmem_reserve[]: 0 0 0 0 0 [ 1693.436434] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1693.473166] lowmem_reserve[]: 0 0 0 0 0 [ 1693.490212] Node 1 Normal free:430196kB min:53696kB low:67120kB high:80544kB active_anon:2020kB inactive_anon:17588kB active_file:732kB inactive_file:788kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:716kB bounce:0kB free_pcp:1368kB local_pcp:628kB free_cma:0kB [ 1693.528316] lowmem_reserve[]: 0 0 0 0 0 [ 1693.533274] Node 0 DMA: 36*4kB (UME) 6*8kB (UME) 10*16kB (UM) 12*32kB (UME) 4*64kB (UE) 2*128kB (ME) 3*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11232kB [ 1693.593128] Node 0 DMA32: 209*4kB (UME) 321*8kB (E) 162*16kB (UME) 22*32kB (UME) 305*64kB (UM) 147*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45036kB [ 1693.643726] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1693.672652] Node 1 Normal: 1*4kB (M) 1*8kB (M) 868*16kB (U) 979*32kB (UM) 4007*64kB (UM) 298*128kB (U) 101*256kB (UM) 0*512kB 14*1024kB (U) 0*2048kB 0*4096kB = 380012kB [ 1693.692446] systemd[1]: Started System Logging Service. [ 1693.694422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1693.712177] systemd-journald[9044]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1693.729853] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1693.752448] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1693.773401] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1693.794787] 29501 total pagecache pages [ 1693.809887] 0 pages in swap cache [ 1693.817805] Swap cache stats: add 0, delete 0, find 0/0 [ 1693.831782] Free swap = 0kB [ 1693.839053] Total swap = 0kB [ 1693.849038] 2097051 pages RAM [ 1693.855455] 0 pages HighMem/MovableOnly [ 1693.867556] 363849 pages reserved [ 1693.873318] systemd-journald[9044]: /dev/kmsg buffer overrun, some messages lost. [ 1693.878164] 0 pages cma reserved [ 1694.063841] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1694.087913] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1694.096957] CPU: 0 PID: 8513 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1694.104738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1694.114167] Call Trace: [ 1694.116854] dump_stack+0x1b2/0x281 [ 1694.120456] dump_header+0x178/0x82f [ 1694.124142] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1694.129215] ? ___ratelimit+0x2cd/0x530 [ 1694.133160] oom_kill_process.cold+0x10/0xa40 [ 1694.137648] out_of_memory+0xe3e/0x1190 [ 1694.141598] ? oom_killer_disable+0x1c0/0x1c0 [ 1694.146067] ? mutex_trylock+0x152/0x1a0 [ 1694.150123] __alloc_pages_nodemask+0x23e1/0x2720 [ 1694.155033] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1694.159872] alloc_pages_current+0x155/0x260 [ 1694.164257] filemap_fault+0x11a1/0x1ad0 [ 1694.168301] ext4_filemap_fault+0x84/0xb0 [ 1694.172426] __do_fault+0xfa/0x380 [ 1694.175943] __handle_mm_fault+0x2497/0x4620 [ 1694.180326] ? vm_insert_page+0x7c0/0x7c0 [ 1694.184445] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1694.188827] ? nanosleep_copyout+0x100/0x100 [ 1694.193217] ? mark_held_locks+0xa6/0xf0 [ 1694.197250] handle_mm_fault+0x455/0x9c0 [ 1694.201351] __do_page_fault+0x549/0xad0 [ 1694.205389] ? spurious_fault+0x640/0x640 [ 1694.209533] ? do_page_fault+0x60/0x500 [ 1694.213479] ? page_fault+0x2f/0x50 [ 1694.217099] page_fault+0x45/0x50 [ 1694.220528] RIP: 19d681:0x4 [ 1694.223433] RSP: 0008:00007ffd29a3735c EFLAGS: 00000032 [ 1694.242790] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1694.276990] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1694.278840] Mem-Info: [ 1694.282133] CPU: 0 PID: 9031 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1694.284549] active_anon:17627 inactive_anon:26316 isolated_anon:0 [ 1694.284549] active_file:61 inactive_file:2 isolated_file:0 [ 1694.284549] unevictable:0 dirty:42 writeback:0 unstable:0 [ 1694.284549] slab_reclaimable:12602 slab_unreclaimable:116497 [ 1694.284549] mapped:52601 shmem:27412 pagetables:835 bounce:0 [ 1694.284549] free:13860 free_pcp:0 free_cma:0 [ 1694.292308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1694.332495] Node 0 active_anon:67764kB inactive_anon:79716kB active_file:152kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117168kB dirty:72kB writeback:0kB shmem:83880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1694.334665] Call Trace: [ 1694.362446] Node 1 active_anon:2744kB inactive_anon:25548kB active_file:92kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93236kB dirty:96kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1694.364982] dump_stack+0x1b2/0x281 [ 1694.392215] Node 0 [ 1694.395810] warn_alloc.cold+0x96/0x1cc [ 1694.395821] ? zone_watermark_ok_safe+0x220/0x220 [ 1694.395844] __alloc_pages_nodemask+0x2127/0x2720 [ 1694.398058] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1694.402007] ? lock_acquire+0x170/0x3f0 [ 1694.406850] lowmem_reserve[]: [ 1694.411655] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1694.437348] 0 [ 1694.441284] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1694.444377] 2717 [ 1694.449184] ? __mutex_unlock_slowpath+0x75/0x770 [ 1694.450954] 2718 [ 1694.456380] ? alloc_pages_current+0x84/0x260 [ 1694.456391] alloc_pages_current+0x155/0x260 [ 1694.456404] ion_page_pool_alloc+0x118/0x1b0 [ 1694.458458] 2718 [ 1694.463284] ion_system_heap_allocate+0x133/0x8c0 [ 1694.463295] ? _raw_spin_unlock+0x29/0x40 [ 1694.463314] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1694.465348] 2718 [ 1694.469834] ? ion_system_contig_heap_create+0x130/0x130 [ 1694.478681] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1694.480711] Node 0 [ 1694.485533] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1694.485544] ion_alloc+0x27a/0x810 [ 1694.485557] ? ion_dma_buf_release+0x40/0x40 [ 1694.489687] DMA32 free:17848kB min:36200kB low:45248kB high:54296kB active_anon:67764kB inactive_anon:79716kB active_file:524kB inactive_file:260kB unevictable:0kB writepending:172kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2640kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1694.494585] ? __might_fault+0x177/0x1b0 [ 1694.494594] ion_ioctl+0xea/0x1f0 [ 1694.494602] ? ion_query_heaps+0x360/0x360 [ 1694.496633] lowmem_reserve[]: [ 1694.502064] ? lock_acquire+0x170/0x3f0 [ 1694.507074] 0 [ 1694.509276] ? ion_query_heaps+0x360/0x360 [ 1694.514108] 0 [ 1694.517614] do_vfs_ioctl+0x75a/0xff0 [ 1694.522005] 0 [ 1694.550524] ? ioctl_preallocate+0x1a0/0x1a0 [ 1694.550533] ? lock_downgrade+0x740/0x740 [ 1694.550544] ? __fget+0x225/0x360 [ 1694.554703] 0 [ 1694.558122] ? do_vfs_ioctl+0xff0/0xff0 [ 1694.562321] 0 [ 1694.565408] ? security_file_ioctl+0x83/0xb0 [ 1694.565419] SyS_ioctl+0x7f/0xb0 [ 1694.565429] ? do_vfs_ioctl+0xff0/0xff0 [ 1694.571180] do_syscall_64+0x1d5/0x640 [ 1694.575411] Node 0 [ 1694.577181] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1694.580956] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1694.582742] RIP: 0033:0x4665d9 [ 1694.582746] RSP: 002b:00007f264b33c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1694.582755] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1694.582761] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1694.587152] lowmem_reserve[]: [ 1694.591283] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1694.591289] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1694.594747] 0 [ 1694.596507] R13: 00007ffed4ba430f R14: 00007f264b33c300 R15: 0000000000022000 [ 1694.605996] syz-executor.4: [ 1694.615620] 0 [ 1694.621554] page allocation failure: order:0 [ 1694.631905] 0 [ 1694.659172] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1694.668029] 0 [ 1694.670545] (null) [ 1694.687288] 0 [ 1694.698899] syz-executor.4 cpuset= [ 1694.719490] / [ 1694.721286] Node 1 [ 1694.723111] mems_allowed=0-1 [ 1694.723122] CPU: 0 PID: 9030 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1694.723126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1694.723130] Call Trace: [ 1694.723146] dump_stack+0x1b2/0x281 [ 1694.723157] warn_alloc.cold+0x96/0x1cc [ 1694.735071] Normal free:26628kB min:53696kB low:67120kB high:80544kB active_anon:2744kB inactive_anon:25548kB active_file:24kB inactive_file:32kB unevictable:0kB writepending:96kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:700kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1694.737581] ? zone_watermark_ok_safe+0x220/0x220 [ 1694.745363] lowmem_reserve[]: [ 1694.754687] ? usleep_range+0x130/0x130 [ 1694.754697] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1694.754708] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1694.757268] 0 [ 1694.760871] ? run_timer_softirq+0x5a0/0x5a0 [ 1694.764866] 0 [ 1694.793646] __alloc_pages_nodemask+0x2127/0x2720 [ 1694.793662] ? lock_acquire+0x170/0x3f0 [ 1694.798564] 0 [ 1694.801653] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1694.805613] 0 [ 1694.810680] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1694.815680] 0 [ 1694.817455] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1694.823622] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 1694.823635] alloc_pages_current+0x155/0x260 [ 1694.828449] Node 0 [ 1694.832395] ion_page_pool_alloc+0x118/0x1b0 [ 1694.834181] DMA: [ 1694.838986] ion_system_heap_allocate+0x133/0x8c0 [ 1694.840761] 2*4kB [ 1694.845236] ? _raw_spin_unlock+0x29/0x40 [ 1694.845244] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1694.845253] ? ion_system_contig_heap_create+0x130/0x130 [ 1694.847060] (UE) [ 1694.852506] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1694.852516] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1694.852525] ion_alloc+0x27a/0x810 [ 1694.857253] 1*8kB [ 1694.861642] ? ion_dma_buf_release+0x40/0x40 [ 1694.863869] (E) [ 1694.868252] ? __might_fault+0x177/0x1b0 [ 1694.870283] 4*16kB [ 1694.875104] ion_ioctl+0xea/0x1f0 [ 1694.875113] ? ion_query_heaps+0x360/0x360 [ 1694.875125] ? lock_acquire+0x170/0x3f0 [ 1694.877241] (U) [ 1694.881361] ? ion_query_heaps+0x360/0x360 [ 1694.886270] 11*32kB [ 1694.891682] do_vfs_ioctl+0x75a/0xff0 [ 1694.902412] (UE) [ 1694.903552] ? ioctl_preallocate+0x1a0/0x1a0 [ 1694.907062] 3*64kB [ 1694.909185] ? lock_downgrade+0x740/0x740 [ 1694.920435] (UE) [ 1694.921804] ? __fget+0x225/0x360 [ 1694.925259] 1*128kB [ 1694.929455] ? do_vfs_ioctl+0xff0/0xff0 [ 1694.933415] (E) [ 1694.935361] ? security_file_ioctl+0x83/0xb0 [ 1694.939564] 2*256kB [ 1694.941868] SyS_ioctl+0x7f/0xb0 [ 1694.945657] (UE) [ 1694.947683] ? do_vfs_ioctl+0xff0/0xff0 [ 1694.952058] 3*512kB [ 1694.954274] do_syscall_64+0x1d5/0x640 [ 1694.954290] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1694.958403] (UE) [ 1694.960443] RIP: 0033:0x4665d9 [ 1694.963886] 2*1024kB [ 1694.966162] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1694.970110] (UE) [ 1694.972058] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1694.976451] 3*2048kB [ 1694.978733] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1694.978739] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1694.982104] (UM) [ 1694.984137] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1694.984142] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1694.989775] warn_alloc_show_mem: 3 callbacks suppressed [ 1694.989777] Mem-Info: [ 1694.990427] 0*4096kB [ 1694.994927] active_anon:17630 inactive_anon:26321 isolated_anon:0 [ 1694.994927] active_file:29 inactive_file:8 isolated_file:0 [ 1694.994927] unevictable:0 dirty:0 writeback:19 unstable:0 [ 1694.994927] slab_reclaimable:12602 slab_unreclaimable:116512 [ 1694.994927] mapped:52563 shmem:27412 pagetables:835 bounce:0 [ 1694.994927] free:14007 free_pcp:0 free_cma:0 [ 1695.017870] = 10992kB [ 1695.029523] Node 0 active_anon:67764kB inactive_anon:79716kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117000kB dirty:0kB writeback:0kB shmem:83880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1695.047514] Node 0 [ 1695.055636] Node 1 active_anon:2756kB inactive_anon:25568kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93124kB dirty:0kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1695.067265] DMA32: [ 1695.068970] Node 0 [ 1695.114782] 843*4kB [ 1695.136586] DMA free:10992kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1695.267833] (UME) 522*8kB (UME) 183*16kB (UME) 22*32kB (ME) 1*64kB (U) 56*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18412kB [ 1695.271079] lowmem_reserve[]: [ 1695.305351] Node 0 [ 1695.320068] 0 2717 2718 2718 2718 [ 1695.342393] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1695.348378] Node 0 DMA32 free:45216kB min:36200kB low:45248kB high:54296kB active_anon:67764kB inactive_anon:79716kB active_file:24kB inactive_file:3124kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2640kB bounce:0kB free_pcp:364kB local_pcp:124kB free_cma:0kB [ 1695.372363] Node 1 Normal: 1*4kB (U) 0*8kB 13*16kB (UM) 4*32kB (M) 1068*64kB (UM) 6*128kB (UM) 97*256kB (U) 0*512kB 3*1024kB (U) 1*2048kB (U) 0*4096kB = 99412kB [ 1695.467130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1695.476008] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1695.495870] lowmem_reserve[]: 0 0 0 0 0 [ 1695.499892] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1695.552943] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1695.561811] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1695.592334] 28295 total pagecache pages [ 1695.612354] 0 pages in swap cache [ 1695.615576] lowmem_reserve[]: [ 1695.615850] Swap cache stats: add 0, delete 0, find 0/0 [ 1695.615856] 0 [ 1695.619021] Free swap = 0kB [ 1695.619027] Total swap = 0kB [ 1695.655789] 0 0 0 0 [ 1695.658189] Node 1 Normal free:165456kB min:53696kB low:67120kB high:80544kB active_anon:2756kB inactive_anon:25568kB active_file:40kB inactive_file:240kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:700kB bounce:0kB free_pcp:252kB local_pcp:164kB free_cma:0kB [ 1695.676992] 2097051 pages RAM [ 1695.706453] 0 pages HighMem/MovableOnly [ 1695.732313] 363849 pages reserved [ 1695.735810] 0 pages cma reserved [ 1695.739173] Out of memory (oom_kill_allocating_task): Kill process 8513 (syz-executor.2) score 0 or sacrifice child [ 1695.792333] lowmem_reserve[]: 0 0 0 0 0 [ 1695.796355] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 0*16kB 3*32kB (UE) 3*64kB (UE) 2*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11064kB [ 1695.828648] Node 0 DMA32: 847*4kB (UME) 472*8kB (ME) 181*16kB (ME) 22*32kB (ME) 28*64kB (ME) 152*128kB (UME) 18*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36620kB [ 1695.838948] Killed process 9039 (syz-executor.2) total-vm:93252kB, anon-rss:148kB, file-rss:34816kB, shmem-rss:0kB [ 1695.844066] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1695.844111] Node 1 Normal: 41*4kB (UM) 27*8kB (UM) 15*16kB (M) 8*32kB (UM) 16*64kB (M) 2*128kB (UM) 82*256kB (U) 50*512kB (U) 3*1024kB (U) 1*2048kB (U) 0*4096kB = 53868kB [ 1695.889337] oom_reaper: reaped process 9039 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1695.899354] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1695.908266] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1695.916938] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1695.925913] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1695.934544] 27603 total pagecache pages [ 1695.938507] 0 pages in swap cache [ 1695.941945] Swap cache stats: add 0, delete 0, find 0/0 [ 1695.962302] Free swap = 0kB [ 1695.965368] Total swap = 0kB [ 1695.968811] 2097051 pages RAM [ 1695.971902] 0 pages HighMem/MovableOnly [ 1695.994304] 363849 pages reserved [ 1695.997760] 0 pages cma reserved [ 1696.001469] oom_reaper: reaped process 9029 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1696.020123] syz-executor.2 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1696.033668] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1696.045512] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1696.059163] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1696.064357] CPU: 0 PID: 9039 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1696.072138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1696.081484] Call Trace: [ 1696.084068] dump_stack+0x1b2/0x281 [ 1696.087707] dump_header+0x178/0x82f [ 1696.091416] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1696.096526] ? ___ratelimit+0x2cd/0x530 [ 1696.100495] oom_kill_process.cold+0x10/0xa40 [ 1696.104999] out_of_memory+0xe3e/0x1190 [ 1696.108979] ? oom_killer_disable+0x1c0/0x1c0 [ 1696.113447] ? mutex_trylock+0x152/0x1a0 [ 1696.117482] __alloc_pages_nodemask+0x23e1/0x2720 [ 1696.122304] ? lock_acquire+0x170/0x3f0 [ 1696.126256] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1696.131069] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1696.135556] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1696.140990] alloc_pages_current+0x155/0x260 [ 1696.145376] ion_page_pool_alloc+0x118/0x1b0 [ 1696.149761] ion_system_heap_allocate+0x133/0x8c0 [ 1696.154595] ? ion_alloc+0x187/0x810 [ 1696.158286] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1696.163780] ? ion_system_contig_heap_create+0x130/0x130 [ 1696.169207] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1696.174217] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1696.179049] ion_alloc+0x204/0x810 [ 1696.182569] ? ion_dma_buf_release+0x40/0x40 [ 1696.186956] ? __might_fault+0x177/0x1b0 [ 1696.190997] ion_ioctl+0xea/0x1f0 [ 1696.194429] ? ion_query_heaps+0x360/0x360 [ 1696.198654] ? lock_acquire+0x170/0x3f0 [ 1696.202607] ? ion_query_heaps+0x360/0x360 [ 1696.206820] do_vfs_ioctl+0x75a/0xff0 [ 1696.210595] ? ioctl_preallocate+0x1a0/0x1a0 [ 1696.214982] ? lock_downgrade+0x740/0x740 [ 1696.219121] ? __fget+0x225/0x360 [ 1696.222550] ? do_vfs_ioctl+0xff0/0xff0 [ 1696.226499] ? security_file_ioctl+0x83/0xb0 [ 1696.230883] SyS_ioctl+0x7f/0xb0 [ 1696.234226] ? do_vfs_ioctl+0xff0/0xff0 [ 1696.238179] do_syscall_64+0x1d5/0x640 [ 1696.242049] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1696.247216] RIP: 0033:0x4665d9 [ 1696.250381] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1696.258062] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1696.265308] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1696.272565] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1696.279896] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1696.287140] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1696.297849] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1696.303009] CPU: 0 PID: 9031 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1696.310791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1696.317020] syz-executor.1 cpuset= [ 1696.320128] Call Trace: [ 1696.320133] / [ 1696.323652] dump_stack+0x1b2/0x281 [ 1696.326241] mems_allowed=0-1 [ 1696.327930] warn_alloc.cold+0x96/0x1cc [ 1696.338561] ? zone_watermark_ok_safe+0x220/0x220 [ 1696.343381] ? usleep_range+0x130/0x130 [ 1696.347335] ? try_to_free_pages+0x23f/0x6e0 [ 1696.351721] ? _find_next_bit+0xdb/0x100 [ 1696.355761] ? run_timer_softirq+0x5a0/0x5a0 [ 1696.360152] __alloc_pages_nodemask+0x2127/0x2720 [ 1696.364996] ? lock_acquire+0x170/0x3f0 [ 1696.368947] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1696.373781] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1696.378256] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1696.383689] ? alloc_pages_current+0x84/0x260 [ 1696.388157] alloc_pages_current+0x155/0x260 [ 1696.392540] ion_page_pool_alloc+0x118/0x1b0 [ 1696.396921] ion_system_heap_allocate+0x133/0x8c0 [ 1696.401737] ? _raw_spin_unlock+0x29/0x40 [ 1696.405869] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1696.410789] ? ion_system_contig_heap_create+0x130/0x130 [ 1696.416216] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1696.421208] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1696.426024] ion_alloc+0x27a/0x810 [ 1696.429541] ? ion_dma_buf_release+0x40/0x40 [ 1696.433930] ? __might_fault+0x177/0x1b0 [ 1696.437992] ion_ioctl+0xea/0x1f0 [ 1696.441434] ? ion_query_heaps+0x360/0x360 [ 1696.445659] ? lock_acquire+0x170/0x3f0 [ 1696.449612] ? ion_query_heaps+0x360/0x360 [ 1696.453832] do_vfs_ioctl+0x75a/0xff0 [ 1696.457624] ? ioctl_preallocate+0x1a0/0x1a0 [ 1696.462007] ? lock_downgrade+0x740/0x740 [ 1696.466148] ? __fget+0x225/0x360 [ 1696.469602] ? do_vfs_ioctl+0xff0/0xff0 [ 1696.473571] ? security_file_ioctl+0x83/0xb0 [ 1696.477964] SyS_ioctl+0x7f/0xb0 [ 1696.481315] ? do_vfs_ioctl+0xff0/0xff0 [ 1696.485268] do_syscall_64+0x1d5/0x640 [ 1696.489138] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1696.494315] RIP: 0033:0x4665d9 [ 1696.497491] RSP: 002b:00007f264b33c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1696.505282] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1696.512530] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1696.519777] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1696.527041] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1696.534288] R13: 00007ffed4ba430f R14: 00007f264b33c300 R15: 0000000000022000 [ 1696.541549] CPU: 1 PID: 9029 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1696.543787] warn_alloc_show_mem: 1 callbacks suppressed [ 1696.543789] Mem-Info: [ 1696.549352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1696.554775] active_anon:17613 inactive_anon:26321 isolated_anon:0 [ 1696.554775] active_file:11 inactive_file:0 isolated_file:0 [ 1696.554775] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1696.554775] slab_reclaimable:12601 slab_unreclaimable:116151 [ 1696.554775] mapped:52566 shmem:27412 pagetables:809 bounce:0 [ 1696.554775] free:14246 free_pcp:103 free_cma:0 [ 1696.557095] Call Trace: [ 1696.568277] Mem-Info: [ 1696.599574] dump_stack+0x1b2/0x281 [ 1696.599588] warn_alloc.cold+0x96/0x1cc [ 1696.599600] ? zone_watermark_ok_safe+0x220/0x220 [ 1696.599610] ? usleep_range+0x130/0x130 [ 1696.599618] ? try_to_free_pages+0x23f/0x6e0 [ 1696.599627] ? _find_next_bit+0xdb/0x100 [ 1696.599637] ? run_timer_softirq+0x5a0/0x5a0 [ 1696.604092] Node 0 active_anon:67672kB inactive_anon:79716kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117100kB dirty:0kB writeback:0kB shmem:83880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1696.604597] __alloc_pages_nodemask+0x2127/0x2720 [ 1696.608197] Node 1 active_anon:2780kB inactive_anon:25568kB active_file:40kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93164kB dirty:0kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1696.612143] ? lock_acquire+0x170/0x3f0 [ 1696.616991] Node 0 [ 1696.620906] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1696.627033] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1696.629323] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1696.633757] active_anon:17613 inactive_anon:26321 isolated_anon:0 [ 1696.633757] active_file:11 inactive_file:0 isolated_file:0 [ 1696.633757] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1696.633757] slab_reclaimable:12601 slab_unreclaimable:116151 [ 1696.633757] mapped:52566 shmem:27412 pagetables:809 bounce:0 [ 1696.633757] free:14246 free_pcp:103 free_cma:0 [ 1696.661183] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1696.661196] ? policy_node+0x9c/0x110 [ 1696.661224] alloc_pages_current+0x155/0x260 [ 1696.661235] ion_page_pool_alloc+0x118/0x1b0 [ 1696.661245] ion_system_heap_allocate+0x133/0x8c0 [ 1696.661256] ? ion_alloc+0x187/0x810 [ 1696.668034] lowmem_reserve[]: [ 1696.693341] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1696.693351] ? ion_system_contig_heap_create+0x130/0x130 [ 1696.693358] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1696.693372] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1696.693382] ion_alloc+0x204/0x810 [ 1696.693393] ? ion_dma_buf_release+0x40/0x40 [ 1696.693403] ? __might_fault+0x177/0x1b0 [ 1696.693413] ion_ioctl+0xea/0x1f0 [ 1696.699338] 0 [ 1696.699588] ? ion_query_heaps+0x360/0x360 [ 1696.704446] 2717 [ 1696.730075] ? lock_acquire+0x170/0x3f0 [ 1696.730082] ? ion_query_heaps+0x360/0x360 [ 1696.730092] do_vfs_ioctl+0x75a/0xff0 [ 1696.730102] ? ioctl_preallocate+0x1a0/0x1a0 [ 1696.730109] ? lock_downgrade+0x740/0x740 [ 1696.730122] ? __fget+0x225/0x360 [ 1696.730130] ? do_vfs_ioctl+0xff0/0xff0 [ 1696.730141] ? security_file_ioctl+0x83/0xb0 [ 1696.730154] SyS_ioctl+0x7f/0xb0 [ 1696.736778] Node 0 active_anon:67672kB inactive_anon:79716kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117100kB dirty:0kB writeback:0kB shmem:83880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1696.767983] ? do_vfs_ioctl+0xff0/0xff0 [ 1696.767995] do_syscall_64+0x1d5/0x640 [ 1696.768009] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1696.768017] RIP: 0033:0x4665d9 [ 1696.768021] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1696.768030] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1696.768034] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 15:41:44 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000480)={r3, 0x1e}) recvmsg$can_bcm(r2, 0x0, 0x0) [ 1696.768039] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1696.768044] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1696.768048] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1696.934934] 2718 [ 1696.941365] Node 1 active_anon:2776kB inactive_anon:25568kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93164kB dirty:0kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1697.007259] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1697.014466] 2718 [ 1697.038745] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1697.060892] Node 0 DMA32 free:107752kB min:36200kB low:45248kB high:54296kB active_anon:67584kB inactive_anon:79716kB active_file:88kB inactive_file:9312kB unevictable:0kB writepending:76kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2536kB bounce:0kB free_pcp:944kB local_pcp:296kB free_cma:0kB [ 1697.105469] 2718 [ 1697.113078] Node 0 DMA32 free:102676kB min:36200kB low:45248kB high:54296kB active_anon:67584kB inactive_anon:79716kB active_file:88kB inactive_file:9312kB unevictable:0kB writepending:76kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2536kB bounce:0kB free_pcp:1468kB local_pcp:648kB free_cma:0kB [ 1697.156880] lowmem_reserve[]: 0 0 0 0 0 [ 1697.174622] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1697.207567] lowmem_reserve[]: 0 0 0 0 0 [ 1697.218236] lowmem_reserve[]: 0 0 0 0 0 [ 1697.218513] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1697.256553] lowmem_reserve[]: 0 0 0 0 0 [ 1697.260884] Node 1 Normal free:54396kB min:53696kB low:67120kB high:80544kB active_anon:2776kB inactive_anon:25568kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:700kB bounce:0kB free_pcp:1320kB local_pcp:640kB free_cma:0kB [ 1697.272422] Node 1 Normal free:53652kB min:53696kB low:67120kB high:80544kB active_anon:2776kB inactive_anon:25568kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:700kB bounce:0kB free_pcp:1320kB local_pcp:680kB free_cma:0kB [ 1697.293407] lowmem_reserve[]: 0 0 0 0 0 [ 1697.326744] Node 0 DMA: 9*4kB (UE) 3*8kB (UE) 1*16kB (U) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10988kB [ 1697.352539] Node 0 DMA32: 2708*4kB (UME) 526*8kB (UME) 387*16kB (UME) 143*32kB (UME) 7*64kB (UME) 70*128kB (UME) 6*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36752kB [ 1697.352883] lowmem_reserve[]: 0 0 0 0 0 [ 1697.382206] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1697.396648] Node 1 Normal: 4056*4kB (UM) 324*8kB (UM) 357*16kB (UM) 233*32kB (UM) 105*64kB (UM) 10*128kB (UM) 2*256kB (U) 37*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 59440kB [ 1697.414744] Node 0 DMA: 9*4kB (UE) 3*8kB (UE) 1*16kB (U) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10988kB [ 1697.436046] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1697.478876] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1697.489817] Node 0 DMA32: 3135*4kB (UME) 610*8kB (UME) 551*16kB (UME) 275*32kB (UME) 11*64kB (ME) 8*128kB (ME) 6*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38300kB [ 1697.512003] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1697.527062] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1697.562732] 28758 total pagecache pages [ 1697.566068] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1697.571120] 0 pages in swap cache [ 1697.591300] Swap cache stats: add 0, delete 0, find 0/0 [ 1697.599544] Node 1 Normal: 8383*4kB (U) 1577*8kB (U) 1437*16kB (U) 1098*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 104276kB [ 1697.606096] Free swap = 0kB [ 1697.627535] Total swap = 0kB [ 1697.628889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1697.635001] 2097051 pages RAM [ 1697.651798] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1697.657265] 0 pages HighMem/MovableOnly [ 1697.669358] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1697.675195] 363849 pages reserved [ 1697.684945] 0 pages cma reserved [ 1697.691390] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1697.712224] Out of memory (oom_kill_allocating_task): Kill process 9039 (syz-executor.2) score 0 or sacrifice child [ 1697.740432] 28758 total pagecache pages [ 1697.746953] Killed process 9039 (syz-executor.2) total-vm:93252kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1697.757530] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1697.760654] 0 pages in swap cache [ 1697.784530] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1697.805618] CPU: 0 PID: 9039 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1697.813434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1697.817538] Swap cache stats: add 0, delete 0, find 0/0 [ 1697.822784] Call Trace: [ 1697.822803] dump_stack+0x1b2/0x281 [ 1697.822815] warn_alloc.cold+0x96/0x1cc [ 1697.822827] ? zone_watermark_ok_safe+0x220/0x220 [ 1697.843160] ? wait_for_completion_io+0x10/0x10 [ 1697.843170] Free swap = 0kB [ 1697.847837] __alloc_pages_nodemask+0x2127/0x2720 [ 1697.847853] ? lock_acquire+0x170/0x3f0 [ 1697.856315] Total swap = 0kB [ 1697.859647] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1697.859657] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1697.871973] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1697.875732] 2097051 pages RAM [ 1697.877443] alloc_pages_current+0x155/0x260 [ 1697.877456] ion_page_pool_alloc+0x118/0x1b0 [ 1697.882729] 0 pages HighMem/MovableOnly [ 1697.884936] ion_system_heap_allocate+0x133/0x8c0 [ 1697.884946] ? ion_alloc+0x187/0x810 [ 1697.901839] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1697.907283] ? ion_system_contig_heap_create+0x130/0x130 [ 1697.909747] 363849 pages reserved [ 1697.912732] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1697.912745] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1697.912754] ion_alloc+0x204/0x810 [ 1697.912770] ? ion_dma_buf_release+0x40/0x40 [ 1697.912781] ? __might_fault+0x177/0x1b0 [ 1697.912791] ion_ioctl+0xea/0x1f0 [ 1697.912797] ? ion_query_heaps+0x360/0x360 [ 1697.912808] ? lock_acquire+0x170/0x3f0 [ 1697.912815] ? ion_query_heaps+0x360/0x360 [ 1697.912823] do_vfs_ioctl+0x75a/0xff0 [ 1697.912832] ? ioctl_preallocate+0x1a0/0x1a0 [ 1697.912841] ? lock_downgrade+0x740/0x740 [ 1697.916976] 0 pages cma reserved [ 1697.921288] ? __fget+0x225/0x360 [ 1697.921296] ? do_vfs_ioctl+0xff0/0xff0 [ 1697.921305] ? security_file_ioctl+0x83/0xb0 [ 1697.921313] SyS_ioctl+0x7f/0xb0 [ 1697.921319] ? do_vfs_ioctl+0xff0/0xff0 [ 1697.921329] do_syscall_64+0x1d5/0x640 [ 1697.921341] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1697.921348] RIP: 0033:0x4665d9 [ 1697.921352] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1697.921361] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1697.921365] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1697.921369] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1697.921374] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1697.921378] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 15:41:45 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)) [ 1698.176210] warn_alloc_show_mem: 1 callbacks suppressed [ 1698.176214] Mem-Info: [ 1698.186452] active_anon:17617 inactive_anon:26321 isolated_anon:0 [ 1698.186452] active_file:1170 inactive_file:979 isolated_file:0 [ 1698.186452] unevictable:0 dirty:42 writeback:0 unstable:0 [ 1698.186452] slab_reclaimable:12601 slab_unreclaimable:118800 [ 1698.186452] mapped:54353 shmem:27412 pagetables:798 bounce:0 [ 1698.186452] free:102554 free_pcp:724 free_cma:0 [ 1698.237008] systemd[1]: Started Journal Service. [ 1698.248120] Node 0 active_anon:67692kB inactive_anon:79716kB active_file:4764kB inactive_file:5264kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125036kB dirty:156kB writeback:0kB shmem:83880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1698.305300] Node 1 active_anon:2776kB inactive_anon:25568kB active_file:116kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93576kB dirty:12kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1698.405028] Node 0 DMA free:11024kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1698.468113] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1698.470262] syz-executor.0: [ 1698.489292] syz-executor.4: [ 1698.494997] lowmem_reserve[]: [ 1698.496858] page allocation failure: order:4 [ 1698.498039] 0 2717 2718 2718 2718 [ 1698.498057] Node 0 DMA32 free:195044kB min:36200kB low:45248kB high:54296kB active_anon:67692kB inactive_anon:79716kB active_file:5076kB inactive_file:5888kB unevictable:0kB writepending:156kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2492kB bounce:0kB free_pcp:192kB local_pcp:24kB free_cma:0kB [ 1698.498075] lowmem_reserve[]: [ 1698.504810] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1698.509195] page allocation failure: order:4 [ 1698.551985] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1698.561610] CPU: 1 PID: 9029 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1698.565151] 0 [ 1698.569388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1698.569392] Call Trace: [ 1698.569408] dump_stack+0x1b2/0x281 [ 1698.569421] warn_alloc.cold+0x96/0x1cc [ 1698.576785] 0 [ 1698.580558] ? zone_watermark_ok_safe+0x220/0x220 [ 1698.580579] __alloc_pages_nodemask+0x2127/0x2720 [ 1698.593407] 0 [ 1698.597337] ? lock_acquire+0x170/0x3f0 [ 1698.597352] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1698.597367] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1698.615475] 0 [ 1698.618288] ? __mutex_unlock_slowpath+0x75/0x770 [ 1698.618306] alloc_pages_current+0x155/0x260 [ 1698.625357] 0 [ 1698.629308] ion_page_pool_alloc+0x118/0x1b0 [ 1698.629317] ion_system_heap_allocate+0x133/0x8c0 [ 1698.629329] ? _raw_spin_unlock+0x29/0x40 [ 1698.640422] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1698.640432] ? ion_system_contig_heap_create+0x130/0x130 [ 1698.640441] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1698.640452] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1698.651469] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1698.654916] ion_alloc+0x27a/0x810 [ 1698.654931] ? ion_dma_buf_release+0x40/0x40 [ 1698.654945] ? __might_fault+0x177/0x1b0 [ 1698.654957] ion_ioctl+0xea/0x1f0 [ 1698.654965] ? ion_query_heaps+0x360/0x360 [ 1698.654979] ? lock_acquire+0x170/0x3f0 [ 1698.654985] ? ion_query_heaps+0x360/0x360 [ 1698.654995] do_vfs_ioctl+0x75a/0xff0 [ 1698.655011] ? ioctl_preallocate+0x1a0/0x1a0 [ 1698.668588] (null) [ 1698.671926] ? lock_downgrade+0x740/0x740 [ 1698.671942] ? __fget+0x225/0x360 [ 1698.671951] ? do_vfs_ioctl+0xff0/0xff0 [ 1698.671962] ? security_file_ioctl+0x83/0xb0 [ 1698.671972] SyS_ioctl+0x7f/0xb0 [ 1698.671979] ? do_vfs_ioctl+0xff0/0xff0 [ 1698.671989] do_syscall_64+0x1d5/0x640 [ 1698.672005] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1698.677859] Node 0 [ 1698.679913] RIP: 0033:0x4665d9 [ 1698.679918] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1698.679929] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1698.679934] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1698.679940] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1698.688459] syz-executor.0 cpuset= [ 1698.691625] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1698.691632] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1698.731902] (null) [ 1698.741954] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1698.761910] syz-executor.4 cpuset= [ 1698.791958] lowmem_reserve[]: [ 1698.821894] / mems_allowed=0-1 [ 1698.841967] CPU: 1 PID: 9049 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1698.849771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1698.856284] / [ 1698.859114] Call Trace: [ 1698.861311] mems_allowed=0-1 [ 1698.863395] dump_stack+0x1b2/0x281 [ 1698.863410] warn_alloc.cold+0x96/0x1cc [ 1698.863421] ? zone_watermark_ok_safe+0x220/0x220 [ 1698.863442] __alloc_pages_nodemask+0x2127/0x2720 [ 1698.863451] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1698.863460] ? finish_task_switch+0x178/0x610 [ 1698.863466] ? finish_task_switch+0x14d/0x610 [ 1698.863481] ? lock_acquire+0x170/0x3f0 [ 1698.887075] 0 [ 1698.888272] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1698.888288] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1698.907689] 0 [ 1698.907785] ? __mutex_unlock_slowpath+0x75/0x770 [ 1698.919821] ? alloc_pages_current+0x16/0x260 [ 1698.924308] alloc_pages_current+0x155/0x260 [ 1698.928234] 0 0 [ 1698.928722] ion_page_pool_alloc+0x118/0x1b0 [ 1698.928727] 0 [ 1698.930698] ion_system_heap_allocate+0x133/0x8c0 [ 1698.930707] ? ion_alloc+0x187/0x810 [ 1698.930717] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1698.950847] ? ion_system_contig_heap_create+0x130/0x130 [ 1698.956295] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1698.956305] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1698.956314] ion_alloc+0x204/0x810 [ 1698.969645] ? ion_dma_buf_release+0x40/0x40 [ 1698.971855] Node 1 [ 1698.974036] ? __might_fault+0x177/0x1b0 [ 1698.974046] ion_ioctl+0xea/0x1f0 [ 1698.980658] Normal free:250252kB min:53696kB low:67120kB high:80544kB active_anon:2776kB inactive_anon:25568kB active_file:116kB inactive_file:52kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:700kB bounce:0kB free_pcp:300kB local_pcp:216kB free_cma:0kB [ 1698.983738] ? ion_query_heaps+0x360/0x360 [ 1698.983751] ? lock_acquire+0x170/0x3f0 [ 1698.983757] ? ion_query_heaps+0x360/0x360 [ 1698.983766] do_vfs_ioctl+0x75a/0xff0 [ 1698.983776] ? ioctl_preallocate+0x1a0/0x1a0 [ 1698.983783] ? lock_downgrade+0x740/0x740 [ 1698.983796] ? __fget+0x225/0x360 [ 1698.983804] ? do_vfs_ioctl+0xff0/0xff0 [ 1698.983814] ? security_file_ioctl+0x83/0xb0 [ 1698.983824] SyS_ioctl+0x7f/0xb0 [ 1699.052019] ? do_vfs_ioctl+0xff0/0xff0 [ 1699.055988] do_syscall_64+0x1d5/0x640 [ 1699.059862] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1699.065032] RIP: 0033:0x4665d9 [ 1699.068210] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1699.075922] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1699.083184] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1699.090447] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1699.097699] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1699.104961] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1699.111854] lowmem_reserve[]: 0 0 0 0 0 [ 1699.117334] Node 0 DMA: 46*4kB (UE) 17*8kB (UE) 3*16kB (U) 5*32kB (UE) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11024kB [ 1699.136218] CPU: 0 PID: 9052 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1699.144019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1699.153384] Call Trace: [ 1699.155966] dump_stack+0x1b2/0x281 [ 1699.159592] warn_alloc.cold+0x96/0x1cc [ 1699.163561] ? zone_watermark_ok_safe+0x220/0x220 [ 1699.168416] __alloc_pages_nodemask+0x2127/0x2720 [ 1699.173384] ? ___preempt_schedule+0x16/0x18 [ 1699.177807] ? lock_acquire+0x170/0x3f0 [ 1699.181782] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1699.186619] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1699.192058] ? __mutex_unlock_slowpath+0x75/0x770 [ 1699.196900] alloc_pages_current+0x155/0x260 [ 1699.201307] ion_page_pool_alloc+0x118/0x1b0 [ 1699.205712] ion_system_heap_allocate+0x133/0x8c0 [ 1699.210564] ? ion_alloc+0x187/0x810 [ 1699.214276] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1699.219719] ? ion_system_contig_heap_create+0x130/0x130 [ 1699.225165] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1699.230180] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1699.235027] ion_alloc+0x204/0x810 [ 1699.238570] ? ion_dma_buf_release+0x40/0x40 [ 1699.242975] ? __might_fault+0x177/0x1b0 [ 1699.247033] ion_ioctl+0xea/0x1f0 [ 1699.250477] ? ion_query_heaps+0x360/0x360 [ 1699.254711] ? lock_acquire+0x170/0x3f0 [ 1699.258679] ? ion_query_heaps+0x360/0x360 [ 1699.262910] do_vfs_ioctl+0x75a/0xff0 [ 1699.266709] ? ioctl_preallocate+0x1a0/0x1a0 [ 1699.271111] ? lock_downgrade+0x740/0x740 [ 1699.275268] ? __fget+0x225/0x360 [ 1699.278720] ? do_vfs_ioctl+0xff0/0xff0 [ 1699.282691] ? security_file_ioctl+0x83/0xb0 [ 1699.287097] SyS_ioctl+0x7f/0xb0 [ 1699.290456] ? do_vfs_ioctl+0xff0/0xff0 [ 1699.294425] do_syscall_64+0x1d5/0x640 [ 1699.298322] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1699.303505] RIP: 0033:0x4665d9 [ 1699.306687] RSP: 002b:00007f264b33c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1699.314390] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1699.321658] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1699.328916] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1699.336165] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1699.343499] R13: 00007ffed4ba430f R14: 00007f264b33c300 R15: 0000000000022000 [ 1699.366941] Node 0 DMA32: 255*4kB (UME) 384*8kB (UME) 169*16kB (ME) 801*32kB (UME) 6*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32812kB [ 1699.415954] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1699.445351] Node 1 Normal: 10*4kB (UM) 2*8kB (M) 5*16kB (UM) 1675*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53736kB [ 1699.476940] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1699.484831] warn_alloc_show_mem: 1 callbacks suppressed [ 1699.484834] Mem-Info: [ 1699.496351] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1699.513156] active_anon:17652 inactive_anon:26321 isolated_anon:0 [ 1699.513156] active_file:64 inactive_file:36 isolated_file:0 [ 1699.513156] unevictable:0 dirty:16 writeback:0 unstable:0 [ 1699.513156] slab_reclaimable:12529 slab_unreclaimable:119040 [ 1699.513156] mapped:52700 shmem:27412 pagetables:835 bounce:0 [ 1699.513156] free:13849 free_pcp:37 free_cma:0 [ 1699.523632] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1699.562030] in:imklog cpuset=/ mems_allowed=0-1 [ 1699.567393] CPU: 1 PID: 9046 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1699.571605] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1699.574745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1699.574749] Call Trace: [ 1699.574767] dump_stack+0x1b2/0x281 [ 1699.574778] dump_header+0x178/0x82f [ 1699.574789] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1699.574798] ? ___ratelimit+0x2cd/0x530 [ 1699.574809] oom_kill_process.cold+0x10/0xa40 [ 1699.574827] out_of_memory+0xe3e/0x1190 [ 1699.574841] ? oom_killer_disable+0x1c0/0x1c0 [ 1699.574849] ? mutex_trylock+0x152/0x1a0 [ 1699.574858] __alloc_pages_nodemask+0x23e1/0x2720 [ 1699.574877] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1699.589574] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1699.593240] alloc_pages_current+0x155/0x260 [ 1699.593252] filemap_fault+0x11a1/0x1ad0 [ 1699.593270] ext4_filemap_fault+0x84/0xb0 [ 1699.595862] 27467 total pagecache pages [ 1699.599471] __do_fault+0xfa/0x380 [ 1699.608401] 0 pages in swap cache [ 1699.612216] __handle_mm_fault+0x2497/0x4620 [ 1699.612226] ? vm_insert_page+0x7c0/0x7c0 [ 1699.612234] ? lock_downgrade+0x740/0x740 [ 1699.612248] ? mark_held_locks+0xa6/0xf0 [ 1699.616721] Swap cache stats: add 0, delete 0, find 0/0 [ 1699.620685] handle_mm_fault+0x455/0x9c0 [ 1699.630268] Free swap = 0kB [ 1699.634020] __do_page_fault+0x549/0xad0 [ 1699.634031] ? spurious_fault+0x640/0x640 [ 1699.634037] ? do_page_fault+0x60/0x500 [ 1699.634045] ? page_fault+0x2f/0x50 [ 1699.634050] page_fault+0x45/0x50 [ 1699.634055] RIP: 1fa0:0x1f9f [ 1699.634059] RSP: 0000:00005613aa96a9d0 EFLAGS: 7f888cbc5da0 [ 1699.649393] Node 0 active_anon:67832kB inactive_anon:79716kB active_file:140kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117152kB dirty:48kB writeback:0kB shmem:83880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1699.658550] Total swap = 0kB [ 1699.668440] Node 1 active_anon:2776kB inactive_anon:25568kB active_file:116kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93648kB dirty:16kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1699.671266] 2097051 pages RAM [ 1699.675718] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1699.675740] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1699.675760] CPU: 1 PID: 9029 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1699.675765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1699.675769] Call Trace: [ 1699.675784] dump_stack+0x1b2/0x281 [ 1699.686764] 0 pages HighMem/MovableOnly [ 1699.688109] warn_alloc.cold+0x96/0x1cc [ 1699.695156] 363849 pages reserved [ 1699.697493] ? zone_watermark_ok_safe+0x220/0x220 [ 1699.700486] 0 pages cma reserved [ 1699.704537] ? usleep_range+0x130/0x130 [ 1699.704546] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1699.704558] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1699.704568] ? run_timer_softirq+0x5a0/0x5a0 [ 1699.704584] __alloc_pages_nodemask+0x2127/0x2720 [ 1699.704597] ? lock_acquire+0x170/0x3f0 [ 1699.704609] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1699.704618] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1699.704631] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1699.704649] alloc_pages_current+0x155/0x260 [ 1699.801776] Mem-Info: [ 1699.806645] ion_page_pool_alloc+0x118/0x1b0 [ 1699.835162] active_anon:17652 inactive_anon:26321 isolated_anon:0 [ 1699.835162] active_file:64 inactive_file:36 isolated_file:0 [ 1699.835162] unevictable:0 dirty:16 writeback:0 unstable:0 [ 1699.835162] slab_reclaimable:12529 slab_unreclaimable:119040 [ 1699.835162] mapped:52700 shmem:27412 pagetables:835 bounce:0 [ 1699.835162] free:34916 free_pcp:335 free_cma:0 [ 1699.837888] ion_system_heap_allocate+0x133/0x8c0 [ 1699.841321] Node 0 active_anon:67832kB inactive_anon:79716kB active_file:140kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117152kB dirty:48kB writeback:0kB shmem:83880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1699.846136] ? _raw_spin_unlock+0x29/0x40 [ 1699.846144] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1699.846152] ? ion_system_contig_heap_create+0x130/0x130 [ 1699.846160] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1699.846171] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1699.846179] ion_alloc+0x27a/0x810 [ 1699.914754] Node 1 active_anon:2776kB inactive_anon:25568kB active_file:124kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93648kB dirty:24kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1699.936051] ? ion_dma_buf_release+0x40/0x40 [ 1699.936062] ? __might_fault+0x177/0x1b0 [ 1699.936073] ion_ioctl+0xea/0x1f0 [ 1699.936086] ? ion_query_heaps+0x360/0x360 [ 1699.936098] ? lock_acquire+0x170/0x3f0 [ 1699.936105] ? ion_query_heaps+0x360/0x360 [ 1699.936114] do_vfs_ioctl+0x75a/0xff0 [ 1699.936124] ? ioctl_preallocate+0x1a0/0x1a0 [ 1699.936133] ? lock_downgrade+0x740/0x740 [ 1700.021776] Node 0 [ 1700.024030] ? __fget+0x225/0x360 [ 1700.028421] DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1700.032453] ? do_vfs_ioctl+0xff0/0xff0 [ 1700.032465] ? security_file_ioctl+0x83/0xb0 [ 1700.032474] SyS_ioctl+0x7f/0xb0 [ 1700.032482] ? do_vfs_ioctl+0xff0/0xff0 [ 1700.032493] do_syscall_64+0x1d5/0x640 [ 1700.032508] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1700.032516] RIP: 0033:0x4665d9 [ 1700.032520] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1700.032529] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1700.032534] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1700.032538] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1700.032543] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1700.032548] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1700.049293] Node 0 [ 1700.151716] lowmem_reserve[]: [ 1700.166147] DMA free:11168kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1700.200374] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1700.206099] Node 0 DMA32 free:46300kB min:36200kB low:45248kB high:54296kB active_anon:67832kB inactive_anon:79716kB active_file:832kB inactive_file:1136kB unevictable:0kB writepending:8kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2640kB bounce:0kB free_pcp:528kB local_pcp:112kB free_cma:0kB [ 1700.211744] 0 [ 1700.287220] syz-executor.2: [ 1700.289114] lowmem_reserve[]: [ 1700.291706] 2717 2718 2718 2718 [ 1700.298610] Node 0 DMA32 free:45096kB min:36200kB low:45248kB high:54296kB active_anon:67832kB inactive_anon:79716kB active_file:832kB inactive_file:672kB unevictable:0kB writepending:8kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2640kB bounce:0kB free_pcp:204kB local_pcp:120kB free_cma:0kB [ 1700.331103] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1700.347213] 0 0 0 0 0 [ 1700.350871] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1700.384028] lowmem_reserve[]: 0 0 0 0 0 [ 1700.393046] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1700.418718] lowmem_reserve[]: 0 0 0 0 0 [ 1700.422803] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1700.428040] Node 1 Normal free:53496kB min:53696kB low:67120kB high:80544kB active_anon:2776kB inactive_anon:25568kB active_file:128kB inactive_file:360kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:700kB bounce:0kB free_pcp:740kB local_pcp:120kB free_cma:0kB [ 1700.457585] CPU: 0 PID: 9039 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1700.465395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1700.465679] lowmem_reserve[]: [ 1700.474740] Call Trace: [ 1700.474758] dump_stack+0x1b2/0x281 [ 1700.474772] warn_alloc.cold+0x96/0x1cc [ 1700.474783] ? zone_watermark_ok_safe+0x220/0x220 [ 1700.474802] __alloc_pages_nodemask+0x2127/0x2720 [ 1700.479728] 0 [ 1700.480472] ? _raw_spin_unlock_irq+0x24/0x80 [ 1700.480486] ? lock_acquire+0x170/0x3f0 [ 1700.484136] 0 [ 1700.488051] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1700.488066] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1700.492913] 0 [ 1700.497701] ? __mutex_unlock_slowpath+0x75/0x770 [ 1700.497715] alloc_pages_current+0x155/0x260 [ 1700.499512] 0 [ 1700.503983] ion_page_pool_alloc+0x118/0x1b0 [ 1700.503994] ion_system_heap_allocate+0x133/0x8c0 [ 1700.504005] ? _raw_spin_unlock+0x29/0x40 [ 1700.504012] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1700.504022] ? ion_system_contig_heap_create+0x130/0x130 [ 1700.508032] 0 [ 1700.509783] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1700.509794] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1700.509805] ion_alloc+0x27a/0x810 [ 1700.520158] ? ion_dma_buf_release+0x40/0x40 [ 1700.520170] ? __might_fault+0x177/0x1b0 [ 1700.522000] Node 1 [ 1700.526803] ion_ioctl+0xea/0x1f0 [ 1700.526814] ? ion_query_heaps+0x360/0x360 [ 1700.531234] Normal free:54000kB min:53696kB low:67120kB high:80544kB active_anon:2776kB inactive_anon:25568kB active_file:128kB inactive_file:360kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:700kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1700.532988] ? lock_acquire+0x170/0x3f0 [ 1700.532996] ? ion_query_heaps+0x360/0x360 [ 1700.533006] do_vfs_ioctl+0x75a/0xff0 [ 1700.533017] ? ioctl_preallocate+0x1a0/0x1a0 [ 1700.537421] lowmem_reserve[]: [ 1700.542220] ? lock_downgrade+0x740/0x740 [ 1700.542233] ? __fget+0x225/0x360 [ 1700.542242] ? do_vfs_ioctl+0xff0/0xff0 [ 1700.542253] ? security_file_ioctl+0x83/0xb0 [ 1700.546395] 0 [ 1700.551281] SyS_ioctl+0x7f/0xb0 [ 1700.551289] ? do_vfs_ioctl+0xff0/0xff0 [ 1700.551299] do_syscall_64+0x1d5/0x640 [ 1700.556770] 0 [ 1700.558515] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1700.558523] RIP: 0033:0x4665d9 [ 1700.563554] 0 [ 1700.568341] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1700.568351] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1700.568355] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1700.568362] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1700.571915] 0 [ 1700.576256] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1700.576261] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1700.638735] lowmem_reserve[]: [ 1700.728428] warn_alloc_show_mem: 1 callbacks suppressed [ 1700.728432] Mem-Info: [ 1700.744758] 0 [ 1700.749589] active_anon:17652 inactive_anon:26321 isolated_anon:0 [ 1700.749589] active_file:39 inactive_file:24 isolated_file:6 [ 1700.749589] unevictable:0 dirty:2 writeback:0 unstable:0 [ 1700.749589] slab_reclaimable:12510 slab_unreclaimable:119226 [ 1700.749589] mapped:52725 shmem:27412 pagetables:835 bounce:0 [ 1700.749589] free:25057 free_pcp:179 free_cma:0 [ 1700.766479] 0 [ 1700.787541] Node 0 DMA: 37*4kB (UE) 18*8kB (UE) 2*16kB (U) 9*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10980kB [ 1700.801636] 0 0 0 0 [ 1700.806858] Node 0 DMA: 37*4kB (UE) 18*8kB (UE) 2*16kB (U) 9*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10980kB [ 1700.808003] Node 0 DMA32: 404*4kB (UME) 473*8kB (ME) 176*16kB (UME) 306*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18008kB [ 1700.841362] Node 0 active_anon:67832kB inactive_anon:79716kB active_file:112kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):24kB mapped:117104kB dirty:4kB writeback:0kB shmem:83880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1700.841642] Node 0 [ 1700.873726] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1700.889019] Node 1 Normal: 47*4kB (M) 5*8kB (M) 5*16kB (M) 1060*32kB (UM) 4*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34740kB [ 1700.901086] DMA32: 608*4kB (UME) 475*8kB (UME) 176*16kB (UME) 274*32kB (UME) 2*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18200kB [ 1700.905832] Node 1 active_anon:2776kB inactive_anon:25568kB active_file:104kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93720kB dirty:0kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1700.919320] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1700.951006] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1700.957942] Node 1 [ 1700.965610] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1700.974665] Normal: 47*4kB (M) 5*8kB (M) 5*16kB (M) 812*32kB (UM) 4*64kB (U) 0*128kB [ 1700.976447] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1700.976452] 1*256kB [ 1700.989339] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1701.022270] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1701.028915] (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26804kB [ 1701.030855] 27443 total pagecache pages [ 1701.040690] 0 pages in swap cache [ 1701.046405] Swap cache stats: add 0, delete 0, find 0/0 [ 1701.051832] Free swap = 0kB [ 1701.054901] Total swap = 0kB [ 1701.055366] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1701.057925] 2097051 pages RAM [ 1701.072527] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1701.077586] Node 0 DMA32 free:17832kB min:36200kB low:45248kB high:54296kB active_anon:67832kB inactive_anon:79716kB active_file:32kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2640kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1701.100523] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1701.113410] 0 pages HighMem/MovableOnly [ 1701.118684] 363849 pages reserved [ 1701.130222] 0 pages cma reserved [ 1701.130388] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1701.135550] lowmem_reserve[]: [ 1701.150551] syz-executor.2: [ 1701.150656] 0 [ 1701.157124] page allocation failure: order:0 [ 1701.158647] 0 [ 1701.158921] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1701.171288] 0 [ 1701.177431] (null) [ 1701.180309] 0 [ 1701.187437] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1701.190014] 0 [ 1701.196605] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1701.200939] CPU: 0 PID: 9039 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1701.214754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1701.214759] Call Trace: [ 1701.214777] dump_stack+0x1b2/0x281 [ 1701.214791] warn_alloc.cold+0x96/0x1cc [ 1701.224143] 27443 total pagecache pages [ 1701.226696] ? zone_watermark_ok_safe+0x220/0x220 [ 1701.230298] 0 pages in swap cache [ 1701.234246] ? usleep_range+0x130/0x130 [ 1701.234255] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1701.234268] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1701.238225] Node 0 [ 1701.243043] ? run_timer_softirq+0x5a0/0x5a0 [ 1701.243062] __alloc_pages_nodemask+0x2127/0x2720 [ 1701.246504] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1701.246508] lowmem_reserve[]: [ 1701.250569] ? lock_acquire+0x170/0x3f0 [ 1701.255662] Swap cache stats: add 0, delete 0, find 0/0 [ 1701.260641] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1701.262862] Free swap = 0kB [ 1701.267241] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1701.272074] 0 [ 1701.296941] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1701.296960] alloc_pages_current+0x155/0x260 [ 1701.300065] Total swap = 0kB [ 1701.304015] ion_page_pool_alloc+0x118/0x1b0 [ 1701.304023] ion_system_heap_allocate+0x133/0x8c0 [ 1701.304034] ? _raw_spin_unlock+0x29/0x40 [ 1701.309369] 2097051 pages RAM [ 1701.314186] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1701.314196] ? ion_system_contig_heap_create+0x130/0x130 [ 1701.314203] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1701.314214] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1701.317214] 0 pages HighMem/MovableOnly [ 1701.321696] ion_alloc+0x27a/0x810 [ 1701.321708] ? ion_dma_buf_release+0x40/0x40 [ 1701.321719] ? __might_fault+0x177/0x1b0 [ 1701.323497] 363849 pages reserved [ 1701.328925] ion_ioctl+0xea/0x1f0 [ 1701.333326] 0 [ 1701.336303] ? ion_query_heaps+0x360/0x360 [ 1701.340676] 0 [ 1701.345514] ? lock_acquire+0x170/0x3f0 [ 1701.345522] ? ion_query_heaps+0x360/0x360 [ 1701.345532] do_vfs_ioctl+0x75a/0xff0 [ 1701.349669] 0 pages cma reserved [ 1701.352759] ? ioctl_preallocate+0x1a0/0x1a0 [ 1701.352766] ? lock_downgrade+0x740/0x740 [ 1701.352778] ? __fget+0x225/0x360 [ 1701.357675] Out of memory (oom_kill_allocating_task): Kill process 9046 (in:imklog) score 0 or sacrifice child [ 1701.363098] ? do_vfs_ioctl+0xff0/0xff0 [ 1701.363108] ? security_file_ioctl+0x83/0xb0 [ 1701.363117] SyS_ioctl+0x7f/0xb0 [ 1701.368106] 0 [ 1701.372924] ? do_vfs_ioctl+0xff0/0xff0 [ 1701.372936] do_syscall_64+0x1d5/0x640 [ 1701.372950] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1701.376908] 0 [ 1701.380435] RIP: 0033:0x4665d9 [ 1701.384899] Killed process 9042 (rsyslogd) total-vm:254332kB, anon-rss:948kB, file-rss:0kB, shmem-rss:0kB [ 1701.388868] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1701.395749] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1701.397528] Node 1 [ 1701.401854] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1701.401859] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1701.401863] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1701.401867] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1701.505039] oom_reaper: reaped process 9042 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 15:41:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) [ 1701.639160] Normal free:67024kB min:53696kB low:67120kB high:80544kB active_anon:2176kB inactive_anon:25568kB active_file:132kB inactive_file:2328kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:700kB bounce:0kB free_pcp:0kB local_pcp:224kB free_cma:0kB [ 1701.701540] lowmem_reserve[]: 0 0 0 0 0 [ 1701.728699] Node 0 DMA: 1*4kB (E) 1*8kB (E) 1*16kB (U) 3*32kB (UME) 12*64kB (UME) 2*128kB (ME) 3*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11132kB [ 1701.785749] Node 0 DMA32: 590*4kB (UME) 593*8kB (UME) 204*16kB (UME) 101*32kB (UME) 256*64kB (UM) 93*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41888kB [ 1701.807708] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1701.877052] Node 1 Normal: 57*4kB (UM) 10*8kB (M) 8*16kB (M) 4*32kB (UM) 588*64kB (UM) 84*128kB (UM) 19*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53812kB [ 1701.896042] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1701.905463] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1701.919931] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1701.944248] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1701.958139] 27478 total pagecache pages [ 1701.965734] 0 pages in swap cache [ 1701.969194] Swap cache stats: add 0, delete 0, find 0/0 [ 1701.974586] Free swap = 0kB [ 1701.977590] Total swap = 0kB [ 1701.980624] 2097051 pages RAM [ 1701.986740] 0 pages HighMem/MovableOnly [ 1701.990723] 363849 pages reserved [ 1702.010354] oom_reaper: reaped process 9028 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1702.016929] 0 pages cma reserved [ 1702.297979] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1702.315796] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1702.320578] CPU: 0 PID: 7987 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1702.328048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1702.337392] Call Trace: [ 1702.339980] dump_stack+0x1b2/0x281 [ 1702.343603] dump_header+0x178/0x82f [ 1702.347310] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1702.352404] ? ___ratelimit+0x2cd/0x530 [ 1702.356413] oom_kill_process.cold+0x10/0xa40 [ 1702.360927] out_of_memory+0xe3e/0x1190 [ 1702.364896] ? oom_killer_disable+0x1c0/0x1c0 [ 1702.369383] ? mutex_trylock+0x152/0x1a0 [ 1702.373472] __alloc_pages_nodemask+0x23e1/0x2720 [ 1702.378305] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1702.383133] alloc_pages_current+0x155/0x260 [ 1702.387533] filemap_fault+0x11a1/0x1ad0 [ 1702.391599] ext4_filemap_fault+0x84/0xb0 [ 1702.395738] __do_fault+0xfa/0x380 [ 1702.399262] __handle_mm_fault+0x2497/0x4620 [ 1702.403646] ? vm_insert_page+0x7c0/0x7c0 [ 1702.407766] ? free_object+0xe4/0x240 [ 1702.411560] ? mark_held_locks+0xa6/0xf0 [ 1702.415614] handle_mm_fault+0x455/0x9c0 [ 1702.419654] __do_page_fault+0x549/0xad0 [ 1702.423726] ? spurious_fault+0x640/0x640 [ 1702.427853] ? do_page_fault+0x60/0x500 [ 1702.431810] ? page_fault+0x2f/0x50 [ 1702.435437] page_fault+0x45/0x50 [ 1702.438872] RIP: 0000:0x947a5c [ 1702.442042] RSP: 4e20:000000c00003df28 EFLAGS: 0043b6a0 [ 1702.451582] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1702.479012] Mem-Info: [ 1702.479405] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1702.485958] active_anon:17435 inactive_anon:26321 isolated_anon:0 [ 1702.485958] active_file:53 inactive_file:3 isolated_file:0 [ 1702.485958] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1702.485958] slab_reclaimable:12493 slab_unreclaimable:118321 [ 1702.485958] mapped:52722 shmem:27412 pagetables:787 bounce:0 [ 1702.485958] free:13834 free_pcp:0 free_cma:0 [ 1702.490798] CPU: 0 PID: 9028 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1702.523900] Node 0 active_anon:67492kB inactive_anon:79716kB active_file:80kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117100kB dirty:0kB writeback:0kB shmem:83880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1702.531618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1702.531622] Call Trace: [ 1702.531639] dump_stack+0x1b2/0x281 [ 1702.531653] warn_alloc.cold+0x96/0x1cc [ 1702.561380] Node 1 active_anon:2248kB inactive_anon:25568kB active_file:132kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93788kB dirty:0kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1702.568694] ? zone_watermark_ok_safe+0x220/0x220 [ 1702.571251] Node 0 [ 1702.574869] ? usleep_range+0x130/0x130 [ 1702.574878] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1702.574889] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1702.574899] ? run_timer_softirq+0x5a0/0x5a0 [ 1702.578862] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1702.606110] __alloc_pages_nodemask+0x2127/0x2720 [ 1702.606128] ? lock_acquire+0x170/0x3f0 [ 1702.606145] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1702.610975] lowmem_reserve[]: [ 1702.613192] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1702.613207] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1702.613220] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 1702.617165] 0 [ 1702.622264] alloc_pages_current+0x155/0x260 [ 1702.622277] ion_page_pool_alloc+0x118/0x1b0 [ 1702.627267] 2717 [ 1702.631653] ion_system_heap_allocate+0x133/0x8c0 [ 1702.631663] ? ion_alloc+0x187/0x810 [ 1702.631675] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1702.657199] 2718 [ 1702.662002] ? ion_system_contig_heap_create+0x130/0x130 [ 1702.662012] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1702.662024] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1702.665970] 2718 [ 1702.670789] ion_alloc+0x204/0x810 [ 1702.673888] 2718 [ 1702.678352] ? ion_dma_buf_release+0x40/0x40 [ 1702.688672] ? __might_fault+0x177/0x1b0 [ 1702.690464] Node 0 [ 1702.695034] ion_ioctl+0xea/0x1f0 [ 1702.695044] ? ion_query_heaps+0x360/0x360 [ 1702.695057] ? lock_acquire+0x170/0x3f0 [ 1702.699449] DMA32 free:17728kB min:36200kB low:45248kB high:54296kB active_anon:67484kB inactive_anon:79716kB active_file:48kB inactive_file:824kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2472kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1702.701482] ? ion_query_heaps+0x360/0x360 [ 1702.701491] do_vfs_ioctl+0x75a/0xff0 [ 1702.701503] ? ioctl_preallocate+0x1a0/0x1a0 [ 1702.706316] lowmem_reserve[]: [ 1702.710046] ? lock_downgrade+0x740/0x740 [ 1702.715505] 0 [ 1702.717534] ? __fget+0x225/0x360 [ 1702.722970] 0 [ 1702.727954] ? do_vfs_ioctl+0xff0/0xff0 [ 1702.732808] 0 [ 1702.734847] ? security_file_ioctl+0x83/0xb0 [ 1702.738362] 0 [ 1702.740408] SyS_ioctl+0x7f/0xb0 [ 1702.744851] 0 [ 1702.748878] ? do_vfs_ioctl+0xff0/0xff0 [ 1702.754547] do_syscall_64+0x1d5/0x640 [ 1702.754561] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1702.754569] RIP: 0033:0x4665d9 [ 1702.758783] Node 0 [ 1702.762744] RSP: 002b:00007f28a7fcb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1702.762753] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1702.762759] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1702.762763] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1702.762770] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1702.790789] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1702.794992] R13: 00007ffd6449ea9f R14: 00007f28a7fcb300 R15: 0000000000022000 [ 1702.806999] warn_alloc_show_mem: 2 callbacks suppressed [ 1702.807002] Mem-Info: [ 1702.828893] lowmem_reserve[]: [ 1702.838611] active_anon:17435 inactive_anon:26321 isolated_anon:0 [ 1702.838611] active_file:53 inactive_file:3 isolated_file:0 [ 1702.838611] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1702.838611] slab_reclaimable:12493 slab_unreclaimable:118321 [ 1702.838611] mapped:52722 shmem:27412 pagetables:787 bounce:0 [ 1702.838611] free:13834 free_pcp:0 free_cma:0 [ 1702.850430] 0 [ 1702.862400] Node 0 active_anon:67492kB inactive_anon:79716kB active_file:80kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117044kB dirty:0kB writeback:0kB shmem:83880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1702.874585] 0 [ 1702.886863] Node 1 active_anon:2252kB inactive_anon:25568kB active_file:100kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93708kB dirty:4kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1702.904332] 0 [ 1702.931216] Node 0 [ 1702.942839] 0 [ 1702.983509] DMA free:10980kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:12kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1703.000794] 0 [ 1703.039778] lowmem_reserve[]: [ 1703.069641] Node 1 Normal free:27216kB min:53696kB low:67120kB high:80544kB active_anon:2328kB inactive_anon:25568kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:752kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1703.076744] 0 [ 1703.106009] lowmem_reserve[]: 0 0 0 0 0 [ 1703.113683] Node 0 DMA: 3*4kB (ME) 3*8kB (UME) 2*16kB (M) 1*32kB (E) 6*64kB (UME) 4*128kB (UME) 3*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10980kB [ 1703.116163] 2717 [ 1703.137510] Node 0 DMA32: 659*4kB (UME) 486*8kB (UME) 182*16kB (UME) 36*32kB (UME) 4*64kB (M) 56*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18012kB [ 1703.146521] 2718 [ 1703.162049] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1703.178019] 2718 2718 [ 1703.180550] Node 0 DMA32 free:17932kB min:36200kB low:45248kB high:54296kB active_anon:67440kB inactive_anon:79716kB active_file:24kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2420kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 1703.180614] Node 1 [ 1703.221405] lowmem_reserve[]: [ 1703.223422] Normal: [ 1703.223650] 0 0 0 0 [ 1703.226752] 52*4kB [ 1703.229053] 0 [ 1703.242120] (UM) 10*8kB (M) 7*16kB (M) 4*32kB (UM) 133*64kB (UM) 98*128kB (U) 22*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27216kB [ 1703.245629] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1703.267458] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1703.292483] lowmem_reserve[]: 0 0 0 0 0 [ 1703.297213] Node 1 Normal free:27216kB min:53696kB low:67120kB high:80544kB active_anon:2328kB inactive_anon:25568kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:752kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1703.306859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1703.335256] lowmem_reserve[]: 0 0 0 0 0 [ 1703.339261] Node 0 DMA: 3*4kB (ME) 3*8kB (UME) 2*16kB (M) 1*32kB (E) 6*64kB (UME) 4*128kB (UME) 3*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10980kB [ 1703.349950] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1703.363600] Node 0 DMA32: 659*4kB (UME) 486*8kB (UME) 182*16kB (UME) 36*32kB (UME) 4*64kB (M) 56*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18012kB [ 1703.377389] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1703.387202] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1703.399971] Node 1 Normal: 52*4kB (UM) 10*8kB (M) 7*16kB (M) 4*32kB (UM) 133*64kB (UM) 98*128kB (U) 22*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27216kB [ 1703.400524] 27447 total pagecache pages [ 1703.427978] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1703.430102] 0 pages in swap cache [ 1703.450078] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1703.451564] Swap cache stats: add 0, delete 0, find 0/0 [ 1703.474110] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1703.476223] Free swap = 0kB [ 1703.496460] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1703.497328] Total swap = 0kB [ 1703.518186] 27447 total pagecache pages [ 1703.519482] 2097051 pages RAM [ 1703.527411] 0 pages HighMem/MovableOnly [ 1703.527835] 0 pages in swap cache [ 1703.540821] 363849 pages reserved [ 1703.546470] 0 pages cma reserved [ 1703.547919] Swap cache stats: add 0, delete 0, find 0/0 [ 1703.549841] Out of memory (oom_kill_allocating_task): Kill process 7987 (syz-fuzzer) score 0 or sacrifice child [ 1703.560370] Free swap = 0kB [ 1703.577214] Killed process 7696 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1703.588594] Total swap = 0kB [ 1703.599394] oom_reaper: reaped process 7696 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1703.613559] 2097051 pages RAM [ 1703.616676] 0 pages HighMem/MovableOnly [ 1703.620635] 363849 pages reserved [ 1703.626240] 0 pages cma reserved 15:41:51 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) [ 1704.559708] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1704.607696] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1704.624657] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1704.628398] CPU: 1 PID: 9057 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1704.636596] syz-executor.1 cpuset= [ 1704.644276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1704.644280] Call Trace: [ 1704.644297] dump_stack+0x1b2/0x281 [ 1704.644311] warn_alloc.cold+0x96/0x1cc [ 1704.644322] ? zone_watermark_ok_safe+0x220/0x220 [ 1704.644343] __alloc_pages_nodemask+0x2127/0x2720 [ 1704.644354] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1704.644367] ? lock_acquire+0x170/0x3f0 [ 1704.644382] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1704.644402] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1704.651121] / [ 1704.657275] ? __mutex_unlock_slowpath+0x75/0x770 [ 1704.659849] mems_allowed=0-1 [ 1704.663657] alloc_pages_current+0x155/0x260 [ 1704.663670] ion_page_pool_alloc+0x118/0x1b0 [ 1704.663678] ion_system_heap_allocate+0x133/0x8c0 [ 1704.663689] ? ion_alloc+0x187/0x810 [ 1704.723429] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1704.728877] ? ion_system_contig_heap_create+0x130/0x130 [ 1704.734305] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1704.739305] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1704.744134] ion_alloc+0x204/0x810 [ 1704.747667] ? ion_dma_buf_release+0x40/0x40 [ 1704.752074] ? __might_fault+0x177/0x1b0 [ 1704.756117] ion_ioctl+0xea/0x1f0 [ 1704.759556] ? ion_query_heaps+0x360/0x360 [ 1704.763787] ? lock_acquire+0x170/0x3f0 [ 1704.767739] ? ion_query_heaps+0x360/0x360 [ 1704.771977] do_vfs_ioctl+0x75a/0xff0 [ 1704.775777] ? ioctl_preallocate+0x1a0/0x1a0 [ 1704.780183] ? lock_downgrade+0x740/0x740 [ 1704.784334] ? __fget+0x225/0x360 [ 1704.787780] ? do_vfs_ioctl+0xff0/0xff0 [ 1704.791742] ? security_file_ioctl+0x83/0xb0 [ 1704.796142] SyS_ioctl+0x7f/0xb0 [ 1704.799543] ? do_vfs_ioctl+0xff0/0xff0 [ 1704.803519] do_syscall_64+0x1d5/0x640 [ 1704.807409] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1704.812592] RIP: 0033:0x4665d9 [ 1704.815772] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1704.823477] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1704.830738] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1704.838012] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1704.845273] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1704.852526] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1704.870648] CPU: 0 PID: 9059 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1704.878452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1704.887799] Call Trace: [ 1704.890382] dump_stack+0x1b2/0x281 [ 1704.894006] warn_alloc.cold+0x96/0x1cc [ 1704.897983] ? zone_watermark_ok_safe+0x220/0x220 [ 1704.902849] __alloc_pages_nodemask+0x2127/0x2720 [ 1704.907703] ? lock_acquire+0x170/0x3f0 [ 1704.911680] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1704.916547] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1704.921992] ? __mutex_unlock_slowpath+0x75/0x770 [ 1704.926838] alloc_pages_current+0x155/0x260 [ 1704.931261] ion_page_pool_alloc+0x118/0x1b0 [ 1704.935670] ion_system_heap_allocate+0x133/0x8c0 [ 1704.940508] ? ion_alloc+0x187/0x810 [ 1704.944215] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1704.949658] ? ion_system_contig_heap_create+0x130/0x130 [ 1704.955128] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1704.960144] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1704.964986] ion_alloc+0x204/0x810 [ 1704.968527] ? ion_dma_buf_release+0x40/0x40 [ 1704.972936] ? __might_fault+0x177/0x1b0 [ 1704.976994] ion_ioctl+0xea/0x1f0 [ 1704.980437] ? ion_query_heaps+0x360/0x360 [ 1704.984665] ? lock_acquire+0x170/0x3f0 [ 1704.988632] ? ion_query_heaps+0x360/0x360 [ 1704.992862] do_vfs_ioctl+0x75a/0xff0 [ 1704.996654] ? ioctl_preallocate+0x1a0/0x1a0 [ 1705.001057] ? lock_downgrade+0x740/0x740 [ 1705.005207] ? __fget+0x225/0x360 [ 1705.008659] ? do_vfs_ioctl+0xff0/0xff0 [ 1705.012629] ? security_file_ioctl+0x83/0xb0 [ 1705.017030] SyS_ioctl+0x7f/0xb0 [ 1705.020384] ? do_vfs_ioctl+0xff0/0xff0 [ 1705.024349] do_syscall_64+0x1d5/0x640 [ 1705.028237] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1705.033417] RIP: 0033:0x4665d9 [ 1705.036649] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1705.044527] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1705.051830] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1705.054924] Mem-Info: [ 1705.059102] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1705.059107] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1705.059111] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1705.143631] active_anon:17454 inactive_anon:26321 isolated_anon:0 [ 1705.143631] active_file:261 inactive_file:297 isolated_file:0 [ 1705.143631] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1705.143631] slab_reclaimable:12492 slab_unreclaimable:118587 [ 1705.143631] mapped:53143 shmem:27412 pagetables:778 bounce:0 [ 1705.143631] free:28661 free_pcp:500 free_cma:0 [ 1705.212057] Node 0 active_anon:67672kB inactive_anon:79716kB active_file:544kB inactive_file:1136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118500kB dirty:20kB writeback:0kB shmem:83880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1705.278620] Node 1 active_anon:2144kB inactive_anon:25568kB active_file:48kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93972kB dirty:4kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1705.283639] oom_reaper: reaped process 9049 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1705.306366] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1705.403853] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1705.418101] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1705.431243] Node 0 DMA32 free:30468kB min:36200kB low:45248kB high:54296kB active_anon:67672kB inactive_anon:79716kB active_file:228kB inactive_file:304kB unevictable:0kB writepending:20kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2380kB bounce:0kB free_pcp:48kB local_pcp:0kB free_cma:0kB [ 1705.463297] lowmem_reserve[]: 0 0 0 0 0 [ 1705.464597] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1705.541120] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1705.544609] CPU: 0 PID: 8513 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1705.567416] lowmem_reserve[]: [ 1705.574557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1705.574561] Call Trace: [ 1705.574578] dump_stack+0x1b2/0x281 [ 1705.574589] dump_header+0x178/0x82f [ 1705.574599] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1705.574608] ? ___ratelimit+0x2cd/0x530 [ 1705.574617] oom_kill_process.cold+0x10/0xa40 [ 1705.574633] out_of_memory+0xe3e/0x1190 [ 1705.574646] ? oom_killer_disable+0x1c0/0x1c0 [ 1705.574653] ? mutex_trylock+0x152/0x1a0 [ 1705.574663] __alloc_pages_nodemask+0x23e1/0x2720 [ 1705.574682] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1705.578119] 0 [ 1705.587134] alloc_pages_current+0x155/0x260 [ 1705.587145] filemap_fault+0x11a1/0x1ad0 [ 1705.587162] ext4_filemap_fault+0x84/0xb0 [ 1705.587171] __do_fault+0xfa/0x380 [ 1705.587179] __handle_mm_fault+0x2497/0x4620 [ 1705.587189] ? vm_insert_page+0x7c0/0x7c0 [ 1705.587196] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1705.587203] ? nanosleep_copyout+0x100/0x100 [ 1705.587217] ? mark_held_locks+0xa6/0xf0 [ 1705.590102] 0 [ 1705.593380] handle_mm_fault+0x455/0x9c0 [ 1705.593391] __do_page_fault+0x549/0xad0 [ 1705.593401] ? spurious_fault+0x640/0x640 [ 1705.593408] ? do_page_fault+0x60/0x500 [ 1705.593415] ? page_fault+0x2f/0x50 [ 1705.593422] page_fault+0x45/0x50 [ 1705.593427] RIP: 1a0332:0x4 [ 1705.593431] RSP: 000a:00007ffd29a3735c EFLAGS: 00000032 [ 1705.711044] Mem-Info: [ 1705.714850] 0 [ 1705.731008] active_anon:17454 inactive_anon:26321 isolated_anon:0 [ 1705.731008] active_file:11 inactive_file:106 isolated_file:0 [ 1705.731008] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1705.731008] slab_reclaimable:12492 slab_unreclaimable:118639 [ 1705.731008] mapped:52818 shmem:27412 pagetables:778 bounce:0 [ 1705.731008] free:32296 free_pcp:684 free_cma:0 [ 1705.735054] 0 [ 1705.766342] Node 0 active_anon:67672kB inactive_anon:79716kB active_file:32kB inactive_file:668kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117300kB dirty:20kB writeback:0kB shmem:83880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1705.766355] Node 1 active_anon:2144kB inactive_anon:25568kB active_file:12kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93972kB dirty:4kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1705.766359] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1705.766375] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1705.766396] Node 0 [ 1705.772378] 0 [ 1705.871966] DMA32 free:59660kB min:36200kB low:45248kB high:54296kB active_anon:67636kB inactive_anon:79716kB active_file:120kB inactive_file:1140kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2380kB bounce:0kB free_pcp:1436kB local_pcp:732kB free_cma:0kB [ 1705.873775] lowmem_reserve[]: 0 0 0 0 0 [ 1705.873796] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1705.873811] lowmem_reserve[]: 0 0 [ 1705.906716] Node 1 Normal free:115672kB min:53696kB low:67120kB high:80544kB active_anon:2164kB inactive_anon:25568kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:740kB bounce:0kB free_pcp:1308kB local_pcp:636kB free_cma:0kB [ 1705.980941] 0 0 0 [ 1705.983155] Node 1 Normal free:131296kB min:53696kB low:67120kB high:80544kB active_anon:2164kB inactive_anon:25568kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:740kB bounce:0kB free_pcp:1284kB local_pcp:660kB free_cma:0kB [ 1705.986019] lowmem_reserve[]: 0 0 0 0 0 [ 1706.059955] Node 0 DMA: 25*4kB (UE) 10*8kB (UE) 0*16kB 1*32kB (E) 3*64kB (UE) 3*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11028kB [ 1706.060928] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1706.151336] Node 0 DMA32: 1412*4kB (UME) 1052*8kB (UME) 301*16kB (UME) 528*32kB (UME) 1*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36096kB [ 1706.173948] lowmem_reserve[]: 0 0 0 0 0 [ 1706.203503] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1706.208646] CPU: 1 PID: 9028 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1706.209740] Node 0 [ 1706.216426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1706.216431] Call Trace: [ 1706.216448] dump_stack+0x1b2/0x281 [ 1706.216461] warn_alloc.cold+0x96/0x1cc [ 1706.216472] ? zone_watermark_ok_safe+0x220/0x220 [ 1706.216493] __alloc_pages_nodemask+0x2127/0x2720 [ 1706.242625] DMA: [ 1706.243071] ? lock_acquire+0x170/0x3f0 [ 1706.253902] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1706.258752] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1706.261101] 25*4kB [ 1706.264218] ? __mutex_unlock_slowpath+0x75/0x770 [ 1706.264232] alloc_pages_current+0x155/0x260 [ 1706.273116] (UE) [ 1706.275703] ion_page_pool_alloc+0x118/0x1b0 [ 1706.275714] ion_system_heap_allocate+0x133/0x8c0 [ 1706.283255] 10*8kB [ 1706.287091] ? _raw_spin_unlock+0x29/0x40 [ 1706.287102] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1706.298365] ? ion_system_contig_heap_create+0x130/0x130 [ 1706.299906] (UE) [ 1706.303803] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1706.303814] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1706.303824] ion_alloc+0x27a/0x810 [ 1706.303835] ? ion_dma_buf_release+0x40/0x40 [ 1706.303845] ? __might_fault+0x177/0x1b0 [ 1706.310270] 0*16kB [ 1706.310900] ion_ioctl+0xea/0x1f0 [ 1706.310909] ? ion_query_heaps+0x360/0x360 [ 1706.310922] ? lock_acquire+0x170/0x3f0 [ 1706.310928] ? ion_query_heaps+0x360/0x360 [ 1706.310937] do_vfs_ioctl+0x75a/0xff0 [ 1706.310948] ? ioctl_preallocate+0x1a0/0x1a0 [ 1706.310957] ? lock_downgrade+0x740/0x740 [ 1706.321255] 1*32kB [ 1706.323709] ? __fget+0x225/0x360 [ 1706.323718] ? do_vfs_ioctl+0xff0/0xff0 [ 1706.332884] (E) [ 1706.333404] ? security_file_ioctl+0x83/0xb0 [ 1706.345618] 3*64kB [ 1706.345796] SyS_ioctl+0x7f/0xb0 [ 1706.353925] (UE) [ 1706.353964] ? do_vfs_ioctl+0xff0/0xff0 [ 1706.368473] 3*128kB [ 1706.369669] do_syscall_64+0x1d5/0x640 [ 1706.374109] (UE) [ 1706.376276] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1706.379603] 2*256kB [ 1706.381642] RIP: 0033:0x4665d9 [ 1706.381646] RSP: 002b:00007f28a7fcb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1706.381654] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1706.381658] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1706.381663] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1706.381667] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1706.381672] R13: 00007ffd6449ea9f R14: 00007f28a7fcb300 R15: 0000000000022000 [ 1706.384867] Node 0 [ 1706.385663] syz-executor.4: [ 1706.388048] Normal: [ 1706.399196] (UE) [ 1706.399321] 0*4kB [ 1706.401733] 3*512kB [ 1706.404905] 0*8kB [ 1706.422100] page allocation failure: order:0 [ 1706.427218] 0*16kB [ 1706.443441] (UE) [ 1706.448978] 0*32kB [ 1706.467743] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1706.469601] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1706.490351] Node 1 Normal: 59*4kB (UM) 33*8kB (UM) 1*16kB (U) 813*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26532kB [ 1706.494467] (null) [ 1706.503485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1706.515096] 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11028kB [ 1706.519341] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1706.525900] Node 0 DMA32: 678*4kB (UME) 430*8kB (ME) 175*16kB (ME) 256*32kB (UME) 1*64kB (U) 2*128kB (U) 0*256kB [ 1706.529338] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1706.529345] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1706.550950] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1706.560644] 27480 total pagecache pages [ 1706.566242] 0 pages in swap cache [ 1706.569692] Swap cache stats: add 0, delete 0, find 0/0 [ 1706.572850] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17464kB [ 1706.578601] warn_alloc_show_mem: 1 callbacks suppressed [ 1706.578604] Mem-Info: [ 1706.580497] Node 0 [ 1706.585929] Free swap = 0kB [ 1706.585933] Total swap = 0kB [ 1706.585940] 2097051 pages RAM [ 1706.585943] 0 pages HighMem/MovableOnly [ 1706.585946] 363849 pages reserved [ 1706.585949] 0 pages cma reserved [ 1706.587610] active_anon:17450 inactive_anon:26321 isolated_anon:0 [ 1706.587610] active_file:20 inactive_file:16 isolated_file:0 [ 1706.587610] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1706.587610] slab_reclaimable:12486 slab_unreclaimable:118889 [ 1706.587610] mapped:52763 shmem:27412 pagetables:780 bounce:0 [ 1706.587610] free:13753 free_pcp:68 free_cma:0 [ 1706.598984] CPU: 0 PID: 9049 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1706.603934] Node 0 active_anon:67636kB inactive_anon:79716kB active_file:0kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117064kB dirty:0kB writeback:0kB shmem:83880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1706.607317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1706.610684] Node 1 active_anon:2164kB inactive_anon:25568kB active_file:84kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93988kB dirty:0kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1706.643794] Call Trace: [ 1706.643816] dump_stack+0x1b2/0x281 [ 1706.643828] warn_alloc.cold+0x96/0x1cc [ 1706.643839] ? zone_watermark_ok_safe+0x220/0x220 [ 1706.643862] ? usleep_range+0x130/0x130 [ 1706.651680] Node 0 [ 1706.679224] ? try_to_free_pages+0x23f/0x6e0 [ 1706.679234] ? _find_next_bit+0xdb/0x100 [ 1706.679243] ? run_timer_softirq+0x5a0/0x5a0 [ 1706.679259] __alloc_pages_nodemask+0x2127/0x2720 [ 1706.688623] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1706.715743] ? lock_acquire+0x170/0x3f0 [ 1706.715759] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1706.720777] lowmem_reserve[]: [ 1706.721939] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1706.725895] 0 [ 1706.730735] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1706.734695] 2717 [ 1706.736906] alloc_pages_current+0x155/0x260 [ 1706.741289] 2718 [ 1706.745318] ion_page_pool_alloc+0x118/0x1b0 [ 1706.749697] 2718 [ 1706.754534] ion_system_heap_allocate+0x133/0x8c0 [ 1706.754544] ? ion_alloc+0x187/0x810 [ 1706.754555] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1706.780136] 2718 [ 1706.784077] ? ion_system_contig_heap_create+0x130/0x130 [ 1706.784087] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1706.784099] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1706.791994] ion_alloc+0x204/0x810 [ 1706.792006] ? ion_dma_buf_release+0x40/0x40 [ 1706.792018] ? __might_fault+0x177/0x1b0 [ 1706.796488] Node 0 [ 1706.798265] ion_ioctl+0xea/0x1f0 [ 1706.803714] DMA32 free:17716kB min:36200kB low:45248kB high:54296kB active_anon:67636kB inactive_anon:79716kB active_file:80kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2380kB bounce:0kB free_pcp:136kB local_pcp:0kB free_cma:0kB [ 1706.805734] ? ion_query_heaps+0x360/0x360 [ 1706.810111] lowmem_reserve[]: [ 1706.812159] ? lock_acquire+0x170/0x3f0 [ 1706.812166] ? ion_query_heaps+0x360/0x360 [ 1706.812175] do_vfs_ioctl+0x75a/0xff0 [ 1706.816556] 0 [ 1706.818609] ? ioctl_preallocate+0x1a0/0x1a0 [ 1706.823444] 0 [ 1706.827125] ? lock_downgrade+0x740/0x740 [ 1706.832560] 0 [ 1706.834591] ? __fget+0x225/0x360 [ 1706.840008] 0 [ 1706.845003] ? do_vfs_ioctl+0xff0/0xff0 [ 1706.845014] ? security_file_ioctl+0x83/0xb0 [ 1706.845024] SyS_ioctl+0x7f/0xb0 [ 1706.849843] 0 [ 1706.853358] ? do_vfs_ioctl+0xff0/0xff0 [ 1706.853368] do_syscall_64+0x1d5/0x640 [ 1706.853381] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1706.861798] RIP: 0033:0x4665d9 [ 1706.861803] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1706.861816] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1706.864028] Node 0 [ 1706.867457] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1706.895480] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1706.899678] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1706.902773] lowmem_reserve[]: [ 1706.906703] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1706.906710] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1706.917932] 0 [ 1706.932779] Normal: [ 1706.948132] 0 [ 1706.958950] 0*4kB [ 1706.972693] 0 [ 1706.986171] 0*8kB [ 1706.999171] 0 [ 1707.020836] 0*16kB [ 1707.032343] 0 [ 1707.044822] 0*32kB [ 1707.058604] Node 1 Normal free:26532kB min:53696kB low:67120kB high:80544kB active_anon:2196kB inactive_anon:25568kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:752kB bounce:0kB free_pcp:136kB local_pcp:12kB free_cma:0kB [ 1707.058624] 0*64kB 0*128kB [ 1707.097926] lowmem_reserve[]: [ 1707.100298] 0*256kB [ 1707.102804] 0 [ 1707.105701] 0*512kB [ 1707.106311] 0 [ 1707.108093] 0*1024kB [ 1707.110390] 0 [ 1707.122146] 0*2048kB 0*4096kB = 0kB [ 1707.124095] 0 [ 1707.127573] Node 1 [ 1707.127575] 0 [ 1707.129354] Normal: [ 1707.135372] Node 0 DMA: 11*4kB (UE) 10*8kB (UE) 0*16kB 1*32kB (E) 3*64kB (UE) 3*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10972kB [ 1707.144589] 59*4kB (UM) 33*8kB (UM) 1*16kB (U) 813*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26532kB [ 1707.166408] Node 0 [ 1707.180116] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1707.185536] DMA32: [ 1707.199258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1707.201287] 678*4kB [ 1707.201539] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1707.210076] (UME) [ 1707.219126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1707.233576] 436*8kB (UME) 175*16kB (ME) 256*32kB (UME) 1*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17512kB [ 1707.239034] 27443 total pagecache pages [ 1707.258335] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1707.260525] 0 pages in swap cache [ 1707.274787] Node 1 Normal: 59*4kB (UM) 33*8kB (UM) 1*16kB (U) 813*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26532kB [ 1707.279872] Swap cache stats: add 0, delete 0, find 0/0 [ 1707.297496] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1707.300849] Free swap = 0kB [ 1707.309336] Total swap = 0kB [ 1707.315680] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1707.319289] 2097051 pages RAM [ 1707.328035] 0 pages HighMem/MovableOnly [ 1707.333377] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1707.338672] 363849 pages reserved [ 1707.346394] 0 pages cma reserved [ 1707.349758] Out of memory (oom_kill_allocating_task): Kill process 8513 (syz-executor.2) score 0 or sacrifice child [ 1707.353070] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1707.367329] Killed process 9057 (syz-executor.2) total-vm:93252kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 1707.388207] 27443 total pagecache pages [ 1707.388478] oom_reaper: reaped process 9057 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1707.392321] syz-executor.2: [ 1707.409928] 0 pages in swap cache [ 1707.416428] Swap cache stats: add 0, delete 0, find 0/0 [ 1707.424868] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1707.448706] Free swap = 0kB [ 1707.476921] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1707.500653] CPU: 0 PID: 9057 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1707.500656] Total swap = 0kB [ 1707.500662] 2097051 pages RAM [ 1707.508459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1707.523940] Call Trace: [ 1707.526533] dump_stack+0x1b2/0x281 [ 1707.530158] warn_alloc.cold+0x96/0x1cc [ 1707.534143] ? zone_watermark_ok_safe+0x220/0x220 [ 1707.538974] ? usleep_range+0x130/0x130 [ 1707.542946] ? try_to_free_pages+0x23f/0x6e0 [ 1707.547353] ? _find_next_bit+0xdb/0x100 [ 1707.550658] 0 pages HighMem/MovableOnly [ 1707.551414] ? run_timer_softirq+0x5a0/0x5a0 [ 1707.555370] 363849 pages reserved [ 1707.559783] __alloc_pages_nodemask+0x2127/0x2720 [ 1707.568047] ? lock_acquire+0x170/0x3f0 [ 1707.572030] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1707.576870] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1707.581458] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1707.586911] alloc_pages_current+0x155/0x260 [ 1707.591321] ion_page_pool_alloc+0x118/0x1b0 [ 1707.595735] ion_system_heap_allocate+0x133/0x8c0 [ 1707.600576] ? ion_alloc+0x187/0x810 [ 1707.604290] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1707.610519] ? ion_system_contig_heap_create+0x130/0x130 [ 1707.610651] 0 pages cma reserved [ 1707.615958] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1707.624313] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1707.629154] ion_alloc+0x204/0x810 [ 1707.632708] ? ion_dma_buf_release+0x40/0x40 [ 1707.637247] ? __might_fault+0x177/0x1b0 [ 1707.641309] ion_ioctl+0xea/0x1f0 [ 1707.644758] ? ion_query_heaps+0x360/0x360 [ 1707.648992] ? lock_acquire+0x170/0x3f0 [ 1707.652969] ? ion_query_heaps+0x360/0x360 [ 1707.657203] do_vfs_ioctl+0x75a/0xff0 [ 1707.661009] ? ioctl_preallocate+0x1a0/0x1a0 [ 1707.665410] ? lock_downgrade+0x740/0x740 [ 1707.669553] ? __fget+0x225/0x360 [ 1707.673015] ? do_vfs_ioctl+0xff0/0xff0 [ 1707.677001] ? security_file_ioctl+0x83/0xb0 [ 1707.681425] SyS_ioctl+0x7f/0xb0 [ 1707.684788] ? do_vfs_ioctl+0xff0/0xff0 [ 1707.688772] do_syscall_64+0x1d5/0x640 [ 1707.692660] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1707.697863] RIP: 0033:0x4665d9 [ 1707.701063] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1707.708761] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1707.716041] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1707.723304] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1707.730570] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1707.737834] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1707.750767] warn_alloc_show_mem: 1 callbacks suppressed [ 1707.750770] Mem-Info: [ 1707.770702] active_anon:17458 inactive_anon:26321 isolated_anon:0 [ 1707.770702] active_file:11 inactive_file:387 isolated_file:0 [ 1707.770702] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1707.770702] slab_reclaimable:12486 slab_unreclaimable:118901 [ 1707.770702] mapped:52951 shmem:27412 pagetables:783 bounce:0 [ 1707.770702] free:226971 free_pcp:410 free_cma:0 [ 1707.817214] Node 0 active_anon:67636kB inactive_anon:79716kB active_file:32kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117000kB dirty:0kB writeback:0kB shmem:83880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1707.862835] Node 1 active_anon:2196kB inactive_anon:25568kB active_file:512kB inactive_file:652kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94804kB dirty:0kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1707.919097] Node 0 DMA free:11680kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1707.960615] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1707.970666] Node 0 DMA32 free:133208kB min:36200kB low:45248kB high:54296kB active_anon:67544kB inactive_anon:79716kB active_file:60kB inactive_file:368kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2380kB bounce:0kB free_pcp:428kB local_pcp:240kB free_cma:0kB [ 1707.970685] lowmem_reserve[]: 0 0 0 0 0 [ 1707.970702] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1707.970718] lowmem_reserve[]: 0 0 0 0 0 [ 1707.970736] Node 1 Normal free:717800kB min:53696kB low:67120kB high:80544kB active_anon:2196kB inactive_anon:25568kB active_file:324kB inactive_file:324kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:752kB bounce:0kB free_pcp:1428kB local_pcp:736kB free_cma:0kB [ 1707.970754] lowmem_reserve[]: 0 0 0 0 0 [ 1707.970772] Node 0 DMA: 42*4kB (UE) 31*8kB (UE) 4*16kB (U) 10*32kB (UE) 4*64kB (UE) 3*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11680kB [ 1708.099228] Node 0 DMA32: 280*4kB (UME) 355*8kB (UME) 178*16kB (UE) 23*32kB (UE) 1291*64kB (UME) 290*128kB (UME) 9*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 129592kB [ 1708.116431] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1708.145287] Node 1 Normal: 6343*4kB (UM) 581*8kB (UM) 1563*16kB (UM) 887*32kB (UM) 7239*64kB (UM) 674*128kB (UM) 164*256kB (UM) 40*512kB (UM) 22*1024kB (U) 0*2048kB 0*4096kB = 717972kB [ 1708.162591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1708.180798] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1708.210624] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1708.229340] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1708.247006] 28776 total pagecache pages [ 1708.264026] 0 pages in swap cache [ 1708.267546] Swap cache stats: add 0, delete 0, find 0/0 [ 1708.277858] Free swap = 0kB [ 1708.290581] Total swap = 0kB [ 1708.311354] 2097051 pages RAM [ 1708.314844] 0 pages HighMem/MovableOnly [ 1708.319302] 363849 pages reserved [ 1708.351567] 0 pages cma reserved [ 1708.662695] oom_reaper: reaped process 9059 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1708.703732] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1708.721121] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1708.726275] CPU: 1 PID: 9049 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1708.734067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1708.743416] Call Trace: [ 1708.746009] dump_stack+0x1b2/0x281 [ 1708.749634] warn_alloc.cold+0x96/0x1cc [ 1708.753690] ? zone_watermark_ok_safe+0x220/0x220 [ 1708.758560] __alloc_pages_nodemask+0x2127/0x2720 [ 1708.763398] ? _raw_spin_unlock_irq+0x24/0x80 [ 1708.767879] ? lock_acquire+0x170/0x3f0 [ 1708.771933] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1708.776756] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1708.782217] ? __mutex_unlock_slowpath+0x75/0x770 [ 1708.787053] alloc_pages_current+0x155/0x260 [ 1708.791445] ion_page_pool_alloc+0x118/0x1b0 [ 1708.795834] ion_system_heap_allocate+0x133/0x8c0 [ 1708.800658] ? _raw_spin_unlock+0x29/0x40 [ 1708.804815] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1708.809723] ? ion_system_contig_heap_create+0x130/0x130 [ 1708.815164] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1708.820162] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1708.824986] ion_alloc+0x27a/0x810 [ 1708.828509] ? ion_dma_buf_release+0x40/0x40 [ 1708.832900] ? __might_fault+0x177/0x1b0 [ 1708.836942] ion_ioctl+0xea/0x1f0 [ 1708.840381] ? ion_query_heaps+0x360/0x360 [ 1708.844595] ? lock_acquire+0x170/0x3f0 [ 1708.848565] ? ion_query_heaps+0x360/0x360 [ 1708.852779] do_vfs_ioctl+0x75a/0xff0 [ 1708.856559] ? ioctl_preallocate+0x1a0/0x1a0 [ 1708.860967] ? lock_downgrade+0x740/0x740 [ 1708.865107] ? __fget+0x225/0x360 [ 1708.868544] ? do_vfs_ioctl+0xff0/0xff0 [ 1708.872497] ? security_file_ioctl+0x83/0xb0 [ 1708.876882] SyS_ioctl+0x7f/0xb0 [ 1708.880222] ? do_vfs_ioctl+0xff0/0xff0 [ 1708.884181] do_syscall_64+0x1d5/0x640 [ 1708.888051] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1708.893219] RIP: 0033:0x4665d9 [ 1708.896387] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1708.904072] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1708.911412] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1708.918758] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1708.926002] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1708.933248] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1708.940841] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1708.964287] Mem-Info: [ 1708.967034] active_anon:17607 inactive_anon:26321 isolated_anon:0 [ 1708.967034] active_file:17 inactive_file:17 isolated_file:0 [ 1708.967034] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1708.967034] slab_reclaimable:12418 slab_unreclaimable:120090 [ 1708.967034] mapped:52760 shmem:27412 pagetables:790 bounce:0 [ 1708.967034] free:13910 free_pcp:27 free_cma:0 [ 1708.973959] oom_reaper: reaped process 9040 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1709.010386] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1709.015552] CPU: 0 PID: 9057 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1709.016933] Node 0 active_anon:67384kB inactive_anon:79716kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117000kB dirty:0kB writeback:0kB shmem:83880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1709.023330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1709.023334] Call Trace: [ 1709.023350] dump_stack+0x1b2/0x281 [ 1709.023363] warn_alloc.cold+0x96/0x1cc [ 1709.050795] Node 1 active_anon:3044kB inactive_anon:25568kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94040kB dirty:0kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1709.060107] ? zone_watermark_ok_safe+0x220/0x220 [ 1709.062678] Node 0 [ 1709.066280] __alloc_pages_nodemask+0x2127/0x2720 [ 1709.070232] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1709.097269] ? lock_acquire+0x170/0x3f0 [ 1709.097287] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1709.102123] lowmem_reserve[]: [ 1709.104349] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1709.109195] 0 [ 1709.134676] ? __mutex_unlock_slowpath+0x75/0x770 [ 1709.134684] ? retint_kernel+0x2d/0x2d [ 1709.134697] alloc_pages_current+0x155/0x260 [ 1709.138648] 2717 [ 1709.143483] ion_page_pool_alloc+0x118/0x1b0 [ 1709.143491] ion_system_heap_allocate+0x133/0x8c0 [ 1709.143518] ? _raw_spin_unlock+0x29/0x40 [ 1709.146684] 2718 [ 1709.152111] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1709.152120] ? ion_system_contig_heap_create+0x130/0x130 [ 1709.152132] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1709.153903] 2718 [ 1709.158737] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1709.162697] 2718 [ 1709.167073] ion_alloc+0x27a/0x810 [ 1709.173523] ? ion_dma_buf_release+0x40/0x40 [ 1709.173537] ? __might_fault+0x177/0x1b0 [ 1709.178351] Node 0 [ 1709.182480] ion_ioctl+0xea/0x1f0 [ 1709.182488] ? ion_query_heaps+0x360/0x360 [ 1709.182500] ? lock_acquire+0x170/0x3f0 [ 1709.184547] DMA32 free:17632kB min:36200kB low:45248kB high:54296kB active_anon:67384kB inactive_anon:79716kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2388kB bounce:0kB free_pcp:112kB local_pcp:0kB free_cma:0kB [ 1709.189440] ? ion_query_heaps+0x360/0x360 [ 1709.194876] lowmem_reserve[]: [ 1709.199860] do_vfs_ioctl+0x75a/0xff0 [ 1709.201908] 0 [ 1709.206738] ? ioctl_preallocate+0x1a0/0x1a0 [ 1709.208788] 0 [ 1709.212303] ? lock_downgrade+0x740/0x740 [ 1709.212315] ? __fget+0x225/0x360 [ 1709.212324] ? do_vfs_ioctl+0xff0/0xff0 [ 1709.216702] 0 [ 1709.220757] ? security_file_ioctl+0x83/0xb0 [ 1709.220766] SyS_ioctl+0x7f/0xb0 [ 1709.220774] ? do_vfs_ioctl+0xff0/0xff0 [ 1709.222979] 0 [ 1709.226413] do_syscall_64+0x1d5/0x640 [ 1709.230629] 0 [ 1709.234577] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1709.266688] RIP: 0033:0x4665d9 [ 1709.269765] Node 0 [ 1709.273535] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1709.273545] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1709.273549] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1709.273555] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1709.275342] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1709.279717] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1709.281505] lowmem_reserve[]: [ 1709.285612] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1709.319271] syz-executor.2 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1709.444512] 0 0 0 0 0 [ 1709.447055] Node 1 Normal free:26800kB min:53696kB low:67120kB high:80544kB active_anon:3044kB inactive_anon:25568kB active_file:64kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:772kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1709.448673] syz-executor.3: [ 1709.481507] syz-executor.2 cpuset= [ 1709.483945] syz-executor.1: [ 1709.484523] / [ 1709.488053] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1709.488066] syz-executor.1 cpuset= [ 1709.491193] mems_allowed=0-1 [ 1709.503258] / mems_allowed=0-1 [ 1709.503272] CPU: 1 PID: 9059 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1709.503277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1709.503280] Call Trace: [ 1709.503296] dump_stack+0x1b2/0x281 [ 1709.503307] warn_alloc.cold+0x96/0x1cc [ 1709.503318] ? zone_watermark_ok_safe+0x220/0x220 [ 1709.512114] page allocation failure: order:0 [ 1709.513082] ? usleep_range+0x130/0x130 [ 1709.533583] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1709.536433] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1709.553623] (null) [ 1709.560612] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1709.560621] ? run_timer_softirq+0x5a0/0x5a0 [ 1709.560637] __alloc_pages_nodemask+0x2127/0x2720 [ 1709.560650] ? lock_acquire+0x170/0x3f0 [ 1709.580338] syz-executor.3 cpuset= [ 1709.582085] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1709.586022] / [ 1709.589552] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1709.600570] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1709.606012] ? __sanitizer_cov_trace_pc+0x3d/0x50 [ 1709.610932] alloc_pages_current+0x155/0x260 [ 1709.615334] ion_page_pool_alloc+0x118/0x1b0 [ 1709.615395] mems_allowed=0-1 [ 1709.619733] ion_system_heap_allocate+0x133/0x8c0 [ 1709.627636] ? ion_alloc+0x187/0x810 [ 1709.631336] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1709.636771] ? ion_system_contig_heap_create+0x130/0x130 [ 1709.642221] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1709.647219] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1709.652053] ion_alloc+0x204/0x810 [ 1709.655603] ? ion_dma_buf_release+0x40/0x40 [ 1709.660006] ? __might_fault+0x177/0x1b0 [ 1709.664055] ion_ioctl+0xea/0x1f0 [ 1709.667492] ? ion_query_heaps+0x360/0x360 [ 1709.671716] ? lock_acquire+0x170/0x3f0 [ 1709.675688] ? ion_query_heaps+0x360/0x360 [ 1709.679910] do_vfs_ioctl+0x75a/0xff0 [ 1709.683693] ? ioctl_preallocate+0x1a0/0x1a0 [ 1709.688080] ? lock_downgrade+0x740/0x740 [ 1709.692216] ? __fget+0x225/0x360 [ 1709.695663] ? do_vfs_ioctl+0xff0/0xff0 [ 1709.699627] ? security_file_ioctl+0x83/0xb0 [ 1709.704015] SyS_ioctl+0x7f/0xb0 [ 1709.707357] ? do_vfs_ioctl+0xff0/0xff0 [ 1709.711313] do_syscall_64+0x1d5/0x640 [ 1709.715199] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1709.720376] RIP: 0033:0x4665d9 [ 1709.723544] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1709.731235] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1709.738507] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1709.745758] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1709.753009] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1709.760261] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1709.767537] CPU: 0 PID: 9057 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1709.775334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1709.780515] lowmem_reserve[]: [ 1709.784680] Call Trace: [ 1709.784687] 0 [ 1709.787807] dump_stack+0x1b2/0x281 [ 1709.790382] 0 [ 1709.792150] dump_header+0x178/0x82f [ 1709.795748] 0 [ 1709.797536] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1709.801236] 0 [ 1709.803007] ? ___ratelimit+0x2cd/0x530 [ 1709.808073] 0 [ 1709.809855] oom_kill_process.cold+0x10/0xa40 [ 1709.815593] out_of_memory+0xe3e/0x1190 [ 1709.820065] Node 0 [ 1709.824019] ? oom_killer_disable+0x1c0/0x1c0 [ 1709.824030] ? mutex_trylock+0x152/0x1a0 [ 1709.826239] DMA: [ 1709.830725] __alloc_pages_nodemask+0x23e1/0x2720 [ 1709.830741] ? lock_acquire+0x170/0x3f0 [ 1709.830756] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1709.834787] 2*4kB [ 1709.836831] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1709.841675] (UE) [ 1709.845625] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1709.850451] 1*8kB [ 1709.852571] ? retint_kernel+0x2d/0x2d [ 1709.857049] (E) [ 1709.859090] alloc_pages_current+0x155/0x260 [ 1709.864521] 0*16kB [ 1709.866647] ion_page_pool_alloc+0x118/0x1b0 [ 1709.870518] 6*32kB [ 1709.872458] ion_system_heap_allocate+0x133/0x8c0 [ 1709.876833] (UE) [ 1709.879048] ? _raw_spin_unlock+0x29/0x40 [ 1709.883437] 2*64kB [ 1709.885661] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1709.890482] (UE) [ 1709.892533] ? ion_system_contig_heap_create+0x130/0x130 [ 1709.896732] 3*128kB [ 1709.898948] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1709.904028] (UE) [ 1709.906077] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1709.911510] 2*256kB [ 1709.913819] ion_alloc+0x27a/0x810 [ 1709.918800] (UE) [ 1709.920841] ? ion_dma_buf_release+0x40/0x40 [ 1709.920852] ? __might_fault+0x177/0x1b0 [ 1709.925665] 3*512kB [ 1709.927968] ion_ioctl+0xea/0x1f0 [ 1709.931491] (UE) [ 1709.933516] ? ion_query_heaps+0x360/0x360 [ 1709.937893] 2*1024kB [ 1709.941932] ? lock_acquire+0x170/0x3f0 [ 1709.941939] ? ion_query_heaps+0x360/0x360 [ 1709.941947] do_vfs_ioctl+0x75a/0xff0 [ 1709.944241] (UE) [ 1709.947671] ? ioctl_preallocate+0x1a0/0x1a0 [ 1709.949702] 3*2048kB [ 1709.953911] ? lock_downgrade+0x740/0x740 [ 1709.953923] ? __fget+0x225/0x360 [ 1709.953931] ? do_vfs_ioctl+0xff0/0xff0 [ 1709.956313] (UM) [ 1709.960265] ? security_file_ioctl+0x83/0xb0 [ 1709.960274] SyS_ioctl+0x7f/0xb0 [ 1709.960283] ? do_vfs_ioctl+0xff0/0xff0 [ 1709.964490] 0*4096kB [ 1709.968268] do_syscall_64+0x1d5/0x640 [ 1709.970317] = 10960kB [ 1709.974711] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1709.977090] Node 0 [ 1709.981227] RIP: 0033:0x4665d9 [ 1709.981233] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1709.981244] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1709.984686] DMA32: [ 1709.988634] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1709.990685] 729*4kB [ 1709.995065] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1709.998415] (UME) [ 1710.002364] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1710.002370] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1710.007820] CPU: 0 PID: 9040 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1710.008657] 445*8kB [ 1710.011042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1710.011045] Call Trace: [ 1710.011061] dump_stack+0x1b2/0x281 [ 1710.011073] warn_alloc.cold+0x96/0x1cc [ 1710.011083] ? zone_watermark_ok_safe+0x220/0x220 [ 1710.011091] ? usleep_range+0x130/0x130 [ 1710.011099] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1710.011110] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1710.011119] ? run_timer_softirq+0x5a0/0x5a0 [ 1710.011133] __alloc_pages_nodemask+0x2127/0x2720 [ 1710.011153] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1710.011161] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1710.011181] ? audit_kill_trees+0x230/0x230 [ 1710.011193] alloc_pages_current+0x155/0x260 [ 1710.011204] ion_page_pool_alloc+0x118/0x1b0 [ 1710.011212] ion_system_heap_allocate+0x133/0x8c0 [ 1710.011220] ? ion_alloc+0x187/0x810 [ 1710.011228] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1710.011236] ? ion_system_contig_heap_create+0x130/0x130 [ 1710.011243] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1710.011252] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1710.011260] ion_alloc+0x204/0x810 [ 1710.011271] ? ion_dma_buf_release+0x40/0x40 [ 1710.011281] ? __might_fault+0x177/0x1b0 [ 1710.016464] syz-executor.5: [ 1710.018671] ion_ioctl+0xea/0x1f0 [ 1710.030412] (UME) [ 1710.036956] ? ion_query_heaps+0x360/0x360 [ 1710.039162] 180*16kB [ 1710.046421] ? lock_acquire+0x170/0x3f0 [ 1710.046428] ? ion_query_heaps+0x360/0x360 [ 1710.046439] do_vfs_ioctl+0x75a/0xff0 [ 1710.048741] page allocation failure: order:0 [ 1710.055981] ? ioctl_preallocate+0x1a0/0x1a0 [ 1710.055988] ? lock_downgrade+0x740/0x740 [ 1710.056000] ? __fget+0x225/0x360 [ 1710.058125] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1710.065375] ? do_vfs_ioctl+0xff0/0xff0 [ 1710.065386] ? security_file_ioctl+0x83/0xb0 [ 1710.065396] SyS_ioctl+0x7f/0xb0 [ 1710.072660] (ME) [ 1710.080415] ? do_vfs_ioctl+0xff0/0xff0 [ 1710.080426] do_syscall_64+0x1d5/0x640 [ 1710.080441] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1710.082744] warn_alloc_show_mem: 1 callbacks suppressed [ 1710.082746] Mem-Info: [ 1710.092083] RIP: 0033:0x4665d9 [ 1710.092088] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1710.092098] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1710.092105] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1710.094670] (null) [ 1710.098272] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1710.102236] 33*32kB [ 1710.107037] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1710.111003] syz-executor.5 cpuset= [ 1710.116082] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1710.121100] active_anon:17605 inactive_anon:26321 isolated_anon:0 [ 1710.121100] active_file:17 inactive_file:17 isolated_file:0 [ 1710.121100] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1710.121100] slab_reclaimable:12410 slab_unreclaimable:120054 [ 1710.121100] mapped:52760 shmem:27412 pagetables:790 bounce:0 [ 1710.121100] free:13950 free_pcp:0 free_cma:0 [ 1710.371329] (ME) 13*64kB (UME) 36*128kB (UME) 8*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17900kB [ 1710.381310] / mems_allowed=0-1 [ 1710.384878] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1710.398190] CPU: 1 PID: 9028 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1710.405990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1710.415336] Call Trace: [ 1710.417925] dump_stack+0x1b2/0x281 [ 1710.421545] warn_alloc.cold+0x96/0x1cc [ 1710.425596] ? zone_watermark_ok_safe+0x220/0x220 [ 1710.430433] ? usleep_range+0x130/0x130 [ 1710.434396] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1710.439485] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1710.444507] ? run_timer_softirq+0x5a0/0x5a0 [ 1710.448914] __alloc_pages_nodemask+0x2127/0x2720 [ 1710.453757] ? lock_acquire+0x170/0x3f0 [ 1710.457733] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1710.462568] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1710.467058] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1710.472506] ? alloc_pages_current+0xe3/0x260 [ 1710.476998] alloc_pages_current+0x155/0x260 [ 1710.481407] ion_page_pool_alloc+0x118/0x1b0 [ 1710.485810] ion_system_heap_allocate+0x133/0x8c0 [ 1710.490647] ? _raw_spin_unlock+0x29/0x40 [ 1710.494782] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1710.499727] ? ion_system_contig_heap_create+0x130/0x130 [ 1710.505171] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1710.510192] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1710.515027] ion_alloc+0x27a/0x810 [ 1710.518580] ? ion_dma_buf_release+0x40/0x40 [ 1710.522981] ? __might_fault+0x177/0x1b0 [ 1710.527038] ion_ioctl+0xea/0x1f0 [ 1710.530478] ? ion_query_heaps+0x360/0x360 [ 1710.534733] ? lock_acquire+0x170/0x3f0 [ 1710.538710] ? ion_query_heaps+0x360/0x360 [ 1710.542931] do_vfs_ioctl+0x75a/0xff0 [ 1710.546722] ? ioctl_preallocate+0x1a0/0x1a0 [ 1710.551265] ? lock_downgrade+0x740/0x740 [ 1710.555450] ? __fget+0x225/0x360 [ 1710.558898] ? do_vfs_ioctl+0xff0/0xff0 [ 1710.562884] ? security_file_ioctl+0x83/0xb0 [ 1710.567424] SyS_ioctl+0x7f/0xb0 [ 1710.570788] ? do_vfs_ioctl+0xff0/0xff0 [ 1710.574751] do_syscall_64+0x1d5/0x640 [ 1710.578633] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1710.583811] RIP: 0033:0x4665d9 [ 1710.586993] RSP: 002b:00007f28a7fcb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1710.594696] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1710.601956] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1710.609216] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1710.616477] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1710.623740] R13: 00007ffd6449ea9f R14: 00007f28a7fcb300 R15: 0000000000022000 [ 1710.633401] Node 1 Normal: 15405*4kB (UM) 2739*8kB (UM) 1573*16kB (UM) 924*32kB (UM) 1272*64kB (UM) 83*128kB (UM) 41*256kB (UM) 39*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 260764kB [ 1710.650576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1710.660285] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1710.710200] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1710.719065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1710.730228] 28223 total pagecache pages [ 1710.740393] 0 pages in swap cache [ 1710.743847] Swap cache stats: add 0, delete 0, find 0/0 [ 1710.749195] Free swap = 0kB [ 1710.752479] Total swap = 0kB [ 1710.755493] 2097051 pages RAM [ 1710.758585] 0 pages HighMem/MovableOnly [ 1710.780178] 363849 pages reserved [ 1710.783723] 0 pages cma reserved [ 1710.790206] Mem-Info: [ 1710.792648] active_anon:17605 inactive_anon:26321 isolated_anon:0 [ 1710.792648] active_file:117 inactive_file:617 isolated_file:0 [ 1710.792648] unevictable:0 dirty:25 writeback:0 unstable:0 [ 1710.792648] slab_reclaimable:12410 slab_unreclaimable:121243 [ 1710.792648] mapped:53360 shmem:27412 pagetables:790 bounce:0 [ 1710.792648] free:133248 free_pcp:697 free_cma:0 [ 1710.860631] Node 0 active_anon:67388kB inactive_anon:79716kB active_file:404kB inactive_file:2240kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119188kB dirty:112kB writeback:0kB shmem:83880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1710.875397] Node 0 active_anon:67388kB inactive_anon:79716kB active_file:404kB inactive_file:2240kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119188kB dirty:112kB writeback:0kB shmem:83880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1710.930046] Node 1 active_anon:3044kB inactive_anon:25568kB active_file:204kB inactive_file:164kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94428kB dirty:4kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1710.954787] Node 1 active_anon:3044kB inactive_anon:25568kB active_file:204kB inactive_file:164kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94428kB dirty:4kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1711.000199] Node 0 DMA free:11280kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1711.070387] Node 0 DMA free:11280kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1711.100154] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1711.105467] Node 0 DMA32 free:162400kB min:36200kB low:45248kB high:54296kB active_anon:67388kB inactive_anon:79716kB active_file:1896kB inactive_file:4096kB unevictable:0kB writepending:112kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2388kB bounce:0kB free_pcp:888kB local_pcp:260kB free_cma:0kB [ 1711.135262] lowmem_reserve[]: 0 0 0 0 0 [ 1711.140336] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1711.145478] Node 0 DMA32 free:162400kB min:36200kB low:45248kB high:54296kB active_anon:67388kB inactive_anon:79716kB active_file:1896kB inactive_file:4096kB unevictable:0kB writepending:112kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2388kB bounce:0kB free_pcp:884kB local_pcp:628kB free_cma:0kB [ 1711.150145] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1711.220581] lowmem_reserve[]: 0 0 0 0 0 [ 1711.221121] lowmem_reserve[]: 0 [ 1711.224582] Node 1 Normal free:495596kB min:53696kB low:67120kB high:80544kB active_anon:3044kB inactive_anon:25568kB active_file:204kB inactive_file:164kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:772kB bounce:0kB free_pcp:1276kB local_pcp:656kB free_cma:0kB [ 1711.227851] 0 [ 1711.259042] lowmem_reserve[]: [ 1711.260531] 0 0 0 [ 1711.266229] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1711.281470] 0 [ 1711.310349] lowmem_reserve[]: [ 1711.310381] 0 [ 1711.312166] 0 [ 1711.315275] 0 [ 1711.317057] 0 [ 1711.318833] 0 [ 1711.323787] 0 [ 1711.340117] 0 [ 1711.343324] 0 [ 1711.343703] Node 0 [ 1711.343705] 0 [ 1711.345487] DMA: [ 1711.347704] Node 1 [ 1711.349515] 27*4kB [ 1711.351622] Normal free:495596kB min:53696kB low:67120kB high:80544kB active_anon:3044kB inactive_anon:25568kB active_file:204kB inactive_file:164kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:772kB bounce:0kB free_pcp:1276kB local_pcp:620kB free_cma:0kB [ 1711.351625] lowmem_reserve[]: 0 0 0 0 0 [ 1711.351644] Node 0 DMA: 27*4kB (UE) 4*8kB (UE) 5*16kB (U) 6*32kB (UE) 4*64kB (UE) 3*128kB [ 1711.384906] (UE) 4*8kB (UE) 5*16kB (U) 6*32kB (UE) 4*64kB (UE) 3*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11292kB [ 1711.384973] Node 0 DMA32: 10977*4kB (UME) 3233*8kB (UME) 1882*16kB (UE) 884*32kB [ 1711.433781] (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11292kB [ 1711.470097] (UE) 289*64kB (UE) 52*128kB (UME) 4*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 154348kB [ 1711.474378] Node 0 [ 1711.479689] Node 0 Normal: [ 1711.493246] DMA32: 1491*4kB (UE) 3197*8kB (UME) 1882*16kB (UE) 884*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 89940kB [ 1711.500075] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1711.540084] Node 1 Normal: 26086*4kB [ 1711.540099] Node 0 Normal: [ 1711.543917] (UM) [ 1711.543924] 0*4kB [ 1711.546829] 5574*8kB [ 1711.548876] 0*8kB [ 1711.560075] (UM) 5329*16kB (UM) 1976*32kB (UM) 751*64kB (UM) 161*128kB (UM) 44*256kB (UM) 39*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 397336kB [ 1711.575216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1711.584102] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1711.600100] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1711.608786] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1711.613175] Node 1 Normal: 20020*4kB (UM) 5569*8kB (UM) 5329*16kB (UM) 1976*32kB (UM) 7*64kB (M) 4*128kB (UM) 1*256kB (M) 27*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 288168kB [ 1711.657359] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1711.657483] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1711.688192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1711.690029] 28317 total pagecache pages [ 1711.717750] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1711.720165] 0 pages in swap cache [ 1711.729794] Swap cache stats: add 0, delete 0, find 0/0 [ 1711.733939] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1711.749359] CPU: 0 PID: 9040 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1711.757181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1711.766531] Call Trace: [ 1711.769120] dump_stack+0x1b2/0x281 [ 1711.770023] Free swap = 0kB [ 1711.772757] warn_alloc.cold+0x96/0x1cc [ 1711.775753] Total swap = 0kB [ 1711.779718] ? zone_watermark_ok_safe+0x220/0x220 [ 1711.787560] __alloc_pages_nodemask+0x2127/0x2720 [ 1711.792404] ? check_preemption_disabled+0x35/0x240 [ 1711.797424] ? lock_acquire+0x170/0x3f0 [ 1711.801407] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1711.807381] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1711.810012] 2097051 pages RAM [ 1711.812822] ? __mutex_unlock_slowpath+0x75/0x770 [ 1711.815916] 0 pages HighMem/MovableOnly [ 1711.820741] alloc_pages_current+0x155/0x260 [ 1711.820753] ion_page_pool_alloc+0x118/0x1b0 [ 1711.820763] ion_system_heap_allocate+0x133/0x8c0 [ 1711.820774] ? _raw_spin_unlock+0x29/0x40 [ 1711.842497] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1711.847419] ? ion_system_contig_heap_create+0x130/0x130 [ 1711.850002] 363849 pages reserved [ 1711.852872] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1711.856300] 0 pages cma reserved [ 1711.861292] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1711.861301] ion_alloc+0x27a/0x810 [ 1711.861313] ? ion_dma_buf_release+0x40/0x40 [ 1711.861325] ? __might_fault+0x177/0x1b0 [ 1711.881460] ion_ioctl+0xea/0x1f0 [ 1711.884913] ? ion_query_heaps+0x360/0x360 [ 1711.889140] ? lock_acquire+0x170/0x3f0 [ 1711.893098] ? ion_query_heaps+0x360/0x360 [ 1711.897342] do_vfs_ioctl+0x75a/0xff0 [ 1711.901132] ? ioctl_preallocate+0x1a0/0x1a0 [ 1711.905526] ? lock_downgrade+0x740/0x740 [ 1711.909669] ? __fget+0x225/0x360 [ 1711.913110] ? do_vfs_ioctl+0xff0/0xff0 [ 1711.917079] ? security_file_ioctl+0x83/0xb0 [ 1711.921482] SyS_ioctl+0x7f/0xb0 [ 1711.924856] ? do_vfs_ioctl+0xff0/0xff0 [ 1711.928821] do_syscall_64+0x1d5/0x640 [ 1711.932718] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1711.937991] RIP: 0033:0x4665d9 [ 1711.941170] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1711.948868] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1711.956126] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1711.963383] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1711.970666] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1711.977926] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1711.991547] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1712.010791] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1712.011013] warn_alloc_show_mem: 2 callbacks suppressed [ 1712.011016] Mem-Info: [ 1712.019377] 28112 total pagecache pages [ 1712.026063] active_anon:17609 inactive_anon:26321 isolated_anon:0 [ 1712.026063] active_file:330 inactive_file:351 isolated_file:0 [ 1712.026063] unevictable:0 dirty:37 writeback:0 unstable:0 [ 1712.026063] slab_reclaimable:12393 slab_unreclaimable:121254 [ 1712.026063] mapped:53404 shmem:27412 pagetables:790 bounce:0 [ 1712.026063] free:34035 free_pcp:417 free_cma:0 [ 1712.050508] 0 pages in swap cache [ 1712.085092] Swap cache stats: add 0, delete 0, find 0/0 [ 1712.090422] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1712.099792] Free swap = 0kB [ 1712.107060] Total swap = 0kB [ 1712.123401] 2097051 pages RAM [ 1712.128586] 0 pages HighMem/MovableOnly [ 1712.141106] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1712.146229] CPU: 0 PID: 9059 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1712.154013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1712.163357] Call Trace: [ 1712.165953] dump_stack+0x1b2/0x281 [ 1712.169573] warn_alloc.cold+0x96/0x1cc [ 1712.173539] ? zone_watermark_ok_safe+0x220/0x220 [ 1712.178403] __alloc_pages_nodemask+0x2127/0x2720 [ 1712.183237] ? lock_acquire+0x170/0x3f0 [ 1712.187200] ? lock_acquire+0x170/0x3f0 [ 1712.189988] Node 0 active_anon:67392kB inactive_anon:79716kB active_file:156kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117216kB dirty:32kB writeback:0kB shmem:83880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1712.191162] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1712.223727] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1712.229171] ? __mutex_unlock_slowpath+0x75/0x770 [ 1712.234049] alloc_pages_current+0x155/0x260 [ 1712.238460] ion_page_pool_alloc+0x118/0x1b0 [ 1712.242863] ion_system_heap_allocate+0x133/0x8c0 [ 1712.247710] ? _raw_spin_unlock+0x29/0x40 [ 1712.249984] Node 1 active_anon:3044kB inactive_anon:25568kB active_file:24kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94200kB dirty:16kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1712.251862] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1712.283904] ? ion_system_contig_heap_create+0x130/0x130 [ 1712.287039] Node 0 [ 1712.289340] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1712.289357] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1712.291573] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1712.291585] ion_alloc+0x27a/0x810 [ 1712.291598] ? ion_dma_buf_release+0x40/0x40 [ 1712.296591] lowmem_reserve[]: [ 1712.322157] ? __might_fault+0x177/0x1b0 [ 1712.322167] ion_ioctl+0xea/0x1f0 [ 1712.322178] ? ion_query_heaps+0x360/0x360 [ 1712.326988] 0 [ 1712.330507] ? lock_acquire+0x170/0x3f0 [ 1712.330514] ? ion_query_heaps+0x360/0x360 [ 1712.330523] do_vfs_ioctl+0x75a/0xff0 [ 1712.334900] 2717 [ 1712.337987] ? ioctl_preallocate+0x1a0/0x1a0 [ 1712.342033] 2718 [ 1712.345453] ? lock_downgrade+0x740/0x740 [ 1712.349671] 2718 [ 1712.351466] ? __fget+0x225/0x360 [ 1712.351473] ? do_vfs_ioctl+0xff0/0xff0 [ 1712.351484] ? security_file_ioctl+0x83/0xb0 [ 1712.355461] 2718 [ 1712.359672] SyS_ioctl+0x7f/0xb0 [ 1712.365479] ? do_vfs_ioctl+0xff0/0xff0 [ 1712.365490] do_syscall_64+0x1d5/0x640 [ 1712.365505] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1712.369877] Node 0 [ 1712.371913] RIP: 0033:0x4665d9 [ 1712.371918] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1712.371927] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1712.371934] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1712.376063] DMA32 free:17512kB min:36200kB low:45248kB high:54296kB active_anon:67392kB inactive_anon:79716kB active_file:604kB inactive_file:428kB unevictable:0kB writepending:132kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2388kB bounce:0kB free_pcp:912kB local_pcp:196kB free_cma:0kB [ 1712.378099] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1712.378106] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1712.381544] lowmem_reserve[]: [ 1712.385482] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1712.389868] 0 [ 1712.396534] 363849 pages reserved [ 1712.399258] 0 [ 1712.408950] 0 pages cma reserved [ 1712.410639] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1712.410658] syz-executor.4 cpuset=/ [ 1712.418790] Out of memory (oom_kill_allocating_task): Kill process 9057 (syz-executor.2) score 0 or sacrifice child [ 1712.439910] mems_allowed=0-1 [ 1712.485978] Killed process 9057 (syz-executor.2) total-vm:93252kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1712.491518] 0 0 0 [ 1712.491531] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1712.491549] lowmem_reserve[]: 0 0 0 0 0 [ 1712.501627] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1712.517164] Node 1 [ 1712.531022] syz-executor.2: [ 1712.543310] CPU: 1 PID: 9049 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1712.571841] (null) [ 1712.581532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1712.581536] Call Trace: [ 1712.581555] dump_stack+0x1b2/0x281 [ 1712.581569] warn_alloc.cold+0x96/0x1cc [ 1712.581581] ? zone_watermark_ok_safe+0x220/0x220 [ 1712.581590] ? usleep_range+0x130/0x130 [ 1712.581599] ? try_to_free_pages+0x23f/0x6e0 [ 1712.581609] ? _find_next_bit+0xdb/0x100 [ 1712.581618] ? run_timer_softirq+0x5a0/0x5a0 [ 1712.581636] __alloc_pages_nodemask+0x2127/0x2720 [ 1712.586110] , order=0, oom_score_adj=0 [ 1712.586863] ? lock_acquire+0x170/0x3f0 [ 1712.597892] page allocation failure: order:0 [ 1712.606119] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1712.606129] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1712.606144] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1712.606156] ? retint_kernel+0x2d/0x2d [ 1712.606168] alloc_pages_current+0x155/0x260 [ 1712.606178] ion_page_pool_alloc+0x118/0x1b0 [ 1712.606188] ion_system_heap_allocate+0x133/0x8c0 [ 1712.606199] ? _raw_spin_unlock+0x29/0x40 [ 1712.606206] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1712.606214] ? ion_system_contig_heap_create+0x130/0x130 [ 1712.606223] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1712.606235] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1712.614772] syz-executor.5 cpuset= [ 1712.616375] ion_alloc+0x27a/0x810 [ 1712.625829] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1712.629555] ? ion_dma_buf_release+0x40/0x40 [ 1712.638262] / [ 1712.642815] ? __might_fault+0x177/0x1b0 [ 1712.649282] (null) [ 1712.650715] ion_ioctl+0xea/0x1f0 [ 1712.650724] ? ion_query_heaps+0x360/0x360 [ 1712.650737] ? lock_acquire+0x170/0x3f0 [ 1712.650744] ? ion_query_heaps+0x360/0x360 [ 1712.650753] do_vfs_ioctl+0x75a/0xff0 [ 1712.650763] ? ioctl_preallocate+0x1a0/0x1a0 [ 1712.650770] ? lock_downgrade+0x740/0x740 [ 1712.650781] ? __fget+0x225/0x360 [ 1712.650787] ? do_vfs_ioctl+0xff0/0xff0 [ 1712.650797] ? security_file_ioctl+0x83/0xb0 [ 1712.650805] SyS_ioctl+0x7f/0xb0 [ 1712.661843] syz-executor.2 cpuset= [ 1712.664532] ? do_vfs_ioctl+0xff0/0xff0 [ 1712.675608] mems_allowed=0-1 [ 1712.678310] do_syscall_64+0x1d5/0x640 [ 1712.686283] / [ 1712.687540] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1712.703149] mems_allowed=0-1 [ 1712.707010] RIP: 0033:0x4665d9 [ 1712.809087] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1712.816806] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1712.824063] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1712.831337] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1712.838609] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1712.845874] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1712.853421] CPU: 0 PID: 6443 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1712.858359] Normal free:26616kB min:53696kB low:67120kB high:80544kB active_anon:3044kB inactive_anon:25568kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:772kB bounce:0kB free_pcp:0kB local_pcp:4kB free_cma:0kB [ 1712.861272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1712.861276] Call Trace: [ 1712.861292] dump_stack+0x1b2/0x281 [ 1712.861307] dump_header+0x178/0x82f [ 1712.889016] lowmem_reserve[]: [ 1712.898331] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1712.898342] ? ___ratelimit+0x2cd/0x530 [ 1712.900911] 0 [ 1712.904506] oom_kill_process.cold+0x10/0xa40 [ 1712.911841] 0 [ 1712.916390] out_of_memory+0xe3e/0x1190 [ 1712.920365] 0 [ 1712.922116] ? oom_killer_disable+0x1c0/0x1c0 [ 1712.926580] 0 [ 1712.928364] ? mutex_trylock+0x152/0x1a0 [ 1712.932367] 0 [ 1712.934136] __alloc_pages_nodemask+0x23e1/0x2720 [ 1712.940413] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1712.940437] alloc_pages_current+0x155/0x260 [ 1712.944466] Node 0 [ 1712.946260] filemap_fault+0x11a1/0x1ad0 [ 1712.951102] DMA: [ 1712.955909] ext4_filemap_fault+0x84/0xb0 [ 1712.960313] 10*4kB [ 1712.962510] __do_fault+0xfa/0x380 [ 1712.966539] (UE) [ 1712.968581] __handle_mm_fault+0x2497/0x4620 [ 1712.972713] 4*8kB [ 1712.974943] ? vm_insert_page+0x7c0/0x7c0 [ 1712.978446] (UE) [ 1712.980490] ? lock_acquire+0x170/0x3f0 [ 1712.980509] ? mark_held_locks+0xa6/0xf0 [ 1712.984893] 5*16kB [ 1712.987021] handle_mm_fault+0x455/0x9c0 [ 1712.991176] (U) [ 1712.993205] __do_page_fault+0x549/0xad0 [ 1712.997150] 6*32kB [ 1713.001209] ? spurious_fault+0x640/0x640 [ 1713.001217] ? do_page_fault+0x60/0x500 [ 1713.001225] ? page_fault+0x2f/0x50 [ 1713.005491] (UE) [ 1713.007477] page_fault+0x45/0x50 [ 1713.009428] 2*64kB [ 1713.013465] RIP: 249d86b:0x9 [ 1713.013469] RSP: 0033:00007ffd6449ed5c EFLAGS: 0249d810 [ 1713.025442] CPU: 0 PID: 9057 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1713.049567] (UE) [ 1713.052036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1713.052041] Call Trace: [ 1713.052057] dump_stack+0x1b2/0x281 [ 1713.052070] warn_alloc.cold+0x96/0x1cc [ 1713.054111] 2*128kB [ 1713.063462] ? lock_downgrade+0x740/0x740 [ 1713.063473] ? zone_watermark_ok_safe+0x220/0x220 [ 1713.063484] ? wake_up_q+0x82/0xd0 [ 1713.082811] (UE) [ 1713.084871] ? wait_for_completion_io+0x10/0x10 [ 1713.088385] 2*256kB [ 1713.090434] __alloc_pages_nodemask+0x2127/0x2720 [ 1713.090453] ? lock_acquire+0x170/0x3f0 [ 1713.095094] (UE) [ 1713.097424] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1713.102254] 3*512kB [ 1713.106192] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1713.108225] (UE) [ 1713.113054] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1713.113066] ? retint_kernel+0x2d/0x2d [ 1713.115403] 2*1024kB [ 1713.119874] alloc_pages_current+0x155/0x260 [ 1713.119901] ion_page_pool_alloc+0x118/0x1b0 [ 1713.119910] ion_system_heap_allocate+0x133/0x8c0 [ 1713.121957] (UE) [ 1713.127390] ? _raw_spin_unlock+0x29/0x40 [ 1713.131259] 3*2048kB [ 1713.133638] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1713.138016] (UM) [ 1713.142425] ? ion_system_contig_heap_create+0x130/0x130 [ 1713.142434] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1713.142444] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1713.147276] 0*4096kB [ 1713.149315] ion_alloc+0x27a/0x810 [ 1713.153448] = 10968kB [ 1713.155825] ? ion_dma_buf_release+0x40/0x40 [ 1713.160746] Node 0 [ 1713.162775] ? __might_fault+0x177/0x1b0 [ 1713.168200] DMA32: [ 1713.173191] ion_ioctl+0xea/0x1f0 [ 1713.173200] ? ion_query_heaps+0x360/0x360 [ 1713.173211] ? lock_acquire+0x170/0x3f0 [ 1713.178027] 621*4kB [ 1713.180413] ? ion_query_heaps+0x360/0x360 [ 1713.180422] do_vfs_ioctl+0x75a/0xff0 [ 1713.180432] ? ioctl_preallocate+0x1a0/0x1a0 [ 1713.183956] (UME) [ 1713.186343] ? lock_downgrade+0x740/0x740 [ 1713.190736] 414*8kB [ 1713.192942] ? __fget+0x225/0x360 [ 1713.196967] (UME) [ 1713.199179] ? do_vfs_ioctl+0xff0/0xff0 [ 1713.202616] 173*16kB [ 1713.206814] ? security_file_ioctl+0x83/0xb0 [ 1713.210795] (UME) [ 1713.213089] SyS_ioctl+0x7f/0xb0 [ 1713.217292] 297*32kB [ 1713.221068] ? do_vfs_ioctl+0xff0/0xff0 [ 1713.221079] do_syscall_64+0x1d5/0x640 [ 1713.221093] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1713.225483] warn_alloc_show_mem: 1 callbacks suppressed [ 1713.225485] Mem-Info: [ 1713.227598] RIP: 0033:0x4665d9 [ 1713.231753] active_anon:17610 inactive_anon:26321 isolated_anon:0 [ 1713.231753] active_file:16 inactive_file:15 isolated_file:0 [ 1713.231753] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1713.231753] slab_reclaimable:12368 slab_unreclaimable:121234 [ 1713.231753] mapped:52811 shmem:27412 pagetables:764 bounce:0 [ 1713.231753] free:13930 free_pcp:173 free_cma:0 [ 1713.234020] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 [ 1713.237470] Node 0 active_anon:67392kB inactive_anon:79716kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117000kB dirty:0kB writeback:0kB shmem:83880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1713.239586] ORIG_RAX: 0000000000000010 [ 1713.243555] (UME) [ 1713.245932] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1713.250325] 1*64kB [ 1713.252441] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1713.255778] (U) [ 1713.258164] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1713.258171] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1713.262152] Node 1 active_anon:3048kB inactive_anon:25568kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94244kB dirty:0kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1713.265995] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1713.271755] Mem-Info: [ 1713.276674] syz-executor.1: [ 1713.279064] active_anon:17610 inactive_anon:26321 isolated_anon:0 [ 1713.279064] active_file:16 inactive_file:15 isolated_file:0 [ 1713.279064] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1713.279064] slab_reclaimable:12368 slab_unreclaimable:121234 [ 1713.279064] mapped:52811 shmem:27412 pagetables:764 bounce:0 [ 1713.279064] free:13930 free_pcp:173 free_cma:0 [ 1713.292223] 0*128kB [ 1713.320781] Node 0 active_anon:67392kB inactive_anon:79716kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117000kB dirty:0kB writeback:0kB shmem:83880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1713.328127] Node 0 [ 1713.350414] Node 1 active_anon:3048kB inactive_anon:25568kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94244kB dirty:0kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1713.362872] page allocation failure: order:0 [ 1713.368945] Node 0 [ 1713.405433] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1713.503112] DMA free:11032kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1713.539768] 0*256kB [ 1713.589765] DMA free:11160kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1713.589768] 0*512kB 0*1024kB [ 1713.592116] lowmem_reserve[]: [ 1713.621048] 0*2048kB 0*4096kB = 18132kB [ 1713.628906] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1713.640145] Node 1 Normal: 1*4kB (U) 0*8kB 1*16kB (M) 0*32kB 3866*64kB (U) 314*128kB (U) 103*256kB (U) 2*512kB (UM) 20*1024kB (U) 0*2048kB 0*4096kB = 335508kB [ 1713.655497] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1713.662895] 0 2717 2718 2718 2718 [ 1713.664821] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1713.668200] Node 0 [ 1713.676950] (null) [ 1713.681876] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1713.687262] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1713.687334] DMA32 free:45172kB min:36200kB low:45248kB high:54296kB active_anon:67392kB inactive_anon:79716kB active_file:4kB inactive_file:1672kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2284kB bounce:0kB free_pcp:312kB local_pcp:148kB free_cma:0kB [ 1713.696501] syz-executor.1 cpuset= [ 1713.732730] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1713.748541] Node 0 DMA32 free:45068kB min:36200kB low:45248kB high:54296kB active_anon:67392kB inactive_anon:79716kB active_file:4kB inactive_file:1672kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2284kB bounce:0kB free_pcp:392kB local_pcp:244kB free_cma:0kB [ 1713.779749] / mems_allowed=0-1 [ 1713.781901] 28873 total pagecache pages [ 1713.786552] CPU: 0 PID: 9059 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1713.786933] 0 pages in swap cache [ 1713.794690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1713.794694] Call Trace: [ 1713.794708] dump_stack+0x1b2/0x281 [ 1713.794721] warn_alloc.cold+0x96/0x1cc [ 1713.794733] ? zone_watermark_ok_safe+0x220/0x220 [ 1713.798922] Swap cache stats: add 0, delete 0, find 0/0 [ 1713.807628] ? usleep_range+0x130/0x130 [ 1713.807638] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1713.807650] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1713.807660] ? run_timer_softirq+0x5a0/0x5a0 [ 1713.810379] lowmem_reserve[]: [ 1713.813834] __alloc_pages_nodemask+0x2127/0x2720 [ 1713.817779] 0 [ 1713.822605] ? lock_acquire+0x170/0x3f0 [ 1713.822619] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1713.822630] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1713.828553] Free swap = 0kB [ 1713.831937] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1713.831958] alloc_pages_current+0x155/0x260 [ 1713.837129] Total swap = 0kB [ 1713.842038] ion_page_pool_alloc+0x118/0x1b0 [ 1713.842048] ion_system_heap_allocate+0x133/0x8c0 [ 1713.842058] ? _raw_spin_unlock+0x29/0x40 [ 1713.847090] 0 [ 1713.849520] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1713.854487] 2097051 pages RAM [ 1713.856133] ? ion_system_contig_heap_create+0x130/0x130 [ 1713.860090] 0 pages HighMem/MovableOnly [ 1713.864913] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1713.869374] 363849 pages reserved [ 1713.872382] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1713.872392] ion_alloc+0x27a/0x810 [ 1713.872406] ? ion_dma_buf_release+0x40/0x40 [ 1713.878568] 0 [ 1713.882222] ? __might_fault+0x177/0x1b0 [ 1713.882233] ion_ioctl+0xea/0x1f0 [ 1713.882243] ? ion_query_heaps+0x360/0x360 [ 1713.885728] 0 [ 1713.889631] ? lock_acquire+0x170/0x3f0 [ 1713.894564] 0 [ 1713.898570] ? ion_query_heaps+0x360/0x360 [ 1713.905346] do_vfs_ioctl+0x75a/0xff0 [ 1713.908421] Node 0 [ 1713.913851] ? ioctl_preallocate+0x1a0/0x1a0 [ 1713.913859] ? lock_downgrade+0x740/0x740 [ 1713.913870] ? __fget+0x225/0x360 [ 1713.917821] 0 pages cma reserved [ 1713.922809] ? do_vfs_ioctl+0xff0/0xff0 [ 1713.922820] ? security_file_ioctl+0x83/0xb0 [ 1713.922829] SyS_ioctl+0x7f/0xb0 [ 1713.922836] ? do_vfs_ioctl+0xff0/0xff0 [ 1713.949699] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1713.952504] do_syscall_64+0x1d5/0x640 [ 1713.954277] lowmem_reserve[]: [ 1713.958232] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1713.969672] 0 [ 1713.970222] RIP: 0033:0x4665d9 [ 1713.974599] 0 [ 1713.978811] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 [ 1713.989667] 0 [ 1713.993915] ORIG_RAX: 0000000000000010 [ 1713.997257] 0 [ 1714.001214] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1714.001218] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1714.001221] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1714.001225] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1714.001229] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1714.006677] lowmem_reserve[]: [ 1714.083245] 0 [ 1714.111535] Node 1 Normal free:247592kB min:53696kB low:67120kB high:80544kB active_anon:3048kB inactive_anon:25568kB active_file:840kB inactive_file:3256kB unevictable:0kB writepending:112kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:772kB bounce:0kB free_pcp:440kB local_pcp:168kB free_cma:0kB [ 1714.206767] lowmem_reserve[]: 0 0 0 0 0 [ 1714.219724] 0 0 0 0 0 [ 1714.222251] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1714.223647] Node 0 [ 1714.299005] lowmem_reserve[]: 0 0 0 0 0 [ 1714.311223] Node 1 Normal free:204500kB min:53696kB low:67120kB high:80544kB active_anon:3148kB inactive_anon:25568kB active_file:1840kB inactive_file:3756kB unevictable:0kB writepending:112kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:772kB bounce:0kB free_pcp:260kB local_pcp:168kB free_cma:0kB [ 1714.320567] DMA: [ 1714.348845] lowmem_reserve[]: [ 1714.359674] 10*4kB (UE) 5*8kB (UME) 6*16kB (UM) 6*32kB (UE) 6*64kB (UME) 3*128kB (UME) 3*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11120kB [ 1714.368380] 0 0 0 0 0 [ 1714.387129] Node 0 DMA: 10*4kB (UE) 5*8kB (UME) 6*16kB (UM) 6*32kB (UE) 6*64kB (UME) 3*128kB (UME) 3*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11120kB [ 1714.399621] Node 0 [ 1714.404611] Node 0 DMA32: 263*4kB (E) 776*8kB (UE) 176*16kB (UME) 24*32kB (UE) 379*64kB (U) 78*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45084kB [ 1714.409295] DMA32: [ 1714.426753] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1714.439606] 263*4kB (E) 756*8kB (UE) 176*16kB (UME) 24*32kB (UE) 379*64kB (U) 78*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44924kB [ 1714.445539] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 916*64kB (UM) 313*128kB (U) 103*256kB (U) 2*512kB (UM) 15*1024kB (U) 0*2048kB 0*4096kB = 141540kB [ 1714.469630] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1714.476044] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 15:42:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) [ 1714.489623] Node 1 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 563*64kB (U) 314*128kB (UM) 103*256kB (U) 1*512kB (U) 15*1024kB (U) 0*2048kB 0*4096kB = 118476kB [ 1714.496021] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1714.519419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1714.528743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1714.529278] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1714.549647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1714.551057] 30861 total pagecache pages [ 1714.566379] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1714.567169] warn_alloc_show_mem: 1 callbacks suppressed [ 1714.567171] Mem-Info: [ 1714.588748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1714.590036] 0 pages in swap cache [ 1714.607627] active_anon:17672 inactive_anon:26321 isolated_anon:0 [ 1714.607627] active_file:887 inactive_file:2525 isolated_file:0 [ 1714.607627] unevictable:0 dirty:28 writeback:0 unstable:0 [ 1714.607627] slab_reclaimable:12367 slab_unreclaimable:122040 [ 1714.607627] mapped:46502 shmem:27412 pagetables:775 bounce:0 [ 1714.607627] free:30896 free_pcp:298 free_cma:0 [ 1714.619584] 30898 total pagecache pages [ 1714.646987] Swap cache stats: add 0, delete 0, find 0/0 [ 1714.653444] Free swap = 0kB [ 1714.656561] Total swap = 0kB [ 1714.670736] 2097051 pages RAM [ 1714.673891] 0 pages HighMem/MovableOnly [ 1714.678045] 363849 pages reserved [ 1714.685737] 0 pages cma reserved [ 1714.689451] Out of memory (oom_kill_allocating_task): Kill process 6443 (syz-executor.5) score 0 or sacrifice child [ 1714.704060] Node 0 active_anon:67240kB inactive_anon:79716kB active_file:1108kB inactive_file:7144kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:87632kB dirty:0kB writeback:0kB shmem:83880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1714.709599] 0 pages in swap cache [ 1714.737041] Killed process 6443 (syz-executor.5) total-vm:93120kB, anon-rss:104kB, file-rss:32868kB, shmem-rss:0kB [ 1714.787276] oom_reaper: reaped process 6443 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1714.802625] Swap cache stats: add 0, delete 0, find 0/0 15:42:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) [ 1714.831809] Free swap = 0kB [ 1714.839147] Total swap = 0kB [ 1714.860222] 2097051 pages RAM [ 1714.861894] Node 1 active_anon:3508kB inactive_anon:25568kB active_file:2576kB inactive_file:7232kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100888kB dirty:68kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1714.863334] 0 pages HighMem/MovableOnly [ 1714.863338] 363849 pages reserved [ 1714.863341] 0 pages cma reserved [ 1714.951756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1714.958488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1714.991052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1714.997771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1715.032120] Node 0 DMA free:11112kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:24kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1715.068281] device bridge_slave_1 left promiscuous mode [ 1715.090642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.117309] device bridge_slave_0 left promiscuous mode [ 1715.137994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.155310] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1715.163592] device veth1_macvtap left promiscuous mode [ 1715.174662] Node 0 DMA32 free:63480kB min:36200kB low:45248kB high:54296kB active_anon:67128kB inactive_anon:79704kB active_file:756kB inactive_file:756kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2172kB bounce:0kB free_pcp:1324kB local_pcp:632kB free_cma:0kB [ 1715.183906] device veth0_macvtap left promiscuous mode [ 1715.219901] device veth1_vlan left promiscuous mode [ 1715.246187] device veth0_vlan left promiscuous mode [ 1715.301438] lowmem_reserve[]: 0 0 0 0 0 [ 1715.323025] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1715.416868] lowmem_reserve[]: 0 0 0 0 0 [ 1715.444868] Node 1 Normal free:161660kB min:53696kB low:67120kB high:80544kB active_anon:3540kB inactive_anon:25572kB active_file:2604kB inactive_file:7268kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:672kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1715.464608] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1715.531471] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1715.548940] CPU: 0 PID: 9075 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1715.551472] lowmem_reserve[]: [ 1715.556741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1715.556745] Call Trace: [ 1715.556760] dump_stack+0x1b2/0x281 [ 1715.556773] warn_alloc.cold+0x96/0x1cc [ 1715.577351] 0 [ 1715.579330] ? zone_watermark_ok_safe+0x220/0x220 [ 1715.579350] __alloc_pages_nodemask+0x2127/0x2720 [ 1715.588790] 0 [ 1715.590787] ? io_schedule_timeout+0x140/0x140 [ 1715.590802] ? lock_acquire+0x170/0x3f0 [ 1715.590819] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1715.595993] 0 [ 1715.597170] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1715.597183] ? __mutex_unlock_slowpath+0x75/0x770 [ 1715.612101] 0 [ 1715.613180] ? __list_del_entry_valid+0xb3/0xf0 [ 1715.624436] alloc_pages_current+0x155/0x260 [ 1715.628837] ion_page_pool_alloc+0x118/0x1b0 [ 1715.631104] 0 [ 1715.633234] ion_system_heap_allocate+0x133/0x8c0 [ 1715.633242] ? ion_alloc+0x187/0x810 [ 1715.633252] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1715.639857] ? ion_system_contig_heap_create+0x130/0x130 [ 1715.639866] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1715.639877] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1715.639885] ion_alloc+0x204/0x810 [ 1715.639896] ? ion_dma_buf_release+0x40/0x40 [ 1715.639908] ? __might_fault+0x177/0x1b0 [ 1715.645955] Node 0 [ 1715.649074] ion_ioctl+0xea/0x1f0 [ 1715.649084] ? ion_query_heaps+0x360/0x360 [ 1715.664396] DMA: [ 1715.667877] ? lock_acquire+0x170/0x3f0 [ 1715.667886] ? ion_query_heaps+0x360/0x360 [ 1715.679961] 39*4kB [ 1715.681985] do_vfs_ioctl+0x75a/0xff0 [ 1715.681995] ? ioctl_preallocate+0x1a0/0x1a0 [ 1715.688557] (UE) [ 1715.692374] ? lock_downgrade+0x740/0x740 [ 1715.692387] ? __fget+0x225/0x360 [ 1715.692397] ? do_vfs_ioctl+0xff0/0xff0 [ 1715.692408] ? security_file_ioctl+0x83/0xb0 [ 1715.692417] SyS_ioctl+0x7f/0xb0 [ 1715.692426] ? do_vfs_ioctl+0xff0/0xff0 [ 1715.702327] 22*8kB [ 1715.702679] do_syscall_64+0x1d5/0x640 [ 1715.711401] (UE) [ 1715.713247] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1715.713270] RIP: 0033:0x4665d9 15:42:03 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000480)={r3, 0x1e}) recvmsg$can_bcm(r2, 0x0, 0x0) [ 1715.718865] 12*16kB [ 1715.720646] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1715.720655] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1715.720659] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1715.720663] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1715.720668] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1715.720673] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1715.741197] device hsr_slave_1 left promiscuous mode [ 1715.751810] device hsr_slave_0 left promiscuous mode [ 1715.819801] (U) 7*32kB (UE) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11180kB [ 1715.852549] Node 0 DMA32: 16042*4kB (U) 4107*8kB (UE) 1716*16kB (UE) 874*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 152448kB [ 1715.875689] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1715.887610] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1715.897482] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1715.910157] CPU: 0 PID: 9077 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1715.918005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1715.918009] Call Trace: [ 1715.918025] dump_stack+0x1b2/0x281 [ 1715.927401] Node 1 [ 1715.929960] warn_alloc.cold+0x96/0x1cc [ 1715.929972] ? zone_watermark_ok_safe+0x220/0x220 [ 1715.933577] Normal: [ 1715.935808] __alloc_pages_nodemask+0x2127/0x2720 [ 1715.951704] ? lock_acquire+0x170/0x3f0 [ 1715.955677] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1715.959375] 43009*4kB (UM) 9705*8kB [ 1715.960518] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1715.960530] ? __mutex_unlock_slowpath+0x75/0x770 [ 1715.964233] (UM) [ 1715.969663] alloc_pages_current+0x155/0x260 [ 1715.969674] ion_page_pool_alloc+0x118/0x1b0 [ 1715.969684] ion_system_heap_allocate+0x133/0x8c0 [ 1715.969692] ? ion_alloc+0x187/0x810 [ 1715.969719] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1715.989381] 3076*16kB [ 1715.990215] ? ion_system_contig_heap_create+0x130/0x130 [ 1715.993904] (UM) [ 1715.999331] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1716.009361] 2192*32kB (UM) [ 1716.014277] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1716.014288] ion_alloc+0x204/0x810 [ 1716.017198] 62*64kB [ 1716.022023] ? ion_dma_buf_release+0x40/0x40 [ 1716.022034] ? __might_fault+0x177/0x1b0 [ 1716.022044] ion_ioctl+0xea/0x1f0 [ 1716.022054] ? ion_query_heaps+0x360/0x360 [ 1716.022066] ? lock_acquire+0x170/0x3f0 [ 1716.022074] ? ion_query_heaps+0x360/0x360 [ 1716.049371] (U) 7*128kB [ 1716.052157] do_vfs_ioctl+0x75a/0xff0 [ 1716.052168] ? ioctl_preallocate+0x1a0/0x1a0 [ 1716.054840] (U) [ 1716.058626] ? lock_downgrade+0x740/0x740 [ 1716.069184] ? __fget+0x225/0x360 [ 1716.072630] ? do_vfs_ioctl+0xff0/0xff0 [ 1716.076600] ? security_file_ioctl+0x83/0xb0 [ 1716.079352] 0*256kB 0*512kB [ 1716.080994] SyS_ioctl+0x7f/0xb0 [ 1716.081002] ? do_vfs_ioctl+0xff0/0xff0 [ 1716.084005] 0*1024kB [ 1716.087354] do_syscall_64+0x1d5/0x640 [ 1716.097589] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1716.102774] RIP: 0033:0x4665d9 [ 1716.106036] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1716.109345] 0*2048kB [ 1716.113829] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1716.113835] 0*4096kB [ 1716.116230] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1716.133144] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1716.139374] = 373900kB [ 1716.140413] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1716.142893] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1716.150142] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1716.200376] team0 (unregistering): Port device team_slave_1 removed [ 1716.217924] team0 (unregistering): Port device team_slave_0 removed [ 1716.232516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1716.263542] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1716.270638] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1716.303958] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1716.312752] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1716.319974] Mem-Info: [ 1716.324598] active_anon:17643 inactive_anon:26319 isolated_anon:1 [ 1716.324598] active_file:1096 inactive_file:2540 isolated_file:12 [ 1716.324598] unevictable:0 dirty:2 writeback:0 unstable:0 [ 1716.324598] slab_reclaimable:12354 slab_unreclaimable:122006 [ 1716.324598] mapped:53320 shmem:27409 pagetables:737 bounce:0 [ 1716.324598] free:150768 free_pcp:349 free_cma:0 [ 1716.343162] 31065 total pagecache pages [ 1716.393493] Node 0 active_anon:67080kB inactive_anon:79704kB active_file:1768kB inactive_file:2856kB unevictable:0kB isolated(anon):4kB isolated(file):0kB mapped:120676kB dirty:0kB writeback:0kB shmem:83868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1716.416029] 0 pages in swap cache [ 1716.433567] bond0 (unregistering): Released all slaves [ 1716.447862] Swap cache stats: add 0, delete 0, find 0/0 [ 1716.450076] Node 1 active_anon:3492kB inactive_anon:25572kB active_file:2616kB inactive_file:7304kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:101004kB dirty:8kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1716.466484] Free swap = 0kB [ 1716.507348] Total swap = 0kB [ 1716.513861] Node 0 DMA free:11568kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1716.517792] 2097051 pages RAM [ 1716.567343] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1716.582384] Node 0 DMA32 free:45152kB min:36200kB low:45248kB high:54296kB active_anon:67080kB inactive_anon:79704kB active_file:1816kB inactive_file:2924kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2424kB bounce:0kB free_pcp:832kB local_pcp:160kB free_cma:0kB [ 1716.583126] 0 pages HighMem/MovableOnly [ 1716.689291] lowmem_reserve[]: 0 0 0 0 0 [ 1716.693319] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1716.696445] 363849 pages reserved [ 1716.779297] lowmem_reserve[]: 0 0 0 0 0 [ 1716.783324] Node 1 Normal free:527456kB min:53696kB low:67120kB high:80544kB active_anon:3492kB inactive_anon:25572kB active_file:2616kB inactive_file:7304kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:672kB bounce:0kB free_pcp:740kB local_pcp:100kB free_cma:0kB [ 1716.787903] 0 pages cma reserved 15:42:04 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000480)={r2, 0x1e}) 15:42:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000480)={r3, 0x1e}) recvmsg$can_bcm(r2, 0x0, 0x0) [ 1716.879273] lowmem_reserve[]: 0 0 0 0 0 [ 1716.883333] Node 0 DMA: 1*4kB (E) 8*8kB (UE) 16*16kB (U) 13*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11108kB [ 1716.937187] Node 0 DMA32: 28*4kB (UME) 363*8kB (UME) 185*16kB (UME) 32*32kB (UE) 628*64kB (U) 18*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 49496kB [ 1716.982194] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1717.016484] Node 1 Normal: 27176*4kB (UM) 12982*8kB (UM) 5568*16kB (UM) 4419*32kB (UM) 5*64kB (UM) 74*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 452848kB [ 1717.039882] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1717.039904] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1717.039925] CPU: 0 PID: 9084 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1717.039931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1717.039934] Call Trace: [ 1717.039951] dump_stack+0x1b2/0x281 [ 1717.039965] warn_alloc.cold+0x96/0x1cc [ 1717.078310] syz-executor.1: [ 1717.080147] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1717.080158] ? zone_watermark_ok_safe+0x220/0x220 [ 1717.080179] __alloc_pages_nodemask+0x2127/0x2720 [ 1717.080188] ? __schedule+0x893/0x1de0 [ 1717.080202] ? lock_acquire+0x170/0x3f0 [ 1717.089249] page allocation failure: order:4 [ 1717.092204] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1717.092239] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1717.097107] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1717.101888] ? __mutex_unlock_slowpath+0x75/0x770 [ 1717.101903] alloc_pages_current+0x155/0x260 [ 1717.101915] ion_page_pool_alloc+0x118/0x1b0 [ 1717.101938] ion_system_heap_allocate+0x133/0x8c0 [ 1717.149882] ? ion_alloc+0x187/0x810 [ 1717.153660] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1717.159100] ? ion_system_contig_heap_create+0x130/0x130 [ 1717.164535] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1717.169531] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1717.174352] ion_alloc+0x204/0x810 [ 1717.177874] ? ion_dma_buf_release+0x40/0x40 [ 1717.182263] ? __might_fault+0x177/0x1b0 [ 1717.186302] ion_ioctl+0xea/0x1f0 [ 1717.189732] ? ion_query_heaps+0x360/0x360 [ 1717.193946] ? lock_acquire+0x170/0x3f0 [ 1717.197894] ? ion_query_heaps+0x360/0x360 [ 1717.202135] do_vfs_ioctl+0x75a/0xff0 [ 1717.206001] ? ioctl_preallocate+0x1a0/0x1a0 [ 1717.210393] ? lock_downgrade+0x740/0x740 [ 1717.214521] ? __fget+0x225/0x360 [ 1717.217951] ? do_vfs_ioctl+0xff0/0xff0 [ 1717.221908] ? security_file_ioctl+0x83/0xb0 [ 1717.226294] SyS_ioctl+0x7f/0xb0 [ 1717.229640] ? do_vfs_ioctl+0xff0/0xff0 [ 1717.233589] do_syscall_64+0x1d5/0x640 [ 1717.237458] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1717.242627] RIP: 0033:0x4665d9 [ 1717.245794] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1717.253479] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1717.260726] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1717.267978] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1717.275227] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1717.282474] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1717.295362] (null) [ 1717.302414] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1717.318683] CPU: 1 PID: 9083 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1717.326486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1717.328703] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1717.335956] Call Trace: [ 1717.335976] dump_stack+0x1b2/0x281 [ 1717.335989] warn_alloc.cold+0x96/0x1cc [ 1717.336000] ? zone_watermark_ok_safe+0x220/0x220 [ 1717.336023] __alloc_pages_nodemask+0x2127/0x2720 [ 1717.336039] ? lock_acquire+0x170/0x3f0 [ 1717.336053] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1717.336069] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1717.336081] ? __mutex_unlock_slowpath+0x75/0x770 [ 1717.372857] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1717.373511] ? __alloc_pages_nodemask+0x277/0x2720 [ 1717.390222] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1717.392482] alloc_pages_current+0x155/0x260 [ 1717.392495] ion_page_pool_alloc+0x118/0x1b0 [ 1717.392503] ion_system_heap_allocate+0x133/0x8c0 [ 1717.404374] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1717.406246] ? ion_alloc+0x187/0x810 [ 1717.406258] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1717.406268] ? ion_system_contig_heap_create+0x130/0x130 [ 1717.417349] 30493 total pagecache pages [ 1717.419889] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1717.419901] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1717.419911] ion_alloc+0x204/0x810 [ 1717.419922] ? ion_dma_buf_release+0x40/0x40 [ 1717.419934] ? __might_fault+0x177/0x1b0 [ 1717.419944] ion_ioctl+0xea/0x1f0 [ 1717.419952] ? ion_query_heaps+0x360/0x360 [ 1717.419964] ? lock_acquire+0x170/0x3f0 [ 1717.419972] ? ion_query_heaps+0x360/0x360 [ 1717.437328] 0 pages in swap cache [ 1717.437645] do_vfs_ioctl+0x75a/0xff0 [ 1717.454619] Swap cache stats: add 0, delete 0, find 0/0 [ 1717.456852] ? ioctl_preallocate+0x1a0/0x1a0 [ 1717.456862] ? lock_downgrade+0x740/0x740 [ 1717.456876] ? __fget+0x225/0x360 [ 1717.467022] Free swap = 0kB [ 1717.468830] ? do_vfs_ioctl+0xff0/0xff0 [ 1717.468842] ? security_file_ioctl+0x83/0xb0 [ 1717.468853] SyS_ioctl+0x7f/0xb0 [ 1717.483446] Total swap = 0kB [ 1717.484850] ? do_vfs_ioctl+0xff0/0xff0 [ 1717.484865] do_syscall_64+0x1d5/0x640 [ 1717.484880] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1717.493058] 2097051 pages RAM [ 1717.497432] RIP: 0033:0x4665d9 [ 1717.497437] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1717.497448] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1717.497453] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1717.497458] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1717.497465] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1717.516451] 0 pages HighMem/MovableOnly [ 1717.520777] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1717.694401] 363849 pages reserved [ 1717.702324] 0 pages cma reserved [ 1717.944437] warn_alloc_show_mem: 1 callbacks suppressed [ 1717.944441] Mem-Info: [ 1717.967817] active_anon:17731 inactive_anon:26319 isolated_anon:0 [ 1717.967817] active_file:666 inactive_file:2274 isolated_file:11 [ 1717.967817] unevictable:0 dirty:20 writeback:0 unstable:0 [ 1717.967817] slab_reclaimable:12349 slab_unreclaimable:122547 [ 1717.967817] mapped:54817 shmem:27409 pagetables:779 bounce:0 [ 1717.967817] free:118148 free_pcp:452 free_cma:0 [ 1718.025429] Node 0 active_anon:67388kB inactive_anon:79704kB active_file:44kB inactive_file:492kB unevictable:0kB isolated(anon):0kB isolated(file):44kB mapped:117420kB dirty:36kB writeback:0kB shmem:83868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1718.156789] Node 1 active_anon:3536kB inactive_anon:25572kB active_file:2620kB inactive_file:8804kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:102148kB dirty:44kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1718.225493] Node 0 DMA free:11116kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:24kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1718.356391] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1718.375841] Node 0 DMA32 free:45068kB min:36200kB low:45248kB high:54296kB active_anon:67388kB inactive_anon:79704kB active_file:28kB inactive_file:448kB unevictable:0kB writepending:36kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2444kB bounce:0kB free_pcp:276kB local_pcp:156kB free_cma:0kB [ 1718.477309] lowmem_reserve[]: 0 0 0 0 0 [ 1718.493097] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1718.585067] lowmem_reserve[]: 0 0 0 0 0 [ 1718.597130] Node 1 Normal free:436980kB min:53696kB low:67120kB high:80544kB active_anon:3536kB inactive_anon:25572kB active_file:2620kB inactive_file:8312kB unevictable:0kB writepending:44kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:672kB bounce:0kB free_pcp:232kB local_pcp:120kB free_cma:0kB [ 1718.700999] lowmem_reserve[]: 0 0 0 0 0 [ 1718.714871] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 4*16kB (U) 15*32kB (UE) 5*64kB (UE) 2*128kB (UE) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11124kB [ 1718.773095] Node 0 DMA32: 314*4kB (UME) 353*8kB (UME) 174*16kB (UME) 24*32kB (UME) 428*64kB (UME) 76*128kB (UME) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45264kB [ 1718.826064] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1718.866761] Node 1 Normal: 2*4kB (M) 6*8kB (UM) 4*16kB (M) 7*32kB (M) 4106*64kB (UM) 313*128kB (UM) 68*256kB (U) 43*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 342616kB [ 1718.908312] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1718.943358] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1718.963836] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1718.998951] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1719.017519] 30475 total pagecache pages [ 1719.038920] 0 pages in swap cache [ 1719.044608] Swap cache stats: add 0, delete 0, find 0/0 [ 1719.056637] Free swap = 0kB [ 1719.064120] Total swap = 0kB [ 1719.069505] 2097051 pages RAM [ 1719.072641] 0 pages HighMem/MovableOnly [ 1719.082643] 363849 pages reserved [ 1719.101054] 0 pages cma reserved [ 1720.541140] oom_reaper: reaped process 9083 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 15:42:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000480)={r3, 0x1e}) recvmsg$can_bcm(r2, 0x0, 0x0) [ 1721.110034] systemd-rfkill invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1721.145424] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 1721.156630] CPU: 1 PID: 9094 Comm: systemd-rfkill Not tainted 4.14.232-syzkaller #0 [ 1721.164434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1721.173786] Call Trace: [ 1721.176379] dump_stack+0x1b2/0x281 [ 1721.180017] dump_header+0x178/0x82f [ 1721.183726] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1721.188822] ? ___ratelimit+0x2cd/0x530 [ 1721.192794] oom_kill_process.cold+0x10/0xa40 [ 1721.197290] out_of_memory+0xe3e/0x1190 [ 1721.198630] syz-executor.1: page allocation failure: order:0 [ 1721.201257] ? oom_killer_disable+0x1c0/0x1c0 [ 1721.201268] ? mutex_trylock+0x152/0x1a0 [ 1721.207049] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1721.211521] __alloc_pages_nodemask+0x23e1/0x2720 [ 1721.211538] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1721.211559] alloc_pages_current+0x155/0x260 [ 1721.211568] filemap_fault+0x11a1/0x1ad0 [ 1721.238809] (null) [ 1721.241440] ext4_filemap_fault+0x84/0xb0 [ 1721.243561] syz-executor.1 cpuset= [ 1721.247687] __do_fault+0xfa/0x380 [ 1721.247692] / [ 1721.251210] __handle_mm_fault+0x2497/0x4620 [ 1721.260816] ? vm_insert_page+0x7c0/0x7c0 [ 1721.264959] ? vm_mmap_pgoff+0x168/0x1a0 [ 1721.269025] ? mark_held_locks+0xa6/0xf0 [ 1721.273079] handle_mm_fault+0x455/0x9c0 [ 1721.277134] __do_page_fault+0x549/0xad0 [ 1721.281196] ? spurious_fault+0x640/0x640 [ 1721.285339] ? do_page_fault+0x60/0x500 [ 1721.289308] ? page_fault+0x2f/0x50 [ 1721.291396] mems_allowed=0-1 [ 1721.292922] page_fault+0x45/0x50 [ 1721.299445] RIP: 0000:0x7fa0f6102040 [ 1721.303136] RSP: f5cd067a:0000000000000000 EFLAGS: 7fa0f60ff000 [ 1721.303155] CPU: 0 PID: 9083 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1721.316987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1721.326333] Call Trace: [ 1721.328920] dump_stack+0x1b2/0x281 [ 1721.332550] warn_alloc.cold+0x96/0x1cc [ 1721.336529] ? zone_watermark_ok_safe+0x220/0x220 [ 1721.340205] Mem-Info: [ 1721.341365] ? usleep_range+0x130/0x130 [ 1721.341376] ? try_to_free_pages+0x23f/0x6e0 [ 1721.341386] ? _find_next_bit+0xdb/0x100 [ 1721.341397] ? run_timer_softirq+0x5a0/0x5a0 [ 1721.341415] __alloc_pages_nodemask+0x2127/0x2720 [ 1721.341433] ? lock_acquire+0x170/0x3f0 [ 1721.341450] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1721.341460] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1721.341476] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1721.341488] ? retint_kernel+0x2d/0x2d [ 1721.341500] alloc_pages_current+0x155/0x260 [ 1721.355930] active_anon:17640 inactive_anon:26317 isolated_anon:0 [ 1721.355930] active_file:16 inactive_file:1232 isolated_file:0 [ 1721.355930] unevictable:0 dirty:8 writeback:0 unstable:0 [ 1721.355930] slab_reclaimable:12304 slab_unreclaimable:121909 [ 1721.355930] mapped:45029 shmem:27406 pagetables:758 bounce:0 [ 1721.355930] free:29469 free_pcp:455 free_cma:0 [ 1721.356295] ion_page_pool_alloc+0x118/0x1b0 [ 1721.356306] ion_system_heap_allocate+0x133/0x8c0 [ 1721.356314] ? ion_alloc+0x187/0x810 [ 1721.356325] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1721.356332] ? ion_system_contig_heap_create+0x130/0x130 [ 1721.356360] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1721.420202] Node 0 active_anon:67088kB inactive_anon:79700kB active_file:1332kB inactive_file:1436kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:110016kB dirty:4kB writeback:0kB shmem:83856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1721.426083] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1721.426095] ion_alloc+0x204/0x810 [ 1721.426109] ? ion_dma_buf_release+0x40/0x40 [ 1721.426121] ? __might_fault+0x177/0x1b0 [ 1721.426133] ion_ioctl+0xea/0x1f0 [ 1721.426143] ? ion_query_heaps+0x360/0x360 [ 1721.426156] ? lock_acquire+0x170/0x3f0 [ 1721.426163] ? ion_query_heaps+0x360/0x360 [ 1721.426173] do_vfs_ioctl+0x75a/0xff0 [ 1721.426185] ? ioctl_preallocate+0x1a0/0x1a0 [ 1721.426196] ? lock_downgrade+0x740/0x740 [ 1721.426209] ? __fget+0x225/0x360 [ 1721.494557] Node 1 active_anon:3472kB inactive_anon:25568kB active_file:28kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69400kB dirty:28kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1721.495824] ? do_vfs_ioctl+0xff0/0xff0 [ 1721.541992] Node 0 [ 1721.558689] ? security_file_ioctl+0x83/0xb0 [ 1721.558702] SyS_ioctl+0x7f/0xb0 [ 1721.572665] ? do_vfs_ioctl+0xff0/0xff0 [ 1721.576636] do_syscall_64+0x1d5/0x640 [ 1721.580522] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1721.585702] RIP: 0033:0x4665d9 [ 1721.588879] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1721.596579] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1721.603841] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1721.611098] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1721.618360] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1721.625622] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1721.665940] warn_alloc_show_mem: 1 callbacks suppressed [ 1721.665943] Mem-Info: [ 1721.674689] active_anon:17640 inactive_anon:26317 isolated_anon:0 [ 1721.674689] active_file:17 inactive_file:56 isolated_file:0 [ 1721.674689] unevictable:0 dirty:8 writeback:0 unstable:0 [ 1721.674689] slab_reclaimable:12304 slab_unreclaimable:121987 [ 1721.674689] mapped:44229 shmem:27406 pagetables:758 bounce:0 [ 1721.674689] free:25182 free_pcp:189 free_cma:0 [ 1721.681690] DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1721.715729] Node 0 active_anon:67088kB inactive_anon:79700kB active_file:100kB inactive_file:180kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:107516kB dirty:4kB writeback:0kB shmem:83856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1721.752883] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1721.766481] Node 1 active_anon:3472kB inactive_anon:25568kB active_file:28kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69400kB dirty:28kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1721.767306] Node 0 [ 1721.798836] Node 0 DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1721.809722] DMA32 free:36192kB min:36200kB low:45248kB high:54296kB active_anon:67088kB inactive_anon:79700kB active_file:148kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2368kB bounce:0kB free_pcp:220kB local_pcp:0kB free_cma:0kB [ 1721.839085] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1721.866511] Node 0 DMA32 free:36192kB min:36200kB low:45248kB high:54296kB active_anon:67088kB inactive_anon:79700kB active_file:148kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2368kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1721.872209] lowmem_reserve[]: 0 0 0 0 0 [ 1721.898598] lowmem_reserve[]: 0 0 0 0 0 [ 1721.905387] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1721.907498] Node 0 [ 1721.934088] lowmem_reserve[]: 0 0 0 0 0 [ 1721.942175] Node 1 Normal free:53472kB min:53696kB low:67120kB high:80544kB active_anon:3392kB inactive_anon:25572kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:604kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1721.953695] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1722.050305] lowmem_reserve[]: 0 0 0 0 0 [ 1722.054335] Node 0 DMA: 11*4kB (UE) 1*8kB (E) 1*16kB (U) 10*32kB (UE) 6*64kB (UE) 2*128kB (UE) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11012kB [ 1722.177418] Node 0 DMA32: 616*4kB (ME) 403*8kB (ME) 189*16kB (ME) 680*32kB (UME) 11*64kB (UME) 40*128kB (UE) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36296kB [ 1722.258335] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1722.302013] lowmem_reserve[]: 0 0 0 0 0 [ 1722.306025] Node 1 Normal free:53472kB min:53696kB low:67120kB high:80544kB active_anon:3392kB inactive_anon:25572kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:604kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1722.348878] Node 1 Normal: 1574*4kB (UM) 2535*8kB (UM) 81*16kB (UM) 46*32kB (UM) 57*64kB (UM) 12*128kB (M) 10*256kB (UM) 30*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53472kB [ 1722.386843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1722.409562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1722.443121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1722.467364] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1722.491725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1722.542014] lowmem_reserve[]: 0 0 0 0 0 [ 1722.546038] Node 0 DMA: 11*4kB (UE) 1*8kB (E) 1*16kB (U) 10*32kB (UE) 6*64kB (UE) 2*128kB (UE) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11012kB [ 1722.554768] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1722.562648] device bridge_slave_1 left promiscuous mode [ 1722.639625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.676990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1722.691663] Node 0 DMA32: 616*4kB (ME) 403*8kB (ME) 189*16kB (ME) 680*32kB (UME) 11*64kB (UME) 40*128kB (UE) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36296kB [ 1722.706665] device bridge_slave_0 left promiscuous mode [ 1722.714523] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.717569] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1722.800596] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1722.816099] 27471 total pagecache pages [ 1722.843573] 0 pages in swap cache [ 1722.847042] Swap cache stats: add 0, delete 0, find 0/0 [ 1722.896108] Node 1 Normal: 1574*4kB (UM) 2535*8kB (UM) 81*16kB (UM) 46*32kB (UM) 57*64kB (UM) 12*128kB (M) 10*256kB (UM) 30*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 53472kB [ 1722.909188] Free swap = 0kB [ 1722.915242] device veth1_macvtap left promiscuous mode [ 1722.918434] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1722.920936] device veth0_macvtap left promiscuous mode [ 1722.932224] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1722.934929] Total swap = 0kB [ 1722.943260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1722.943265] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1722.943269] 27438 total pagecache pages [ 1722.943275] 0 pages in swap cache [ 1722.943278] Swap cache stats: add 0, delete 0, find 0/0 [ 1722.943281] Free swap = 0kB [ 1722.943283] Total swap = 0kB [ 1722.943288] 2097051 pages RAM [ 1722.943310] 0 pages HighMem/MovableOnly [ 1722.943313] 363849 pages reserved [ 1722.943315] 0 pages cma reserved [ 1722.943321] Out of memory (oom_kill_allocating_task): Kill process 9094 (systemd-rfkill) score 0 or sacrifice child [ 1722.943341] Killed process 9094 (systemd-rfkill) total-vm:12672kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1722.946347] 2097051 pages RAM [ 1722.958095] device veth1_vlan left promiscuous mode [ 1722.963823] 0 pages HighMem/MovableOnly [ 1722.967767] device veth0_vlan left promiscuous mode [ 1722.971304] 363849 pages reserved [ 1723.040112] 0 pages cma reserved [ 1723.439309] device hsr_slave_1 left promiscuous mode [ 1723.452175] device hsr_slave_0 left promiscuous mode [ 1723.466788] team0 (unregistering): Port device team_slave_1 removed [ 1723.483561] team0 (unregistering): Port device team_slave_0 removed [ 1723.530729] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1723.542084] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1723.572166] bond0 (unregistering): Released all slaves 15:42:11 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) 15:42:12 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000480)={r3, 0x1e}) recvmsg$can_bcm(r2, 0x0, 0x0) [ 1724.791832] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1724.793562] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1724.845398] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1724.850682] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1724.861680] CPU: 1 PID: 9083 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1724.869486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1724.878827] Call Trace: [ 1724.881401] dump_stack+0x1b2/0x281 [ 1724.885025] warn_alloc.cold+0x96/0x1cc [ 1724.888995] ? zone_watermark_ok_safe+0x220/0x220 [ 1724.893855] __alloc_pages_nodemask+0x2127/0x2720 [ 1724.898718] ? lock_acquire+0x170/0x3f0 [ 1724.902680] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1724.907522] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1724.912969] ? __mutex_unlock_slowpath+0x75/0x770 [ 1724.917797] alloc_pages_current+0x155/0x260 [ 1724.922183] ion_page_pool_alloc+0x118/0x1b0 [ 1724.926587] ion_system_heap_allocate+0x133/0x8c0 [ 1724.931414] ? _raw_spin_unlock+0x29/0x40 [ 1724.935550] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1724.940470] ? ion_system_contig_heap_create+0x130/0x130 [ 1724.945918] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1724.950914] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1724.955756] ion_alloc+0x27a/0x810 [ 1724.959292] ? ion_dma_buf_release+0x40/0x40 [ 1724.963690] ? __might_fault+0x177/0x1b0 [ 1724.967743] ion_ioctl+0xea/0x1f0 [ 1724.971184] ? ion_query_heaps+0x360/0x360 [ 1724.975406] ? lock_acquire+0x170/0x3f0 [ 1724.979371] ? ion_query_heaps+0x360/0x360 [ 1724.983596] do_vfs_ioctl+0x75a/0xff0 [ 1724.987380] ? ioctl_preallocate+0x1a0/0x1a0 [ 1724.991768] ? lock_downgrade+0x740/0x740 [ 1724.995905] ? __fget+0x225/0x360 [ 1724.999346] ? do_vfs_ioctl+0xff0/0xff0 [ 1725.003333] ? security_file_ioctl+0x83/0xb0 [ 1725.007730] SyS_ioctl+0x7f/0xb0 [ 1725.011078] ? do_vfs_ioctl+0xff0/0xff0 [ 1725.015061] do_syscall_64+0x1d5/0x640 [ 1725.018952] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1725.024151] RIP: 0033:0x4665d9 [ 1725.027325] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1725.035020] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1725.042282] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1725.049531] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1725.056887] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1725.064570] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1725.071923] CPU: 0 PID: 9107 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1725.079713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1725.089054] Call Trace: [ 1725.091636] dump_stack+0x1b2/0x281 [ 1725.095257] warn_alloc.cold+0x96/0x1cc [ 1725.099229] ? zone_watermark_ok_safe+0x220/0x220 [ 1725.104077] __alloc_pages_nodemask+0x2127/0x2720 [ 1725.108931] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1725.113426] ? finish_task_switch+0x178/0x610 [ 1725.117925] ? finish_task_switch+0x14d/0x610 [ 1725.122413] ? lock_acquire+0x170/0x3f0 [ 1725.126383] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1725.131223] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1725.136699] ? __mutex_unlock_slowpath+0x75/0x770 [ 1725.141536] ? alloc_pages_current+0x84/0x260 [ 1725.146023] alloc_pages_current+0x155/0x260 [ 1725.150432] ion_page_pool_alloc+0x118/0x1b0 [ 1725.154888] ion_system_heap_allocate+0x133/0x8c0 [ 1725.159739] ? ion_alloc+0x187/0x810 [ 1725.159752] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1725.168909] ? ion_system_contig_heap_create+0x130/0x130 [ 1725.168919] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1725.168930] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1725.168939] ion_alloc+0x204/0x810 [ 1725.168952] ? ion_dma_buf_release+0x40/0x40 [ 1725.168963] ? __might_fault+0x177/0x1b0 [ 1725.168975] ion_ioctl+0xea/0x1f0 [ 1725.168982] ? ion_query_heaps+0x360/0x360 [ 1725.168995] ? ion_query_heaps+0x360/0x360 [ 1725.169004] do_vfs_ioctl+0x75a/0xff0 [ 1725.169015] ? ioctl_preallocate+0x1a0/0x1a0 [ 1725.169024] ? lock_downgrade+0x740/0x740 [ 1725.169037] ? __fget+0x225/0x360 [ 1725.169048] ? do_vfs_ioctl+0xff0/0xff0 [ 1725.227812] ? security_file_ioctl+0x83/0xb0 [ 1725.232215] SyS_ioctl+0x7f/0xb0 [ 1725.235578] ? do_vfs_ioctl+0xff0/0xff0 [ 1725.239546] do_syscall_64+0x1d5/0x640 [ 1725.243447] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1725.248654] RIP: 0033:0x4665d9 [ 1725.251832] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1725.259529] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1725.266785] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1725.274039] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1725.281294] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1725.288550] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1725.303873] Mem-Info: [ 1725.307228] active_anon:17737 inactive_anon:26317 isolated_anon:0 [ 1725.307228] active_file:808 inactive_file:1702 isolated_file:0 [ 1725.307228] unevictable:0 dirty:7 writeback:0 unstable:0 [ 1725.307228] slab_reclaimable:12393 slab_unreclaimable:120936 [ 1725.307228] mapped:54842 shmem:27407 pagetables:780 bounce:0 [ 1725.307228] free:138401 free_pcp:390 free_cma:0 [ 1725.341023] Node 0 active_anon:67312kB inactive_anon:79700kB active_file:172kB inactive_file:3056kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123856kB dirty:20kB writeback:0kB shmem:83856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1725.369342] Node 1 active_anon:3636kB inactive_anon:25568kB active_file:3060kB inactive_file:3752kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:95512kB dirty:8kB writeback:28kB shmem:25772kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1725.397490] Node 0 DMA free:11168kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1725.514525] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1725.534496] Node 0 DMA32 free:123140kB min:36200kB low:45248kB high:54296kB active_anon:67312kB inactive_anon:79700kB active_file:576kB inactive_file:544kB unevictable:0kB writepending:92kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2240kB bounce:0kB free_pcp:884kB local_pcp:140kB free_cma:0kB [ 1725.612735] lowmem_reserve[]: 0 0 0 0 0 [ 1725.621332] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1725.704983] lowmem_reserve[]: 0 0 0 0 0 [ 1725.720927] Node 1 Normal free:465560kB min:53696kB low:67120kB high:80544kB active_anon:3636kB inactive_anon:25568kB active_file:1548kB inactive_file:1232kB unevictable:0kB writepending:36kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:880kB bounce:0kB free_pcp:620kB local_pcp:0kB free_cma:0kB [ 1725.720947] lowmem_reserve[]: 0 0 0 0 0 [ 1725.720965] Node 0 DMA: 157*4kB (UE) 35*8kB (UE) 12*16kB (U) 16*32kB (UE) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11084kB [ 1725.721038] Node 0 DMA32: 266*4kB (UME) 4037*8kB (UME) 1627*16kB [ 1725.834071] syz-executor.4: [ 1725.842909] (UME) 790*32kB (UME) 5*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 84992kB [ 1725.868132] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1725.880122] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1725.891010] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1725.900239] Node 1 Normal: 22818*4kB (U) 12845*8kB (U) 7827*16kB (UM) 4978*32kB (UM) 109*64kB (U) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 485792kB [ 1725.907367] CPU: 1 PID: 9110 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1725.922921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1725.932263] Call Trace: [ 1725.934858] dump_stack+0x1b2/0x281 [ 1725.938572] warn_alloc.cold+0x96/0x1cc [ 1725.939902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1725.942534] ? zone_watermark_ok_safe+0x220/0x220 [ 1725.956215] __alloc_pages_nodemask+0x2127/0x2720 [ 1725.960511] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1725.961053] ? _raw_spin_unlock_irq+0x24/0x80 [ 1725.974096] ? lock_acquire+0x170/0x3f0 [ 1725.978081] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1725.982927] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1725.987844] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1725.988371] ? __mutex_unlock_slowpath+0x75/0x770 [ 1725.997182] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1726.002004] alloc_pages_current+0x155/0x260 [ 1726.002016] ion_page_pool_alloc+0x118/0x1b0 [ 1726.002024] ion_system_heap_allocate+0x133/0x8c0 [ 1726.002033] ? ion_alloc+0x187/0x810 [ 1726.002043] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1726.002051] ? ion_system_contig_heap_create+0x130/0x130 [ 1726.002060] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1726.002069] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1726.002079] ion_alloc+0x204/0x810 [ 1726.037795] 28182 total pagecache pages [ 1726.039620] ? ion_dma_buf_release+0x40/0x40 [ 1726.044620] 0 pages in swap cache [ 1726.049442] ? __might_fault+0x177/0x1b0 [ 1726.049451] ion_ioctl+0xea/0x1f0 [ 1726.049459] ? ion_query_heaps+0x360/0x360 [ 1726.049471] ? lock_acquire+0x170/0x3f0 [ 1726.049478] ? ion_query_heaps+0x360/0x360 [ 1726.049487] do_vfs_ioctl+0x75a/0xff0 [ 1726.049497] ? ioctl_preallocate+0x1a0/0x1a0 [ 1726.049505] ? lock_downgrade+0x740/0x740 [ 1726.049516] ? __fget+0x225/0x360 [ 1726.049524] ? do_vfs_ioctl+0xff0/0xff0 [ 1726.049534] ? security_file_ioctl+0x83/0xb0 [ 1726.049543] SyS_ioctl+0x7f/0xb0 [ 1726.070111] Swap cache stats: add 0, delete 0, find 0/0 [ 1726.072496] ? do_vfs_ioctl+0xff0/0xff0 [ 1726.076720] Free swap = 0kB [ 1726.080678] do_syscall_64+0x1d5/0x640 [ 1726.080696] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1726.080703] RIP: 0033:0x4665d9 [ 1726.080708] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1726.097789] Total swap = 0kB [ 1726.100695] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1726.104666] 2097051 pages RAM [ 1726.109060] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1726.109065] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1726.109069] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1726.109074] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1726.188411] 0 pages HighMem/MovableOnly [ 1726.192382] 363849 pages reserved [ 1726.195827] 0 pages cma reserved [ 1728.725622] oom_reaper: reaped process 9107 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1728.747380] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1728.759351] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1728.790116] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1728.796057] CPU: 0 PID: 9083 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1728.797327] syz-executor.3 cpuset= [ 1728.803933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1728.803939] / [ 1728.807453] Call Trace: [ 1728.821086] dump_stack+0x1b2/0x281 [ 1728.824719] warn_alloc.cold+0x96/0x1cc [ 1728.828693] ? zone_watermark_ok_safe+0x220/0x220 [ 1728.833535] ? usleep_range+0x130/0x130 [ 1728.837504] ? try_to_free_pages+0x23f/0x6e0 [ 1728.841904] ? _find_next_bit+0xdb/0x100 [ 1728.845964] ? run_timer_softirq+0x5a0/0x5a0 [ 1728.850371] __alloc_pages_nodemask+0x2127/0x2720 [ 1728.850376] oom_reaper: reaped process 9084 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1728.865099] ? lock_acquire+0x170/0x3f0 [ 1728.869076] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1728.873909] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1728.875060] oom_reaper: reaped process 9110 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1728.878395] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1728.878412] alloc_pages_current+0x155/0x260 [ 1728.898087] ion_page_pool_alloc+0x118/0x1b0 [ 1728.902486] ion_system_heap_allocate+0x133/0x8c0 [ 1728.905373] mems_allowed=0-1 [ 1728.907423] ? _raw_spin_unlock+0x29/0x40 [ 1728.907431] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1728.907440] ? ion_system_contig_heap_create+0x130/0x130 [ 1728.924971] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1728.929991] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1728.934839] ion_alloc+0x27a/0x810 [ 1728.938377] ? ion_dma_buf_release+0x40/0x40 [ 1728.942764] ? __might_fault+0x177/0x1b0 [ 1728.946803] ion_ioctl+0xea/0x1f0 [ 1728.950232] ? ion_query_heaps+0x360/0x360 [ 1728.954460] ? lock_acquire+0x170/0x3f0 [ 1728.958410] ? ion_query_heaps+0x360/0x360 [ 1728.962619] do_vfs_ioctl+0x75a/0xff0 [ 1728.966424] ? ioctl_preallocate+0x1a0/0x1a0 [ 1728.970809] ? lock_downgrade+0x740/0x740 [ 1728.974937] ? __fget+0x225/0x360 [ 1728.978389] ? do_vfs_ioctl+0xff0/0xff0 [ 1728.982346] ? security_file_ioctl+0x83/0xb0 [ 1728.986731] SyS_ioctl+0x7f/0xb0 [ 1728.990073] ? do_vfs_ioctl+0xff0/0xff0 [ 1728.994029] do_syscall_64+0x1d5/0x640 [ 1728.997895] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1729.003058] RIP: 0033:0x4665d9 [ 1729.006223] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1729.013904] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1729.021148] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1729.028399] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1729.035668] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1729.042915] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1729.050170] CPU: 1 PID: 9084 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1729.057964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1729.067309] Call Trace: [ 1729.069889] dump_stack+0x1b2/0x281 [ 1729.070083] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 1729.073514] warn_alloc.cold+0x96/0x1cc [ 1729.073525] ? zone_watermark_ok_safe+0x220/0x220 [ 1729.089404] , order=0, oom_score_adj=0 [ 1729.092410] ? usleep_range+0x130/0x130 [ 1729.096368] in:imklog cpuset= [ 1729.100325] ? try_to_free_pages+0x23f/0x6e0 [ 1729.100334] ? _find_next_bit+0xdb/0x100 [ 1729.100343] ? run_timer_softirq+0x5a0/0x5a0 [ 1729.100358] __alloc_pages_nodemask+0x2127/0x2720 [ 1729.100373] ? lock_acquire+0x170/0x3f0 [ 1729.105359] / [ 1729.107862] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1729.114186] mems_allowed=0-1 [ 1729.116288] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1729.139144] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1729.144580] alloc_pages_current+0x155/0x260 [ 1729.148999] ion_page_pool_alloc+0x118/0x1b0 [ 1729.153411] ion_system_heap_allocate+0x133/0x8c0 [ 1729.158237] ? ion_alloc+0x187/0x810 [ 1729.161937] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1729.167367] ? ion_system_contig_heap_create+0x130/0x130 [ 1729.172805] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1729.177804] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1729.182646] ion_alloc+0x204/0x810 [ 1729.186177] ? ion_dma_buf_release+0x40/0x40 [ 1729.190576] ? __might_fault+0x177/0x1b0 [ 1729.194622] ion_ioctl+0xea/0x1f0 [ 1729.198059] ? ion_query_heaps+0x360/0x360 [ 1729.202280] ? lock_acquire+0x170/0x3f0 [ 1729.206229] ? ion_query_heaps+0x360/0x360 [ 1729.210452] do_vfs_ioctl+0x75a/0xff0 [ 1729.214242] ? ioctl_preallocate+0x1a0/0x1a0 [ 1729.218633] ? lock_downgrade+0x740/0x740 [ 1729.222769] ? __fget+0x225/0x360 [ 1729.226200] ? do_vfs_ioctl+0xff0/0xff0 [ 1729.230154] ? security_file_ioctl+0x83/0xb0 [ 1729.234556] SyS_ioctl+0x7f/0xb0 [ 1729.237917] ? do_vfs_ioctl+0xff0/0xff0 [ 1729.241888] do_syscall_64+0x1d5/0x640 [ 1729.245767] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1729.250943] RIP: 0033:0x4665d9 [ 1729.254130] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1729.261822] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1729.269087] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1729.276488] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1729.283745] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1729.291018] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1729.299166] CPU: 0 PID: 9062 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1729.306534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1729.310516] syz-executor.2: [ 1729.315871] Call Trace: [ 1729.315879] page allocation failure: order:0 [ 1729.318891] dump_stack+0x1b2/0x281 [ 1729.318909] dump_header+0x178/0x82f [ 1729.321496] syz-executor.4: [ 1729.325917] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1729.341310] ? ___ratelimit+0x2cd/0x530 [ 1729.343100] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1729.345288] oom_kill_process.cold+0x10/0xa40 [ 1729.345306] out_of_memory+0xe3e/0x1190 [ 1729.355190] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1729.359725] ? oom_killer_disable+0x1c0/0x1c0 [ 1729.359734] ? mutex_trylock+0x152/0x1a0 [ 1729.359745] __alloc_pages_nodemask+0x23e1/0x2720 [ 1729.363694] (null) [ 1729.370929] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1729.370950] alloc_pages_current+0x155/0x260 [ 1729.375431] (null) [ 1729.379463] filemap_fault+0x11a1/0x1ad0 [ 1729.379483] ext4_filemap_fault+0x84/0xb0 [ 1729.384294] syz-executor.4 cpuset= [ 1729.386423] __do_fault+0xfa/0x380 [ 1729.391260] syz-executor.2 cpuset= [ 1729.395636] __handle_mm_fault+0x2497/0x4620 [ 1729.397772] / [ 1729.401793] ? vm_insert_page+0x7c0/0x7c0 [ 1729.405951] mems_allowed=0-1 [ 1729.409467] ? lock_downgrade+0x740/0x740 [ 1729.409480] ? mark_held_locks+0xa6/0xf0 [ 1729.409494] handle_mm_fault+0x455/0x9c0 [ 1729.413008] / [ 1729.416527] __do_page_fault+0x549/0xad0 [ 1729.420932] mems_allowed=0-1 [ 1729.422608] ? spurious_fault+0x640/0x640 [ 1729.454930] ? do_page_fault+0x60/0x500 [ 1729.458885] ? page_fault+0x2f/0x50 [ 1729.462487] page_fault+0x45/0x50 [ 1729.465928] RIP: 1fa0:0x1f9f [ 1729.468921] RSP: 0000:00005579624139d0 EFLAGS: 7f20fa62ada0 [ 1729.468939] CPU: 1 PID: 9110 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1729.472825] warn_alloc_show_mem: 2 callbacks suppressed [ 1729.472827] Mem-Info: [ 1729.474649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1729.482487] active_anon:17676 inactive_anon:26317 isolated_anon:0 [ 1729.482487] active_file:13 inactive_file:14 isolated_file:0 [ 1729.482487] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1729.482487] slab_reclaimable:12353 slab_unreclaimable:121345 [ 1729.482487] mapped:52925 shmem:27407 pagetables:781 bounce:0 [ 1729.482487] free:13945 free_pcp:110 free_cma:0 [ 1729.487757] Call Trace: [ 1729.487774] dump_stack+0x1b2/0x281 [ 1729.487787] warn_alloc.cold+0x96/0x1cc [ 1729.487798] ? zone_watermark_ok_safe+0x220/0x220 [ 1729.487807] ? usleep_range+0x130/0x130 [ 1729.487815] ? try_to_free_pages+0x23f/0x6e0 [ 1729.487826] ? _find_next_bit+0xdb/0x100 [ 1729.493639] Node 0 active_anon:67140kB inactive_anon:79700kB active_file:32kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121732kB dirty:0kB writeback:0kB shmem:83856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1729.499571] ? run_timer_softirq+0x5a0/0x5a0 [ 1729.499587] __alloc_pages_nodemask+0x2127/0x2720 [ 1729.499601] ? lock_acquire+0x170/0x3f0 [ 1729.499622] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1729.536487] Node 1 active_anon:3564kB inactive_anon:25568kB active_file:20kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:89968kB dirty:0kB writeback:0kB shmem:25772kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1729.539001] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1729.539016] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1729.539033] alloc_pages_current+0x155/0x260 [ 1729.542995] Node 0 [ 1729.547822] ion_page_pool_alloc+0x118/0x1b0 [ 1729.547833] ion_system_heap_allocate+0x133/0x8c0 [ 1729.547841] ? ion_alloc+0x187/0x810 [ 1729.547850] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1729.547858] ? ion_system_contig_heap_create+0x130/0x130 [ 1729.547871] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1729.547881] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1729.547890] ion_alloc+0x204/0x810 [ 1729.547902] ? ion_dma_buf_release+0x40/0x40 [ 1729.547915] ? __might_fault+0x177/0x1b0 [ 1729.547924] ion_ioctl+0xea/0x1f0 [ 1729.547950] ? ion_query_heaps+0x360/0x360 [ 1729.547962] ? lock_acquire+0x170/0x3f0 [ 1729.547968] ? ion_query_heaps+0x360/0x360 [ 1729.547979] do_vfs_ioctl+0x75a/0xff0 [ 1729.547989] ? ioctl_preallocate+0x1a0/0x1a0 [ 1729.548002] ? lock_downgrade+0x740/0x740 [ 1729.548013] ? __fget+0x225/0x360 [ 1729.548020] ? do_vfs_ioctl+0xff0/0xff0 [ 1729.548031] ? security_file_ioctl+0x83/0xb0 [ 1729.548041] SyS_ioctl+0x7f/0xb0 [ 1729.548048] ? do_vfs_ioctl+0xff0/0xff0 [ 1729.548058] do_syscall_64+0x1d5/0x640 [ 1729.548071] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1729.548078] RIP: 0033:0x4665d9 [ 1729.548083] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1729.548092] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1729.548097] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1729.548102] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1729.548108] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1729.548113] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1729.559512] CPU: 1 PID: 9107 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1729.568976] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1729.588467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1729.588471] Call Trace: [ 1729.588489] dump_stack+0x1b2/0x281 [ 1729.588502] warn_alloc.cold+0x96/0x1cc [ 1729.588512] ? zone_watermark_ok_safe+0x220/0x220 [ 1729.588520] ? usleep_range+0x130/0x130 [ 1729.588528] ? try_to_free_pages+0x23f/0x6e0 [ 1729.588538] ? _find_next_bit+0xdb/0x100 [ 1729.588547] ? run_timer_softirq+0x5a0/0x5a0 [ 1729.588561] __alloc_pages_nodemask+0x2127/0x2720 [ 1729.588575] ? lock_acquire+0x170/0x3f0 [ 1729.588588] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1729.588599] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1729.598656] Mem-Info: [ 1729.601782] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1729.606606] active_anon:17676 inactive_anon:26317 isolated_anon:0 [ 1729.606606] active_file:13 inactive_file:14 isolated_file:0 [ 1729.606606] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1729.606606] slab_reclaimable:12353 slab_unreclaimable:121345 [ 1729.606606] mapped:52925 shmem:27407 pagetables:781 bounce:0 [ 1729.606606] free:13945 free_pcp:110 free_cma:0 [ 1729.634076] ? retint_kernel+0x2d/0x2d [ 1729.634089] alloc_pages_current+0x155/0x260 [ 1729.634100] ion_page_pool_alloc+0x118/0x1b0 [ 1729.634108] ion_system_heap_allocate+0x133/0x8c0 [ 1729.634116] ? ion_alloc+0x187/0x810 [ 1729.634125] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1729.634133] ? ion_system_contig_heap_create+0x130/0x130 [ 1729.634142] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1729.634150] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1729.634159] ion_alloc+0x204/0x810 [ 1729.634171] ? ion_dma_buf_release+0x40/0x40 [ 1729.634182] ? __might_fault+0x177/0x1b0 [ 1729.644298] lowmem_reserve[]: [ 1729.648469] ion_ioctl+0xea/0x1f0 [ 1729.648479] ? ion_query_heaps+0x360/0x360 [ 1729.648490] ? ion_query_heaps+0x360/0x360 [ 1729.648499] do_vfs_ioctl+0x75a/0xff0 [ 1729.648510] ? ioctl_preallocate+0x1a0/0x1a0 [ 1729.648522] ? lock_downgrade+0x740/0x740 [ 1729.650734] 0 [ 1729.655125] ? __fget+0x225/0x360 [ 1729.665356] 2717 [ 1729.669089] ? do_vfs_ioctl+0xff0/0xff0 [ 1729.669101] ? security_file_ioctl+0x83/0xb0 [ 1729.669110] SyS_ioctl+0x7f/0xb0 [ 1729.669117] ? do_vfs_ioctl+0xff0/0xff0 [ 1729.669126] do_syscall_64+0x1d5/0x640 [ 1729.669140] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1729.674577] 2718 [ 1729.679569] RIP: 0033:0x4665d9 [ 1729.679574] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1729.679582] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1729.679586] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1729.679590] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1729.679594] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1729.679599] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1730.098296] Node 0 active_anon:67540kB inactive_anon:79700kB active_file:3036kB inactive_file:6136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126932kB dirty:0kB writeback:0kB shmem:83856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1730.126745] Node 1 active_anon:3164kB inactive_anon:25568kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:89968kB dirty:0kB writeback:0kB shmem:25772kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1730.156310] Node 0 DMA free:11376kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1730.227181] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1730.232247] Node 0 DMA32 free:105900kB min:36200kB low:45248kB high:54296kB active_anon:67540kB inactive_anon:79700kB active_file:3336kB inactive_file:6736kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2244kB bounce:0kB free_pcp:900kB local_pcp:296kB free_cma:0kB [ 1730.267168] lowmem_reserve[]: 0 0 0 0 0 [ 1730.279727] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1730.307828] lowmem_reserve[]: 0 0 0 0 0 [ 1730.311825] Node 1 Normal free:458152kB min:53696kB low:67120kB high:80544kB active_anon:3164kB inactive_anon:25568kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:732kB bounce:0kB free_pcp:740kB local_pcp:0kB free_cma:0kB [ 1730.367099] lowmem_reserve[]: 0 0 0 0 0 [ 1730.371155] Node 0 DMA: 2*4kB (UE) 41*8kB (UE) 24*16kB (U) 21*32kB (UE) 8*64kB (UE) 3*128kB (UE) 2*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 11504kB [ 1730.407086] Node 0 DMA32: 1904*4kB (UME) 523*8kB (UME) 200*16kB (UME) 73*32kB (UME) 450*64kB (UM) 96*128kB (UM) 4*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 60472kB [ 1730.447063] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1730.459581] Node 1 Normal: 6926*4kB (UM) 150*8kB (UM) 66*16kB (UM) 58*32kB (UM) 5018*64kB (UM) 579*128kB (UM) 170*256kB (U) 13*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 477256kB [ 1730.488752] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1730.509130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1730.528917] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1730.549294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1730.569395] 29948 total pagecache pages [ 1730.573396] 0 pages in swap cache [ 1730.576835] Swap cache stats: add 0, delete 0, find 0/0 [ 1730.582465] Free swap = 0kB [ 1730.597060] Total swap = 0kB [ 1730.600172] 2097051 pages RAM [ 1730.603261] 0 pages HighMem/MovableOnly [ 1730.617231] 363849 pages reserved [ 1730.617235] 0 pages cma reserved [ 1730.617241] Out of memory (oom_kill_allocating_task): Kill process 9062 (in:imklog) score 0 or sacrifice child [ 1730.617288] Killed process 9056 (rsyslogd) total-vm:254332kB, anon-rss:1172kB, file-rss:0kB, shmem-rss:0kB [ 1730.647644] 2718 2718 [ 1730.648827] oom_reaper: reaped process 9056 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1730.650146] Node 0 DMA32 free:46232kB min:36200kB low:45248kB high:54296kB active_anon:67340kB inactive_anon:79700kB active_file:3536kB inactive_file:6636kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2244kB bounce:0kB free_pcp:1016kB local_pcp:292kB free_cma:0kB [ 1730.748905] lowmem_reserve[]: 0 0 0 0 0 [ 1730.752949] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1730.787107] lowmem_reserve[]: 0 0 0 0 0 [ 1730.791133] Node 1 Normal free:147848kB min:53696kB low:67120kB high:80544kB active_anon:2164kB inactive_anon:25568kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:732kB bounce:0kB free_pcp:1084kB local_pcp:352kB free_cma:0kB [ 1730.827343] lowmem_reserve[]: 0 0 0 0 0 [ 1730.847043] Node 0 DMA: 17*4kB (UE) 33*8kB (UE) 24*16kB (U) 21*32kB (UE) 2*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 10988kB [ 1730.887038] Node 0 DMA32: 8690*4kB (UME) 1378*8kB (UE) 438*16kB (UME) 182*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 58616kB [ 1730.927107] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1730.947718] Node 1 Normal: 21558*4kB (UM) 7593*8kB (UM) 373*16kB (U) 159*32kB (UM) 12*64kB (U) 2*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 159312kB [ 1730.976985] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1730.987009] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1730.995908] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1731.016998] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1731.025575] 30021 total pagecache pages [ 1731.030354] 0 pages in swap cache [ 1731.033885] Swap cache stats: add 0, delete 0, find 0/0 [ 1731.040119] Free swap = 0kB [ 1731.043126] Total swap = 0kB [ 1731.046130] 2097051 pages RAM [ 1731.050579] 0 pages HighMem/MovableOnly [ 1731.054605] 363849 pages reserved [ 1731.058747] 0 pages cma reserved 15:42:19 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) [ 1732.228880] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1732.229605] syz-executor.2: [ 1732.253707] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1732.281728] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1732.283356] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1732.309237] CPU: 0 PID: 9084 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1732.314236] syz-executor.4 cpuset= [ 1732.317030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1732.317034] Call Trace: [ 1732.317050] dump_stack+0x1b2/0x281 [ 1732.317063] warn_alloc.cold+0x96/0x1cc [ 1732.317074] ? zone_watermark_ok_safe+0x220/0x220 [ 1732.317095] __alloc_pages_nodemask+0x2127/0x2720 [ 1732.317106] ? lock_acquire+0x170/0x3f0 [ 1732.317116] ? lock_acquire+0x170/0x3f0 [ 1732.317129] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1732.321765] syz-executor.2 cpuset= [ 1732.329991] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1732.330003] ? __mutex_unlock_slowpath+0x75/0x770 [ 1732.330017] alloc_pages_current+0x155/0x260 [ 1732.330029] ion_page_pool_alloc+0x118/0x1b0 [ 1732.330038] ion_system_heap_allocate+0x133/0x8c0 [ 1732.330048] ? _raw_spin_unlock+0x29/0x40 [ 1732.330056] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1732.330064] ? ion_system_contig_heap_create+0x130/0x130 [ 1732.330076] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1732.352201] / [ 1732.353810] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1732.369827] mems_allowed=0-1 [ 1732.371520] ion_alloc+0x27a/0x810 [ 1732.371534] ? ion_dma_buf_release+0x40/0x40 [ 1732.376395] / [ 1732.380759] ? __might_fault+0x177/0x1b0 [ 1732.413418] mems_allowed=0-1 [ 1732.415998] ion_ioctl+0xea/0x1f0 [ 1732.416008] ? ion_query_heaps+0x360/0x360 [ 1732.443612] ? lock_acquire+0x170/0x3f0 [ 1732.447574] ? ion_query_heaps+0x360/0x360 [ 1732.451786] do_vfs_ioctl+0x75a/0xff0 [ 1732.455586] ? ioctl_preallocate+0x1a0/0x1a0 [ 1732.459981] ? lock_downgrade+0x740/0x740 [ 1732.464131] ? __fget+0x225/0x360 [ 1732.467561] ? do_vfs_ioctl+0xff0/0xff0 [ 1732.471526] ? security_file_ioctl+0x83/0xb0 [ 1732.475922] SyS_ioctl+0x7f/0xb0 [ 1732.479276] ? do_vfs_ioctl+0xff0/0xff0 [ 1732.483236] do_syscall_64+0x1d5/0x640 [ 1732.487203] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1732.492370] RIP: 0033:0x4665d9 [ 1732.495550] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1732.503422] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1732.510681] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1732.518042] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1732.525302] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1732.532647] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1732.539930] CPU: 1 PID: 9107 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1732.547830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1732.557359] Call Trace: [ 1732.559062] warn_alloc_show_mem: 3 callbacks suppressed [ 1732.559065] Mem-Info: [ 1732.559941] dump_stack+0x1b2/0x281 [ 1732.559955] warn_alloc.cold+0x96/0x1cc [ 1732.565581] active_anon:17584 inactive_anon:26317 isolated_anon:0 [ 1732.565581] active_file:2441 inactive_file:3003 isolated_file:12 [ 1732.565581] unevictable:0 dirty:14 writeback:0 unstable:0 [ 1732.565581] slab_reclaimable:12430 slab_unreclaimable:123009 [ 1732.565581] mapped:48706 shmem:27407 pagetables:718 bounce:0 [ 1732.565581] free:451815 free_pcp:317 free_cma:0 [ 1732.567915] ? zone_watermark_ok_safe+0x220/0x220 [ 1732.567938] __alloc_pages_nodemask+0x2127/0x2720 [ 1732.567953] ? lock_acquire+0x170/0x3f0 [ 1732.567966] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1732.567983] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1732.567994] ? __mutex_unlock_slowpath+0x75/0x770 [ 1732.568008] alloc_pages_current+0x155/0x260 [ 1732.568020] ion_page_pool_alloc+0x118/0x1b0 [ 1732.568029] ion_system_heap_allocate+0x133/0x8c0 [ 1732.568039] ? _raw_spin_unlock+0x29/0x40 [ 1732.574059] Node 0 active_anon:68220kB inactive_anon:79704kB active_file:9740kB inactive_file:12008kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:104724kB dirty:44kB writeback:0kB shmem:83860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1732.575631] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1732.575642] ? ion_system_contig_heap_create+0x130/0x130 [ 1732.575651] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1732.575673] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1732.611974] Node 1 active_anon:2116kB inactive_anon:25564kB active_file:24kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90100kB dirty:12kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1732.614310] ion_alloc+0x27a/0x810 [ 1732.614323] ? ion_dma_buf_release+0x40/0x40 [ 1732.619200] Node 0 [ 1732.623095] ? __might_fault+0x177/0x1b0 [ 1732.623107] ion_ioctl+0xea/0x1f0 [ 1732.623119] ? ion_query_heaps+0x360/0x360 [ 1732.630509] DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1732.633559] ? ion_query_heaps+0x360/0x360 [ 1732.633568] do_vfs_ioctl+0x75a/0xff0 [ 1732.633578] ? ioctl_preallocate+0x1a0/0x1a0 [ 1732.638540] lowmem_reserve[]: [ 1732.642803] ? lock_downgrade+0x740/0x740 [ 1732.642816] ? __fget+0x225/0x360 [ 1732.642826] ? do_vfs_ioctl+0xff0/0xff0 [ 1732.649622] 0 [ 1732.652046] ? security_file_ioctl+0x83/0xb0 [ 1732.652055] SyS_ioctl+0x7f/0xb0 [ 1732.652064] ? do_vfs_ioctl+0xff0/0xff0 [ 1732.656213] 2717 [ 1732.684377] do_syscall_64+0x1d5/0x640 [ 1732.684392] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1732.684399] RIP: 0033:0x4665d9 [ 1732.684403] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1732.684412] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1732.684417] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1732.684421] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1732.684425] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1732.684430] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1732.762647] syz-executor.1: [ 1732.780420] 2718 [ 1732.791548] CPU: 1 PID: 9110 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1732.792656] 2718 [ 1732.795733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1732.799911] 2718 [ 1732.803274] Call Trace: [ 1732.809007] dump_stack+0x1b2/0x281 [ 1732.813383] Node 0 [ 1732.816736] warn_alloc.cold+0x96/0x1cc [ 1732.816747] ? zone_watermark_ok_safe+0x220/0x220 [ 1732.816772] __alloc_pages_nodemask+0x2127/0x2720 [ 1732.816781] ? io_schedule_timeout+0x140/0x140 [ 1732.816796] ? lock_acquire+0x170/0x3f0 [ 1732.816812] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1732.820940] DMA32 free:846572kB min:36200kB low:45248kB high:54296kB active_anon:68020kB inactive_anon:79704kB active_file:9360kB inactive_file:12728kB unevictable:0kB writepending:44kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2204kB bounce:0kB free_pcp:240kB local_pcp:0kB free_cma:0kB [ 1732.822887] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1732.826764] lowmem_reserve[]: [ 1732.831926] ? __mutex_unlock_slowpath+0x75/0x770 [ 1732.835087] 0 [ 1732.842788] alloc_pages_current+0x155/0x260 [ 1732.842799] ion_page_pool_alloc+0x118/0x1b0 [ 1732.842808] ion_system_heap_allocate+0x133/0x8c0 [ 1732.842817] ? _raw_spin_unlock+0x29/0x40 [ 1732.842826] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1732.850083] 0 [ 1732.857317] ? ion_system_contig_heap_create+0x130/0x130 [ 1732.857326] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1732.857335] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1732.857345] ion_alloc+0x27a/0x810 [ 1732.857356] ? ion_dma_buf_release+0x40/0x40 [ 1732.864619] 0 [ 1732.871874] ? __might_fault+0x177/0x1b0 [ 1732.871885] ion_ioctl+0xea/0x1f0 [ 1732.871894] ? ion_query_heaps+0x360/0x360 [ 1732.896676] 0 [ 1732.903346] ? lock_acquire+0x170/0x3f0 [ 1732.905379] 0 [ 1732.907964] ? ion_query_heaps+0x360/0x360 [ 1732.907975] do_vfs_ioctl+0x75a/0xff0 [ 1732.907986] ? ioctl_preallocate+0x1a0/0x1a0 [ 1732.907993] ? lock_downgrade+0x740/0x740 [ 1732.908004] ? __fget+0x225/0x360 [ 1732.908012] ? do_vfs_ioctl+0xff0/0xff0 [ 1732.908022] ? security_file_ioctl+0x83/0xb0 [ 1732.908032] SyS_ioctl+0x7f/0xb0 [ 1732.927565] ? do_vfs_ioctl+0xff0/0xff0 [ 1732.932232] Node 0 [ 1732.936188] do_syscall_64+0x1d5/0x640 [ 1732.956699] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1732.969714] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1732.969723] RIP: 0033:0x4665d9 [ 1732.969727] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1732.979595] page allocation failure: order:4 [ 1732.983077] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1732.984860] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1732.989242] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1732.989247] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1732.989251] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1732.989256] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1733.185591] lowmem_reserve[]: 0 0 0 0 0 [ 1733.190113] Node 1 Normal free:1046036kB min:53696kB low:67120kB high:80544kB active_anon:2116kB inactive_anon:25564kB active_file:24kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:668kB bounce:0kB free_pcp:1356kB local_pcp:660kB free_cma:0kB [ 1733.219645] lowmem_reserve[]: 0 0 0 0 0 [ 1733.223646] Node 0 DMA: 61*4kB (UE) 71*8kB (UE) 44*16kB (U) 27*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 11084kB [ 1733.239695] Node 0 DMA32: 40592*4kB (UME) 29166*8kB (UME) 14554*16kB (UME) 7335*32kB (UME) 166*64kB (U) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 874288kB [ 1733.255653] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1733.266875] Node 1 Normal: 56392*4kB (UM) 25606*8kB (U) 15833*16kB (U) 9859*32kB (UM) 959*64kB (U) 36*128kB (U) 10*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1067776kB [ 1733.282510] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1733.292027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1733.301039] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1733.310266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1733.319253] 32870 total pagecache pages [ 1733.323230] 0 pages in swap cache [ 1733.327420] Swap cache stats: add 0, delete 0, find 0/0 [ 1733.332779] Free swap = 0kB [ 1733.335787] Total swap = 0kB [ 1733.339814] 2097051 pages RAM [ 1733.342913] 0 pages HighMem/MovableOnly [ 1733.347606] 363849 pages reserved [ 1733.351051] 0 pages cma reserved [ 1733.357256] (null) [ 1733.361103] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1733.367207] CPU: 0 PID: 9125 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1733.375002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1733.384347] Call Trace: [ 1733.386928] dump_stack+0x1b2/0x281 [ 1733.390552] warn_alloc.cold+0x96/0x1cc [ 1733.394517] ? zone_watermark_ok_safe+0x220/0x220 [ 1733.399479] __alloc_pages_nodemask+0x2127/0x2720 [ 1733.404493] ? lock_acquire+0x170/0x3f0 [ 1733.408464] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1733.413313] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1733.418761] ? __mutex_unlock_slowpath+0x75/0x770 [ 1733.423597] alloc_pages_current+0x155/0x260 [ 1733.427995] ion_page_pool_alloc+0x118/0x1b0 [ 1733.432392] ion_system_heap_allocate+0x133/0x8c0 [ 1733.437225] ? ion_alloc+0x187/0x810 [ 1733.440937] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1733.446385] ? ion_system_contig_heap_create+0x130/0x130 [ 1733.451824] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1733.456830] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1733.461663] ion_alloc+0x204/0x810 [ 1733.465200] ? ion_dma_buf_release+0x40/0x40 [ 1733.469606] ? __might_fault+0x177/0x1b0 [ 1733.473653] ion_ioctl+0xea/0x1f0 [ 1733.477091] ? ion_query_heaps+0x360/0x360 [ 1733.481310] ? lock_acquire+0x170/0x3f0 [ 1733.485273] ? ion_query_heaps+0x360/0x360 [ 1733.489506] do_vfs_ioctl+0x75a/0xff0 [ 1733.493299] ? ioctl_preallocate+0x1a0/0x1a0 [ 1733.497694] ? lock_downgrade+0x740/0x740 [ 1733.501836] ? __fget+0x225/0x360 [ 1733.505284] ? do_vfs_ioctl+0xff0/0xff0 [ 1733.509248] ? security_file_ioctl+0x83/0xb0 [ 1733.513666] SyS_ioctl+0x7f/0xb0 [ 1733.517020] ? do_vfs_ioctl+0xff0/0xff0 [ 1733.520983] do_syscall_64+0x1d5/0x640 [ 1733.524866] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1733.530045] RIP: 0033:0x4665d9 [ 1733.533228] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1733.540926] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1733.548181] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1733.555440] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1733.562719] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1733.569979] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1733.597232] warn_alloc_show_mem: 2 callbacks suppressed [ 1733.597235] Mem-Info: [ 1733.622036] active_anon:17532 inactive_anon:26317 isolated_anon:0 [ 1733.622036] active_file:2459 inactive_file:3061 isolated_file:0 [ 1733.622036] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1733.622036] slab_reclaimable:12437 slab_unreclaimable:123112 [ 1733.622036] mapped:48738 shmem:27407 pagetables:740 bounce:0 [ 1733.622036] free:501042 free_pcp:697 free_cma:0 [ 1733.668767] Node 0 active_anon:68012kB inactive_anon:79704kB active_file:9812kB inactive_file:12240kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104764kB dirty:12kB writeback:0kB shmem:83860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1733.704194] Node 1 active_anon:2116kB inactive_anon:25564kB active_file:24kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90188kB dirty:4kB writeback:0kB shmem:25768kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1733.736564] Node 0 DMA free:11084kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1733.766124] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1733.774685] Node 0 DMA32 free:884600kB min:36200kB low:45248kB high:54296kB active_anon:68012kB inactive_anon:79704kB active_file:9812kB inactive_file:12640kB unevictable:0kB writepending:12kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2292kB bounce:0kB free_pcp:912kB local_pcp:792kB free_cma:0kB [ 1733.810065] lowmem_reserve[]: 0 0 0 0 0 [ 1733.817987] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1733.875242] lowmem_reserve[]: 0 0 0 0 0 [ 1733.900994] Node 1 Normal free:1101008kB min:53696kB low:67120kB high:80544kB active_anon:2116kB inactive_anon:25564kB active_file:24kB inactive_file:4kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:668kB bounce:0kB free_pcp:1244kB local_pcp:620kB free_cma:0kB [ 1733.940292] lowmem_reserve[]: 0 0 0 0 0 [ 1733.968897] Node 0 DMA: 64*4kB (UE) 71*8kB (UE) 44*16kB (U) 27*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 11096kB [ 1733.986236] Node 0 DMA32: 1*4kB (M) 17458*8kB (UME) 15471*16kB (UME) 7617*32kB (UME) 320*64kB (U) 14*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 653220kB [ 1734.024195] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1734.046458] Node 1 Normal: 56660*4kB (UM) 25650*8kB (U) 16153*16kB (U) 10121*32kB (UM) 1165*64kB (U) 52*128kB (U) 16*256kB (U) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 1101008kB [ 1734.082850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1734.110736] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 15:42:21 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) [ 1734.136928] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1734.145794] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1734.163684] 33188 total pagecache pages [ 1734.167922] 0 pages in swap cache [ 1734.171488] Swap cache stats: add 0, delete 0, find 0/0 [ 1734.176927] Free swap = 0kB [ 1734.180125] Total swap = 0kB [ 1734.183219] 2097051 pages RAM [ 1734.186345] 0 pages HighMem/MovableOnly [ 1734.190855] 363849 pages reserved [ 1734.194343] 0 pages cma reserved [ 1734.294230] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1734.319205] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1734.329807] CPU: 1 PID: 9131 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1734.337602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1734.347038] Call Trace: [ 1734.349623] dump_stack+0x1b2/0x281 [ 1734.353243] warn_alloc.cold+0x96/0x1cc [ 1734.357211] ? zone_watermark_ok_safe+0x220/0x220 [ 1734.362071] __alloc_pages_nodemask+0x2127/0x2720 [ 1734.366908] ? io_schedule_timeout+0x140/0x140 [ 1734.371492] ? lock_acquire+0x170/0x3f0 [ 1734.375468] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1734.380317] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1734.385777] ? __mutex_unlock_slowpath+0x75/0x770 [ 1734.390616] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 1734.395462] alloc_pages_current+0x155/0x260 [ 1734.399867] ion_page_pool_alloc+0x118/0x1b0 [ 1734.404367] ion_system_heap_allocate+0x133/0x8c0 [ 1734.409222] ? ion_alloc+0x187/0x810 [ 1734.412942] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1734.418385] ? ion_system_contig_heap_create+0x130/0x130 [ 1734.423834] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1734.428848] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1734.433693] ion_alloc+0x204/0x810 [ 1734.437232] ? ion_dma_buf_release+0x40/0x40 [ 1734.441658] ? __might_fault+0x177/0x1b0 [ 1734.445718] ion_ioctl+0xea/0x1f0 [ 1734.449164] ? ion_query_heaps+0x360/0x360 [ 1734.453393] ? lock_acquire+0x170/0x3f0 [ 1734.457382] ? ion_query_heaps+0x360/0x360 [ 1734.461626] do_vfs_ioctl+0x75a/0xff0 [ 1734.465432] ? ioctl_preallocate+0x1a0/0x1a0 [ 1734.469832] ? lock_downgrade+0x740/0x740 [ 1734.474022] ? __fget+0x225/0x360 [ 1734.477470] ? do_vfs_ioctl+0xff0/0xff0 [ 1734.481437] ? security_file_ioctl+0x83/0xb0 [ 1734.485840] SyS_ioctl+0x7f/0xb0 [ 1734.489228] ? do_vfs_ioctl+0xff0/0xff0 [ 1734.493204] do_syscall_64+0x1d5/0x640 [ 1734.497102] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1734.502282] RIP: 0033:0x4665d9 [ 1734.505463] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1734.513164] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1734.520457] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1734.527716] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1734.534974] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 15:42:22 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) [ 1734.542237] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1734.631548] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1734.643629] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1734.649852] CPU: 1 PID: 9133 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1734.657657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1734.667004] Call Trace: [ 1734.669600] dump_stack+0x1b2/0x281 [ 1734.673227] warn_alloc.cold+0x96/0x1cc [ 1734.677200] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1734.682212] ? zone_watermark_ok_safe+0x220/0x220 [ 1734.687063] __alloc_pages_nodemask+0x2127/0x2720 [ 1734.691907] ? lock_acquire+0x170/0x3f0 [ 1734.695886] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1734.700729] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1734.706187] ? __mutex_unlock_slowpath+0x75/0x770 [ 1734.711030] alloc_pages_current+0x155/0x260 [ 1734.715455] ion_page_pool_alloc+0x118/0x1b0 [ 1734.719858] ion_system_heap_allocate+0x133/0x8c0 [ 1734.724697] ? ion_alloc+0x187/0x810 [ 1734.728418] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1734.733861] ? ion_system_contig_heap_create+0x130/0x130 [ 1734.739303] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1734.744410] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1734.749250] ion_alloc+0x204/0x810 [ 1734.752784] ? ion_dma_buf_release+0x40/0x40 [ 1734.757192] ? __might_fault+0x177/0x1b0 [ 1734.761250] ion_ioctl+0xea/0x1f0 [ 1734.764696] ? ion_query_heaps+0x360/0x360 [ 1734.768929] ? ion_query_heaps+0x360/0x360 [ 1734.773178] do_vfs_ioctl+0x75a/0xff0 [ 1734.776975] ? ioctl_preallocate+0x1a0/0x1a0 [ 1734.781390] ? lock_downgrade+0x740/0x740 [ 1734.785538] ? __fget+0x225/0x360 [ 1734.788985] ? do_vfs_ioctl+0xff0/0xff0 [ 1734.792954] ? security_file_ioctl+0x83/0xb0 [ 1734.797356] SyS_ioctl+0x7f/0xb0 [ 1734.800721] ? do_vfs_ioctl+0xff0/0xff0 [ 1734.804683] do_syscall_64+0x1d5/0x640 [ 1734.808563] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1734.813740] RIP: 0033:0x4665d9 [ 1734.816925] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1734.824622] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1734.831876] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1734.839139] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1734.846416] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1734.853681] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1734.876343] warn_alloc_show_mem: 1 callbacks suppressed [ 1734.876346] Mem-Info: [ 1734.884136] active_anon:17598 inactive_anon:26318 isolated_anon:0 [ 1734.884136] active_file:2640 inactive_file:3190 isolated_file:0 [ 1734.884136] unevictable:0 dirty:53 writeback:0 unstable:0 [ 1734.884136] slab_reclaimable:12478 slab_unreclaimable:123218 [ 1734.884136] mapped:57642 shmem:27407 pagetables:783 bounce:0 [ 1734.884136] free:281920 free_pcp:66 free_cma:0 [ 1734.932616] Node 0 active_anon:68348kB inactive_anon:79708kB active_file:10536kB inactive_file:12756kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140340kB dirty:192kB writeback:0kB shmem:83868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1734.972709] Node 1 active_anon:2044kB inactive_anon:25564kB active_file:24kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90228kB dirty:20kB writeback:0kB shmem:25760kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1735.039681] Node 0 DMA free:11104kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1735.119674] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1735.124770] Node 0 DMA32 free:44740kB min:36200kB low:45248kB high:54296kB active_anon:68348kB inactive_anon:79708kB active_file:10536kB inactive_file:12756kB unevictable:0kB writepending:192kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2560kB bounce:0kB free_pcp:384kB local_pcp:232kB free_cma:0kB [ 1735.178635] lowmem_reserve[]: 0 0 0 0 0 [ 1735.185370] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1735.229919] lowmem_reserve[]: 0 0 0 0 0 [ 1735.246335] Node 1 Normal free:1281388kB min:53696kB low:67120kB high:80544kB active_anon:2244kB inactive_anon:25564kB active_file:24kB inactive_file:4kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:720kB bounce:0kB free_pcp:268kB local_pcp:36kB free_cma:0kB [ 1735.286304] lowmem_reserve[]: 0 0 0 0 0 [ 1735.292588] Node 0 DMA: 1*4kB (E) 1*8kB (E) 0*16kB 8*32kB (UE) 13*64kB (UE) 4*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11084kB [ 1735.329497] Node 0 DMA32: 1*4kB (E) 295*8kB (UME) 177*16kB (ME) 32*32kB (UME) 318*64kB (UM) 129*128kB (UM) 4*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 45132kB [ 1735.377311] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1735.416368] Node 1 Normal: 3*4kB (UM) 133*8kB (UM) 16173*16kB (UM) 10217*32kB (UM) 7497*64kB (UM) 1004*128kB (U) 212*256kB (UM) 13*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 1256036kB [ 1735.473974] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1735.497061] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1735.520127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1735.558421] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1735.584630] 33188 total pagecache pages [ 1735.597883] 0 pages in swap cache [ 1735.609049] Swap cache stats: add 0, delete 0, find 0/0 [ 1735.616791] Free swap = 0kB [ 1735.628526] Total swap = 0kB [ 1735.634881] 2097051 pages RAM [ 1735.641365] 0 pages HighMem/MovableOnly [ 1735.649716] 363849 pages reserved [ 1735.656391] 0 pages cma reserved [ 1736.631530] IPVS: ftp: loaded support on port[0] = 21 [ 1737.042880] chnl_net:caif_netlink_parms(): no params data found [ 1737.149116] Bluetooth: hci1 command 0x0409 tx timeout [ 1737.227585] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1737.249807] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1737.254942] CPU: 0 PID: 6472 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1737.262730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1737.272083] Call Trace: [ 1737.274676] dump_stack+0x1b2/0x281 [ 1737.278305] dump_header+0x178/0x82f [ 1737.282019] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1737.287111] ? ___ratelimit+0x2cd/0x530 [ 1737.291084] oom_kill_process.cold+0x10/0xa40 [ 1737.295565] out_of_memory+0xe3e/0x1190 [ 1737.299524] ? oom_killer_disable+0x1c0/0x1c0 [ 1737.303994] ? mutex_trylock+0x152/0x1a0 [ 1737.308031] __alloc_pages_nodemask+0x23e1/0x2720 [ 1737.312870] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1737.317709] alloc_pages_current+0x155/0x260 [ 1737.322091] filemap_fault+0x11a1/0x1ad0 [ 1737.326140] ext4_filemap_fault+0x84/0xb0 [ 1737.330267] __do_fault+0xfa/0x380 [ 1737.333809] __handle_mm_fault+0x2497/0x4620 [ 1737.338314] ? vm_insert_page+0x7c0/0x7c0 [ 1737.342524] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1737.346911] ? nanosleep_copyout+0x100/0x100 [ 1737.351307] ? mark_held_locks+0xa6/0xf0 [ 1737.355348] handle_mm_fault+0x455/0x9c0 [ 1737.359399] __do_page_fault+0x549/0xad0 [ 1737.363440] ? spurious_fault+0x640/0x640 [ 1737.367564] ? do_page_fault+0x60/0x500 [ 1737.371524] ? page_fault+0x2f/0x50 [ 1737.375125] page_fault+0x45/0x50 [ 1737.378558] RIP: 1a7a74:0x4 [ 1737.381481] RSP: 0049:00007ffc75e3c2fc EFLAGS: 00000032 [ 1737.386187] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1737.405373] Mem-Info: [ 1737.421214] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1737.423177] active_anon:17653 inactive_anon:26321 isolated_anon:0 [ 1737.423177] active_file:33 inactive_file:0 isolated_file:0 [ 1737.423177] unevictable:0 dirty:38 writeback:0 unstable:0 [ 1737.423177] slab_reclaimable:12475 slab_unreclaimable:122202 [ 1737.423177] mapped:52986 shmem:27411 pagetables:783 bounce:0 [ 1737.423177] free:13787 free_pcp:0 free_cma:0 [ 1737.431321] CPU: 1 PID: 9084 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1737.467341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1737.476681] Call Trace: [ 1737.479265] dump_stack+0x1b2/0x281 [ 1737.482893] warn_alloc.cold+0x96/0x1cc [ 1737.486862] ? zone_watermark_ok_safe+0x220/0x220 [ 1737.491711] ? usleep_range+0x130/0x130 [ 1737.492867] Node 0 active_anon:68460kB inactive_anon:79708kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121680kB dirty:124kB writeback:0kB shmem:83868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1737.495695] ? try_to_free_pages+0x23f/0x6e0 [ 1737.527949] ? _find_next_bit+0xdb/0x100 [ 1737.532006] ? run_timer_softirq+0x5a0/0x5a0 [ 1737.535741] Node 1 active_anon:2152kB inactive_anon:25576kB active_file:32kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90264kB dirty:28kB writeback:0kB shmem:25776kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1737.536410] __alloc_pages_nodemask+0x2127/0x2720 [ 1737.536426] ? lock_acquire+0x170/0x3f0 [ 1737.536440] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1737.536449] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1737.536463] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1737.576547] Node 0 [ 1737.577474] alloc_pages_current+0x155/0x260 [ 1737.581947] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1737.587386] ion_page_pool_alloc+0x118/0x1b0 [ 1737.587395] ion_system_heap_allocate+0x133/0x8c0 [ 1737.587407] ? _raw_spin_unlock+0x29/0x40 [ 1737.587415] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1737.587424] ? ion_system_contig_heap_create+0x130/0x130 [ 1737.587434] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1737.587444] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1737.587454] ion_alloc+0x27a/0x810 [ 1737.587466] ? ion_dma_buf_release+0x40/0x40 [ 1737.587477] ? __might_fault+0x177/0x1b0 [ 1737.587487] ion_ioctl+0xea/0x1f0 [ 1737.587495] ? ion_query_heaps+0x360/0x360 [ 1737.587508] ? lock_acquire+0x170/0x3f0 [ 1737.601910] lowmem_reserve[]: [ 1737.619633] ? ion_query_heaps+0x360/0x360 [ 1737.619644] do_vfs_ioctl+0x75a/0xff0 [ 1737.619655] ? ioctl_preallocate+0x1a0/0x1a0 [ 1737.619663] ? lock_downgrade+0x740/0x740 [ 1737.619674] ? __fget+0x225/0x360 [ 1737.619681] ? do_vfs_ioctl+0xff0/0xff0 [ 1737.619691] ? security_file_ioctl+0x83/0xb0 [ 1737.619700] SyS_ioctl+0x7f/0xb0 [ 1737.619707] ? do_vfs_ioctl+0xff0/0xff0 [ 1737.619717] do_syscall_64+0x1d5/0x640 [ 1737.619730] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1737.619737] RIP: 0033:0x4665d9 [ 1737.619742] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1737.619750] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1737.619754] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1737.619758] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1737.619763] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1737.619767] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1737.635874] Mem-Info: [ 1737.644794] 0 [ 1737.660079] active_anon:17653 inactive_anon:26321 isolated_anon:0 [ 1737.660079] active_file:33 inactive_file:0 isolated_file:0 [ 1737.660079] unevictable:0 dirty:38 writeback:0 unstable:0 [ 1737.660079] slab_reclaimable:12475 slab_unreclaimable:122202 [ 1737.660079] mapped:52986 shmem:27411 pagetables:783 bounce:0 [ 1737.660079] free:13787 free_pcp:0 free_cma:0 [ 1737.668075] 2717 [ 1737.677041] Node 0 active_anon:68460kB inactive_anon:79708kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121680kB dirty:124kB writeback:0kB shmem:83868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1737.680834] 2718 [ 1737.684612] Node 1 active_anon:2152kB inactive_anon:25576kB active_file:32kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90264kB dirty:28kB writeback:0kB shmem:25776kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1737.691712] 2718 [ 1737.704039] Node 0 [ 1737.710850] 2718 [ 1737.714079] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1737.716333] Node 0 DMA32 free:17672kB min:36200kB low:45248kB high:54296kB active_anon:68460kB inactive_anon:79708kB active_file:84kB inactive_file:0kB unevictable:0kB writepending:224kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2560kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1737.716351] lowmem_reserve[]: 0 0 0 0 0 [ 1737.716374] Node 0 [ 1737.729882] lowmem_reserve[]: [ 1737.742164] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1737.751006] 0 [ 1737.751134] lowmem_reserve[]: [ 1737.769150] 2717 [ 1737.779632] 0 [ 1737.821284] 2718 [ 1737.851782] 0 [ 1737.877145] 2718 [ 1737.914187] 0 [ 1737.935107] 2718 [ 1737.952715] 0 [ 1737.979428] 0 [ 1737.987445] Node 0 DMA32 free:17716kB min:36200kB low:45248kB high:54296kB active_anon:68460kB inactive_anon:79708kB active_file:36kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2560kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB [ 1738.027914] lowmem_reserve[]: 0 0 0 0 0 [ 1738.029267] Node 1 [ 1738.031910] Node 0 [ 1738.031921] Normal free:26992kB min:53696kB low:67120kB high:80544kB active_anon:2156kB inactive_anon:25576kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:572kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1738.031925] lowmem_reserve[]: [ 1738.034148] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1738.042811] 0 [ 1738.073450] lowmem_reserve[]: [ 1738.103528] 0 [ 1738.104400] 0 0 0 0 0 [ 1738.110052] 0 [ 1738.110970] Node 1 [ 1738.110972] 0 0 [ 1738.112780] Normal free:26992kB min:53696kB low:67120kB high:80544kB active_anon:2156kB inactive_anon:25576kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:572kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1738.114986] Node 0 [ 1738.125337] lowmem_reserve[]: [ 1738.155784] DMA: [ 1738.157090] 0 [ 1738.158910] 1*4kB [ 1738.160956] 0 [ 1738.162738] (E) [ 1738.164889] 0 [ 1738.177176] 2*8kB [ 1738.178415] 0 [ 1738.178977] (UE) [ 1738.181118] 0 [ 1738.182896] 0*16kB [ 1738.194026] 4*32kB (UE) 13*64kB (UE) 4*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10964kB [ 1738.194350] Node 0 [ 1738.213633] Node 0 DMA32: 263*4kB (UME) 394*8kB (UME) 214*16kB (UME) 40*32kB (ME) 6*64kB (UM) 50*128kB (UM) 4*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17740kB [ 1738.216696] DMA: [ 1738.240331] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1738.243014] 1*4kB [ 1738.262440] Node 1 Normal: 4*4kB (M) 4*8kB (M) 0*16kB 4*32kB (UM) 11*64kB (M) 0*128kB 82*256kB (U) 10*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26992kB [ 1738.265023] (E) 2*8kB (UE) 0*16kB 4*32kB (UE) 13*64kB (UE) 4*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10964kB [ 1738.290942] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1738.305037] Node 0 DMA32: 263*4kB (UME) 394*8kB (UME) 214*16kB (UME) 40*32kB (ME) 6*64kB (UM) 50*128kB (UM) 4*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17740kB [ 1738.319970] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1738.332930] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1738.344555] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1738.345900] Node 1 Normal: 4*4kB (M) 4*8kB (M) 0*16kB 4*32kB (UM) 11*64kB (M) 0*128kB 82*256kB (U) 10*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26992kB [ 1738.354952] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1738.374935] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1738.385484] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1738.387497] 27436 total pagecache pages [ 1738.401590] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1738.409404] 0 pages in swap cache [ 1738.413714] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1738.413884] Swap cache stats: add 0, delete 0, find 0/0 [ 1738.426342] 27436 total pagecache pages [ 1738.431956] 0 pages in swap cache [ 1738.435486] Swap cache stats: add 0, delete 0, find 0/0 [ 1738.438992] Free swap = 0kB [ 1738.448472] Free swap = 0kB [ 1738.451489] Total swap = 0kB [ 1738.454393] Total swap = 0kB [ 1738.454493] 2097051 pages RAM [ 1738.462733] 2097051 pages RAM [ 1738.464378] 0 pages HighMem/MovableOnly [ 1738.471969] 0 pages HighMem/MovableOnly [ 1738.474103] 363849 pages reserved [ 1738.480538] 363849 pages reserved [ 1738.483051] 0 pages cma reserved [ 1738.484086] 0 pages cma reserved [ 1738.501111] Out of memory (oom_kill_allocating_task): Kill process 6472 (syz-executor.4) score 0 or sacrifice child [ 1738.516330] Killed process 9131 (syz-executor.4) total-vm:93252kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 1738.537947] oom_reaper: reaped process 9131 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1739.235604] Bluetooth: hci1 command 0x041b tx timeout [ 1739.480850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1739.497487] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.519614] device bridge_slave_0 entered promiscuous mode [ 1739.556964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1739.563392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.576598] device bridge_slave_1 entered promiscuous mode [ 1739.621726] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1739.657711] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1739.739041] kworker/u4:3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1739.761158] kworker/u4:3 cpuset=/ mems_allowed=0-1 [ 1739.772450] CPU: 1 PID: 29949 Comm: kworker/u4:3 Not tainted 4.14.232-syzkaller #0 [ 1739.780164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1739.789604] Workqueue: events_unbound call_usermodehelper_exec_work [ 1739.795988] Call Trace: [ 1739.798567] dump_stack+0x1b2/0x281 [ 1739.802174] dump_header+0x178/0x82f [ 1739.805976] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1739.811058] ? ___ratelimit+0x2cd/0x530 [ 1739.815016] oom_kill_process.cold+0x10/0xa40 [ 1739.819493] ? lock_downgrade+0x740/0x740 [ 1739.823631] out_of_memory+0x2dc/0x1190 [ 1739.827588] ? oom_killer_disable+0x1c0/0x1c0 [ 1739.832074] ? mutex_trylock+0x152/0x1a0 [ 1739.836127] __alloc_pages_nodemask+0x23e1/0x2720 [ 1739.841231] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1739.846061] ? mark_held_locks+0xa6/0xf0 [ 1739.850108] ? cache_grow_begin+0x3f/0x700 [ 1739.854347] cache_grow_begin+0x91/0x700 [ 1739.858648] fallback_alloc+0x207/0x2c0 [ 1739.862604] kmem_cache_alloc_node+0xe3/0x410 [ 1739.867090] copy_process.part.0+0x17d3/0x71c0 [ 1739.871675] ? __lock_acquire+0x5fc/0x3f20 [ 1739.875897] ? wb_over_bg_thresh+0x26f/0x650 [ 1739.880290] ? trace_hardirqs_on+0x10/0x10 [ 1739.884506] ? static_obj+0x50/0x50 [ 1739.888113] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1739.893556] ? __cleanup_sighand+0x40/0x40 [ 1739.897776] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1739.903205] _do_fork+0x184/0xc80 [ 1739.906637] ? fork_idle+0x270/0x270 [ 1739.910339] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1739.915419] ? process_one_work+0x6c4/0x14a0 [ 1739.919804] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1739.925241] kernel_thread+0x2f/0x40 [ 1739.928933] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1739.934205] ? call_usermodehelper+0x80/0x80 [ 1739.938588] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1739.944014] process_one_work+0x793/0x14a0 [ 1739.948231] ? work_busy+0x320/0x320 [ 1739.951927] ? worker_thread+0x158/0xff0 [ 1739.956069] ? _raw_spin_unlock_irq+0x24/0x80 [ 1739.960542] worker_thread+0x5cc/0xff0 [ 1739.964421] ? rescuer_thread+0xc80/0xc80 [ 1739.968548] kthread+0x30d/0x420 [ 1739.971892] ? kthread_create_on_node+0xd0/0xd0 [ 1739.976536] ret_from_fork+0x24/0x30 [ 1739.991359] Mem-Info: [ 1739.993908] active_anon:17639 inactive_anon:26321 isolated_anon:0 [ 1739.993908] active_file:19 inactive_file:13 isolated_file:5 [ 1739.993908] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1739.993908] slab_reclaimable:12537 slab_unreclaimable:121731 [ 1739.993908] mapped:53018 shmem:27411 pagetables:757 bounce:0 [ 1739.993908] free:14119 free_pcp:0 free_cma:0 [ 1740.028764] Node 0 active_anon:68416kB inactive_anon:79708kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121732kB dirty:0kB writeback:0kB shmem:83868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1740.056547] Node 1 active_anon:2140kB inactive_anon:25576kB active_file:52kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:90340kB dirty:0kB writeback:0kB shmem:25776kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1740.084104] Node 0 DMA free:10992kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1740.112814] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1740.117926] Node 0 DMA32 free:18068kB min:36200kB low:45248kB high:54296kB active_anon:68416kB inactive_anon:79708kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2456kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1740.147008] lowmem_reserve[]: 0 0 0 0 0 [ 1740.151053] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1740.178227] lowmem_reserve[]: 0 0 0 0 0 [ 1740.182237] Node 1 Normal free:26720kB min:53696kB low:67120kB high:80544kB active_anon:2140kB inactive_anon:25576kB active_file:52kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:572kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1740.210904] lowmem_reserve[]: 0 0 0 0 0 [ 1740.214913] Node 0 DMA: 1*4kB (E) 1*8kB (E) 1*16kB (U) 2*32kB (UE) 4*64kB (UE) 5*128kB (UE) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10972kB [ 1740.231364] Node 0 DMA32: 256*4kB (UMEH) 404*8kB (UMEH) 215*16kB (UMEH) 44*32kB (UME) 45*64kB (UM) 47*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18000kB [ 1740.246925] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1740.257799] Node 1 Normal: 10*4kB (UME) 12*8kB (UM) 4*16kB (UM) 55*32kB (UM) 89*64kB (UM) 13*128kB (U) 76*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28776kB [ 1740.272451] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1740.281345] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1740.289991] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1740.299097] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1740.307900] 27447 total pagecache pages [ 1740.311897] 0 pages in swap cache [ 1740.315347] Swap cache stats: add 0, delete 0, find 0/0 [ 1740.320776] Free swap = 0kB [ 1740.323810] Total swap = 0kB [ 1740.328241] 2097051 pages RAM [ 1740.331353] 0 pages HighMem/MovableOnly [ 1740.335317] 363849 pages reserved [ 1740.338843] 0 pages cma reserved [ 1740.342201] Out of memory: Kill process 9124 (syz-executor.1) score 1004 or sacrifice child [ 1740.352251] Killed process 9125 (syz-executor.1) total-vm:93252kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 1740.393587] oom_reaper: reaped process 9125 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1740.427947] kworker/u4:3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1740.440150] kworker/u4:3 cpuset=/ mems_allowed=0-1 [ 1740.445905] CPU: 0 PID: 29949 Comm: kworker/u4:3 Not tainted 4.14.232-syzkaller #0 [ 1740.453726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1740.463163] Workqueue: events_unbound call_usermodehelper_exec_work [ 1740.469541] Call Trace: [ 1740.472105] dump_stack+0x1b2/0x281 [ 1740.475713] dump_header+0x178/0x82f [ 1740.479407] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1740.484486] ? ___ratelimit+0x2cd/0x530 [ 1740.488442] oom_kill_process.cold+0x10/0xa40 [ 1740.492927] ? lock_downgrade+0x740/0x740 [ 1740.497056] out_of_memory+0x2dc/0x1190 [ 1740.501009] ? oom_killer_disable+0x1c0/0x1c0 [ 1740.505481] ? mutex_trylock+0x152/0x1a0 [ 1740.509520] __alloc_pages_nodemask+0x23e1/0x2720 [ 1740.514353] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1740.519193] ? mark_held_locks+0xa6/0xf0 [ 1740.523230] ? cache_grow_begin+0x3f/0x700 [ 1740.527442] cache_grow_begin+0x91/0x700 [ 1740.531481] fallback_alloc+0x207/0x2c0 [ 1740.535437] kmem_cache_alloc_node+0xe3/0x410 [ 1740.539916] copy_process.part.0+0x17d3/0x71c0 [ 1740.544479] ? __lock_acquire+0x5fc/0x3f20 [ 1740.548802] ? wb_over_bg_thresh+0x26f/0x650 [ 1740.553185] ? trace_hardirqs_on+0x10/0x10 [ 1740.557402] ? static_obj+0x50/0x50 [ 1740.561015] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1740.566640] ? __cleanup_sighand+0x40/0x40 [ 1740.570876] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1740.576306] _do_fork+0x184/0xc80 [ 1740.579756] ? fork_idle+0x270/0x270 [ 1740.583455] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1740.588534] ? process_one_work+0x6c4/0x14a0 [ 1740.592920] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1740.598349] kernel_thread+0x2f/0x40 [ 1740.602055] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1740.607328] ? call_usermodehelper+0x80/0x80 [ 1740.611713] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1740.617142] process_one_work+0x793/0x14a0 [ 1740.621390] ? work_busy+0x320/0x320 [ 1740.625093] ? worker_thread+0x158/0xff0 [ 1740.629252] ? _raw_spin_unlock_irq+0x24/0x80 [ 1740.633734] worker_thread+0x5cc/0xff0 [ 1740.637625] ? rescuer_thread+0xc80/0xc80 [ 1740.641766] kthread+0x30d/0x420 [ 1740.645128] ? kthread_create_on_node+0xd0/0xd0 [ 1740.649870] ret_from_fork+0x24/0x30 [ 1740.689571] Mem-Info: [ 1740.692115] active_anon:17616 inactive_anon:26321 isolated_anon:0 [ 1740.692115] active_file:15 inactive_file:17 isolated_file:0 [ 1740.692115] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1740.692115] slab_reclaimable:12537 slab_unreclaimable:121300 [ 1740.692115] mapped:53014 shmem:27411 pagetables:757 bounce:0 [ 1740.692115] free:13925 free_pcp:0 free_cma:0 [ 1740.758991] Node 0 active_anon:68328kB inactive_anon:79708kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121732kB dirty:0kB writeback:0kB shmem:83868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1740.788782] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1740.800671] Node 1 active_anon:2136kB inactive_anon:25576kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90324kB dirty:0kB writeback:0kB shmem:25776kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1740.829987] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1740.835132] CPU: 0 PID: 9131 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1740.840739] syz-executor.1: [ 1740.842922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1740.842929] page allocation failure: order:0 [ 1740.845940] Call Trace: [ 1740.845958] dump_stack+0x1b2/0x281 [ 1740.845973] warn_alloc.cold+0x96/0x1cc [ 1740.870290] ? zone_watermark_ok_safe+0x220/0x220 [ 1740.873463] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1740.875216] ? usleep_range+0x130/0x130 [ 1740.875217] (null) [ 1740.875223] syz-executor.1 cpuset= [ 1740.882301] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1740.882313] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1740.882321] ? run_timer_softirq+0x5a0/0x5a0 [ 1740.882335] __alloc_pages_nodemask+0x2127/0x2720 [ 1740.886325] / [ 1740.888447] ? lock_acquire+0x170/0x3f0 [ 1740.891957] mems_allowed=0-1 [ 1740.897044] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1740.897052] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1740.897066] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1740.934654] alloc_pages_current+0x155/0x260 [ 1740.939060] ion_page_pool_alloc+0x118/0x1b0 [ 1740.943488] ion_system_heap_allocate+0x133/0x8c0 [ 1740.948322] ? ion_alloc+0x187/0x810 [ 1740.952104] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1740.957529] ? ion_system_contig_heap_create+0x130/0x130 [ 1740.962964] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1740.967959] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1740.972791] ion_alloc+0x204/0x810 [ 1740.976312] ? ion_dma_buf_release+0x40/0x40 [ 1740.980700] ? __might_fault+0x177/0x1b0 [ 1740.984736] ion_ioctl+0xea/0x1f0 [ 1740.988164] ? ion_query_heaps+0x360/0x360 [ 1740.992634] ? lock_acquire+0x170/0x3f0 [ 1740.996618] ? ion_query_heaps+0x360/0x360 [ 1741.000830] do_vfs_ioctl+0x75a/0xff0 [ 1741.004612] ? ioctl_preallocate+0x1a0/0x1a0 [ 1741.009006] ? lock_downgrade+0x740/0x740 [ 1741.013135] ? __fget+0x225/0x360 [ 1741.016570] ? do_vfs_ioctl+0xff0/0xff0 [ 1741.020528] ? security_file_ioctl+0x83/0xb0 [ 1741.024919] SyS_ioctl+0x7f/0xb0 [ 1741.028282] ? do_vfs_ioctl+0xff0/0xff0 [ 1741.032253] do_syscall_64+0x1d5/0x640 [ 1741.036133] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1741.041314] RIP: 0033:0x4665d9 [ 1741.044484] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1741.052171] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1741.059422] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1741.066669] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1741.073920] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1741.081175] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1741.088434] CPU: 1 PID: 9125 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1741.091208] Node 0 [ 1741.096223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1741.096226] Call Trace: [ 1741.096241] dump_stack+0x1b2/0x281 [ 1741.096253] warn_alloc.cold+0x96/0x1cc [ 1741.096263] ? zone_watermark_ok_safe+0x220/0x220 [ 1741.096272] ? usleep_range+0x130/0x130 [ 1741.096279] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1741.096290] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1741.098515] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1741.107845] ? run_timer_softirq+0x5a0/0x5a0 [ 1741.107859] __alloc_pages_nodemask+0x2127/0x2720 [ 1741.107874] ? lock_acquire+0x170/0x3f0 [ 1741.107888] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1741.107897] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1741.107914] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1741.112378] lowmem_reserve[]: [ 1741.114086] alloc_pages_current+0x155/0x260 [ 1741.118057] 0 [ 1741.122860] ion_page_pool_alloc+0x118/0x1b0 [ 1741.128534] 2717 [ 1741.131892] ion_system_heap_allocate+0x133/0x8c0 [ 1741.136900] 2718 [ 1741.162465] ? ion_alloc+0x187/0x810 [ 1741.162475] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1741.162483] ? ion_system_contig_heap_create+0x130/0x130 [ 1741.162491] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1741.162501] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1741.162510] ion_alloc+0x204/0x810 [ 1741.162520] ? ion_dma_buf_release+0x40/0x40 [ 1741.162531] ? __might_fault+0x177/0x1b0 [ 1741.162541] ion_ioctl+0xea/0x1f0 [ 1741.168632] 2718 [ 1741.171743] ? ion_query_heaps+0x360/0x360 [ 1741.175732] 2718 [ 1741.180513] ? lock_acquire+0x170/0x3f0 [ 1741.190415] ? ion_query_heaps+0x360/0x360 [ 1741.190426] do_vfs_ioctl+0x75a/0xff0 [ 1741.190436] ? ioctl_preallocate+0x1a0/0x1a0 [ 1741.190443] ? lock_downgrade+0x740/0x740 [ 1741.190456] ? __fget+0x225/0x360 [ 1741.195518] Node 0 [ 1741.197948] ? do_vfs_ioctl+0xff0/0xff0 [ 1741.199731] DMA32 free:18080kB min:36200kB low:45248kB high:54296kB active_anon:68328kB inactive_anon:79708kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2456kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1741.204545] ? security_file_ioctl+0x83/0xb0 [ 1741.206604] lowmem_reserve[]: [ 1741.211505] SyS_ioctl+0x7f/0xb0 [ 1741.213537] 0 [ 1741.217227] ? do_vfs_ioctl+0xff0/0xff0 [ 1741.217238] do_syscall_64+0x1d5/0x640 [ 1741.217251] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1741.217259] RIP: 0033:0x4665d9 [ 1741.217263] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1741.217273] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1741.217277] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1741.217281] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1741.217288] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1741.223923] 0 [ 1741.228141] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1741.260859] Mem-Info: [ 1741.262548] 0 [ 1741.292484] active_anon:17616 inactive_anon:26321 isolated_anon:0 [ 1741.292484] active_file:16 inactive_file:16 isolated_file:0 [ 1741.292484] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1741.292484] slab_reclaimable:12537 slab_unreclaimable:121300 [ 1741.292484] mapped:53014 shmem:27411 pagetables:757 bounce:0 [ 1741.292484] free:13961 free_pcp:2 free_cma:0 [ 1741.321912] 0 [ 1741.340247] Bluetooth: hci1 command 0x040f tx timeout [ 1741.342281] 0 [ 1741.353683] Node 0 active_anon:68328kB inactive_anon:79708kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121732kB dirty:0kB writeback:0kB shmem:83868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1741.383882] Node 1 active_anon:2136kB inactive_anon:25576kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:90324kB dirty:0kB writeback:0kB shmem:25776kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1741.470876] Node 0 [ 1741.515079] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1741.549808] team0: Port device team_slave_0 added [ 1741.561925] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1741.564788] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready 15:42:29 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000480)={r2, 0x1e}) [ 1741.627190] team0: Port device team_slave_1 added [ 1741.660619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1741.667393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1741.694748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1741.719028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1741.755939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1741.759129] lowmem_reserve[]: [ 1741.784966] Node 0 DMA free:10992kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1741.903627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1741.906282] 0 [ 1741.921605] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1741.938370] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1741.944056] 0 [ 1741.945316] Node 0 [ 1741.946427] 0 [ 1741.948757] DMA32 free:36696kB min:36200kB low:45248kB high:54296kB active_anon:68140kB inactive_anon:79704kB active_file:136kB inactive_file:11156kB unevictable:0kB writepending:36kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2424kB bounce:0kB free_pcp:716kB local_pcp:0kB free_cma:0kB [ 1741.978209] 0 0 [ 1741.982933] Node 1 Normal free:176300kB min:53696kB low:67120kB high:80544kB active_anon:2200kB inactive_anon:25576kB active_file:408kB inactive_file:10352kB unevictable:0kB writepending:128kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:532kB bounce:0kB free_pcp:620kB local_pcp:620kB free_cma:0kB [ 1741.986161] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1742.024388] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1742.039478] lowmem_reserve[]: 0 0 0 0 0 [ 1742.043896] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1742.073122] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1742.084182] CPU: 1 PID: 9290 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1742.091980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1742.101323] Call Trace: [ 1742.103909] dump_stack+0x1b2/0x281 [ 1742.107537] warn_alloc.cold+0x96/0x1cc [ 1742.111513] ? zone_watermark_ok_safe+0x220/0x220 [ 1742.116367] __alloc_pages_nodemask+0x2127/0x2720 [ 1742.121209] ? lock_acquire+0x170/0x3f0 [ 1742.125185] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1742.130031] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1742.135481] ? __mutex_unlock_slowpath+0x75/0x770 [ 1742.140326] alloc_pages_current+0x155/0x260 [ 1742.141535] lowmem_reserve[]: [ 1742.144726] ion_page_pool_alloc+0x118/0x1b0 [ 1742.144735] ion_system_heap_allocate+0x133/0x8c0 [ 1742.157048] ? ion_alloc+0x187/0x810 [ 1742.160762] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1742.164247] 0 [ 1742.166206] ? ion_system_contig_heap_create+0x130/0x130 [ 1742.166214] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1742.166225] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1742.166234] ion_alloc+0x204/0x810 [ 1742.166245] ? ion_dma_buf_release+0x40/0x40 [ 1742.166255] ? __might_fault+0x177/0x1b0 [ 1742.166264] ion_ioctl+0xea/0x1f0 [ 1742.172398] 0 [ 1742.173582] ? ion_query_heaps+0x360/0x360 [ 1742.173597] ? lock_acquire+0x170/0x3f0 [ 1742.192768] 0 [ 1742.195386] ? ion_query_heaps+0x360/0x360 [ 1742.195397] do_vfs_ioctl+0x75a/0xff0 [ 1742.195409] ? ioctl_preallocate+0x1a0/0x1a0 [ 1742.195418] ? lock_downgrade+0x740/0x740 [ 1742.195430] ? __fget+0x225/0x360 [ 1742.195439] ? do_vfs_ioctl+0xff0/0xff0 [ 1742.208347] 0 [ 1742.208839] ? security_file_ioctl+0x83/0xb0 [ 1742.213925] 0 [ 1742.214831] SyS_ioctl+0x7f/0xb0 [ 1742.230559] Node 0 [ 1742.234505] ? do_vfs_ioctl+0xff0/0xff0 [ 1742.234516] do_syscall_64+0x1d5/0x640 [ 1742.234546] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1742.249830] DMA: [ 1742.252016] RIP: 0033:0x4665d9 [ 1742.252021] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1742.269772] 12*4kB [ 1742.273961] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1742.273966] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1742.273970] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1742.273976] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1742.292322] (UE) [ 1742.298044] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1742.324039] device hsr_slave_0 entered promiscuous mode [ 1742.330171] device hsr_slave_1 entered promiscuous mode [ 1742.336454] lowmem_reserve[]: 0 0 0 0 0 [ 1742.339609] warn_alloc_show_mem: 1 callbacks suppressed [ 1742.339611] Mem-Info: [ 1742.347091] Node 1 [ 1742.348839] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1742.351539] Normal free:191744kB min:53696kB low:67120kB high:80544kB active_anon:2200kB inactive_anon:25576kB active_file:1208kB inactive_file:9228kB unevictable:0kB writepending:128kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:532kB bounce:0kB free_pcp:836kB local_pcp:656kB free_cma:0kB [ 1742.360591] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1742.386887] 2*8kB (UE) 1*16kB (U) 2*32kB (UE) 4*64kB (UE) 5*128kB (UE) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11024kB [ 1742.398229] active_anon:17585 inactive_anon:26320 isolated_anon:0 [ 1742.398229] active_file:639 inactive_file:4785 isolated_file:12 [ 1742.398229] unevictable:0 dirty:41 writeback:0 unstable:0 [ 1742.398229] slab_reclaimable:12556 slab_unreclaimable:122193 [ 1742.398229] mapped:48393 shmem:27409 pagetables:739 bounce:0 [ 1742.398229] free:60029 free_pcp:403 free_cma:0 [ 1742.407505] Node 0 [ 1742.441125] lowmem_reserve[]: 0 0 0 0 0 [ 1742.453691] Node 0 DMA: 12*4kB (UE) 2*8kB (UE) 1*16kB (U) 2*32kB (UE) 4*64kB (UE) 5*128kB (UE) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11024kB [ 1742.478024] Node 0 active_anon:68140kB inactive_anon:79704kB active_file:1348kB inactive_file:9912kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115600kB dirty:36kB writeback:0kB shmem:83860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1742.491903] DMA32: [ 1742.508062] Node 0 DMA32: 5349*4kB (UME) 352*8kB (ME) 308*16kB (UE) 216*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36052kB [ 1742.528003] 5349*4kB (UME) 352*8kB (ME) 308*16kB (UE) 216*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36052kB [ 1742.544058] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1742.556428] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1742.575696] Node 1 Normal: 10357*4kB (UE) 5233*8kB (UM) 3560*16kB (U) 1350*32kB (UM) 93*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 189404kB [ 1742.590969] Node 1 Normal: 9706*4kB (UE) 5214*8kB (UM) 3560*16kB (U) 1352*32kB (UM) 93*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 186712kB [ 1742.616032] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1742.618124] Node 1 active_anon:2200kB inactive_anon:25576kB active_file:2408kB inactive_file:8728kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:78072kB dirty:128kB writeback:0kB shmem:25776kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1742.631761] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1742.663189] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1742.683866] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1742.703187] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1742.722090] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1742.733369] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1742.742513] Node 0 DMA free:11008kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1742.752128] 33007 total pagecache pages [ 1742.775581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1742.793206] 33007 total pagecache pages [ 1742.797305] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1742.808763] 0 pages in swap cache [ 1742.814656] 0 pages in swap cache [ 1742.828326] Swap cache stats: add 0, delete 0, find 0/0 [ 1742.839283] Swap cache stats: add 0, delete 0, find 0/0 [ 1742.852389] Free swap = 0kB [ 1742.858840] Free swap = 0kB [ 1742.863947] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1742.864123] Total swap = 0kB [ 1742.876745] Total swap = 0kB [ 1742.886608] 2097051 pages RAM [ 1742.890513] 2097051 pages RAM [ 1742.890705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1742.900723] 0 pages HighMem/MovableOnly [ 1742.905559] 0 pages HighMem/MovableOnly [ 1742.908896] Node 0 DMA32 free:43016kB min:36200kB low:45248kB high:54296kB active_anon:68172kB inactive_anon:79704kB active_file:1440kB inactive_file:9972kB unevictable:0kB writepending:44kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2512kB bounce:0kB free_pcp:1328kB local_pcp:708kB free_cma:0kB [ 1742.920558] 363849 pages reserved [ 1742.942583] 363849 pages reserved [ 1742.954559] 0 pages cma reserved [ 1742.960749] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1742.999400] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1743.008881] 0 pages cma reserved [ 1743.018556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1743.024544] Out of memory: Kill process 9132 (syz-executor.2) score 1004 or sacrifice child [ 1743.031518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1743.059230] lowmem_reserve[]: 0 0 0 0 0 [ 1743.063244] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1743.097863] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1743.103947] 8021q: adding VLAN 0 to HW filter on device team0 [ 1743.119326] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1743.131500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1743.141744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1743.157665] lowmem_reserve[]: 0 0 0 0 0 [ 1743.161690] Node 1 Normal free:361968kB min:53696kB low:67120kB high:80544kB active_anon:2204kB inactive_anon:25576kB active_file:2880kB inactive_file:8364kB unevictable:0kB writepending:168kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:532kB bounce:0kB free_pcp:1324kB local_pcp:688kB free_cma:0kB [ 1743.205359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1743.211734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1743.229331] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1743.241118] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1743.249866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1743.261545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1743.270273] lowmem_reserve[]: 0 0 0 0 0 [ 1743.274287] Node 0 DMA: 17*4kB (UE) 6*8kB (UE) 2*16kB (U) 3*32kB (UE) 3*64kB (UE) 5*128kB (UE) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11060kB [ 1743.294425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1743.300824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1743.316574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1743.328967] Node 0 DMA32: 2343*4kB (UME) 2918*8kB (UME) 613*16kB (UE) 723*32kB (UME) 660*64kB (UM) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 108284kB [ 1743.344690] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1743.356178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1743.364341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1743.375852] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1743.392520] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1743.402336] Bluetooth: hci1 command 0x0419 tx timeout [ 1743.410393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1743.419449] Node 1 Normal: 16819*4kB (UM) 7995*8kB (UM) 10172*16kB (UM) 6259*32kB (UM) 734*64kB (U) 29*128kB (U) 27*256kB (U) 0*512kB 13*1024kB (U) 0*2048kB 0*4096kB = 565188kB [ 1743.440043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1743.450513] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1743.461370] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1743.469209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1743.479899] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1743.490231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1743.501018] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1743.512888] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1743.523153] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1743.533434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1743.544787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1743.554007] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1743.569279] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1743.577727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1743.588464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1743.597145] 33215 total pagecache pages [ 1743.601171] 0 pages in swap cache [ 1743.604646] Swap cache stats: add 0, delete 0, find 0/0 [ 1743.616208] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1743.622290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1743.633078] Free swap = 0kB [ 1743.642411] Total swap = 0kB [ 1743.652957] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1743.660370] 2097051 pages RAM [ 1743.663482] 0 pages HighMem/MovableOnly [ 1743.675679] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1743.681949] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1743.692345] 363849 pages reserved [ 1743.696740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1743.703714] 0 pages cma reserved [ 1743.727963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1743.743889] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1743.764668] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1743.775223] CPU: 0 PID: 9125 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1743.783027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1743.792373] Call Trace: [ 1743.794959] dump_stack+0x1b2/0x281 [ 1743.798584] warn_alloc.cold+0x96/0x1cc [ 1743.802551] ? zone_watermark_ok_safe+0x220/0x220 [ 1743.807393] __alloc_pages_nodemask+0x2127/0x2720 [ 1743.812228] ? lock_acquire+0x170/0x3f0 [ 1743.816203] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1743.821039] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1743.826487] ? __mutex_unlock_slowpath+0x75/0x770 [ 1743.831327] alloc_pages_current+0x155/0x260 [ 1743.835729] ion_page_pool_alloc+0x118/0x1b0 [ 1743.840129] ion_system_heap_allocate+0x133/0x8c0 [ 1743.844967] ? _raw_spin_unlock+0x29/0x40 [ 1743.849105] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1743.854110] ? ion_system_contig_heap_create+0x130/0x130 [ 1743.859549] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1743.864566] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1743.869397] ion_alloc+0x27a/0x810 [ 1743.872930] ? ion_dma_buf_release+0x40/0x40 [ 1743.877329] ? __might_fault+0x177/0x1b0 [ 1743.881385] ion_ioctl+0xea/0x1f0 [ 1743.884826] ? ion_query_heaps+0x360/0x360 [ 1743.889072] ? lock_acquire+0x170/0x3f0 [ 1743.893028] ? ion_query_heaps+0x360/0x360 [ 1743.897265] do_vfs_ioctl+0x75a/0xff0 [ 1743.901053] ? ioctl_preallocate+0x1a0/0x1a0 [ 1743.905461] ? lock_downgrade+0x740/0x740 [ 1743.909612] ? __fget+0x225/0x360 [ 1743.913048] ? do_vfs_ioctl+0xff0/0xff0 [ 1743.917009] ? security_file_ioctl+0x83/0xb0 [ 1743.921409] SyS_ioctl+0x7f/0xb0 [ 1743.924756] ? do_vfs_ioctl+0xff0/0xff0 [ 1743.928719] do_syscall_64+0x1d5/0x640 [ 1743.932614] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1743.937788] RIP: 0033:0x4665d9 [ 1743.940962] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1743.948654] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1743.955937] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1743.963194] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1743.970451] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1743.977707] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1744.204144] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1744.205278] Mem-Info: [ 1744.214226] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1744.220118] active_anon:17588 inactive_anon:26320 isolated_anon:0 [ 1744.220118] active_file:1714 inactive_file:4017 isolated_file:0 [ 1744.220118] unevictable:0 dirty:72 writeback:0 unstable:0 [ 1744.220118] slab_reclaimable:12549 slab_unreclaimable:121451 [ 1744.220118] mapped:57265 shmem:27409 pagetables:779 bounce:0 [ 1744.220118] free:256311 free_pcp:415 free_cma:0 [ 1744.235073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1744.291679] Node 0 active_anon:68204kB inactive_anon:79704kB active_file:2512kB inactive_file:9068kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150732kB dirty:100kB writeback:0kB shmem:83860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1744.296410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1744.349544] Node 1 active_anon:2148kB inactive_anon:25576kB active_file:4344kB inactive_file:7000kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78328kB dirty:188kB writeback:0kB shmem:25776kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1744.409191] Node 0 DMA free:11332kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1744.465213] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1744.479747] Node 0 DMA32 free:129148kB min:36200kB low:45248kB high:54296kB active_anon:68204kB inactive_anon:79704kB active_file:2512kB inactive_file:9068kB unevictable:0kB writepending:100kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2592kB bounce:0kB free_pcp:944kB local_pcp:712kB free_cma:0kB [ 1744.482234] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1744.548809] lowmem_reserve[]: 0 0 0 0 0 [ 1744.555764] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1744.560242] Node 0 [ 1744.562533] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1744.564071] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1744.579460] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1744.622055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1744.629103] lowmem_reserve[]: 0 0 0 0 0 [ 1744.633110] Node 1 Normal free:1018032kB min:53696kB low:67120kB high:80544kB active_anon:2148kB inactive_anon:25576kB active_file:4344kB inactive_file:7000kB unevictable:0kB writepending:188kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:524kB bounce:0kB free_pcp:664kB local_pcp:664kB free_cma:0kB [ 1744.633217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1744.704708] lowmem_reserve[]: 0 0 0 0 0 [ 1744.708735] Node 0 DMA: 34*4kB (UE) 17*8kB (UE) 20*16kB (U) 14*32kB (UE) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11344kB [ 1744.719814] device veth0_vlan entered promiscuous mode [ 1744.735732] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1744.741742] Node 0 DMA32: 419*4kB (UME) 408*8kB (UME) 193*16kB (UME) 1325*32kB (UME) 485*64kB (UM) 2*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 81724kB [ 1744.742765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1744.775710] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1744.798706] Node 1 Normal: 39534*4kB (UM) 15406*8kB (UM) 16071*16kB (UM) 11073*32kB (UM) 3232*64kB (UM) 379*128kB (U) 2*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 1149240kB [ 1744.802545] device veth1_vlan entered promiscuous mode [ 1744.831738] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1744.835432] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1744.850701] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1744.868128] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1744.875737] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1744.894363] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1744.897277] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1744.908380] 33095 total pagecache pages [ 1744.917983] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1744.924690] 0 pages in swap cache [ 1744.927660] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1744.928193] Swap cache stats: add 0, delete 0, find 0/0 [ 1744.938540] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1744.940513] Free swap = 0kB [ 1744.950849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1744.959120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1744.964664] Total swap = 0kB [ 1744.969323] 2097051 pages RAM [ 1744.972229] device veth0_macvtap entered promiscuous mode [ 1744.972417] 0 pages HighMem/MovableOnly [ 1744.980779] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1744.994674] 363849 pages reserved [ 1744.995482] device veth1_macvtap entered promiscuous mode [ 1744.998153] 0 pages cma reserved [ 1745.004249] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1745.020815] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1745.031816] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1745.044867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1745.057661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.073159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1745.094978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.104532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1745.144652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.153812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1745.187461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.215759] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1745.222746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1745.248586] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1745.256269] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1745.275271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1745.295038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1745.316300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1745.334847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.343991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1745.376926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.398026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1745.417064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.444569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1745.454475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1745.506357] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1745.513284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1745.533044] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1745.541782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1745.552815] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1745.580030] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1745.591106] CPU: 1 PID: 9131 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1745.598913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1745.608259] Call Trace: [ 1745.610848] dump_stack+0x1b2/0x281 [ 1745.614469] warn_alloc.cold+0x96/0x1cc [ 1745.618440] ? zone_watermark_ok_safe+0x220/0x220 [ 1745.623290] __alloc_pages_nodemask+0x2127/0x2720 [ 1745.628130] ? lock_acquire+0x170/0x3f0 [ 1745.632122] ? lock_acquire+0x170/0x3f0 [ 1745.636092] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1745.640931] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1745.646381] ? __mutex_unlock_slowpath+0x75/0x770 [ 1745.651256] alloc_pages_current+0x155/0x260 [ 1745.655674] ion_page_pool_alloc+0x118/0x1b0 [ 1745.660077] ion_system_heap_allocate+0x133/0x8c0 [ 1745.664917] ? _raw_spin_unlock+0x29/0x40 [ 1745.669078] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1745.674003] ? ion_system_contig_heap_create+0x130/0x130 [ 1745.679547] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1745.684560] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1745.689395] ion_alloc+0x27a/0x810 [ 1745.692928] ? ion_dma_buf_release+0x40/0x40 [ 1745.697416] ? __might_fault+0x177/0x1b0 [ 1745.701488] ion_ioctl+0xea/0x1f0 [ 1745.704938] ? ion_query_heaps+0x360/0x360 [ 1745.709168] ? lock_acquire+0x170/0x3f0 [ 1745.713156] ? ion_query_heaps+0x360/0x360 [ 1745.717386] do_vfs_ioctl+0x75a/0xff0 [ 1745.721180] ? ioctl_preallocate+0x1a0/0x1a0 [ 1745.725578] ? lock_downgrade+0x740/0x740 [ 1745.729737] ? __fget+0x225/0x360 [ 1745.733187] ? do_vfs_ioctl+0xff0/0xff0 [ 1745.737155] ? security_file_ioctl+0x83/0xb0 [ 1745.741554] SyS_ioctl+0x7f/0xb0 [ 1745.744966] ? do_vfs_ioctl+0xff0/0xff0 [ 1745.748936] do_syscall_64+0x1d5/0x640 [ 1745.752858] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1745.758043] RIP: 0033:0x4665d9 [ 1745.761239] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1745.768944] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1745.776225] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1745.783497] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1745.790758] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1745.798019] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1745.830225] Mem-Info: [ 1745.832655] active_anon:17613 inactive_anon:26320 isolated_anon:0 [ 1745.832655] active_file:1839 inactive_file:3805 isolated_file:0 [ 1745.832655] unevictable:0 dirty:78 writeback:0 unstable:0 [ 1745.832655] slab_reclaimable:12549 slab_unreclaimable:121803 [ 1745.832655] mapped:57246 shmem:27409 pagetables:742 bounce:0 [ 1745.832655] free:268595 free_pcp:425 free_cma:0 [ 1745.874156] Node 0 active_anon:68248kB inactive_anon:79704kB active_file:2520kB inactive_file:9208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150596kB dirty:140kB writeback:0kB shmem:83860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1745.908382] Node 1 active_anon:2136kB inactive_anon:25576kB active_file:4908kB inactive_file:5944kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78300kB dirty:200kB writeback:0kB shmem:25776kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1745.940735] Node 0 DMA free:11120kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1745.975264] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1745.980321] Node 0 DMA32 free:45128kB min:36200kB low:45248kB high:54296kB active_anon:68248kB inactive_anon:79704kB active_file:2520kB inactive_file:9208kB unevictable:0kB writepending:140kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2488kB bounce:0kB free_pcp:620kB local_pcp:500kB free_cma:0kB [ 1746.015608] lowmem_reserve[]: 0 0 0 0 0 [ 1746.019615] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1746.047062] lowmem_reserve[]: 0 0 0 0 0 [ 1746.051111] Node 1 Normal free:1102044kB min:53696kB low:67120kB high:80544kB active_anon:2136kB inactive_anon:25576kB active_file:4908kB inactive_file:5944kB unevictable:0kB writepending:200kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:524kB bounce:0kB free_pcp:256kB local_pcp:204kB free_cma:0kB [ 1746.114450] lowmem_reserve[]: 0 0 0 0 0 [ 1746.122801] Node 0 DMA: 4*4kB (UE) 2*8kB (UE) 10*16kB (U) 24*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11136kB [ 1746.154720] Node 0 DMA32: 197*4kB (UME) 369*8kB (UME) 195*16kB (UME) 34*32kB (UME) 568*64kB (U) 5*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44940kB [ 1746.194790] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1746.231500] Node 1 Normal: 44*4kB (UM) 24790*8kB (UM) 21977*16kB (UM) 14030*32kB (UM) 1507*64kB (U) 44*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1101424kB [ 1746.265073] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1746.273939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1746.313323] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1746.351465] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1746.374703] 33076 total pagecache pages [ 1746.378766] 0 pages in swap cache [ 1746.382217] Swap cache stats: add 0, delete 0, find 0/0 [ 1746.389861] Free swap = 0kB [ 1746.392930] Total swap = 0kB [ 1746.400378] 2097051 pages RAM [ 1746.403488] 0 pages HighMem/MovableOnly [ 1746.409288] 363849 pages reserved [ 1746.422545] 0 pages cma reserved [ 1746.613124] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1746.639451] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1746.651374] CPU: 1 PID: 9387 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1746.659189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1746.668533] Call Trace: [ 1746.671121] dump_stack+0x1b2/0x281 [ 1746.674750] warn_alloc.cold+0x96/0x1cc [ 1746.678719] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1746.683725] ? zone_watermark_ok_safe+0x220/0x220 [ 1746.688582] __alloc_pages_nodemask+0x2127/0x2720 [ 1746.693426] ? lock_acquire+0x170/0x3f0 [ 1746.697401] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1746.702249] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1746.707705] ? __mutex_unlock_slowpath+0x75/0x770 [ 1746.712809] alloc_pages_current+0x155/0x260 [ 1746.717221] ion_page_pool_alloc+0x118/0x1b0 [ 1746.721622] ion_system_heap_allocate+0x133/0x8c0 [ 1746.726465] ? ion_alloc+0x187/0x810 [ 1746.730183] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1746.735630] ? ion_system_contig_heap_create+0x130/0x130 [ 1746.741075] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1746.746095] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1746.750934] ion_alloc+0x204/0x810 [ 1746.754470] ? ion_dma_buf_release+0x40/0x40 [ 1746.758878] ? __might_fault+0x177/0x1b0 [ 1746.762948] ion_ioctl+0xea/0x1f0 [ 1746.766396] ? ion_query_heaps+0x360/0x360 [ 1746.770624] ? lock_acquire+0x170/0x3f0 [ 1746.774591] ? ion_query_heaps+0x360/0x360 [ 1746.778821] do_vfs_ioctl+0x75a/0xff0 [ 1746.782613] ? ioctl_preallocate+0x1a0/0x1a0 [ 1746.787012] ? lock_downgrade+0x740/0x740 [ 1746.791152] ? __fget+0x225/0x360 [ 1746.794597] ? do_vfs_ioctl+0xff0/0xff0 [ 1746.798566] ? security_file_ioctl+0x83/0xb0 [ 1746.802962] SyS_ioctl+0x7f/0xb0 [ 1746.806318] ? do_vfs_ioctl+0xff0/0xff0 [ 1746.810284] do_syscall_64+0x1d5/0x640 [ 1746.814167] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1746.819389] RIP: 0033:0x4665d9 [ 1746.822562] RSP: 002b:00007fe1da39e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1746.830272] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1746.837540] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1746.844834] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1746.852094] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1746.859351] R13: 00007ffee467076f R14: 00007fe1da39e300 R15: 0000000000022000 [ 1747.113586] Mem-Info: [ 1747.118353] active_anon:17631 inactive_anon:26318 isolated_anon:0 [ 1747.118353] active_file:1803 inactive_file:3529 isolated_file:0 [ 1747.118353] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1747.118353] slab_reclaimable:12479 slab_unreclaimable:121756 [ 1747.118353] mapped:57235 shmem:27413 pagetables:780 bounce:0 [ 1747.118353] free:211767 free_pcp:277 free_cma:0 [ 1747.189236] Node 0 active_anon:68260kB inactive_anon:79704kB active_file:2560kB inactive_file:9308kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150848kB dirty:4kB writeback:0kB shmem:83868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1747.217355] Node 1 active_anon:2264kB inactive_anon:25568kB active_file:4652kB inactive_file:4808kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78092kB dirty:20kB writeback:0kB shmem:25784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1747.283142] Node 0 DMA free:11104kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1747.310187] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1747.327558] Node 0 DMA32 free:44836kB min:36200kB low:45248kB high:54296kB active_anon:68260kB inactive_anon:79704kB active_file:2560kB inactive_file:9308kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2488kB bounce:0kB free_pcp:348kB local_pcp:228kB free_cma:0kB [ 1747.389056] lowmem_reserve[]: 0 0 0 0 0 [ 1747.398488] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1747.451616] lowmem_reserve[]: 0 0 0 0 0 [ 1747.460064] Node 1 Normal free:782404kB min:53696kB low:67120kB high:80544kB active_anon:2264kB inactive_anon:25568kB active_file:4652kB inactive_file:4808kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:632kB bounce:0kB free_pcp:152kB local_pcp:52kB free_cma:0kB [ 1747.514423] lowmem_reserve[]: 0 0 0 0 0 [ 1747.518471] Node 0 DMA: 2*4kB (E) 1*8kB (E) 2*16kB (U) 27*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11088kB [ 1747.548608] Node 0 DMA32: 158*4kB (ME) 1412*8kB (UME) 784*16kB (UME) 304*32kB (UME) 348*64kB (U) 47*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 62488kB [ 1747.565040] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1747.576402] Node 1 Normal: 7*4kB (UM) 6*8kB (M) 7417*16kB (UM) 15912*32kB (UM) 1764*64kB (U) 152*128kB (UM) 68*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 777692kB [ 1747.607372] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1747.626186] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1747.643982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1747.663737] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1747.682653] 32693 total pagecache pages [ 1747.690025] 0 pages in swap cache [ 1747.698534] Swap cache stats: add 0, delete 0, find 0/0 [ 1747.710965] Free swap = 0kB [ 1747.717398] Total swap = 0kB [ 1747.723735] 2097051 pages RAM [ 1747.731063] 0 pages HighMem/MovableOnly [ 1747.740649] 363849 pages reserved [ 1747.748579] 0 pages cma reserved [ 1747.793237] IPVS: ftp: loaded support on port[0] = 21 [ 1748.209702] chnl_net:caif_netlink_parms(): no params data found [ 1748.411572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.427474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.434613] Bluetooth: hci4 command 0x0409 tx timeout [ 1748.465103] device bridge_slave_0 entered promiscuous mode [ 1748.472287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.519921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.676262] device bridge_slave_1 entered promiscuous mode [ 1748.734196] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1748.755279] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1748.812884] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1748.844358] team0: Port device team_slave_0 added [ 1748.849910] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1748.858187] team0: Port device team_slave_1 added [ 1748.912513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1748.934216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1748.959665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1748.972245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1748.979180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1749.034036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1749.055043] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1749.062607] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1749.135938] device hsr_slave_0 entered promiscuous mode [ 1749.152528] device hsr_slave_1 entered promiscuous mode [ 1749.168743] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1749.183803] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1749.344443] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1749.386829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1749.399843] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1749.408894] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1749.419609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1749.427526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1749.440281] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1749.447227] 8021q: adding VLAN 0 to HW filter on device team0 [ 1749.460674] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1749.467821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1749.480533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1749.488858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1749.495261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1749.509752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1749.518106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1749.529332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1749.538401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1749.550154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1749.556568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1749.572619] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1749.579944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1749.595600] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1749.602700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1749.619242] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1749.628674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1749.638724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1749.651385] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1749.659209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1749.667100] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1749.675369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1749.685284] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1749.698494] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1749.705514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1749.713299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1749.725634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1749.733160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1749.747065] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1749.753092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1749.770113] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1749.778093] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1749.786280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1749.792983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1749.804358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1749.876923] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1749.891575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1749.938329] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1749.949253] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1749.957603] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1749.971687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1749.979479] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1749.991120] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1749.999943] device veth0_vlan entered promiscuous mode [ 1750.014443] device veth1_vlan entered promiscuous mode [ 1750.020298] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1750.033076] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1750.050687] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1750.060263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1750.071863] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1750.079506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1750.092798] device veth0_macvtap entered promiscuous mode [ 1750.099991] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1750.113380] device veth1_macvtap entered promiscuous mode [ 1750.123432] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1750.137955] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1750.150382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1750.162247] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.175551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1750.187004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.198641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1750.210417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.221745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1750.236036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.246592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1750.258667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.270703] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1750.287174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1750.294354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1750.302079] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1750.313822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1750.323041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1750.337580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.347444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1750.361610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.370830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1750.384738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.396358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1750.407391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.418833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1750.430432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1750.443113] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1750.451484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1750.460855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1750.470522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1750.503844] Bluetooth: hci4 command 0x041b tx timeout [ 1751.274489] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1751.295828] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1751.301062] CPU: 0 PID: 9618 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1751.308867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1751.318238] Call Trace: [ 1751.320841] dump_stack+0x1b2/0x281 [ 1751.324463] warn_alloc.cold+0x96/0x1cc [ 1751.328443] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1751.333559] ? zone_watermark_ok_safe+0x220/0x220 [ 1751.338411] __alloc_pages_nodemask+0x2127/0x2720 [ 1751.343244] ? io_schedule_timeout+0x140/0x140 [ 1751.347852] ? lock_acquire+0x170/0x3f0 [ 1751.352017] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1751.356890] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1751.362340] ? __mutex_unlock_slowpath+0x75/0x770 [ 1751.367172] ? retint_kernel+0x2d/0x2d [ 1751.371079] alloc_pages_current+0x155/0x260 [ 1751.375490] ion_page_pool_alloc+0x118/0x1b0 [ 1751.380050] ion_system_heap_allocate+0x133/0x8c0 [ 1751.384895] ? ion_alloc+0x187/0x810 [ 1751.388603] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1751.394045] ? ion_system_contig_heap_create+0x130/0x130 [ 1751.399499] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1751.404527] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1751.409362] ion_alloc+0x204/0x810 [ 1751.412902] ? ion_dma_buf_release+0x40/0x40 [ 1751.417311] ? __might_fault+0x177/0x1b0 [ 1751.421367] ion_ioctl+0xea/0x1f0 [ 1751.424831] ? ion_query_heaps+0x360/0x360 [ 1751.429072] ? lock_acquire+0x170/0x3f0 [ 1751.433035] ? ion_query_heaps+0x360/0x360 [ 1751.437351] do_vfs_ioctl+0x75a/0xff0 [ 1751.441145] ? ioctl_preallocate+0x1a0/0x1a0 [ 1751.445543] ? lock_downgrade+0x740/0x740 [ 1751.449686] ? __fget+0x225/0x360 [ 1751.453130] ? do_vfs_ioctl+0xff0/0xff0 [ 1751.457096] ? security_file_ioctl+0x83/0xb0 [ 1751.461498] SyS_ioctl+0x7f/0xb0 [ 1751.464877] ? do_vfs_ioctl+0xff0/0xff0 [ 1751.468841] do_syscall_64+0x1d5/0x640 [ 1751.472722] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1751.477909] RIP: 0033:0x4665d9 [ 1751.481173] RSP: 002b:00007fbb0c353188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1751.488880] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1751.496139] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1751.503915] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1751.511171] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1751.518427] R13: 00007ffed463974f R14: 00007fbb0c353300 R15: 0000000000022000 [ 1751.536102] Mem-Info: [ 1751.540814] active_anon:18231 inactive_anon:26322 isolated_anon:0 [ 1751.540814] active_file:968 inactive_file:1119 isolated_file:0 [ 1751.540814] unevictable:0 dirty:38 writeback:0 unstable:0 [ 1751.540814] slab_reclaimable:12473 slab_unreclaimable:119169 [ 1751.540814] mapped:54594 shmem:27413 pagetables:755 bounce:0 [ 1751.540814] free:320301 free_pcp:140 free_cma:0 [ 1751.584600] Node 0 active_anon:70676kB inactive_anon:79704kB active_file:2880kB inactive_file:4120kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:146920kB dirty:112kB writeback:0kB shmem:83868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1751.613005] Node 1 active_anon:2248kB inactive_anon:25584kB active_file:1092kB inactive_file:756kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:71856kB dirty:40kB writeback:0kB shmem:25784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1751.641944] Node 0 DMA free:11124kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1751.670023] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1751.679185] Node 0 DMA32 free:52496kB min:36200kB low:45248kB high:54296kB active_anon:68628kB inactive_anon:79704kB active_file:2684kB inactive_file:4620kB unevictable:0kB writepending:112kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2388kB bounce:0kB free_pcp:336kB local_pcp:212kB free_cma:0kB [ 1751.714734] lowmem_reserve[]: 0 0 0 0 0 [ 1751.718789] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1751.748772] lowmem_reserve[]: 0 0 0 0 0 [ 1751.752835] Node 1 Normal free:1034968kB min:53696kB low:67120kB high:80544kB active_anon:2248kB inactive_anon:25584kB active_file:1080kB inactive_file:1220kB unevictable:0kB writepending:40kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:632kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 1751.789004] lowmem_reserve[]: 0 0 0 0 0 [ 1751.793086] Node 0 DMA: 45*4kB (UE) 58*8kB (UE) 49*16kB (U) 33*32kB (UE) 13*64kB (UE) 7*128kB (UE) 1*256kB (E) 3*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 11124kB [ 1751.812597] Node 0 DMA32: 64*4kB (UEH) 395*8kB (UEH) 206*16kB (EH) 1191*32kB (UEH) 2*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44952kB [ 1751.831784] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1751.843204] Node 1 Normal: 11286*4kB (U) 25546*8kB (U) 19702*16kB (U) 12037*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 949928kB [ 1751.861172] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1751.877423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1751.886123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1751.900904] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1751.909878] 30328 total pagecache pages [ 1751.919955] 0 pages in swap cache [ 1751.925271] Swap cache stats: add 0, delete 0, find 0/0 [ 1751.930675] Free swap = 0kB [ 1751.937630] Total swap = 0kB [ 1751.940700] 2097051 pages RAM [ 1751.945097] 0 pages HighMem/MovableOnly [ 1751.949143] 363849 pages reserved [ 1751.952634] 0 pages cma reserved 15:42:39 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)) 15:42:39 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) 15:42:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) 15:42:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) 15:42:39 executing program 0: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x181001, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000003, 0x10, r0, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002140)={'gre0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@remote, @in6=@dev}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) openat$adsp1(0xffffffffffffff9c, 0x0, 0x505041, 0x0) write$dsp(r0, &(0x7f00000000c0)="a4", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 1752.507314] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1752.530697] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1752.537791] syz-executor.1 cpuset= [ 1752.542729] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1752.564296] / mems_allowed=0-1 [ 1752.571127] CPU: 0 PID: 9629 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1752.578945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1752.579431] syz-executor.3 cpuset= [ 1752.588473] Call Trace: [ 1752.588495] dump_stack+0x1b2/0x281 [ 1752.588509] warn_alloc.cold+0x96/0x1cc [ 1752.588519] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1752.588529] ? zone_watermark_ok_safe+0x220/0x220 [ 1752.588548] __alloc_pages_nodemask+0x2127/0x2720 [ 1752.614512] / [ 1752.616948] ? lock_acquire+0x170/0x3f0 [ 1752.622645] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1752.623638] mems_allowed=0-1 [ 1752.627490] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1752.627503] ? __mutex_unlock_slowpath+0x75/0x770 [ 1752.627514] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1752.627527] alloc_pages_current+0x155/0x260 [ 1752.650329] ion_page_pool_alloc+0x118/0x1b0 [ 1752.654737] ion_system_heap_allocate+0x133/0x8c0 [ 1752.659577] ? ion_alloc+0x187/0x810 [ 1752.663407] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1752.668847] ? ion_system_contig_heap_create+0x130/0x130 [ 1752.674289] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1752.679306] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1752.684238] ion_alloc+0x204/0x810 [ 1752.687806] ? ion_dma_buf_release+0x40/0x40 [ 1752.692207] ? __might_fault+0x177/0x1b0 [ 1752.696281] ion_ioctl+0xea/0x1f0 [ 1752.699734] ? ion_query_heaps+0x360/0x360 [ 1752.703962] ? lock_acquire+0x170/0x3f0 [ 1752.707912] ? ion_query_heaps+0x360/0x360 [ 1752.712145] do_vfs_ioctl+0x75a/0xff0 [ 1752.715925] ? ioctl_preallocate+0x1a0/0x1a0 [ 1752.720307] ? lock_downgrade+0x740/0x740 [ 1752.724525] ? __fget+0x225/0x360 [ 1752.727985] ? do_vfs_ioctl+0xff0/0xff0 [ 1752.731956] ? security_file_ioctl+0x83/0xb0 [ 1752.736344] SyS_ioctl+0x7f/0xb0 [ 1752.739691] ? do_vfs_ioctl+0xff0/0xff0 [ 1752.743646] do_syscall_64+0x1d5/0x640 [ 1752.747524] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1752.752698] RIP: 0033:0x4665d9 [ 1752.755875] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1752.763678] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1752.770924] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1752.778188] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1752.785436] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1752.792691] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1752.803511] Bluetooth: hci4 command 0x040f tx timeout [ 1752.817088] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1752.819934] CPU: 1 PID: 9623 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1752.830000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1752.839339] Call Trace: [ 1752.841922] dump_stack+0x1b2/0x281 [ 1752.845546] warn_alloc.cold+0x96/0x1cc [ 1752.849534] ? zone_watermark_ok_safe+0x220/0x220 [ 1752.854390] __alloc_pages_nodemask+0x2127/0x2720 [ 1752.859280] ? lock_acquire+0x170/0x3f0 [ 1752.863235] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1752.868069] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1752.873530] ? __mutex_unlock_slowpath+0x75/0x770 [ 1752.878363] alloc_pages_current+0x155/0x260 [ 1752.882753] ion_page_pool_alloc+0x118/0x1b0 [ 1752.887146] ion_system_heap_allocate+0x133/0x8c0 [ 1752.891972] ? ion_alloc+0x187/0x810 [ 1752.895671] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1752.901110] ? ion_system_contig_heap_create+0x130/0x130 [ 1752.906547] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1752.911555] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1752.916386] ion_alloc+0x204/0x810 [ 1752.920021] ? ion_dma_buf_release+0x40/0x40 [ 1752.924443] ? __might_fault+0x177/0x1b0 [ 1752.926250] syz-executor.4: [ 1752.928514] ion_ioctl+0xea/0x1f0 [ 1752.928524] ? ion_query_heaps+0x360/0x360 [ 1752.928537] ? lock_acquire+0x170/0x3f0 [ 1752.928545] ? ion_query_heaps+0x360/0x360 [ 1752.928574] do_vfs_ioctl+0x75a/0xff0 [ 1752.941689] page allocation failure: order:4 [ 1752.943203] ? ioctl_preallocate+0x1a0/0x1a0 [ 1752.943213] ? lock_downgrade+0x740/0x740 [ 1752.943225] ? __fget+0x225/0x360 [ 1752.943233] ? do_vfs_ioctl+0xff0/0xff0 [ 1752.943242] ? security_file_ioctl+0x83/0xb0 [ 1752.943251] SyS_ioctl+0x7f/0xb0 [ 1752.943257] ? do_vfs_ioctl+0xff0/0xff0 [ 1752.943267] do_syscall_64+0x1d5/0x640 [ 1752.943279] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1752.950930] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1752.951268] RIP: 0033:0x4665d9 [ 1752.969877] (null) [ 1752.971591] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1752.971602] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1752.971607] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1752.971613] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1752.971618] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1752.971624] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1753.053289] CPU: 0 PID: 9630 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1753.061135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1753.070492] Call Trace: [ 1753.073072] dump_stack+0x1b2/0x281 [ 1753.076693] warn_alloc.cold+0x96/0x1cc [ 1753.080656] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1753.085666] ? zone_watermark_ok_safe+0x220/0x220 [ 1753.090521] __alloc_pages_nodemask+0x2127/0x2720 [ 1753.095361] ? __schedule+0x893/0x1de0 [ 1753.099425] ? lock_acquire+0x170/0x3f0 [ 1753.103397] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1753.108259] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1753.113709] ? __mutex_unlock_slowpath+0x75/0x770 [ 1753.118537] alloc_pages_current+0x155/0x260 [ 1753.122925] ion_page_pool_alloc+0x118/0x1b0 [ 1753.127328] ion_system_heap_allocate+0x133/0x8c0 [ 1753.132158] ? ion_alloc+0x187/0x810 [ 1753.135864] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1753.141301] ? ion_system_contig_heap_create+0x130/0x130 [ 1753.146727] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1753.151806] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1753.156625] ion_alloc+0x204/0x810 [ 1753.160143] ? ion_dma_buf_release+0x40/0x40 [ 1753.164553] ? __might_fault+0x177/0x1b0 [ 1753.168589] ion_ioctl+0xea/0x1f0 [ 1753.172020] ? ion_query_heaps+0x360/0x360 [ 1753.176232] ? ion_query_heaps+0x360/0x360 [ 1753.180449] do_vfs_ioctl+0x75a/0xff0 [ 1753.184230] ? ioctl_preallocate+0x1a0/0x1a0 [ 1753.188614] ? lock_downgrade+0x740/0x740 [ 1753.192738] ? __fget+0x225/0x360 [ 1753.196165] ? do_vfs_ioctl+0xff0/0xff0 [ 1753.200133] ? security_file_ioctl+0x83/0xb0 [ 1753.204527] SyS_ioctl+0x7f/0xb0 [ 1753.207871] ? do_vfs_ioctl+0xff0/0xff0 [ 1753.211825] do_syscall_64+0x1d5/0x640 [ 1753.215692] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1753.220865] RIP: 0033:0x4665d9 [ 1753.224041] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1753.231724] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1753.238974] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1753.246216] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1753.253460] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1753.260737] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 15:42:40 executing program 5: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x181001, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000003, 0x10, r0, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002140)={'gre0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@remote, @in6=@dev}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) openat$adsp1(0xffffffffffffff9c, 0x0, 0x505041, 0x0) write$dsp(r0, &(0x7f00000000c0)="a4", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 15:42:40 executing program 0: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x181001, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000003, 0x10, r0, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002140)={'gre0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@remote, @in6=@dev}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in6=@empty}}, &(0x7f0000000000)=0xe8) openat$adsp1(0xffffffffffffff9c, 0x0, 0x505041, 0x0) write$dsp(r0, &(0x7f00000000c0)="a4", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 1753.342827] Mem-Info: [ 1753.348832] active_anon:18219 inactive_anon:26321 isolated_anon:0 [ 1753.348832] active_file:1746 inactive_file:1697 isolated_file:0 [ 1753.348832] unevictable:0 dirty:16 writeback:9 unstable:0 [ 1753.348832] slab_reclaimable:12474 slab_unreclaimable:118727 [ 1753.348832] mapped:55445 shmem:27412 pagetables:836 bounce:0 [ 1753.348832] free:114704 free_pcp:396 free_cma:0 [ 1753.354241] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1753.400632] CPU: 0 PID: 9627 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1753.408427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1753.417775] Call Trace: [ 1753.420371] dump_stack+0x1b2/0x281 [ 1753.423994] warn_alloc.cold+0x96/0x1cc [ 1753.427963] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1753.431758] Node 0 active_anon:68228kB inactive_anon:79700kB active_file:3928kB inactive_file:4052kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:147704kB dirty:16kB writeback:0kB shmem:83864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1753.433055] ? zone_watermark_ok_safe+0x220/0x220 [ 1753.433077] __alloc_pages_nodemask+0x2127/0x2720 [ 1753.470755] ? lock_acquire+0x170/0x3f0 [ 1753.474729] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1753.479569] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1753.485014] ? __mutex_unlock_slowpath+0x75/0x770 [ 1753.489856] alloc_pages_current+0x155/0x260 [ 1753.494259] ion_page_pool_alloc+0x118/0x1b0 [ 1753.495914] Node 1 active_anon:2524kB inactive_anon:25584kB active_file:3156kB inactive_file:2636kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:74076kB dirty:48kB writeback:36kB shmem:25784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1753.498656] ion_system_heap_allocate+0x133/0x8c0 [ 1753.498666] ? ion_alloc+0x187/0x810 [ 1753.498675] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1753.498684] ? ion_system_contig_heap_create+0x130/0x130 [ 1753.545665] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1753.550762] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1753.555604] ion_alloc+0x204/0x810 [ 1753.559232] ? ion_dma_buf_release+0x40/0x40 [ 1753.563638] ? __might_fault+0x177/0x1b0 [ 1753.564882] Node 0 [ 1753.567693] ion_ioctl+0xea/0x1f0 [ 1753.567702] ? ion_query_heaps+0x360/0x360 [ 1753.567713] ? ion_query_heaps+0x360/0x360 [ 1753.581815] do_vfs_ioctl+0x75a/0xff0 [ 1753.585602] ? ioctl_preallocate+0x1a0/0x1a0 [ 1753.590004] ? lock_downgrade+0x740/0x740 [ 1753.594133] ? __fget+0x225/0x360 [ 1753.597568] ? do_vfs_ioctl+0xff0/0xff0 [ 1753.601536] ? security_file_ioctl+0x83/0xb0 [ 1753.605940] SyS_ioctl+0x7f/0xb0 [ 1753.609287] ? do_vfs_ioctl+0xff0/0xff0 [ 1753.613241] do_syscall_64+0x1d5/0x640 [ 1753.617125] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1753.622299] RIP: 0033:0x4665d9 [ 1753.625467] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1753.633152] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1753.640401] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1753.647643] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1753.654890] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1753.662153] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1753.680624] DMA free:13084kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1753.735270] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1753.747170] Node 0 DMA32 free:318620kB min:36200kB low:45248kB high:54296kB active_anon:68304kB inactive_anon:79700kB active_file:3728kB inactive_file:4252kB unevictable:0kB writepending:16kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2416kB bounce:0kB free_pcp:768kB local_pcp:720kB free_cma:0kB [ 1753.809099] lowmem_reserve[]: 0 0 0 0 0 [ 1753.817675] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1753.873370] lowmem_reserve[]: 0 0 0 0 0 [ 1753.884319] Node 1 Normal free:313820kB min:53696kB low:67120kB high:80544kB active_anon:2488kB inactive_anon:25584kB active_file:3092kB inactive_file:2672kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:824kB bounce:0kB free_pcp:872kB local_pcp:644kB free_cma:0kB 15:42:41 executing program 0: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x181001, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000003, 0x10, r0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f00000000c0)="a4", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) recvmsg$can_bcm(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x80000001, 0x2, 0x1, 0x1, r1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x40) [ 1753.983358] lowmem_reserve[]: 0 0 0 0 0 [ 1753.999321] Node 0 DMA: 45*4kB (UE) 47*8kB (UE) 49*16kB (U) 33*32kB (UE) 13*64kB (UE) 7*128kB (UE) 1*256kB (E) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 13084kB [ 1754.033174] Node 0 DMA32: 66*4kB (EH) 12190*8kB (UMEH) 7762*16kB (UMEH) 1088*32kB (UMEH) 74*64kB (UMH) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 261656kB [ 1754.060585] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1754.106665] Node 1 Normal: 971*4kB (U) 1268*8kB (UM) 1743*16kB (U) 6839*32kB (UM) 811*64kB (U) 9*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 313820kB [ 1754.137609] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1754.176301] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1754.203081] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 15:42:41 executing program 5: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x40082, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x181001, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000003, 0x10, r0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f00000000c0)="a4", 0x1) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) write$dsp(r0, &(0x7f0000000140)="5bc0f00bf436f551ee4b0b72525a39da4bb52db926b88a5b09765e7eb038387ab5d8714c0a1d28086f5bb4636a6e2877a04684f39255a178f02da368d431a14843e20f52eb8440eccb6cb567c2162a09a2bde5e4cf1a461beeb133a1c267d2ef5896c538698be944bb01fa43", 0x6c) [ 1754.228804] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1754.243476] 30926 total pagecache pages [ 1754.262936] 0 pages in swap cache [ 1754.274691] Swap cache stats: add 0, delete 0, find 0/0 [ 1754.296018] Free swap = 0kB [ 1754.307981] Total swap = 0kB [ 1754.318125] 2097051 pages RAM [ 1754.325780] 0 pages HighMem/MovableOnly [ 1754.334636] 363849 pages reserved [ 1754.341643] 0 pages cma reserved 15:42:42 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000480)={r3, 0x1e}) recvmsg$can_bcm(r2, 0x0, 0x0) [ 1754.822960] Bluetooth: hci4 command 0x0419 tx timeout 15:42:42 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000480)={r3, 0x1e}) recvmsg$can_bcm(r2, 0x0, 0x0) recvmsg$can_bcm(r2, 0x0, 0x40000002) [ 1755.010368] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1755.067779] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1755.092707] CPU: 1 PID: 9644 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1755.100535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1755.109886] Call Trace: [ 1755.112471] dump_stack+0x1b2/0x281 [ 1755.116099] warn_alloc.cold+0x96/0x1cc [ 1755.120069] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1755.125081] ? zone_watermark_ok_safe+0x220/0x220 [ 1755.129945] __alloc_pages_nodemask+0x2127/0x2720 [ 1755.134792] ? lock_acquire+0x170/0x3f0 [ 1755.138786] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1755.143732] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1755.149186] ? __mutex_unlock_slowpath+0x75/0x770 [ 1755.154032] ? retint_kernel+0x2d/0x2d [ 1755.157920] alloc_pages_current+0x155/0x260 [ 1755.162328] ion_page_pool_alloc+0x118/0x1b0 [ 1755.166729] ion_system_heap_allocate+0x133/0x8c0 [ 1755.171562] ? ion_alloc+0x187/0x810 [ 1755.175276] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1755.180742] ? ion_system_contig_heap_create+0x130/0x130 [ 1755.186182] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1755.191193] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1755.196036] ion_alloc+0x204/0x810 [ 1755.199574] ? ion_dma_buf_release+0x40/0x40 [ 1755.203983] ? __might_fault+0x177/0x1b0 [ 1755.208034] ion_ioctl+0xea/0x1f0 [ 1755.211481] ? ion_query_heaps+0x360/0x360 [ 1755.215713] ? lock_acquire+0x170/0x3f0 [ 1755.219675] ? ion_query_heaps+0x360/0x360 [ 1755.223900] do_vfs_ioctl+0x75a/0xff0 [ 1755.227694] ? ioctl_preallocate+0x1a0/0x1a0 [ 1755.232089] ? lock_downgrade+0x740/0x740 [ 1755.236251] ? __fget+0x225/0x360 [ 1755.239697] ? do_vfs_ioctl+0xff0/0xff0 [ 1755.243669] ? security_file_ioctl+0x83/0xb0 [ 1755.248081] SyS_ioctl+0x7f/0xb0 [ 1755.251439] ? do_vfs_ioctl+0xff0/0xff0 [ 1755.255415] do_syscall_64+0x1d5/0x640 [ 1755.259302] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1755.264485] RIP: 0033:0x4665d9 [ 1755.267663] RSP: 002b:00007fe1da39e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1755.275363] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1755.282622] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1755.289882] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1755.297159] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1755.304513] R13: 00007ffee467076f R14: 00007fe1da39e300 R15: 0000000000022000 [ 1756.020250] warn_alloc_show_mem: 3 callbacks suppressed [ 1756.020254] Mem-Info: [ 1756.046763] active_anon:17809 inactive_anon:26321 isolated_anon:0 [ 1756.046763] active_file:491 inactive_file:453 isolated_file:0 [ 1756.046763] unevictable:0 dirty:20 writeback:0 unstable:0 [ 1756.046763] slab_reclaimable:12470 slab_unreclaimable:119340 [ 1756.046763] mapped:54104 shmem:27412 pagetables:836 bounce:0 [ 1756.046763] free:25069 free_pcp:307 free_cma:0 [ 1756.186428] Node 0 active_anon:68608kB inactive_anon:79700kB active_file:0kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142340kB dirty:0kB writeback:0kB shmem:83864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1756.286440] Node 1 active_anon:2628kB inactive_anon:25584kB active_file:112kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:70476kB dirty:80kB writeback:0kB shmem:25784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1756.322833] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1756.350661] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1756.358555] Node 0 DMA32 free:35816kB min:36200kB low:45248kB high:54296kB active_anon:68608kB inactive_anon:79700kB active_file:556kB inactive_file:192kB unevictable:0kB writepending:100kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2420kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1756.470469] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1756.495561] lowmem_reserve[]: 0 0 0 0 0 [ 1756.501087] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1756.520285] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1756.525892] CPU: 1 PID: 9647 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1756.553621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1756.563087] Call Trace: [ 1756.565685] dump_stack+0x1b2/0x281 [ 1756.569313] warn_alloc.cold+0x96/0x1cc [ 1756.573288] ? zone_watermark_ok_safe+0x220/0x220 [ 1756.578143] __alloc_pages_nodemask+0x2127/0x2720 [ 1756.582982] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1756.587995] ? lock_acquire+0x170/0x3f0 [ 1756.591969] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1756.595658] lowmem_reserve[]: [ 1756.596811] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1756.596823] ? __mutex_unlock_slowpath+0x75/0x770 [ 1756.601025] 0 [ 1756.605350] alloc_pages_current+0x155/0x260 [ 1756.605363] ion_page_pool_alloc+0x118/0x1b0 [ 1756.605373] ion_system_heap_allocate+0x133/0x8c0 [ 1756.605382] ? ion_alloc+0x187/0x810 [ 1756.605392] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1756.605401] ? ion_system_contig_heap_create+0x130/0x130 [ 1756.605410] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1756.605421] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1756.614860] 0 [ 1756.616427] ion_alloc+0x204/0x810 [ 1756.616440] ? ion_dma_buf_release+0x40/0x40 [ 1756.623042] 0 [ 1756.625680] ? __might_fault+0x177/0x1b0 [ 1756.625693] ion_ioctl+0xea/0x1f0 [ 1756.625705] ? ion_query_heaps+0x360/0x360 [ 1756.631535] 0 [ 1756.634849] ? lock_acquire+0x170/0x3f0 [ 1756.634857] ? ion_query_heaps+0x360/0x360 [ 1756.634867] do_vfs_ioctl+0x75a/0xff0 [ 1756.634879] ? ioctl_preallocate+0x1a0/0x1a0 [ 1756.634890] ? lock_downgrade+0x740/0x740 [ 1756.643874] 0 [ 1756.645319] ? __fget+0x225/0x360 [ 1756.645329] ? do_vfs_ioctl+0xff0/0xff0 [ 1756.651930] ? security_file_ioctl+0x83/0xb0 [ 1756.651939] SyS_ioctl+0x7f/0xb0 [ 1756.659283] Node 1 [ 1756.659950] ? do_vfs_ioctl+0xff0/0xff0 [ 1756.659963] do_syscall_64+0x1d5/0x640 [ 1756.662883] Normal free:53552kB min:53696kB low:67120kB high:80544kB active_anon:2628kB inactive_anon:25584kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:80kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:924kB bounce:0kB free_pcp:1356kB local_pcp:624kB free_cma:0kB [ 1756.665802] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1756.665813] RIP: 0033:0x4665d9 [ 1756.671953] lowmem_reserve[]: [ 1756.673476] RSP: 002b:00007fbb0c353188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1756.673486] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1756.673492] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1756.673497] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1756.673503] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1756.673508] R13: 00007ffed463974f R14: 00007fbb0c353300 R15: 0000000000022000 [ 1756.807440] 0 0 0 0 0 [ 1756.810001] Node 0 DMA: 5*4kB (UE) 35*8kB (UE) 51*16kB (U) 33*32kB (UE) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 2*2048kB (M) 0*4096kB = 11068kB [ 1756.825422] Node 0 DMA32: 398*4kB (UMEH) 516*8kB (UMEH) 272*16kB (UMEH) 52*32kB (UMEH) 8*64kB (UMH) 187*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36184kB [ 1756.840671] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1756.851480] Node 1 Normal: 5*4kB (UM) 4*8kB (UM) 2*16kB (M) 1915*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 61364kB [ 1756.864648] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1756.873687] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1756.892204] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1756.910058] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1756.928580] 28187 total pagecache pages [ 1756.934436] 0 pages in swap cache [ 1756.937979] Swap cache stats: add 0, delete 0, find 0/0 [ 1756.952707] Free swap = 0kB [ 1756.956943] Total swap = 0kB [ 1756.962754] 2097051 pages RAM [ 1756.965965] 0 pages HighMem/MovableOnly [ 1756.969997] 363849 pages reserved [ 1756.973634] 0 pages cma reserved [ 1757.198774] oom_reaper: reaped process 9623 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1757.216502] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1757.240845] in:imklog cpuset=/ mems_allowed=0-1 [ 1757.248299] CPU: 0 PID: 9120 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1757.255844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1757.265201] Call Trace: [ 1757.267794] dump_stack+0x1b2/0x281 [ 1757.271412] dump_header+0x178/0x82f [ 1757.275119] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1757.280214] ? ___ratelimit+0x2cd/0x530 [ 1757.284204] oom_kill_process.cold+0x10/0xa40 [ 1757.288698] out_of_memory+0xe3e/0x1190 [ 1757.292674] ? oom_killer_disable+0x1c0/0x1c0 [ 1757.297181] ? mutex_trylock+0x152/0x1a0 [ 1757.301259] __alloc_pages_nodemask+0x23e1/0x2720 [ 1757.306113] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1757.310974] alloc_pages_current+0x155/0x260 [ 1757.315378] filemap_fault+0x11a1/0x1ad0 [ 1757.319452] ext4_filemap_fault+0x84/0xb0 [ 1757.323586] __do_fault+0xfa/0x380 [ 1757.327122] __handle_mm_fault+0x2497/0x4620 [ 1757.331532] ? vm_insert_page+0x7c0/0x7c0 [ 1757.335680] ? lock_downgrade+0x740/0x740 [ 1757.339982] ? mark_held_locks+0xa6/0xf0 [ 1757.344021] ? sync_mm_rss+0xf2/0x160 [ 1757.347796] handle_mm_fault+0x455/0x9c0 [ 1757.351842] __do_page_fault+0x549/0xad0 [ 1757.355882] ? spurious_fault+0x640/0x640 [ 1757.360011] ? do_page_fault+0x60/0x500 [ 1757.363960] ? page_fault+0x2f/0x50 [ 1757.367668] page_fault+0x45/0x50 [ 1757.371100] RIP: 1fa0:0x1f9f [ 1757.374093] RSP: 0000:000055d662b9d9d0 EFLAGS: 7f2fd3426da0 [ 1757.382727] syz-executor.3: [ 1757.384301] Mem-Info: [ 1757.388531] page allocation failure: order:0 [ 1757.391538] active_anon:17813 inactive_anon:26321 isolated_anon:0 [ 1757.391538] active_file:18 inactive_file:19 isolated_file:0 [ 1757.391538] unevictable:0 dirty:9 writeback:0 unstable:0 [ 1757.391538] slab_reclaimable:12470 slab_unreclaimable:118928 [ 1757.391538] mapped:53158 shmem:27412 pagetables:836 bounce:0 [ 1757.391538] free:13841 free_pcp:30 free_cma:0 [ 1757.406802] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1757.439629] Node 0 active_anon:68608kB inactive_anon:79700kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142232kB dirty:0kB writeback:0kB shmem:83864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1757.445455] (null) [ 1757.446783] Node 1 active_anon:2644kB inactive_anon:25584kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70400kB dirty:36kB writeback:0kB shmem:25784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1757.485042] syz-executor.3 cpuset= [ 1757.512334] Node 0 [ 1757.515704] / [ 1757.515944] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1757.518165] mems_allowed=0-1 [ 1757.519852] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1757.561967] Node 0 DMA32 free:18032kB min:36200kB low:45248kB high:54296kB active_anon:68608kB inactive_anon:79700kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2420kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1757.562487] CPU: 1 PID: 9623 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1757.598281] lowmem_reserve[]: 0 [ 1757.598654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1757.598660] Call Trace: [ 1757.601923] 0 [ 1757.611274] dump_stack+0x1b2/0x281 [ 1757.611287] warn_alloc.cold+0x96/0x1cc [ 1757.611297] ? zone_watermark_ok_safe+0x220/0x220 [ 1757.611305] ? usleep_range+0x130/0x130 [ 1757.611313] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1757.611323] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1757.611333] ? run_timer_softirq+0x5a0/0x5a0 [ 1757.620769] 0 [ 1757.623253] __alloc_pages_nodemask+0x2127/0x2720 [ 1757.623269] ? lock_acquire+0x170/0x3f0 [ 1757.623283] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1757.623291] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1757.623307] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1757.628136] 0 [ 1757.632115] ? alloc_pages_current+0x84/0x260 [ 1757.644650] 0 [ 1757.646748] alloc_pages_current+0x155/0x260 [ 1757.653344] ion_page_pool_alloc+0x118/0x1b0 [ 1757.653355] ion_system_heap_allocate+0x133/0x8c0 [ 1757.653364] ? ion_alloc+0x187/0x810 [ 1757.653374] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1757.653384] ? ion_system_contig_heap_create+0x130/0x130 [ 1757.653394] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1757.660855] Node 0 [ 1757.662164] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1757.670129] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1757.672061] ion_alloc+0x204/0x810 [ 1757.677411] lowmem_reserve[]: [ 1757.678323] ? ion_dma_buf_release+0x40/0x40 [ 1757.680090] 0 [ 1757.684485] ? __might_fault+0x177/0x1b0 [ 1757.684495] ion_ioctl+0xea/0x1f0 [ 1757.684504] ? ion_query_heaps+0x360/0x360 [ 1757.684516] ? lock_acquire+0x170/0x3f0 [ 1757.684524] ? ion_query_heaps+0x360/0x360 [ 1757.684532] do_vfs_ioctl+0x75a/0xff0 [ 1757.684542] ? ioctl_preallocate+0x1a0/0x1a0 [ 1757.684551] ? lock_downgrade+0x740/0x740 [ 1757.692269] 0 [ 1757.693764] ? __fget+0x225/0x360 [ 1757.693774] ? do_vfs_ioctl+0xff0/0xff0 [ 1757.693785] ? security_file_ioctl+0x83/0xb0 [ 1757.693794] SyS_ioctl+0x7f/0xb0 [ 1757.693803] ? do_vfs_ioctl+0xff0/0xff0 [ 1757.693816] do_syscall_64+0x1d5/0x640 [ 1757.700992] 0 [ 1757.702944] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1757.702952] RIP: 0033:0x4665d9 [ 1757.702956] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1757.702965] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1757.702970] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1757.702974] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1757.702978] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1757.702984] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1757.717699] warn_alloc_show_mem: 1 callbacks suppressed [ 1757.717701] Mem-Info: [ 1757.726088] 0 [ 1757.758028] active_anon:17813 inactive_anon:26321 isolated_anon:0 [ 1757.758028] active_file:18 inactive_file:19 isolated_file:0 [ 1757.758028] unevictable:0 dirty:9 writeback:0 unstable:0 [ 1757.758028] slab_reclaimable:12470 slab_unreclaimable:118928 [ 1757.758028] mapped:53158 shmem:27412 pagetables:836 bounce:0 [ 1757.758028] free:13841 free_pcp:30 free_cma:0 [ 1757.763962] 0 [ 1757.776892] Node 0 active_anon:68608kB inactive_anon:79700kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142232kB dirty:0kB writeback:0kB shmem:83864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1757.791097] Node 1 active_anon:2644kB inactive_anon:25584kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70400kB dirty:36kB writeback:0kB shmem:25784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1757.796122] Node 1 [ 1757.799991] Node 0 [ 1757.800481] Normal free:26364kB min:53696kB low:67120kB high:80544kB active_anon:2644kB inactive_anon:25584kB active_file:24kB inactive_file:8kB unevictable:0kB writepending:36kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:924kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1757.813656] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1757.820541] lowmem_reserve[]: [ 1757.835156] lowmem_reserve[]: [ 1757.846019] 0 [ 1757.860243] 0 [ 1757.868483] 0 [ 1757.876259] 2717 [ 1757.878512] 0 [ 1757.880301] 2718 [ 1757.922257] 0 [ 1757.959156] 2718 [ 1757.979325] 0 [ 1758.008595] 2718 [ 1758.062872] Node 0 DMA32 free:18068kB min:36200kB low:45248kB high:54296kB active_anon:68592kB inactive_anon:79700kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2420kB bounce:0kB free_pcp:204kB local_pcp:120kB free_cma:0kB [ 1758.068689] Node 0 [ 1758.099498] lowmem_reserve[]: 0 0 0 0 0 [ 1758.106800] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1758.107173] DMA: 1*4kB (E) 25*8kB (UE) 51*16kB (U) 33*32kB (UE) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 2*2048kB (M) 0*4096kB = 10972kB [ 1758.145073] lowmem_reserve[]: 0 0 0 0 0 [ 1758.170527] Node 0 DMA32: [ 1758.171213] Node 1 Normal free:26740kB min:53696kB low:67120kB high:80544kB active_anon:2556kB inactive_anon:25584kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:924kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1758.175813] 397*4kB [ 1758.214478] lowmem_reserve[]: [ 1758.214764] (UME) [ 1758.216827] 0 [ 1758.219940] 519*8kB [ 1758.222066] 0 [ 1758.231445] (UME) [ 1758.233441] 0 0 0 [ 1758.237027] 272*16kB [ 1758.237793] Node 0 [ 1758.237795] (UME) 52*32kB [ 1758.240217] DMA: [ 1758.249997] (UME) 5*64kB (UM) 47*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18092kB [ 1758.255990] 1*4kB (E) 25*8kB (UE) 51*16kB (U) 33*32kB (UE) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 2*2048kB (M) 0*4096kB = 10972kB [ 1758.271691] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1758.285913] Node 0 DMA32: 397*4kB (UME) 519*8kB (UME) 272*16kB (UME) 52*32kB (UME) 5*64kB (UM) 47*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18092kB [ 1758.296468] Node 1 Normal: 29*4kB (UM) 22*8kB (M) 17*16kB (M) 792*32kB (UM) 11*64kB (M) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26740kB [ 1758.310482] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1758.326799] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1758.342112] Node 1 [ 1758.358021] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1758.358417] Normal: [ 1758.360265] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1758.374265] 29*4kB (UM) 22*8kB (M) 17*16kB (M) 792*32kB (UM) 11*64kB (M) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26740kB [ 1758.390487] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1758.403227] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1758.411534] 27432 total pagecache pages [ 1758.412193] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1758.416245] 0 pages in swap cache [ 1758.416250] Swap cache stats: add 0, delete 0, find 0/0 [ 1758.416254] Free swap = 0kB [ 1758.416257] Total swap = 0kB [ 1758.416264] 2097051 pages RAM [ 1758.416267] 0 pages HighMem/MovableOnly [ 1758.416270] 363849 pages reserved [ 1758.416273] 0 pages cma reserved [ 1758.416280] Out of memory (oom_kill_allocating_task): Kill process 9120 (in:imklog) score 0 or sacrifice child [ 1758.416323] Killed process 9118 (rsyslogd) total-vm:254332kB, anon-rss:840kB, file-rss:0kB, shmem-rss:0kB [ 1758.486332] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1758.486638] oom_reaper: reaped process 9118 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1758.500354] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1758.520633] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1758.534165] 27432 total pagecache pages [ 1758.538182] 0 pages in swap cache [ 1758.541742] Swap cache stats: add 0, delete 0, find 0/0 [ 1758.558546] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1758.559278] Free swap = 0kB [ 1758.577374] CPU: 0 PID: 9339 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1758.577414] Total swap = 0kB [ 1758.585174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1758.585177] Call Trace: [ 1758.585194] dump_stack+0x1b2/0x281 [ 1758.585206] dump_header+0x178/0x82f [ 1758.585216] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1758.585226] ? ___ratelimit+0x2cd/0x530 [ 1758.596305] 2097051 pages RAM [ 1758.597869] oom_kill_process.cold+0x10/0xa40 [ 1758.600441] 0 pages HighMem/MovableOnly [ 1758.604068] out_of_memory+0xe3e/0x1190 [ 1758.604080] ? oom_killer_disable+0x1c0/0x1c0 [ 1758.604089] ? mutex_trylock+0x152/0x1a0 [ 1758.611552] 363849 pages reserved [ 1758.612890] __alloc_pages_nodemask+0x23e1/0x2720 [ 1758.612912] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1758.616949] 0 pages cma reserved [ 1758.620050] alloc_pages_current+0x155/0x260 [ 1758.662031] filemap_fault+0x11a1/0x1ad0 [ 1758.666096] ext4_filemap_fault+0x84/0xb0 [ 1758.670245] __do_fault+0xfa/0x380 [ 1758.673838] __handle_mm_fault+0x2497/0x4620 [ 1758.678396] ? vm_insert_page+0x7c0/0x7c0 [ 1758.682841] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1758.687243] ? nanosleep_copyout+0x100/0x100 [ 1758.691736] ? mark_held_locks+0xa6/0xf0 [ 1758.695903] handle_mm_fault+0x455/0x9c0 [ 1758.699970] __do_page_fault+0x549/0xad0 [ 1758.704025] ? spurious_fault+0x640/0x640 [ 1758.708163] ? do_page_fault+0x60/0x500 [ 1758.712125] ? page_fault+0x2f/0x50 [ 1758.715744] page_fault+0x45/0x50 [ 1758.719201] RIP: 1acb9d:0xb [ 1758.722124] RSP: 000c:00007ffed4639a0c EFLAGS: 00000032 [ 1758.726259] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1758.756957] Mem-Info: [ 1758.760431] active_anon:17562 inactive_anon:26321 isolated_anon:0 [ 1758.760431] active_file:10 inactive_file:385 isolated_file:0 [ 1758.760431] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1758.760431] slab_reclaimable:12470 slab_unreclaimable:118533 [ 1758.760431] mapped:53323 shmem:27412 pagetables:836 bounce:0 [ 1758.760431] free:20274 free_pcp:392 free_cma:0 [ 1758.782254] syz-executor.0 cpuset= [ 1758.795354] Node 0 active_anon:67692kB inactive_anon:79700kB active_file:24kB inactive_file:1924kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143132kB dirty:0kB writeback:0kB shmem:83864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1758.812232] / [ 1758.828040] Node 1 active_anon:2556kB inactive_anon:25584kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70360kB dirty:0kB writeback:0kB shmem:25784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1758.830385] mems_allowed=0-1 [ 1758.857445] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1758.870306] CPU: 1 PID: 9644 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1758.894389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1758.903740] Call Trace: [ 1758.906331] dump_stack+0x1b2/0x281 [ 1758.909959] warn_alloc.cold+0x96/0x1cc [ 1758.913933] ? zone_watermark_ok_safe+0x220/0x220 [ 1758.918770] ? usleep_range+0x130/0x130 [ 1758.922740] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1758.927839] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1758.929522] lowmem_reserve[]: [ 1758.932847] ? run_timer_softirq+0x5a0/0x5a0 [ 1758.932865] __alloc_pages_nodemask+0x2127/0x2720 [ 1758.932881] ? lock_acquire+0x170/0x3f0 [ 1758.939279] 0 [ 1758.940393] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1758.940403] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1758.951877] 2717 [ 1758.955818] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1758.955838] alloc_pages_current+0x155/0x260 [ 1758.955849] ion_page_pool_alloc+0x118/0x1b0 [ 1758.955859] ion_system_heap_allocate+0x133/0x8c0 [ 1758.963620] 2718 [ 1758.967811] ? ion_alloc+0x187/0x810 [ 1758.967820] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1758.967829] ? ion_system_contig_heap_create+0x130/0x130 [ 1758.981004] 2718 [ 1758.981531] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1758.991621] 2718 [ 1758.992839] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1758.992851] ion_alloc+0x204/0x810 [ 1758.992863] ? ion_dma_buf_release+0x40/0x40 [ 1758.992873] ? __might_fault+0x177/0x1b0 [ 1758.992884] ion_ioctl+0xea/0x1f0 [ 1759.005397] ? ion_query_heaps+0x360/0x360 [ 1759.005409] ? lock_acquire+0x170/0x3f0 [ 1759.005418] ? ion_query_heaps+0x360/0x360 [ 1759.007483] Node 0 [ 1759.012291] do_vfs_ioctl+0x75a/0xff0 [ 1759.012301] ? ioctl_preallocate+0x1a0/0x1a0 [ 1759.012308] ? lock_downgrade+0x740/0x740 [ 1759.012320] ? __fget+0x225/0x360 [ 1759.012328] ? do_vfs_ioctl+0xff0/0xff0 [ 1759.022250] DMA32 free:38436kB min:36200kB low:45248kB high:54296kB active_anon:67648kB inactive_anon:79700kB active_file:24kB inactive_file:2868kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7040kB pagetables:2420kB bounce:0kB free_pcp:896kB local_pcp:228kB free_cma:0kB [ 1759.024284] ? security_file_ioctl+0x83/0xb0 [ 1759.024296] SyS_ioctl+0x7f/0xb0 [ 1759.028822] lowmem_reserve[]: [ 1759.031955] ? do_vfs_ioctl+0xff0/0xff0 [ 1759.031964] do_syscall_64+0x1d5/0x640 [ 1759.031996] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1759.042523] 0 [ 1759.046174] RIP: 0033:0x4665d9 [ 1759.046179] RSP: 002b:00007fe1da39e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1759.055049] 0 [ 1759.058248] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1759.058253] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1759.058273] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1759.058279] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1759.066229] 0 [ 1759.090910] R13: 00007ffee467076f R14: 00007fe1da39e300 R15: 0000000000022000 [ 1759.244342] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1759.296506] 0 0 [ 1759.298514] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1759.317202] syz-executor.3 cpuset= [ 1759.350280] Mem-Info: [ 1759.355581] lowmem_reserve[]: 0 0 0 0 0 [ 1759.360286] Node 1 Normal free:53648kB min:53696kB low:67120kB high:80544kB active_anon:2528kB inactive_anon:25584kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:924kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1759.362634] active_anon:17544 inactive_anon:26321 isolated_anon:0 [ 1759.362634] active_file:17 inactive_file:14 isolated_file:0 [ 1759.362634] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1759.362634] slab_reclaimable:12448 slab_unreclaimable:118512 [ 1759.362634] mapped:53152 shmem:27412 pagetables:836 bounce:0 [ 1759.362634] free:25192 free_pcp:221 free_cma:0 [ 1759.397402] / mems_allowed=0-1 [ 1759.508727] CPU: 0 PID: 9623 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1759.516515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1759.525877] Call Trace: [ 1759.528466] dump_stack+0x1b2/0x281 [ 1759.532105] warn_alloc.cold+0x96/0x1cc [ 1759.536083] ? zone_watermark_ok_safe+0x220/0x220 [ 1759.540942] __alloc_pages_nodemask+0x2127/0x2720 [ 1759.545786] ? lock_acquire+0x170/0x3f0 [ 1759.548761] Node 0 active_anon:67648kB inactive_anon:79700kB active_file:52kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142248kB dirty:0kB writeback:0kB shmem:83864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1759.549761] ? lock_acquire+0x170/0x3f0 [ 1759.577481] Node 1 active_anon:2528kB inactive_anon:25584kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70360kB dirty:0kB writeback:0kB shmem:25784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1759.581408] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1759.608642] Node 0 [ 1759.613457] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1759.613470] ? __mutex_unlock_slowpath+0x75/0x770 [ 1759.615727] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1759.621193] alloc_pages_current+0x155/0x260 [ 1759.626043] lowmem_reserve[]: [ 1759.651534] ion_page_pool_alloc+0x118/0x1b0 [ 1759.651542] ion_system_heap_allocate+0x133/0x8c0 [ 1759.651552] ? _raw_spin_unlock+0x29/0x40 [ 1759.655954] 0 [ 1759.659037] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1759.663434] 2717 [ 1759.668260] ? ion_system_contig_heap_create+0x130/0x130 [ 1759.672399] 2718 [ 1759.674181] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1759.679091] 2718 [ 1759.681141] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1759.686598] 2718 [ 1759.688635] ion_alloc+0x27a/0x810 [ 1759.695693] ? ion_dma_buf_release+0x40/0x40 [ 1759.700523] Node 0 [ 1759.702576] ? __might_fault+0x177/0x1b0 [ 1759.702589] ion_ioctl+0xea/0x1f0 [ 1759.706120] DMA32 free:36148kB min:36200kB low:45248kB high:54296kB active_anon:67648kB inactive_anon:79700kB active_file:52kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7040kB pagetables:2420kB bounce:0kB free_pcp:764kB local_pcp:760kB free_cma:0kB [ 1759.710502] ? ion_query_heaps+0x360/0x360 [ 1759.712733] lowmem_reserve[]: [ 1759.716815] ? lock_acquire+0x170/0x3f0 [ 1759.720325] 0 [ 1759.748764] ? ion_query_heaps+0x360/0x360 [ 1759.748774] do_vfs_ioctl+0x75a/0xff0 [ 1759.748787] ? ioctl_preallocate+0x1a0/0x1a0 [ 1759.753016] 0 [ 1759.756094] ? lock_downgrade+0x740/0x740 [ 1759.760045] 0 [ 1759.761836] ? __fget+0x225/0x360 [ 1759.766065] 0 [ 1759.769922] ? do_vfs_ioctl+0xff0/0xff0 [ 1759.774337] 0 [ 1759.776113] ? security_file_ioctl+0x83/0xb0 [ 1759.782020] SyS_ioctl+0x7f/0xb0 [ 1759.785465] Node 0 [ 1759.787237] ? do_vfs_ioctl+0xff0/0xff0 [ 1759.791196] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1759.792981] do_syscall_64+0x1d5/0x640 [ 1759.792998] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1759.797381] lowmem_reserve[]: [ 1759.800728] RIP: 0033:0x4665d9 [ 1759.802970] 0 [ 1759.806927] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 [ 1759.831817] 0 [ 1759.835673] ORIG_RAX: 0000000000000010 [ 1759.835679] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1759.835685] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1759.835689] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1759.835696] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1759.840954] 0 [ 1759.844038] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1759.925707] lowmem_reserve[]: 0 0 0 0 0 [ 1759.929735] Node 0 DMA: 1*4kB (E) 25*8kB (UE) 51*16kB (U) 33*32kB (UE) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 2*2048kB (M) 0*4096kB = 10972kB [ 1760.019002] Node 0 DMA32: 411*4kB (UME) 495*8kB (ME) 253*16kB (UME) 44*32kB (ME) 16*64kB (UM) 47*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18100kB [ 1760.032058] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1760.045821] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1760.052047] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1760.061713] CPU: 0 PID: 9623 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1760.067210] 0 [ 1760.069588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1760.069595] 0 [ 1760.071379] Call Trace: [ 1760.080771] Node 1 [ 1760.082563] dump_stack+0x1b2/0x281 [ 1760.082576] warn_alloc.cold+0x96/0x1cc [ 1760.085139] Normal: [ 1760.087364] ? zone_watermark_ok_safe+0x220/0x220 [ 1760.091050] 60*4kB [ 1760.095012] ? usleep_range+0x130/0x130 [ 1760.095020] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1760.095031] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1760.095041] ? run_timer_softirq+0x5a0/0x5a0 [ 1760.102180] __alloc_pages_nodemask+0x2127/0x2720 [ 1760.102196] ? lock_acquire+0x170/0x3f0 [ 1760.104410] Node 1 [ 1760.108403] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1760.113538] (UM) [ 1760.118536] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1760.122954] Normal free:26760kB min:53696kB low:67120kB high:80544kB active_anon:2528kB inactive_anon:25584kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:924kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1760.127752] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1760.131693] lowmem_reserve[]: [ 1760.133926] alloc_pages_current+0x155/0x260 [ 1760.133939] ion_page_pool_alloc+0x118/0x1b0 [ 1760.138793] 23*8kB [ 1760.140839] ion_system_heap_allocate+0x133/0x8c0 [ 1760.145330] (UM) [ 1760.173254] ? _raw_spin_unlock+0x29/0x40 [ 1760.173263] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1760.173272] ? ion_system_contig_heap_create+0x130/0x130 [ 1760.178702] 0 [ 1760.181781] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1760.186177] 0 [ 1760.190555] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1760.192832] 0 [ 1760.197589] ion_alloc+0x27a/0x810 [ 1760.199626] 0 [ 1760.203772] ? ion_dma_buf_release+0x40/0x40 [ 1760.203785] ? __might_fault+0x177/0x1b0 [ 1760.208694] 17*16kB [ 1760.214247] ion_ioctl+0xea/0x1f0 [ 1760.214256] ? ion_query_heaps+0x360/0x360 [ 1760.214269] ? lock_acquire+0x170/0x3f0 [ 1760.216052] (M) [ 1760.221151] ? ion_query_heaps+0x360/0x360 [ 1760.222963] 0 [ 1760.227786] do_vfs_ioctl+0x75a/0xff0 [ 1760.233101] ? ioctl_preallocate+0x1a0/0x1a0 [ 1760.233109] ? lock_downgrade+0x740/0x740 [ 1760.233122] ? __fget+0x225/0x360 [ 1760.234909] Node 0 [ 1760.239300] ? do_vfs_ioctl+0xff0/0xff0 [ 1760.243372] 796*32kB [ 1760.245669] ? security_file_ioctl+0x83/0xb0 [ 1760.249112] (UM) [ 1760.253370] SyS_ioctl+0x7f/0xb0 [ 1760.253378] ? do_vfs_ioctl+0xff0/0xff0 [ 1760.253389] do_syscall_64+0x1d5/0x640 [ 1760.257631] DMA: [ 1760.259598] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1760.263956] 1*4kB [ 1760.265723] RIP: 0033:0x4665d9 [ 1760.269515] (E) [ 1760.273914] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1760.273924] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1760.273928] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1760.273935] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1760.278069] 11*64kB [ 1760.281497] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1760.281504] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1760.283732] (M) [ 1760.391971] 25*8kB (UE) 51*16kB (U) 33*32kB (UE) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 2*2048kB (M) 0*4096kB = 10972kB [ 1760.437072] Node 0 DMA32: 410*4kB (ME) 496*8kB (UME) 1135*16kB (UME) 91*32kB (UME) 55*64kB (UM) 47*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36216kB [ 1760.486819] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1760.523108] Node 1 Normal: 366*4kB (UM) 149*8kB (UM) 17*16kB (M) 796*32kB (UM) 368*64kB (UM) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52080kB [ 1760.583345] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1760.616887] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1760.628593] 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27000kB [ 1760.648732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1760.661639] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1760.704243] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1760.718716] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1760.755699] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1760.771903] 27432 total pagecache pages [ 1760.775899] 0 pages in swap cache [ 1760.779358] Swap cache stats: add 0, delete 0, find 0/0 [ 1760.798710] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1760.819224] Free swap = 0kB [ 1760.826545] Total swap = 0kB [ 1760.829571] 2097051 pages RAM [ 1760.831937] 27432 total pagecache pages [ 1760.833015] 0 pages HighMem/MovableOnly [ 1760.836919] 0 pages in swap cache [ 1760.840895] 363849 pages reserved [ 1760.840900] 0 pages cma reserved [ 1760.851927] Swap cache stats: add 0, delete 0, find 0/0 [ 1760.857289] Free swap = 0kB [ 1760.860308] Total swap = 0kB [ 1760.864011] 2097051 pages RAM [ 1760.867180] 0 pages HighMem/MovableOnly [ 1760.871167] 363849 pages reserved [ 1760.874681] 0 pages cma reserved [ 1760.878042] Out of memory (oom_kill_allocating_task): Kill process 9339 (syz-executor.5) score 0 or sacrifice child [ 1760.888695] Killed process 9647 (syz-executor.5) total-vm:93384kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 1760.909042] oom_reaper: reaped process 9644 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1760.940063] oom_reaper: reaped process 9647 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1761.141927] Bluetooth: hci2 command 0x0406 tx timeout 15:42:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) [ 1761.460327] oom_reaper: reaped process 9629 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1761.480270] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1761.511819] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1761.517210] CPU: 1 PID: 9651 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1761.524992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1761.534347] Call Trace: [ 1761.536989] dump_stack+0x1b2/0x281 [ 1761.540614] warn_alloc.cold+0x96/0x1cc [ 1761.544590] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1761.549605] ? zone_watermark_ok_safe+0x220/0x220 [ 1761.554508] __alloc_pages_nodemask+0x2127/0x2720 [ 1761.559372] ? lock_acquire+0x170/0x3f0 [ 1761.559770] oom_reaper: reaped process 9627 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1761.563346] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1761.563363] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1761.563373] ? __mutex_unlock_slowpath+0x75/0x770 [ 1761.563386] alloc_pages_current+0x155/0x260 [ 1761.563398] ion_page_pool_alloc+0x118/0x1b0 [ 1761.563408] ion_system_heap_allocate+0x133/0x8c0 [ 1761.602002] ? ion_alloc+0x187/0x810 [ 1761.605732] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1761.611168] ? ion_system_contig_heap_create+0x130/0x130 [ 1761.616601] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1761.621616] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1761.626443] ion_alloc+0x204/0x810 [ 1761.629986] ? ion_dma_buf_release+0x40/0x40 [ 1761.634379] ? __might_fault+0x177/0x1b0 [ 1761.638510] ion_ioctl+0xea/0x1f0 [ 1761.641948] ? ion_query_heaps+0x360/0x360 [ 1761.646167] ? lock_acquire+0x170/0x3f0 [ 1761.650132] ? ion_query_heaps+0x360/0x360 [ 1761.654354] do_vfs_ioctl+0x75a/0xff0 [ 1761.658140] ? ioctl_preallocate+0x1a0/0x1a0 [ 1761.662528] ? lock_downgrade+0x740/0x740 [ 1761.666660] ? __fget+0x225/0x360 [ 1761.670119] ? do_vfs_ioctl+0xff0/0xff0 [ 1761.674164] ? security_file_ioctl+0x83/0xb0 [ 1761.678560] SyS_ioctl+0x7f/0xb0 [ 1761.681916] ? do_vfs_ioctl+0xff0/0xff0 [ 1761.685879] do_syscall_64+0x1d5/0x640 [ 1761.689755] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1761.694929] RIP: 0033:0x4665d9 [ 1761.698124] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1761.705821] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1761.713078] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1761.720330] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1761.727579] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1761.734863] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1761.753192] warn_alloc_show_mem: 2 callbacks suppressed [ 1761.753195] Mem-Info: [ 1761.761106] active_anon:17515 inactive_anon:26321 isolated_anon:0 [ 1761.761106] active_file:161 inactive_file:186 isolated_file:2 [ 1761.761106] unevictable:0 dirty:10 writeback:0 unstable:0 [ 1761.761106] slab_reclaimable:12448 slab_unreclaimable:118271 [ 1761.761106] mapped:53432 shmem:27412 pagetables:821 bounce:0 [ 1761.761106] free:16280 free_pcp:53 free_cma:0 [ 1761.798181] Node 0 active_anon:67484kB inactive_anon:79700kB active_file:36kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142268kB dirty:28kB writeback:0kB shmem:83864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1761.835931] Node 1 active_anon:2576kB inactive_anon:25584kB active_file:148kB inactive_file:316kB unevictable:0kB isolated(anon):0kB isolated(file):124kB mapped:70660kB dirty:12kB writeback:0kB shmem:25784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1761.891000] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1761.892926] oom_reaper: reaped process 9630 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1761.921962] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1761.937754] Node 0 DMA32 free:17792kB min:36200kB low:45248kB high:54296kB active_anon:67460kB inactive_anon:79700kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7040kB pagetables:2316kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1761.971862] lowmem_reserve[]: 0 0 0 0 0 [ 1761.975902] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1762.040333] lowmem_reserve[]: 0 0 0 0 0 [ 1762.064955] Node 1 Normal free:93460kB min:53696kB low:67120kB high:80544kB active_anon:2588kB inactive_anon:25584kB active_file:132kB inactive_file:132kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:964kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1762.119530] lowmem_reserve[]: 0 0 0 0 0 [ 1762.123584] Node 0 DMA: 2*4kB (UE) 7*8kB (UME) 53*16kB (UM) 34*32kB (UME) 4*64kB (UME) 4*128kB (UME) 2*256kB (ME) 3*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10960kB [ 1762.142905] Node 0 DMA32: 870*4kB (UME) 631*8kB (UME) 250*16kB (UME) 94*32kB (UME) 9*64kB (UME) 15*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18032kB [ 1762.191655] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1762.211681] Node 1 Normal: 385*4kB (UM) 368*8kB (U) 366*16kB (U) 1183*32kB (UM) 438*64kB (U) 2*128kB (U) 15*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 80324kB [ 1762.281656] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1762.290522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1762.391677] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1762.400686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1762.431649] 27466 total pagecache pages [ 1762.435724] 0 pages in swap cache [ 1762.439179] Swap cache stats: add 0, delete 0, find 0/0 [ 1762.452049] Free swap = 0kB [ 1762.455082] Total swap = 0kB [ 1762.458101] 2097051 pages RAM [ 1762.461215] 0 pages HighMem/MovableOnly [ 1762.465223] 363849 pages reserved [ 1762.468671] 0 pages cma reserved [ 1762.608611] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1762.690622] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1762.721269] CPU: 1 PID: 9644 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1762.729100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1762.738475] Call Trace: [ 1762.741068] dump_stack+0x1b2/0x281 [ 1762.744699] warn_alloc.cold+0x96/0x1cc [ 1762.748676] ? zone_watermark_ok_safe+0x220/0x220 [ 1762.753537] __alloc_pages_nodemask+0x2127/0x2720 [ 1762.758382] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1762.759322] syz-executor.5 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1762.762874] ? finish_task_switch+0x178/0x610 [ 1762.762881] ? finish_task_switch+0x14d/0x610 [ 1762.762893] ? lock_acquire+0x170/0x3f0 [ 1762.762907] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1762.762922] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1762.778416] (null) [ 1762.782218] ? __mutex_unlock_slowpath+0x75/0x770 [ 1762.782228] ? alloc_pages_current+0x16/0x260 [ 1762.782240] alloc_pages_current+0x155/0x260 [ 1762.786202] , order=0, oom_score_adj=1000 [ 1762.791029] ion_page_pool_alloc+0x118/0x1b0 [ 1762.796510] syz-executor.2: [ 1762.798625] ion_system_heap_allocate+0x133/0x8c0 [ 1762.803518] syz-executor.5 cpuset= [ 1762.807943] ? _raw_spin_unlock+0x29/0x40 [ 1762.817332] page allocation failure: order:0 [ 1762.820980] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1762.827043] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1762.828809] ? ion_system_contig_heap_create+0x130/0x130 [ 1762.832456] / [ 1762.836513] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1762.840934] mems_allowed=0-1 [ 1762.845851] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1762.845863] ion_alloc+0x27a/0x810 [ 1762.845889] ? ion_dma_buf_release+0x40/0x40 [ 1762.845901] ? __might_fault+0x177/0x1b0 [ 1762.845912] ion_ioctl+0xea/0x1f0 [ 1762.853156] syz-executor.4: [ 1762.858547] ? ion_query_heaps+0x360/0x360 [ 1762.860240] page allocation failure: order:0 [ 1762.865243] ? lock_acquire+0x170/0x3f0 [ 1762.865251] ? ion_query_heaps+0x360/0x360 [ 1762.865261] do_vfs_ioctl+0x75a/0xff0 [ 1762.865272] ? ioctl_preallocate+0x1a0/0x1a0 [ 1762.868393] (null) [ 1762.873201] ? lock_downgrade+0x740/0x740 [ 1762.873215] ? __fget+0x225/0x360 [ 1762.873224] ? do_vfs_ioctl+0xff0/0xff0 [ 1762.873235] ? security_file_ioctl+0x83/0xb0 [ 1762.873243] SyS_ioctl+0x7f/0xb0 [ 1762.873250] ? do_vfs_ioctl+0xff0/0xff0 [ 1762.873263] do_syscall_64+0x1d5/0x640 [ 1762.876784] syz-executor.2 cpuset= [ 1762.881189] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1762.886915] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1762.888669] RIP: 0033:0x4665d9 [ 1762.891705] (null) [ 1762.895946] RSP: 002b:00007fe1da39e188 EFLAGS: 00000246 [ 1762.902887] / [ 1762.904316] ORIG_RAX: 0000000000000010 [ 1762.908533] mems_allowed=0-1 [ 1762.912396] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1762.912401] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1762.912406] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1762.912410] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1762.912415] R13: 00007ffee467076f R14: 00007fe1da39e300 R15: 0000000000022000 [ 1762.921217] Mem-Info: [ 1762.925743] CPU: 0 PID: 9647 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1762.926843] active_anon:17493 inactive_anon:26321 isolated_anon:0 [ 1762.926843] active_file:19 inactive_file:11 isolated_file:0 [ 1762.926843] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1762.926843] slab_reclaimable:12440 slab_unreclaimable:118226 [ 1762.926843] mapped:53163 shmem:27412 pagetables:821 bounce:0 [ 1762.926843] free:13713 free_pcp:70 free_cma:0 [ 1762.930821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1762.935275] Node 0 active_anon:67424kB inactive_anon:79700kB active_file:24kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142232kB dirty:0kB writeback:0kB shmem:83864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1762.938672] Call Trace: [ 1762.942650] Node 1 active_anon:2548kB inactive_anon:25584kB active_file:52kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70420kB dirty:0kB writeback:0kB shmem:25784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1762.946507] dump_stack+0x1b2/0x281 [ 1762.950026] Node 0 [ 1762.955213] dump_header+0x178/0x82f [ 1762.955227] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1762.962334] DMA free:10948kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1762.965506] ? ___ratelimit+0x2cd/0x530 [ 1762.967663] lowmem_reserve[]: [ 1762.973038] oom_kill_process.cold+0x10/0xa40 [ 1762.973060] out_of_memory+0xe3e/0x1190 [ 1762.974753] 0 [ 1762.978711] ? oom_killer_disable+0x1c0/0x1c0 [ 1762.981822] 2717 [ 1762.989068] ? mutex_trylock+0x152/0x1a0 [ 1762.996346] 2718 [ 1763.003591] __alloc_pages_nodemask+0x23e1/0x2720 [ 1763.003606] ? lock_acquire+0x170/0x3f0 [ 1763.010853] 2718 [ 1763.018149] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1763.018157] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1763.018170] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1763.020552] 2718 [ 1763.028347] alloc_pages_current+0x155/0x260 [ 1763.028366] ion_page_pool_alloc+0x118/0x1b0 [ 1763.070852] ion_system_heap_allocate+0x133/0x8c0 [ 1763.098440] Node 0 [ 1763.100994] ? ion_alloc+0x187/0x810 [ 1763.128463] DMA32 free:17504kB min:36200kB low:45248kB high:54296kB active_anon:67416kB inactive_anon:79700kB active_file:24kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7040kB pagetables:2316kB bounce:0kB free_pcp:140kB local_pcp:4kB free_cma:0kB [ 1763.132054] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1763.132062] ? ion_system_contig_heap_create+0x130/0x130 [ 1763.132071] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1763.134319] lowmem_reserve[]: [ 1763.138038] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1763.143156] 0 [ 1763.168658] ion_alloc+0x204/0x810 [ 1763.168670] ? ion_dma_buf_release+0x40/0x40 [ 1763.168681] ? __might_fault+0x177/0x1b0 [ 1763.168693] ion_ioctl+0xea/0x1f0 [ 1763.172936] 0 [ 1763.176052] ? ion_query_heaps+0x360/0x360 [ 1763.180655] 0 0 [ 1763.184640] ? lock_acquire+0x170/0x3f0 [ 1763.184648] ? ion_query_heaps+0x360/0x360 [ 1763.184660] do_vfs_ioctl+0x75a/0xff0 [ 1763.186437] 0 [ 1763.190920] ? ioctl_preallocate+0x1a0/0x1a0 [ 1763.197027] ? lock_downgrade+0x740/0x740 [ 1763.199066] Node 0 [ 1763.203929] ? __fget+0x225/0x360 [ 1763.203937] ? do_vfs_ioctl+0xff0/0xff0 [ 1763.203948] ? security_file_ioctl+0x83/0xb0 [ 1763.207909] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1763.209963] SyS_ioctl+0x7f/0xb0 [ 1763.214800] lowmem_reserve[]: [ 1763.219404] ? do_vfs_ioctl+0xff0/0xff0 [ 1763.224940] 0 [ 1763.226977] do_syscall_64+0x1d5/0x640 [ 1763.231358] 0 [ 1763.235756] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1763.235765] RIP: 0033:0x4665d9 [ 1763.240622] 0 [ 1763.242840] RSP: 002b:00007fbb0c353188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1763.242850] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1763.242855] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1763.242861] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1763.246554] 0 [ 1763.274725] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1763.274730] R13: 00007ffed463974f R14: 00007fbb0c353300 R15: 0000000000022000 [ 1763.275215] syz-executor.1: [ 1763.280439] 0 [ 1763.297047] page allocation failure: order:0 [ 1763.315610] syz-executor.4 cpuset= [ 1763.335606] CPU: 0 PID: 9630 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1763.342851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1763.346997] Node 1 [ 1763.349215] Call Trace: [ 1763.352683] / [ 1763.356625] dump_stack+0x1b2/0x281 [ 1763.361015] mems_allowed=0-1 [ 1763.385928] warn_alloc.cold+0x96/0x1cc [ 1763.385939] ? zone_watermark_ok_safe+0x220/0x220 [ 1763.385965] ? usleep_range+0x130/0x130 [ 1763.389384] Normal free:26400kB min:53696kB low:67120kB high:80544kB active_anon:2548kB inactive_anon:25584kB active_file:52kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:968kB bounce:0kB free_pcp:140kB local_pcp:12kB free_cma:0kB [ 1763.392459] ? try_to_free_pages+0x23f/0x6e0 [ 1763.392468] ? _find_next_bit+0xdb/0x100 [ 1763.392478] ? run_timer_softirq+0x5a0/0x5a0 [ 1763.396445] lowmem_reserve[]: [ 1763.398255] __alloc_pages_nodemask+0x2127/0x2720 [ 1763.402128] 0 [ 1763.403907] ? lock_acquire+0x170/0x3f0 [ 1763.409077] 0 [ 1763.412271] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1763.412280] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1763.412294] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1763.414075] 0 [ 1763.421778] alloc_pages_current+0x155/0x260 [ 1763.421788] ion_page_pool_alloc+0x118/0x1b0 [ 1763.421797] ion_system_heap_allocate+0x133/0x8c0 [ 1763.441467] 0 [ 1763.443648] ? ion_alloc+0x187/0x810 [ 1763.445430] 0 [ 1763.452691] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1763.452700] ? ion_system_contig_heap_create+0x130/0x130 [ 1763.452708] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1763.452720] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1763.490294] ion_alloc+0x204/0x810 [ 1763.501442] Node 0 [ 1763.503506] ? ion_dma_buf_release+0x40/0x40 [ 1763.507459] DMA: [ 1763.512374] ? __might_fault+0x177/0x1b0 [ 1763.512385] ion_ioctl+0xea/0x1f0 [ 1763.512394] ? ion_query_heaps+0x360/0x360 [ 1763.531407] 1*4kB [ 1763.544352] ? ion_query_heaps+0x360/0x360 [ 1763.544360] do_vfs_ioctl+0x75a/0xff0 [ 1763.544370] ? ioctl_preallocate+0x1a0/0x1a0 [ 1763.561395] (E) [ 1763.565202] ? lock_downgrade+0x740/0x740 [ 1763.566994] 8*8kB [ 1763.570950] ? __fget+0x225/0x360 [ 1763.581387] (UME) [ 1763.582037] ? do_vfs_ioctl+0xff0/0xff0 [ 1763.587472] 54*16kB [ 1763.589262] ? security_file_ioctl+0x83/0xb0 [ 1763.611391] (UM) [ 1763.615594] SyS_ioctl+0x7f/0xb0 [ 1763.621017] 35*32kB [ 1763.626009] ? do_vfs_ioctl+0xff0/0xff0 [ 1763.626020] do_syscall_64+0x1d5/0x640 [ 1763.626034] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1763.651389] (UME) [ 1763.654661] RIP: 0033:0x4665d9 [ 1763.656856] 3*64kB [ 1763.661081] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1763.681391] (UME) [ 1763.683212] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1763.687189] 4*128kB [ 1763.689497] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1763.701371] (UME) [ 1763.701586] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1763.705541] 2*256kB [ 1763.709408] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1763.731372] (ME) [ 1763.731907] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1763.739162] 3*512kB [ 1763.756051] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1763.771380] CPU: 1 PID: 9627 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1763.789954] (null) [ 1763.794610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1763.794614] Call Trace: [ 1763.794631] dump_stack+0x1b2/0x281 [ 1763.794645] warn_alloc.cold+0x96/0x1cc [ 1763.794656] ? zone_watermark_ok_safe+0x220/0x220 [ 1763.794666] ? usleep_range+0x130/0x130 [ 1763.794674] ? try_to_free_pages+0x23f/0x6e0 [ 1763.794684] ? _find_next_bit+0xdb/0x100 [ 1763.794694] ? run_timer_softirq+0x5a0/0x5a0 [ 1763.794711] __alloc_pages_nodemask+0x2127/0x2720 [ 1763.794727] ? lock_acquire+0x170/0x3f0 [ 1763.794743] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1763.794752] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1763.794768] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1763.794781] ? __sanitizer_cov_trace_pc+0x29/0x50 [ 1763.794795] alloc_pages_current+0x155/0x260 [ 1763.794806] ion_page_pool_alloc+0x118/0x1b0 [ 1763.794816] ion_system_heap_allocate+0x133/0x8c0 [ 1763.794826] ? ion_alloc+0x187/0x810 [ 1763.794836] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1763.794845] ? ion_system_contig_heap_create+0x130/0x130 [ 1763.794854] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1763.794864] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1763.794875] ion_alloc+0x204/0x810 [ 1763.800672] syz-executor.1 cpuset= [ 1763.806359] ? ion_dma_buf_release+0x40/0x40 [ 1763.806373] ? __might_fault+0x177/0x1b0 [ 1763.806384] ion_ioctl+0xea/0x1f0 [ 1763.806393] ? ion_query_heaps+0x360/0x360 [ 1763.806405] ? ion_query_heaps+0x360/0x360 [ 1763.806415] do_vfs_ioctl+0x75a/0xff0 [ 1763.806426] ? ioctl_preallocate+0x1a0/0x1a0 [ 1763.806436] ? lock_downgrade+0x740/0x740 [ 1763.806449] ? __fget+0x225/0x360 [ 1763.823276] / [ 1763.825381] ? do_vfs_ioctl+0xff0/0xff0 [ 1763.829795] mems_allowed=0-1 [ 1763.833839] ? security_file_ioctl+0x83/0xb0 [ 1763.833850] SyS_ioctl+0x7f/0xb0 [ 1763.833857] ? do_vfs_ioctl+0xff0/0xff0 [ 1763.833869] do_syscall_64+0x1d5/0x640 [ 1763.833884] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1763.833892] RIP: 0033:0x4665d9 [ 1763.833900] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1763.988364] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1763.995670] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1764.002930] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1764.010226] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1764.017490] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1764.026405] CPU: 0 PID: 9629 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1764.034210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1764.038049] (UME) [ 1764.043568] Call Trace: [ 1764.043585] dump_stack+0x1b2/0x281 [ 1764.043598] warn_alloc.cold+0x96/0x1cc [ 1764.045746] 4*1024kB [ 1764.048315] ? zone_watermark_ok_safe+0x220/0x220 [ 1764.051948] (UME) [ 1764.055893] ? usleep_range+0x130/0x130 [ 1764.058276] 1*2048kB [ 1764.063097] ? try_to_free_pages+0x23f/0x6e0 [ 1764.063106] ? _find_next_bit+0xdb/0x100 [ 1764.063115] ? run_timer_softirq+0x5a0/0x5a0 [ 1764.065246] (M) [ 1764.069208] __alloc_pages_nodemask+0x2127/0x2720 [ 1764.071616] 0*4096kB [ 1764.076017] ? lock_acquire+0x170/0x3f0 [ 1764.080046] = 10948kB [ 1764.084439] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1764.084447] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1764.084461] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1764.086410] Node 0 [ 1764.091234] ? retint_kernel+0x2d/0x2d [ 1764.093653] DMA32: [ 1764.097595] alloc_pages_current+0x155/0x260 [ 1764.099978] 287*4kB [ 1764.104801] ion_page_pool_alloc+0x118/0x1b0 [ 1764.104810] ion_system_heap_allocate+0x133/0x8c0 [ 1764.104837] ? ion_alloc+0x187/0x810 [ 1764.109309] (ME) [ 1764.114917] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1764.114927] ? ion_system_contig_heap_create+0x130/0x130 [ 1764.114939] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1764.117155] 409*8kB [ 1764.121065] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1764.123291] (ME) [ 1764.127669] ion_alloc+0x204/0x810 [ 1764.129985] 186*16kB [ 1764.134378] ? ion_dma_buf_release+0x40/0x40 [ 1764.134391] ? __might_fault+0x177/0x1b0 [ 1764.139211] (ME) [ 1764.142910] ion_ioctl+0xea/0x1f0 [ 1764.142918] ? ion_query_heaps+0x360/0x360 [ 1764.142929] ? lock_acquire+0x170/0x3f0 [ 1764.144971] 312*32kB [ 1764.150402] ? ion_query_heaps+0x360/0x360 [ 1764.155846] (UME) [ 1764.160831] do_vfs_ioctl+0x75a/0xff0 [ 1764.163148] 0*64kB [ 1764.167961] ? ioctl_preallocate+0x1a0/0x1a0 [ 1764.170011] 0*128kB 0*256kB [ 1764.173551] ? lock_downgrade+0x740/0x740 [ 1764.173563] ? __fget+0x225/0x360 [ 1764.173572] ? do_vfs_ioctl+0xff0/0xff0 [ 1764.176095] 0*512kB [ 1764.180506] ? security_file_ioctl+0x83/0xb0 [ 1764.184557] 0*1024kB [ 1764.186618] SyS_ioctl+0x7f/0xb0 [ 1764.190051] 0*2048kB [ 1764.194267] ? do_vfs_ioctl+0xff0/0xff0 [ 1764.194277] do_syscall_64+0x1d5/0x640 [ 1764.194291] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1764.194299] RIP: 0033:0x4665d9 [ 1764.194304] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1764.194315] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1764.198291] 0*4096kB [ 1764.200724] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1764.204959] = 17380kB [ 1764.207075] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1764.210849] Node 0 [ 1764.213069] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1764.213075] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1764.223626] Mem-Info: [ 1764.234536] Normal: [ 1764.245522] active_anon:17493 inactive_anon:26321 isolated_anon:0 [ 1764.245522] active_file:16 inactive_file:10 isolated_file:0 [ 1764.245522] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1764.245522] slab_reclaimable:12440 slab_unreclaimable:118236 [ 1764.245522] mapped:53163 shmem:27412 pagetables:821 bounce:0 [ 1764.245522] free:13682 free_pcp:92 free_cma:0 [ 1764.254411] 0*4kB [ 1764.258744] Mem-Info: [ 1764.260189] 0*8kB [ 1764.268499] active_anon:17493 inactive_anon:26321 isolated_anon:0 [ 1764.268499] active_file:16 inactive_file:10 isolated_file:0 [ 1764.268499] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1764.268499] slab_reclaimable:12440 slab_unreclaimable:118236 [ 1764.268499] mapped:53163 shmem:27412 pagetables:821 bounce:0 [ 1764.268499] free:13682 free_pcp:92 free_cma:0 [ 1764.279394] 0*16kB [ 1764.288889] Node 0 active_anon:67424kB inactive_anon:79700kB active_file:24kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142232kB dirty:0kB writeback:0kB shmem:83864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1764.297964] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1764.300225] Node 0 active_anon:67424kB inactive_anon:79700kB active_file:24kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142232kB dirty:0kB writeback:0kB shmem:83864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1764.314384] Node 1 [ 1764.323450] Node 1 active_anon:2548kB inactive_anon:25584kB active_file:40kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70420kB dirty:0kB writeback:0kB shmem:25784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1764.381294] Normal: [ 1764.415612] Node 1 active_anon:2548kB inactive_anon:25584kB active_file:40kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70420kB dirty:0kB writeback:0kB shmem:25784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1764.423497] 4*4kB [ 1764.454854] Node 0 [ 1764.459750] (UM) [ 1764.474616] DMA free:10948kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1764.488911] 11*8kB [ 1764.509849] lowmem_reserve[]: [ 1764.562919] Node 0 [ 1764.562934] (UM) 1*16kB (U) 819*32kB (U) 438*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54360kB [ 1764.604503] DMA free:10948kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1764.623370] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1764.641278] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1764.649906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1764.662340] 0 2717 2718 2718 2718 [ 1764.665923] Node 0 DMA32 free:57300kB min:36200kB low:45248kB high:54296kB active_anon:67616kB inactive_anon:79700kB active_file:124kB inactive_file:1312kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2464kB bounce:0kB free_pcp:748kB local_pcp:652kB free_cma:0kB [ 1764.682401] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1764.723957] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1764.729030] Node 0 DMA32 free:68324kB min:36200kB low:45248kB high:54296kB active_anon:67616kB inactive_anon:79700kB active_file:124kB inactive_file:1612kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2464kB bounce:0kB free_pcp:1264kB local_pcp:644kB free_cma:0kB [ 1764.737069] 28807 total pagecache pages [ 1764.813157] lowmem_reserve[]: 0 0 0 0 0 [ 1764.817168] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1764.852461] 0 pages in swap cache [ 1764.856007] Swap cache stats: add 0, delete 0, find 0/0 [ 1764.881360] Free swap = 0kB [ 1764.884377] Total swap = 0kB [ 1764.887412] 2097051 pages RAM [ 1764.890510] 0 pages HighMem/MovableOnly [ 1764.898461] lowmem_reserve[]: 0 0 0 0 0 [ 1764.911510] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1764.912002] 363849 pages reserved [ 1764.961389] lowmem_reserve[]: 0 0 0 0 0 [ 1764.965463] Node 1 Normal free:157504kB min:53696kB low:67120kB high:80544kB active_anon:2524kB inactive_anon:25584kB active_file:56kB inactive_file:3812kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:968kB bounce:0kB free_pcp:868kB local_pcp:244kB free_cma:0kB [ 1765.031189] 0 pages cma reserved [ 1765.041175] lowmem_reserve[]: 0 0 0 0 0 [ 1765.045189] Node 1 Normal free:170504kB min:53696kB low:67120kB high:80544kB active_anon:2524kB inactive_anon:25584kB active_file:56kB inactive_file:3812kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:968kB bounce:0kB free_pcp:956kB local_pcp:244kB free_cma:0kB [ 1765.110025] lowmem_reserve[]: 0 0 0 0 0 [ 1765.121570] Node 0 DMA: 1*4kB (E) 9*8kB (UME) 54*16kB (UM) 35*32kB (UME) 3*64kB (UME) 4*128kB (UME) 2*256kB (ME) 3*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10956kB [ 1765.161446] lowmem_reserve[]: 0 0 0 0 0 [ 1765.165701] Node 0 DMA32: 1557*4kB (UE) 1839*8kB (UME) 2512*16kB (UME) 1164*32kB (UE) 569*64kB (UM) 14*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 136588kB [ 1765.188230] Node 0 DMA: 1*4kB (E) 9*8kB (UME) 54*16kB (UM) 35*32kB (UME) 3*64kB (UME) 4*128kB (UME) 2*256kB (ME) 3*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 0*4096kB = 10956kB [ 1765.254895] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1765.274893] Node 0 DMA32: 1558*4kB (UME) 1656*8kB (UME) 2543*16kB (UME) 1177*32kB (UE) 575*64kB (U) 18*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 136936kB [ 1765.316867] Node 1 Normal: 7352*4kB (UM) 1856*8kB (UM) 254*16kB (UM) 1286*32kB (U) 1908*64kB (UM) 97*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 224000kB [ 1765.361132] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1765.401324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1765.410599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1765.422303] Node 1 Normal: 8259*4kB (UM) 2867*8kB (UM) 312*16kB (UM) 1432*32kB (U) 1571*64kB (UM) 102*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 220388kB [ 1765.476570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1765.501111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1765.509979] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1765.532940] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1765.553411] 29621 total pagecache pages [ 1765.557430] 0 pages in swap cache [ 1765.560875] Swap cache stats: add 0, delete 0, find 0/0 [ 1765.572997] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1765.593317] Free swap = 0kB [ 1765.596372] Total swap = 0kB [ 1765.599385] 2097051 pages RAM [ 1765.623294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1765.653041] 0 pages HighMem/MovableOnly [ 1765.657038] 363849 pages reserved [ 1765.660483] 0 pages cma reserved [ 1765.666031] 29621 total pagecache pages [ 1765.670013] 0 pages in swap cache [ 1765.692914] Swap cache stats: add 0, delete 0, find 0/0 [ 1765.698294] Free swap = 0kB [ 1765.712888] Out of memory (oom_kill_allocating_task): Kill process 9647 (syz-executor.5) score 0 or sacrifice child [ 1765.742932] Total swap = 0kB [ 1765.745997] 2097051 pages RAM [ 1765.749105] 0 pages HighMem/MovableOnly [ 1765.763100] Killed process 9647 (syz-executor.5) total-vm:93384kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1765.792797] 363849 pages reserved [ 1765.796573] 0 pages cma reserved [ 1765.801047] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1765.803304] syz-executor.5: [ 1765.831093] syz-executor.4 cpuset= [ 1765.834310] syz-executor.2: [ 1765.834317] / [ 1765.837841] page allocation failure: order:4 [ 1765.840837] mems_allowed=0-1 [ 1765.850165] CPU: 1 PID: 9627 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1765.852682] page allocation failure: order:0 [ 1765.857947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1765.857956] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1765.862335] Call Trace: [ 1765.862349] dump_stack+0x1b2/0x281 [ 1765.862361] warn_alloc.cold+0x96/0x1cc [ 1765.862372] ? zone_watermark_ok_safe+0x220/0x220 [ 1765.862391] __alloc_pages_nodemask+0x2127/0x2720 [ 1765.862399] ? ___preempt_schedule+0x16/0x18 [ 1765.862412] ? lock_acquire+0x170/0x3f0 [ 1765.862424] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1765.862439] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1765.862449] ? __mutex_unlock_slowpath+0x75/0x770 [ 1765.862460] alloc_pages_current+0x155/0x260 [ 1765.862472] ion_page_pool_alloc+0x118/0x1b0 [ 1765.862480] ion_system_heap_allocate+0x133/0x8c0 [ 1765.862506] ? _raw_spin_unlock+0x29/0x40 [ 1765.862513] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1765.862522] ? ion_system_contig_heap_create+0x130/0x130 [ 1765.891050] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1765.894061] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1765.911538] (null) [ 1765.912140] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1765.937796] syz-executor.2 cpuset= [ 1765.940162] ion_alloc+0x27a/0x810 [ 1765.951471] (null) [ 1765.957590] ? ion_dma_buf_release+0x40/0x40 [ 1765.983151] ? __might_fault+0x177/0x1b0 [ 1765.983990] / mems_allowed=0-1 [ 1765.987204] ion_ioctl+0xea/0x1f0 [ 1765.987212] ? ion_query_heaps+0x360/0x360 [ 1765.998127] ? ion_query_heaps+0x360/0x360 [ 1766.002444] do_vfs_ioctl+0x75a/0xff0 [ 1766.003690] syz-executor.5 cpuset=/ [ 1766.006240] ? ioctl_preallocate+0x1a0/0x1a0 [ 1766.006251] ? lock_downgrade+0x740/0x740 [ 1766.009873] mems_allowed=0-1 [ 1766.014268] ? __fget+0x225/0x360 [ 1766.014276] ? do_vfs_ioctl+0xff0/0xff0 [ 1766.014287] ? security_file_ioctl+0x83/0xb0 [ 1766.014297] SyS_ioctl+0x7f/0xb0 [ 1766.014304] ? do_vfs_ioctl+0xff0/0xff0 [ 1766.014315] do_syscall_64+0x1d5/0x640 [ 1766.014328] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1766.014336] RIP: 0033:0x4665d9 [ 1766.052916] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1766.060628] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1766.067936] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1766.075201] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1766.082460] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1766.089808] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1766.097195] CPU: 0 PID: 9630 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1766.105082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1766.114432] Call Trace: [ 1766.117018] dump_stack+0x1b2/0x281 [ 1766.120649] warn_alloc.cold+0x96/0x1cc [ 1766.124620] ? zone_watermark_ok_safe+0x220/0x220 [ 1766.129471] __alloc_pages_nodemask+0x2127/0x2720 [ 1766.134328] ? check_preemption_disabled+0x35/0x240 [ 1766.139347] ? lock_acquire+0x170/0x3f0 [ 1766.143324] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1766.148185] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1766.153633] ? __mutex_unlock_slowpath+0x75/0x770 [ 1766.158479] alloc_pages_current+0x155/0x260 [ 1766.162937] ion_page_pool_alloc+0x118/0x1b0 [ 1766.167351] ion_system_heap_allocate+0x133/0x8c0 [ 1766.172198] ? _raw_spin_unlock+0x29/0x40 [ 1766.176342] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1766.181270] ? ion_system_contig_heap_create+0x130/0x130 [ 1766.186723] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1766.191742] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1766.196649] ion_alloc+0x27a/0x810 [ 1766.200192] ? ion_dma_buf_release+0x40/0x40 [ 1766.204618] ? __might_fault+0x177/0x1b0 [ 1766.208799] ion_ioctl+0xea/0x1f0 [ 1766.212266] ? ion_query_heaps+0x360/0x360 [ 1766.216497] ? ion_query_heaps+0x360/0x360 [ 1766.220724] do_vfs_ioctl+0x75a/0xff0 [ 1766.224530] ? ioctl_preallocate+0x1a0/0x1a0 [ 1766.228935] ? lock_downgrade+0x740/0x740 [ 1766.233088] ? __fget+0x225/0x360 [ 1766.236673] ? do_vfs_ioctl+0xff0/0xff0 [ 1766.240642] ? security_file_ioctl+0x83/0xb0 [ 1766.245048] SyS_ioctl+0x7f/0xb0 [ 1766.248410] ? do_vfs_ioctl+0xff0/0xff0 [ 1766.252393] do_syscall_64+0x1d5/0x640 [ 1766.256285] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1766.261473] RIP: 0033:0x4665d9 [ 1766.264653] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1766.272380] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1766.279743] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1766.287196] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1766.294462] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1766.301735] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1766.314754] CPU: 0 PID: 9647 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1766.322568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1766.331918] Call Trace: [ 1766.334511] dump_stack+0x1b2/0x281 [ 1766.338163] warn_alloc.cold+0x96/0x1cc [ 1766.342160] ? zone_watermark_ok_safe+0x220/0x220 [ 1766.347010] ? wait_for_completion_io+0x10/0x10 [ 1766.351826] __alloc_pages_nodemask+0x2127/0x2720 [ 1766.356694] ? lock_acquire+0x170/0x3f0 [ 1766.360672] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1766.365605] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1766.370112] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1766.375575] alloc_pages_current+0x155/0x260 [ 1766.379991] ion_page_pool_alloc+0x118/0x1b0 [ 1766.384397] ion_system_heap_allocate+0x133/0x8c0 [ 1766.389241] ? ion_alloc+0x187/0x810 [ 1766.392962] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1766.398414] ? ion_system_contig_heap_create+0x130/0x130 [ 1766.403884] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1766.408994] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1766.413839] ion_alloc+0x204/0x810 [ 1766.417385] ? ion_dma_buf_release+0x40/0x40 [ 1766.421806] ? __might_fault+0x177/0x1b0 [ 1766.425880] ion_ioctl+0xea/0x1f0 [ 1766.429340] ? ion_query_heaps+0x360/0x360 [ 1766.433581] ? lock_acquire+0x170/0x3f0 [ 1766.437549] ? ion_query_heaps+0x360/0x360 [ 1766.441776] do_vfs_ioctl+0x75a/0xff0 [ 1766.445579] ? ioctl_preallocate+0x1a0/0x1a0 [ 1766.449985] ? lock_downgrade+0x740/0x740 [ 1766.454133] ? __fget+0x225/0x360 [ 1766.457594] ? do_vfs_ioctl+0xff0/0xff0 [ 1766.461566] ? security_file_ioctl+0x83/0xb0 [ 1766.465971] SyS_ioctl+0x7f/0xb0 [ 1766.469337] ? do_vfs_ioctl+0xff0/0xff0 [ 1766.473314] do_syscall_64+0x1d5/0x640 [ 1766.477228] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1766.482550] RIP: 0033:0x4665d9 [ 1766.485737] RSP: 002b:00007fbb0c353188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1766.493446] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1766.500712] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1766.507975] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1766.515240] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1766.522515] R13: 00007ffed463974f R14: 00007fbb0c353300 R15: 0000000000022000 [ 1766.578362] warn_alloc_show_mem: 2 callbacks suppressed [ 1766.578365] Mem-Info: [ 1766.587273] active_anon:17712 inactive_anon:26321 isolated_anon:0 [ 1766.587273] active_file:735 inactive_file:1917 isolated_file:0 [ 1766.587273] unevictable:0 dirty:86 writeback:0 unstable:0 [ 1766.587273] slab_reclaimable:12440 slab_unreclaimable:119051 [ 1766.587273] mapped:54710 shmem:27412 pagetables:852 bounce:0 [ 1766.587273] free:38924 free_pcp:160 free_cma:0 [ 1766.644278] Node 0 active_anon:68324kB inactive_anon:79700kB active_file:1680kB inactive_file:4800kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:144812kB dirty:328kB writeback:0kB shmem:83864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1766.700922] Node 1 active_anon:2440kB inactive_anon:25584kB active_file:1356kB inactive_file:2832kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:74028kB dirty:32kB writeback:0kB shmem:25784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1766.731388] Node 0 DMA free:11104kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1766.762223] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1766.767280] Node 0 DMA32 free:44920kB min:36200kB low:45248kB high:54296kB active_anon:68284kB inactive_anon:79700kB active_file:1752kB inactive_file:4752kB unevictable:0kB writepending:340kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2424kB bounce:0kB free_pcp:284kB local_pcp:140kB free_cma:0kB [ 1766.797456] lowmem_reserve[]: 0 0 0 0 0 [ 1766.801855] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1766.828290] lowmem_reserve[]: 0 0 0 0 0 [ 1766.832822] Node 1 Normal free:69512kB min:53696kB low:67120kB high:80544kB active_anon:2440kB inactive_anon:25584kB active_file:1356kB inactive_file:2832kB unevictable:0kB writepending:32kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:924kB bounce:0kB free_pcp:312kB local_pcp:124kB free_cma:0kB [ 1766.890867] lowmem_reserve[]: 0 0 0 0 0 [ 1766.894887] Node 0 DMA: 26*4kB (UE) 11*8kB (UE) 52*16kB (U) 35*32kB (UE) 2*64kB (UE) 3*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 2*2048kB (M) 0*4096kB = 11104kB [ 1766.911510] Node 0 DMA32: 91*4kB (UME) 336*8kB (ME) 159*16kB (ME) 991*32kB (UE) 171*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 48252kB [ 1766.925589] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1766.950861] Node 1 Normal: 0*4kB 1*8kB (U) 1*16kB (U) 2094*32kB (U) 2228*64kB (U) 7*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 210520kB [ 1767.020850] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1767.029723] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1767.049832] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1767.058776] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1767.130878] 29940 total pagecache pages [ 1767.134910] 0 pages in swap cache [ 1767.138372] Swap cache stats: add 0, delete 0, find 0/0 [ 1767.190790] Free swap = 0kB [ 1767.193835] Total swap = 0kB [ 1767.196848] 2097051 pages RAM [ 1767.199975] 0 pages HighMem/MovableOnly [ 1767.230779] 363849 pages reserved [ 1767.234257] 0 pages cma reserved [ 1767.271372] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1767.282958] oom_reaper: reaped process 9651 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1767.308632] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1767.322357] CPU: 1 PID: 9629 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1767.330161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1767.339510] Call Trace: [ 1767.342099] dump_stack+0x1b2/0x281 [ 1767.345737] warn_alloc.cold+0x96/0x1cc [ 1767.349707] ? zone_watermark_ok_safe+0x220/0x220 [ 1767.354558] __alloc_pages_nodemask+0x2127/0x2720 [ 1767.359434] ? check_preemption_disabled+0x35/0x240 [ 1767.364452] ? lock_acquire+0x170/0x3f0 [ 1767.368426] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1767.373274] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1767.378726] ? __mutex_unlock_slowpath+0x75/0x770 [ 1767.383570] alloc_pages_current+0x155/0x260 [ 1767.387978] ion_page_pool_alloc+0x118/0x1b0 [ 1767.392390] ion_system_heap_allocate+0x133/0x8c0 [ 1767.397238] ? _raw_spin_unlock+0x29/0x40 [ 1767.401467] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1767.406405] ? ion_system_contig_heap_create+0x130/0x130 [ 1767.411960] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1767.417067] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1767.421907] ion_alloc+0x27a/0x810 [ 1767.425450] ? ion_dma_buf_release+0x40/0x40 [ 1767.429863] ? __might_fault+0x177/0x1b0 [ 1767.433924] ion_ioctl+0xea/0x1f0 [ 1767.437398] ? ion_query_heaps+0x360/0x360 [ 1767.441638] ? lock_acquire+0x170/0x3f0 [ 1767.445613] ? ion_query_heaps+0x360/0x360 [ 1767.449846] do_vfs_ioctl+0x75a/0xff0 [ 1767.453669] ? ioctl_preallocate+0x1a0/0x1a0 [ 1767.458074] ? lock_downgrade+0x740/0x740 [ 1767.462222] ? __fget+0x225/0x360 [ 1767.465671] ? do_vfs_ioctl+0xff0/0xff0 [ 1767.469648] ? security_file_ioctl+0x83/0xb0 [ 1767.474062] SyS_ioctl+0x7f/0xb0 [ 1767.477426] ? do_vfs_ioctl+0xff0/0xff0 [ 1767.481401] do_syscall_64+0x1d5/0x640 [ 1767.485293] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1767.490500] RIP: 0033:0x4665d9 [ 1767.493688] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1767.501402] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1767.508684] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1767.516040] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1767.523316] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1767.530577] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 15:42:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) 15:42:55 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000480)={r3, 0x1e}) recvmsg$can_bcm(r2, 0x0, 0x0) [ 1767.914441] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1767.915168] warn_alloc_show_mem: 2 callbacks suppressed [ 1767.915171] Mem-Info: [ 1767.938485] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1767.968966] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1767.969679] active_anon:17711 inactive_anon:26321 isolated_anon:12 [ 1767.969679] active_file:664 inactive_file:1286 isolated_file:12 [ 1767.969679] unevictable:0 dirty:28 writeback:0 unstable:0 [ 1767.969679] slab_reclaimable:12433 slab_unreclaimable:118378 [ 1767.969679] mapped:54906 shmem:27412 pagetables:837 bounce:0 [ 1767.969679] free:58888 free_pcp:364 free_cma:0 [ 1767.974178] syz-executor.0 cpuset= [ 1768.009491] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1768.018029] CPU: 0 PID: 9659 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1768.034962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1768.040493] syz-executor.5 cpuset= [ 1768.044314] Call Trace: [ 1768.044331] dump_stack+0x1b2/0x281 [ 1768.044344] warn_alloc.cold+0x96/0x1cc [ 1768.044357] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1768.053896] / [ 1768.054087] ? zone_watermark_ok_safe+0x220/0x220 [ 1768.062510] mems_allowed=0-1 [ 1768.063074] __alloc_pages_nodemask+0x2127/0x2720 [ 1768.077545] ? lock_acquire+0x170/0x3f0 [ 1768.081540] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1768.086385] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1768.091854] ? __mutex_unlock_slowpath+0x75/0x770 [ 1768.096696] alloc_pages_current+0x155/0x260 [ 1768.101100] ion_page_pool_alloc+0x118/0x1b0 [ 1768.105509] ion_system_heap_allocate+0x133/0x8c0 [ 1768.107155] Node 0 active_anon:68352kB inactive_anon:79700kB active_file:2096kB inactive_file:4592kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:147712kB dirty:88kB writeback:0kB shmem:83864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1768.110345] ? ion_alloc+0x187/0x810 [ 1768.110358] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1768.110365] ? ion_system_contig_heap_create+0x130/0x130 [ 1768.110387] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1768.158073] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1768.162914] ion_alloc+0x204/0x810 [ 1768.166544] ? ion_dma_buf_release+0x40/0x40 [ 1768.170949] ? __might_fault+0x177/0x1b0 [ 1768.175000] ion_ioctl+0xea/0x1f0 [ 1768.178446] ? ion_query_heaps+0x360/0x360 [ 1768.182680] ? lock_acquire+0x170/0x3f0 [ 1768.186651] ? ion_query_heaps+0x360/0x360 [ 1768.190880] do_vfs_ioctl+0x75a/0xff0 [ 1768.194671] ? ioctl_preallocate+0x1a0/0x1a0 [ 1768.199100] ? lock_downgrade+0x740/0x740 [ 1768.203233] ? __fget+0x225/0x360 [ 1768.206680] ? do_vfs_ioctl+0xff0/0xff0 [ 1768.208302] Node 1 active_anon:2492kB inactive_anon:25584kB active_file:560kB inactive_file:552kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:71912kB dirty:24kB writeback:0kB shmem:25784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1768.210648] ? security_file_ioctl+0x83/0xb0 [ 1768.210660] SyS_ioctl+0x7f/0xb0 [ 1768.210668] ? do_vfs_ioctl+0xff0/0xff0 [ 1768.210679] do_syscall_64+0x1d5/0x640 [ 1768.210694] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1768.258929] RIP: 0033:0x4665d9 [ 1768.262108] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1768.269829] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1768.277090] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1768.284351] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1768.291613] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1768.299051] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1768.305585] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:88kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1768.341688] CPU: 1 PID: 9647 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1768.349705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1768.359058] Call Trace: [ 1768.361658] dump_stack+0x1b2/0x281 [ 1768.365343] warn_alloc.cold+0x96/0x1cc [ 1768.366583] / [ 1768.369317] ? zone_watermark_ok_safe+0x220/0x220 [ 1768.374842] mems_allowed=0-1 [ 1768.375875] __alloc_pages_nodemask+0x2127/0x2720 [ 1768.383794] ? retint_kernel+0x2d/0x2d [ 1768.387696] ? lock_acquire+0x170/0x3f0 [ 1768.391685] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1768.396527] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1768.401975] ? __mutex_unlock_slowpath+0x75/0x770 [ 1768.407070] ? retint_kernel+0x2d/0x2d [ 1768.410965] alloc_pages_current+0x155/0x260 [ 1768.415375] ion_page_pool_alloc+0x118/0x1b0 [ 1768.419785] ion_system_heap_allocate+0x133/0x8c0 [ 1768.424622] ? _raw_spin_unlock+0x29/0x40 [ 1768.428786] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1768.433703] ? ion_system_contig_heap_create+0x130/0x130 [ 1768.439144] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1768.444174] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1768.449014] ion_alloc+0x27a/0x810 [ 1768.452562] ? ion_dma_buf_release+0x40/0x40 [ 1768.456969] ? __might_fault+0x177/0x1b0 [ 1768.461029] ion_ioctl+0xea/0x1f0 [ 1768.464562] ? ion_query_heaps+0x360/0x360 [ 1768.468789] ? lock_acquire+0x170/0x3f0 [ 1768.472761] ? ion_query_heaps+0x360/0x360 [ 1768.477000] do_vfs_ioctl+0x75a/0xff0 [ 1768.480810] ? ioctl_preallocate+0x1a0/0x1a0 [ 1768.485524] ? lock_downgrade+0x740/0x740 [ 1768.489669] ? __fget+0x225/0x360 [ 1768.493121] ? do_vfs_ioctl+0xff0/0xff0 [ 1768.497101] ? security_file_ioctl+0x83/0xb0 [ 1768.501519] SyS_ioctl+0x7f/0xb0 [ 1768.505147] ? do_vfs_ioctl+0xff0/0xff0 [ 1768.509122] do_syscall_64+0x1d5/0x640 [ 1768.513017] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1768.518203] RIP: 0033:0x4665d9 [ 1768.521389] RSP: 002b:00007fbb0c353188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1768.529095] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1768.536362] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1768.543710] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1768.550973] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1768.558239] R13: 00007ffed463974f R14: 00007fbb0c353300 R15: 0000000000022000 [ 1768.565519] CPU: 0 PID: 9660 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1768.573317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1768.582669] Call Trace: [ 1768.585262] dump_stack+0x1b2/0x281 [ 1768.588899] warn_alloc.cold+0x96/0x1cc [ 1768.592983] ? zone_watermark_ok_safe+0x220/0x220 [ 1768.597853] ? do_page_mkwrite+0x190/0x2e0 [ 1768.602431] __alloc_pages_nodemask+0x2127/0x2720 [ 1768.607270] ? retint_kernel+0x2d/0x2d [ 1768.611183] ? lock_acquire+0x170/0x3f0 [ 1768.615168] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1768.620019] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1768.625472] ? __mutex_unlock_slowpath+0x75/0x770 [ 1768.630317] alloc_pages_current+0x155/0x260 [ 1768.634727] ion_page_pool_alloc+0x118/0x1b0 [ 1768.638538] lowmem_reserve[]: 0 [ 1768.639126] ion_system_heap_allocate+0x133/0x8c0 [ 1768.639134] ? ion_alloc+0x187/0x810 [ 1768.645694] 2717 [ 1768.647246] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1768.647254] ? ion_system_contig_heap_create+0x130/0x130 [ 1768.647264] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1768.659688] 2718 [ 1768.663916] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1768.663927] ion_alloc+0x204/0x810 [ 1768.663940] ? ion_dma_buf_release+0x40/0x40 [ 1768.663953] ? __might_fault+0x177/0x1b0 [ 1768.675908] 2718 [ 1768.679362] ion_ioctl+0xea/0x1f0 [ 1768.679372] ? ion_query_heaps+0x360/0x360 [ 1768.692687] 2718 [ 1768.693409] ? lock_acquire+0x170/0x3f0 [ 1768.703690] ? ion_query_heaps+0x360/0x360 [ 1768.703692] Node 0 DMA32 free:282996kB min:36200kB low:45248kB high:54296kB active_anon:68352kB inactive_anon:79700kB active_file:1996kB inactive_file:4604kB unevictable:0kB writepending:88kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2424kB bounce:0kB free_pcp:700kB local_pcp:624kB free_cma:0kB [ 1768.707928] do_vfs_ioctl+0x75a/0xff0 [ 1768.707942] ? ioctl_preallocate+0x1a0/0x1a0 [ 1768.745605] ? lock_downgrade+0x740/0x740 [ 1768.749753] ? __fget+0x225/0x360 [ 1768.753213] ? do_vfs_ioctl+0xff0/0xff0 [ 1768.757179] ? security_file_ioctl+0x83/0xb0 [ 1768.761589] SyS_ioctl+0x7f/0xb0 [ 1768.764972] ? do_vfs_ioctl+0xff0/0xff0 [ 1768.768952] do_syscall_64+0x1d5/0x640 [ 1768.772837] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1768.775007] lowmem_reserve[]: [ 1768.778015] RIP: 0033:0x4665d9 [ 1768.778020] RSP: 002b:00007fe1da39e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1768.787702] 0 [ 1768.791974] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1768.791979] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1768.791983] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1768.791987] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1768.791995] R13: 00007ffee467076f R14: 00007fe1da39e300 R15: 0000000000022000 [ 1768.896027] 0 0 0 0 [ 1768.905522] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1768.964889] lowmem_reserve[]: 0 0 0 0 0 [ 1768.977430] Node 1 Normal free:566748kB min:53696kB low:67120kB high:80544kB active_anon:2504kB inactive_anon:25584kB active_file:508kB inactive_file:532kB unevictable:0kB writepending:28kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:924kB bounce:0kB free_pcp:1412kB local_pcp:728kB free_cma:0kB [ 1769.052077] lowmem_reserve[]: 0 0 0 0 0 [ 1769.067467] Node 0 DMA: 28*4kB (UE) 26*8kB (UME) 51*16kB (U) 35*32kB (UME) 2*64kB (UE) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11216kB [ 1769.104313] Node 0 DMA32: 1877*4kB (UME) 360*8kB (UME) 7944*16kB (UE) 3604*32kB (UE) 199*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 265812kB [ 1769.131119] Mem-Info: [ 1769.135811] active_anon:17719 inactive_anon:26321 isolated_anon:0 [ 1769.135811] active_file:679 inactive_file:1308 isolated_file:0 [ 1769.135811] unevictable:0 dirty:40 writeback:0 unstable:0 [ 1769.135811] slab_reclaimable:12433 slab_unreclaimable:118761 [ 1769.135811] mapped:54937 shmem:27412 pagetables:837 bounce:0 [ 1769.135811] free:259038 free_pcp:520 free_cma:0 [ 1769.181036] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1769.215049] Node 1 Normal: 33946*4kB (UM) 16244*8kB (UM) 11219*16kB (UM) 6547*32kB (U) 1268*64kB (UM) 212*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 763544kB [ 1769.276224] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1769.279579] Node 0 active_anon:68372kB inactive_anon:79700kB active_file:2208kB inactive_file:4700kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:147792kB dirty:132kB writeback:0kB shmem:83864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1769.306659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1769.365159] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1769.398370] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1769.428843] 29404 total pagecache pages [ 1769.438395] Node 1 active_anon:2504kB inactive_anon:25584kB active_file:508kB inactive_file:532kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:71956kB dirty:28kB writeback:0kB shmem:25784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1769.473967] 0 pages in swap cache [ 1769.483887] Swap cache stats: add 0, delete 0, find 0/0 [ 1769.496323] Free swap = 0kB [ 1769.503007] Total swap = 0kB [ 1769.509345] 2097051 pages RAM [ 1769.520425] 0 pages HighMem/MovableOnly [ 1769.528848] 363849 pages reserved [ 1769.538902] Node 0 DMA free:11220kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:88kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1769.571626] 0 pages cma reserved [ 1769.660244] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1769.684058] Node 0 DMA32 free:94656kB min:36200kB low:45248kB high:54296kB active_anon:68372kB inactive_anon:79700kB active_file:2208kB inactive_file:4612kB unevictable:0kB writepending:132kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2424kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 1769.791848] lowmem_reserve[]: 0 0 0 0 0 [ 1769.806565] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1769.903669] lowmem_reserve[]: 0 0 0 0 0 [ 1769.915424] Node 1 Normal free:1116684kB min:53696kB low:67120kB high:80544kB active_anon:2504kB inactive_anon:25584kB active_file:508kB inactive_file:532kB unevictable:0kB writepending:28kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:924kB bounce:0kB free_pcp:696kB local_pcp:76kB free_cma:0kB [ 1770.020019] lowmem_reserve[]: 0 0 0 0 0 [ 1770.041314] Node 0 DMA: 6*4kB (UE) 26*8kB (UME) 51*16kB (U) 35*32kB (UME) 2*64kB (UE) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11128kB [ 1770.102624] Node 0 DMA32: 173*4kB (ME) 386*8kB (ME) 178*16kB (ME) 460*32kB (UE) 324*64kB (U) 20*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44644kB [ 1770.159416] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1770.199025] Node 1 Normal: 5*4kB (M) 18913*8kB (UM) 16801*16kB (UM) 11090*32kB (U) 3167*64kB (UM) 721*128kB (U) 25*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1076396kB [ 1770.239314] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1770.261855] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1770.274064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1770.302049] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1770.323067] 29384 total pagecache pages [ 1770.336411] 0 pages in swap cache [ 1770.345408] Swap cache stats: add 0, delete 0, find 0/0 [ 1770.354297] Free swap = 0kB [ 1770.379181] Total swap = 0kB [ 1770.385619] 2097051 pages RAM [ 1770.403316] 0 pages HighMem/MovableOnly [ 1770.422784] 363849 pages reserved [ 1770.442785] 0 pages cma reserved [ 1771.436241] oom_reaper: reaped process 9659 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1771.480064] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1771.490738] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1771.491979] syz-executor.4: [ 1771.517066] syz-executor.1 cpuset= [ 1771.517732] page allocation failure: order:0 [ 1771.524936] / mems_allowed=0-1 [ 1771.530098] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1771.532749] in:imklog cpuset= [ 1771.540849] syz-executor.4 cpuset= [ 1771.543563] CPU: 1 PID: 9629 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1771.543945] / [ 1771.547476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1771.555300] mems_allowed=0-1 [ 1771.556939] Call Trace: [ 1771.571959] dump_stack+0x1b2/0x281 [ 1771.575586] warn_alloc.cold+0x96/0x1cc [ 1771.579542] ? zone_watermark_ok_safe+0x220/0x220 [ 1771.584362] ? usleep_range+0x130/0x130 [ 1771.588309] ? try_to_free_pages+0x23f/0x6e0 [ 1771.592707] ? _find_next_bit+0xdb/0x100 [ 1771.596749] ? run_timer_softirq+0x5a0/0x5a0 [ 1771.601149] __alloc_pages_nodemask+0x2127/0x2720 [ 1771.605987] ? lock_acquire+0x170/0x3f0 [ 1771.609952] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1771.614772] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1771.619253] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1771.624687] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 1771.629510] alloc_pages_current+0x155/0x260 [ 1771.633895] ion_page_pool_alloc+0x118/0x1b0 [ 1771.638282] ion_system_heap_allocate+0x133/0x8c0 [ 1771.643114] ? _raw_spin_unlock+0x29/0x40 [ 1771.647239] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1771.652148] ? ion_system_contig_heap_create+0x130/0x130 [ 1771.657574] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1771.662563] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1771.667407] ion_alloc+0x27a/0x810 [ 1771.670040] / mems_allowed=0-1 [ 1771.670932] ? ion_dma_buf_release+0x40/0x40 [ 1771.670943] ? __might_fault+0x177/0x1b0 [ 1771.682516] ion_ioctl+0xea/0x1f0 [ 1771.685960] ? ion_query_heaps+0x360/0x360 [ 1771.690208] ? lock_acquire+0x170/0x3f0 [ 1771.694156] ? ion_query_heaps+0x360/0x360 [ 1771.698370] do_vfs_ioctl+0x75a/0xff0 [ 1771.702165] ? ioctl_preallocate+0x1a0/0x1a0 [ 1771.706550] ? lock_downgrade+0x740/0x740 [ 1771.710677] ? __fget+0x225/0x360 [ 1771.714104] ? do_vfs_ioctl+0xff0/0xff0 [ 1771.718055] ? security_file_ioctl+0x83/0xb0 [ 1771.722439] SyS_ioctl+0x7f/0xb0 [ 1771.725785] ? do_vfs_ioctl+0xff0/0xff0 [ 1771.729741] do_syscall_64+0x1d5/0x640 [ 1771.733609] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1771.738786] RIP: 0033:0x4665d9 [ 1771.741962] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1771.749650] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1771.756983] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1771.764247] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1771.771493] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1771.778746] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1771.786000] CPU: 0 PID: 9655 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1771.792346] warn_alloc_show_mem: 2 callbacks suppressed [ 1771.792349] Mem-Info: [ 1771.793355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1771.798818] active_anon:17719 inactive_anon:26321 isolated_anon:0 [ 1771.798818] active_file:13 inactive_file:16 isolated_file:0 [ 1771.798818] unevictable:0 dirty:22 writeback:0 unstable:0 [ 1771.798818] slab_reclaimable:12433 slab_unreclaimable:118863 [ 1771.798818] mapped:53316 shmem:27412 pagetables:837 bounce:0 [ 1771.798818] free:13904 free_pcp:210 free_cma:0 [ 1771.801206] Call Trace: [ 1771.801220] dump_stack+0x1b2/0x281 [ 1771.801230] dump_header+0x178/0x82f [ 1771.801238] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1771.801247] ? ___ratelimit+0x2cd/0x530 [ 1771.810594] Node 0 active_anon:68372kB inactive_anon:79700kB active_file:0kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142244kB dirty:52kB writeback:0kB shmem:83864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1771.843955] oom_kill_process.cold+0x10/0xa40 [ 1771.843975] out_of_memory+0xe3e/0x1190 [ 1771.846538] Node 1 active_anon:2504kB inactive_anon:25584kB active_file:52kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:71020kB dirty:36kB writeback:0kB shmem:25784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1771.850146] ? oom_killer_disable+0x1c0/0x1c0 [ 1771.850153] ? mutex_trylock+0x152/0x1a0 [ 1771.850164] __alloc_pages_nodemask+0x23e1/0x2720 [ 1771.853845] Node 0 [ 1771.858946] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1771.862911] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1771.890629] alloc_pages_current+0x155/0x260 [ 1771.890640] filemap_fault+0x11a1/0x1ad0 [ 1771.895102] lowmem_reserve[]: [ 1771.899061] ext4_filemap_fault+0x84/0xb0 [ 1771.926558] 0 [ 1771.931017] __do_fault+0xfa/0x380 [ 1771.931046] __handle_mm_fault+0x2497/0x4620 [ 1771.931056] ? vm_insert_page+0x7c0/0x7c0 [ 1771.935088] 2717 [ 1771.939910] ? lock_downgrade+0x740/0x740 [ 1771.942136] 2718 [ 1771.946949] ? mark_held_locks+0xa6/0xf0 [ 1771.972431] 2718 [ 1771.976813] handle_mm_fault+0x455/0x9c0 [ 1771.980851] 2718 [ 1771.983928] __do_page_fault+0x549/0xad0 [ 1771.989834] ? spurious_fault+0x640/0x640 [ 1771.993355] Node 0 [ 1771.997722] ? do_page_fault+0x60/0x500 [ 1772.001867] DMA32 free:18044kB min:36200kB low:45248kB high:54296kB active_anon:68372kB inactive_anon:79700kB active_file:12kB inactive_file:52kB unevictable:0kB writepending:152kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2424kB bounce:0kB free_pcp:628kB local_pcp:120kB free_cma:0kB [ 1772.003886] ? page_fault+0x2f/0x50 [ 1772.008003] lowmem_reserve[]: [ 1772.010037] page_fault+0x45/0x50 [ 1772.010048] RIP: 1fa0:0x1f9f [ 1772.010054] RSP: 0000:0000555f5b3bc9d0 EFLAGS: 7faa02413da0 [ 1772.014082] 0 [ 1772.016909] CPU: 0 PID: 9627 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1772.024709] 0 [ 1772.026338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1772.030490] 0 [ 1772.032689] Call Trace: [ 1772.036639] 0 [ 1772.065075] dump_stack+0x1b2/0x281 [ 1772.065091] warn_alloc.cold+0x96/0x1cc [ 1772.068692] 0 [ 1772.071798] ? zone_watermark_ok_safe+0x220/0x220 [ 1772.071807] ? usleep_range+0x130/0x130 [ 1772.071817] ? try_to_free_pages+0x23f/0x6e0 [ 1772.078341] ? _find_next_bit+0xdb/0x100 [ 1772.084072] Node 0 [ 1772.085840] ? run_timer_softirq+0x5a0/0x5a0 [ 1772.093628] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1772.095484] __alloc_pages_nodemask+0x2127/0x2720 [ 1772.104825] lowmem_reserve[]: [ 1772.106620] ? lock_acquire+0x170/0x3f0 [ 1772.109168] 0 [ 1772.110956] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1772.110965] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1772.110981] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1772.114591] 0 [ 1772.118545] ? retint_kernel+0x2d/0x2d [ 1772.120330] 0 [ 1772.125155] alloc_pages_current+0x155/0x260 [ 1772.129152] 0 [ 1772.133544] ion_page_pool_alloc+0x118/0x1b0 [ 1772.133553] ion_system_heap_allocate+0x133/0x8c0 [ 1772.133563] ? _raw_spin_unlock+0x29/0x40 [ 1772.137593] 0 [ 1772.139931] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1772.169298] ? ion_system_contig_heap_create+0x130/0x130 [ 1772.169308] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1772.169319] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1772.174147] Node 1 [ 1772.177232] ion_alloc+0x27a/0x810 [ 1772.181210] Normal free:26488kB min:53696kB low:67120kB high:80544kB active_anon:2452kB inactive_anon:25584kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:924kB bounce:0kB free_pcp:212kB local_pcp:92kB free_cma:0kB [ 1772.182963] ? ion_dma_buf_release+0x40/0x40 [ 1772.187768] lowmem_reserve[]: [ 1772.192244] ? __might_fault+0x177/0x1b0 [ 1772.192254] ion_ioctl+0xea/0x1f0 [ 1772.192264] ? ion_query_heaps+0x360/0x360 [ 1772.192275] ? ion_query_heaps+0x360/0x360 [ 1772.192288] do_vfs_ioctl+0x75a/0xff0 [ 1772.197739] 0 [ 1772.199506] ? ioctl_preallocate+0x1a0/0x1a0 [ 1772.203377] 0 [ 1772.205150] ? lock_downgrade+0x740/0x740 [ 1772.209525] 0 [ 1772.211315] ? __fget+0x225/0x360 [ 1772.211326] ? do_vfs_ioctl+0xff0/0xff0 [ 1772.215705] 0 [ 1772.220538] ? security_file_ioctl+0x83/0xb0 [ 1772.220547] SyS_ioctl+0x7f/0xb0 [ 1772.220555] ? do_vfs_ioctl+0xff0/0xff0 [ 1772.224672] 0 [ 1772.226451] do_syscall_64+0x1d5/0x640 [ 1772.236787] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1772.241785] Node 0 [ 1772.246589] RIP: 0033:0x4665d9 [ 1772.248818] DMA: [ 1772.252332] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1772.252342] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1772.252347] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1772.252355] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1772.280370] Mem-Info: [ 1772.284727] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1772.284734] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1772.287822] active_anon:17695 inactive_anon:26321 isolated_anon:0 [ 1772.287822] active_file:11 inactive_file:11 isolated_file:0 [ 1772.287822] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1772.287822] slab_reclaimable:12422 slab_unreclaimable:118870 [ 1772.287822] mapped:53297 shmem:27412 pagetables:837 bounce:0 [ 1772.287822] free:13875 free_pcp:214 free_cma:0 [ 1772.299269] 6*4kB [ 1772.299567] Node 0 active_anon:68328kB inactive_anon:79700kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142232kB dirty:0kB writeback:0kB shmem:83864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1772.303777] (UE) 2*8kB (E) 47*16kB (U) 34*32kB (UE) [ 1772.310001] Node 1 active_anon:2452kB inactive_anon:25584kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:70956kB dirty:0kB writeback:0kB shmem:25784kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1772.313979] 2*64kB [ 1772.315726] Node 0 [ 1772.319897] (UE) [ 1772.324634] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1772.325048] 2*128kB [ 1772.328998] lowmem_reserve[]: [ 1772.330816] (UE) [ 1772.335192] 0 [ 1772.338534] 2*256kB [ 1772.345731] 2717 [ 1772.348155] (UE) [ 1772.353331] 2718 2718 2718 [ 1772.353341] Node 0 DMA32 free:18044kB min:36200kB low:45248kB high:54296kB active_anon:68328kB inactive_anon:79700kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2424kB bounce:0kB free_pcp:644kB local_pcp:120kB free_cma:0kB [ 1772.353372] lowmem_reserve[]: [ 1772.355585] 2*512kB [ 1772.358743] 0 0 [ 1772.360824] (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 10968kB [ 1772.360844] Node 0 DMA32: 365*4kB [ 1772.369861] 0 [ 1772.375868] (UME) [ 1772.385939] 0 [ 1772.390406] 475*8kB [ 1772.392804] 0 [ 1772.400106] (ME) 227*16kB [ 1772.440759] (UME) 40*32kB (UME) 75*64kB (UM) 24*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18044kB [ 1772.440799] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1772.440836] Node 1 Normal: 16*4kB (M) 25*8kB (UM) 13*16kB (UM) 5*32kB (M) 4*64kB (M) 140*128kB (U) 30*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26488kB [ 1772.440895] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1772.440901] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1772.440906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1772.440912] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1772.440916] 27434 total pagecache pages [ 1772.440924] 0 pages in swap cache [ 1772.440929] Swap cache stats: add 0, delete 0, find 0/0 [ 1772.440933] Free swap = 0kB [ 1772.440935] Total swap = 0kB [ 1772.440941] 2097051 pages RAM [ 1772.440951] 0 pages HighMem/MovableOnly [ 1772.440954] 363849 pages reserved [ 1772.440957] 0 pages cma reserved [ 1772.723709] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1772.753166] lowmem_reserve[]: 0 0 0 0 0 [ 1772.757172] Node 1 Normal free:371964kB min:53696kB low:67120kB high:80544kB active_anon:2452kB inactive_anon:25584kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:924kB bounce:0kB free_pcp:796kB local_pcp:92kB free_cma:0kB [ 1772.789636] lowmem_reserve[]: 0 0 0 0 0 [ 1772.793678] Node 0 DMA: 13*4kB (UE) 2*8kB (E) 47*16kB (U) 34*32kB (UE) 3*64kB (UE) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 11060kB [ 1772.812440] Node 0 DMA32: 4624*4kB (UME) 1612*8kB (UME) 1589*16kB (UME) 776*32kB (UME) 763*64kB (UM) 114*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 145072kB [ 1772.833473] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1772.844227] Node 1 Normal: 6436*4kB (UM) 1703*8kB (UM) 1646*16kB (UM) 958*32kB (UM) 4014*64kB (UM) 346*128kB (U) 30*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 405224kB [ 1772.863797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1772.872677] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1772.884977] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1772.893853] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1772.906375] 27640 total pagecache pages [ 1772.910394] 0 pages in swap cache [ 1772.913836] Swap cache stats: add 0, delete 0, find 0/0 [ 1772.919184] Free swap = 0kB [ 1772.926307] Total swap = 0kB [ 1772.929323] 2097051 pages RAM [ 1772.932637] 0 pages HighMem/MovableOnly [ 1772.936597] 363849 pages reserved [ 1772.949802] 0 pages cma reserved [ 1772.969774] Out of memory (oom_kill_allocating_task): Kill process 9655 (in:imklog) score 0 or sacrifice child [ 1772.983703] Killed process 9653 (rsyslogd) total-vm:254332kB, anon-rss:712kB, file-rss:0kB, shmem-rss:0kB [ 1772.995732] oom_reaper: reaped process 9653 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 15:43:02 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000480)={r3, 0x1e}) recvmsg$can_bcm(r2, 0x0, 0x0) recvmsg$can_bcm(r2, 0x0, 0x40000002) 15:43:02 executing program 2: inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) 15:43:02 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) 15:43:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) 15:43:02 executing program 2: inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) 15:43:02 executing program 2: inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) 15:43:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) 15:43:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) 15:43:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) 15:43:02 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) [ 1775.445398] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1775.502020] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1775.525209] CPU: 1 PID: 9669 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1775.533032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1775.542380] Call Trace: [ 1775.544971] dump_stack+0x1b2/0x281 [ 1775.548598] warn_alloc.cold+0x96/0x1cc [ 1775.552593] ? zone_watermark_ok_safe+0x220/0x220 [ 1775.557320] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1775.557472] __alloc_pages_nodemask+0x2127/0x2720 [ 1775.557473] (null) [ 1775.557479] syz-executor.4 cpuset= [ 1775.568825] ? lock_acquire+0x170/0x3f0 [ 1775.568842] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1775.568860] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1775.568870] ? __mutex_unlock_slowpath+0x75/0x770 [ 1775.568883] alloc_pages_current+0x155/0x260 [ 1775.568894] ion_page_pool_alloc+0x118/0x1b0 [ 1775.568904] ion_system_heap_allocate+0x133/0x8c0 [ 1775.609711] / [ 1775.612145] ? ion_alloc+0x187/0x810 [ 1775.617557] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1775.618865] mems_allowed=0-1 [ 1775.623020] ? ion_system_contig_heap_create+0x130/0x130 [ 1775.623030] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1775.623041] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1775.623052] ion_alloc+0x204/0x810 [ 1775.623065] ? ion_dma_buf_release+0x40/0x40 [ 1775.623075] ? __might_fault+0x177/0x1b0 [ 1775.623083] ion_ioctl+0xea/0x1f0 [ 1775.623090] ? ion_query_heaps+0x360/0x360 [ 1775.623100] ? lock_acquire+0x170/0x3f0 [ 1775.623106] ? ion_query_heaps+0x360/0x360 [ 1775.623115] do_vfs_ioctl+0x75a/0xff0 [ 1775.623125] ? ioctl_preallocate+0x1a0/0x1a0 [ 1775.623131] ? lock_downgrade+0x740/0x740 [ 1775.623143] ? __fget+0x225/0x360 [ 1775.623150] ? do_vfs_ioctl+0xff0/0xff0 [ 1775.623160] ? security_file_ioctl+0x83/0xb0 [ 1775.623169] SyS_ioctl+0x7f/0xb0 [ 1775.623175] ? do_vfs_ioctl+0xff0/0xff0 [ 1775.623183] do_syscall_64+0x1d5/0x640 [ 1775.623196] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1775.623202] RIP: 0033:0x4665d9 [ 1775.623206] RSP: 002b:00007fbb0c353188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1775.623214] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1775.623218] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1775.623223] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1775.623228] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1775.623238] R13: 00007ffed463974f R14: 00007fbb0c353300 R15: 0000000000022000 [ 1775.629606] syz-executor.1: [ 1775.633186] syz-executor.2: [ 1775.637282] page allocation failure: order:4 [ 1775.649448] page allocation failure: order:4 [ 1775.694598] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1775.734670] CPU: 0 PID: 9673 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1775.788881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1775.790451] (null) [ 1775.798220] Call Trace: [ 1775.798239] dump_stack+0x1b2/0x281 [ 1775.798251] warn_alloc.cold+0x96/0x1cc [ 1775.810611] ? zone_watermark_ok_safe+0x220/0x220 [ 1775.812886] syz-executor.1 cpuset= [ 1775.815465] __alloc_pages_nodemask+0x2127/0x2720 [ 1775.815477] ? _raw_spin_unlock_irq+0x24/0x80 [ 1775.821257] / [ 1775.823831] ? lock_acquire+0x170/0x3f0 [ 1775.833965] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1775.836077] mems_allowed=0-1 [ 1775.838802] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1775.838813] ? __mutex_unlock_slowpath+0x75/0x770 [ 1775.838826] alloc_pages_current+0x155/0x260 [ 1775.856554] ion_page_pool_alloc+0x118/0x1b0 [ 1775.860953] ion_system_heap_allocate+0x133/0x8c0 [ 1775.865792] ? ion_alloc+0x187/0x810 [ 1775.869501] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1775.874943] ? ion_system_contig_heap_create+0x130/0x130 [ 1775.880388] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1775.885416] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1775.890253] ion_alloc+0x204/0x810 [ 1775.893802] ? ion_dma_buf_release+0x40/0x40 [ 1775.898198] ? __might_fault+0x177/0x1b0 [ 1775.902257] ion_ioctl+0xea/0x1f0 [ 1775.905712] ? ion_query_heaps+0x360/0x360 [ 1775.908883] warn_alloc_show_mem: 1 callbacks suppressed [ 1775.908886] Mem-Info: [ 1775.909943] ? ion_query_heaps+0x360/0x360 [ 1775.909954] do_vfs_ioctl+0x75a/0xff0 [ 1775.909965] ? ioctl_preallocate+0x1a0/0x1a0 [ 1775.909973] ? lock_downgrade+0x740/0x740 [ 1775.910001] ? __fget+0x225/0x360 [ 1775.917634] active_anon:17813 inactive_anon:26321 isolated_anon:0 [ 1775.917634] active_file:1071 inactive_file:1100 isolated_file:24 [ 1775.917634] unevictable:0 dirty:42 writeback:0 unstable:0 [ 1775.917634] slab_reclaimable:12434 slab_unreclaimable:119616 [ 1775.917634] mapped:55367 shmem:27412 pagetables:946 bounce:0 [ 1775.917634] free:13787 free_pcp:371 free_cma:0 [ 1775.917754] ? do_vfs_ioctl+0xff0/0xff0 [ 1775.930752] Node 0 active_anon:67784kB inactive_anon:79696kB active_file:4124kB inactive_file:4044kB unevictable:0kB isolated(anon):0kB isolated(file):96kB mapped:150168kB dirty:68kB writeback:0kB shmem:83860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1775.934262] ? security_file_ioctl+0x83/0xb0 [ 1775.934273] SyS_ioctl+0x7f/0xb0 [ 1775.934282] ? do_vfs_ioctl+0xff0/0xff0 [ 1775.944379] Node 1 active_anon:3468kB inactive_anon:25588kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:71000kB dirty:100kB writeback:0kB shmem:25788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1775.971497] do_syscall_64+0x1d5/0x640 [ 1775.971519] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1775.971528] RIP: 0033:0x4665d9 [ 1775.971534] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 [ 1776.044966] Node 0 [ 1776.046549] ORIG_RAX: 0000000000000010 [ 1776.046554] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1776.046563] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1776.046570] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1776.088588] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1776.095835] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1776.103179] CPU: 1 PID: 9675 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1776.110982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1776.120323] Call Trace: [ 1776.122900] dump_stack+0x1b2/0x281 [ 1776.126507] warn_alloc.cold+0x96/0x1cc [ 1776.130471] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1776.135467] ? zone_watermark_ok_safe+0x220/0x220 [ 1776.140296] __alloc_pages_nodemask+0x2127/0x2720 [ 1776.145138] ? lock_acquire+0x170/0x3f0 [ 1776.149135] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1776.153976] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1776.159403] ? __mutex_unlock_slowpath+0x75/0x770 [ 1776.164227] alloc_pages_current+0x155/0x260 [ 1776.168631] ion_page_pool_alloc+0x118/0x1b0 [ 1776.173017] ion_system_heap_allocate+0x133/0x8c0 [ 1776.177837] ? ion_alloc+0x187/0x810 [ 1776.181546] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1776.186972] ? ion_system_contig_heap_create+0x130/0x130 [ 1776.192403] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1776.197408] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1776.202228] ion_alloc+0x204/0x810 [ 1776.205749] ? ion_dma_buf_release+0x40/0x40 [ 1776.210137] ? __might_fault+0x177/0x1b0 [ 1776.214178] ion_ioctl+0xea/0x1f0 [ 1776.217610] ? ion_query_heaps+0x360/0x360 [ 1776.221824] ? lock_acquire+0x170/0x3f0 [ 1776.225774] ? ion_query_heaps+0x360/0x360 [ 1776.229989] do_vfs_ioctl+0x75a/0xff0 [ 1776.233773] ? ioctl_preallocate+0x1a0/0x1a0 [ 1776.238156] ? lock_downgrade+0x740/0x740 [ 1776.242282] ? __fget+0x225/0x360 [ 1776.245709] ? do_vfs_ioctl+0xff0/0xff0 [ 1776.249662] ? security_file_ioctl+0x83/0xb0 [ 1776.254045] SyS_ioctl+0x7f/0xb0 [ 1776.257389] ? do_vfs_ioctl+0xff0/0xff0 [ 1776.261346] do_syscall_64+0x1d5/0x640 [ 1776.265217] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1776.270384] RIP: 0033:0x4665d9 [ 1776.273557] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1776.281239] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1776.288486] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1776.295735] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1776.302988] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1776.310233] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1776.318650] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1776.339664] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1776.376482] systemd-journal cpuset=/ mems_allowed=0-1 [ 1776.387248] CPU: 1 PID: 9044 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1776.387392] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1776.395151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1776.395155] Call Trace: [ 1776.395171] dump_stack+0x1b2/0x281 [ 1776.395182] dump_header+0x178/0x82f [ 1776.395192] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1776.395200] ? ___ratelimit+0x2cd/0x530 [ 1776.395210] oom_kill_process.cold+0x10/0xa40 [ 1776.395226] out_of_memory+0xe3e/0x1190 [ 1776.395239] ? oom_killer_disable+0x1c0/0x1c0 [ 1776.395248] ? mutex_trylock+0x152/0x1a0 [ 1776.435376] (null) [ 1776.439072] __alloc_pages_nodemask+0x23e1/0x2720 [ 1776.439093] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1776.459026] syz-executor.2 cpuset= [ 1776.459395] ? cache_grow_begin+0x3f/0x700 [ 1776.459406] cache_grow_begin+0x91/0x700 [ 1776.459418] fallback_alloc+0x207/0x2c0 [ 1776.471801] / [ 1776.475168] kmem_cache_alloc+0x1e5/0x3c0 [ 1776.481045] getname_flags+0xc8/0x550 [ 1776.481933] mems_allowed=0-1 [ 1776.484854] do_sys_open+0x1ce/0x410 [ 1776.484864] ? filp_open+0x60/0x60 [ 1776.484874] ? do_syscall_64+0x4c/0x640 [ 1776.484882] ? do_sys_open+0x410/0x410 [ 1776.503142] do_syscall_64+0x1d5/0x640 [ 1776.507034] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1776.512214] RIP: 0033:0x7f501fcf5840 [ 1776.515934] RSP: 002b:00007ffd2a8ac068 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1776.523649] RAX: ffffffffffffffda RBX: 00007ffd2a8ac370 RCX: 00007f501fcf5840 [ 1776.531055] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 000056249ea90f50 [ 1776.538324] RBP: 000000000000000d R08: 0000000000000000 R09: 00000000ffffffff [ 1776.545588] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 1776.552970] R13: 000056249ea8c040 R14: 00007ffd2a8ac330 R15: 000056249ea90920 [ 1776.560246] CPU: 0 PID: 9688 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1776.568042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1776.569770] lowmem_reserve[]: [ 1776.577378] Call Trace: [ 1776.577393] dump_stack+0x1b2/0x281 [ 1776.577405] warn_alloc.cold+0x96/0x1cc [ 1776.583792] 0 [ 1776.586683] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1776.586694] ? zone_watermark_ok_safe+0x220/0x220 [ 1776.597381] 2717 [ 1776.597490] __alloc_pages_nodemask+0x2127/0x2720 [ 1776.607823] 2718 [ 1776.609193] ? lock_acquire+0x170/0x3f0 [ 1776.609209] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1776.612378] 2718 [ 1776.615234] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1776.615246] ? __mutex_unlock_slowpath+0x75/0x770 [ 1776.628905] 2718 [ 1776.632436] alloc_pages_current+0x155/0x260 [ 1776.632449] ion_page_pool_alloc+0x118/0x1b0 [ 1776.632458] ion_system_heap_allocate+0x133/0x8c0 [ 1776.632467] ? ion_alloc+0x187/0x810 [ 1776.638905] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1776.648801] Node 0 [ 1776.651804] ? ion_system_contig_heap_create+0x130/0x130 [ 1776.651815] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1776.651824] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1776.651835] ion_alloc+0x204/0x810 [ 1776.660377] DMA32 free:105312kB min:36200kB low:45248kB high:54296kB active_anon:67788kB inactive_anon:79696kB active_file:2664kB inactive_file:2632kB unevictable:0kB writepending:20kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2592kB bounce:0kB free_pcp:756kB local_pcp:136kB free_cma:0kB [ 1776.665031] ? ion_dma_buf_release+0x40/0x40 [ 1776.665043] ? __might_fault+0x177/0x1b0 [ 1776.679994] lowmem_reserve[]: [ 1776.707240] ion_ioctl+0xea/0x1f0 [ 1776.707249] ? ion_query_heaps+0x360/0x360 [ 1776.707261] ? lock_acquire+0x170/0x3f0 [ 1776.707270] ? ion_query_heaps+0x360/0x360 [ 1776.721813] 0 [ 1776.722386] do_vfs_ioctl+0x75a/0xff0 [ 1776.726640] 0 [ 1776.730574] ? ioctl_preallocate+0x1a0/0x1a0 [ 1776.730582] ? lock_downgrade+0x740/0x740 [ 1776.730593] ? __fget+0x225/0x360 [ 1776.730604] ? do_vfs_ioctl+0xff0/0xff0 [ 1776.734852] 0 [ 1776.736630] ? security_file_ioctl+0x83/0xb0 [ 1776.736640] SyS_ioctl+0x7f/0xb0 [ 1776.740563] 0 [ 1776.742186] ? do_vfs_ioctl+0xff0/0xff0 [ 1776.742196] do_syscall_64+0x1d5/0x640 [ 1776.742210] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1776.746606] 0 [ 1776.750709] RIP: 0033:0x4665d9 [ 1776.750714] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1776.750723] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1776.750727] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1776.750732] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1776.750736] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1776.750743] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1776.837390] Mem-Info: [ 1776.839902] active_anon:17820 inactive_anon:26321 isolated_anon:0 [ 1776.839902] active_file:656 inactive_file:681 isolated_file:51 [ 1776.839902] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1776.839902] slab_reclaimable:12475 slab_unreclaimable:119638 [ 1776.839902] mapped:54533 shmem:27412 pagetables:836 bounce:0 [ 1776.839902] free:43313 free_pcp:218 free_cma:0 [ 1776.877399] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1776.907662] Mem-Info: [ 1776.910229] active_anon:17820 inactive_anon:26321 isolated_anon:0 [ 1776.910229] active_file:656 inactive_file:681 isolated_file:51 [ 1776.910229] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1776.910229] slab_reclaimable:12475 slab_unreclaimable:119638 [ 1776.910229] mapped:54533 shmem:27412 pagetables:836 bounce:0 [ 1776.910229] free:50161 free_pcp:231 free_cma:0 [ 1776.947470] Node 0 active_anon:67788kB inactive_anon:79696kB active_file:2608kB inactive_file:2708kB unevictable:0kB isolated(anon):0kB isolated(file):204kB mapped:147048kB dirty:20kB writeback:0kB shmem:83860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1776.980562] lowmem_reserve[]: 0 0 0 0 0 [ 1776.984635] Node 1 Normal free:136152kB min:53696kB low:67120kB high:80544kB active_anon:3492kB inactive_anon:25588kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:752kB bounce:0kB free_pcp:700kB local_pcp:0kB free_cma:0kB [ 1777.018268] Node 1 active_anon:3492kB inactive_anon:25588kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:71084kB dirty:4kB writeback:0kB shmem:25788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1777.049586] Node 0 active_anon:67788kB inactive_anon:79696kB active_file:2608kB inactive_file:2808kB unevictable:0kB isolated(anon):0kB isolated(file):80kB mapped:147048kB dirty:20kB writeback:0kB shmem:83860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1777.081996] lowmem_reserve[]: 0 0 0 0 0 [ 1777.087112] Node 0 DMA: 32*4kB (UE) 2*8kB (E) 0*16kB 2*32kB (UE) 2*64kB (UE) 4*128kB (UE) 4*256kB (UE) 4*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 11088kB [ 1777.105396] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1777.135893] Node 1 active_anon:3492kB inactive_anon:25588kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:71084kB dirty:4kB writeback:0kB shmem:25788kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1777.167893] Node 0 DMA32: 1373*4kB (UE) 559*8kB (UME) 1173*16kB (UME) 1640*32kB (UME) 10*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 81852kB [ 1777.186426] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1777.197404] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1777.206207] Node 0 DMA32 free:69784kB min:36200kB low:45248kB high:54296kB active_anon:67788kB inactive_anon:79696kB active_file:2664kB inactive_file:2632kB unevictable:0kB writepending:20kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2592kB bounce:0kB free_pcp:384kB local_pcp:216kB free_cma:0kB [ 1777.239715] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1777.271066] Node 1 Normal: 13592*4kB (UM) 9314*8kB (UM) 5994*16kB (UM) 2566*32kB (UM) 566*64kB (UM) 55*128kB (UM) 73*256kB (U) 10*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 373968kB 15:43:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000480)={r3, 0x1e}) recvmsg$can_bcm(r2, 0x0, 0x0) [ 1777.290240] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1777.301675] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1777.306842] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1777.317070] lowmem_reserve[]: 0 0 0 0 0 [ 1777.323666] Node 0 DMA32 free:50852kB min:36200kB low:45248kB high:54296kB active_anon:67788kB inactive_anon:79696kB active_file:3168kB inactive_file:3136kB unevictable:0kB writepending:20kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2592kB bounce:0kB free_pcp:960kB local_pcp:216kB free_cma:0kB [ 1777.356628] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1777.388447] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1777.397847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1777.410153] 29236 total pagecache pages [ 1777.414145] 0 pages in swap cache [ 1777.417594] Swap cache stats: add 0, delete 0, find 0/0 [ 1777.425464] lowmem_reserve[]: 0 0 0 0 0 [ 1777.430810] lowmem_reserve[]: 0 0 0 0 0 [ 1777.434808] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1777.466404] Node 1 Normal free:335584kB min:53696kB low:67120kB high:80544kB active_anon:3492kB inactive_anon:25588kB active_file:116kB inactive_file:16kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:752kB bounce:0kB free_pcp:660kB local_pcp:112kB free_cma:0kB [ 1777.499825] Free swap = 0kB [ 1777.502918] Total swap = 0kB [ 1777.505980] 2097051 pages RAM [ 1777.512097] 0 pages HighMem/MovableOnly [ 1777.516112] 363849 pages reserved [ 1777.520329] 0 pages cma reserved [ 1777.528335] lowmem_reserve[]: 0 0 0 0 0 [ 1777.535500] lowmem_reserve[]: 0 0 0 0 0 [ 1777.543025] Node 1 Normal free:310144kB min:53696kB low:67120kB high:80544kB active_anon:3392kB inactive_anon:25588kB active_file:116kB inactive_file:16kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:752kB bounce:0kB free_pcp:196kB local_pcp:176kB free_cma:0kB [ 1777.579001] Node 0 DMA: 27*4kB (UE) 10*8kB (UE) 0*16kB 2*32kB (UE) 2*64kB (UE) 4*128kB (UE) 4*256kB (UE) 4*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 11132kB [ 1777.612849] Node 0 DMA32: 131*4kB (UME) 348*8kB (UE) 205*16kB (UE) 1373*32kB (UME) 30*64kB (U) 55*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 59484kB [ 1777.654557] lowmem_reserve[]: 0 0 0 0 0 [ 1777.664767] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1777.678580] Node 0 DMA: 20*4kB (UE) 10*8kB (UE) 0*16kB 2*32kB (UE) 2*64kB (UE) 4*128kB (UE) 4*256kB (UE) 4*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 11104kB [ 1777.704665] Node 1 Normal: 5647*4kB (U) 10324*8kB (U) 7214*16kB (U) 3108*32kB (U) 566*64kB (U) 123*128kB (U) 11*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 374844kB [ 1777.733054] Node 0 DMA32: 112*4kB (UME) 329*8kB (UME) 266*16kB (UE) 913*32kB (UE) 41*64kB (U) 53*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45960kB [ 1777.757509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1777.774650] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1777.788564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1777.812733] Node 1 Normal: 0*4kB 9588*8kB (U) 7613*16kB (U) 3663*32kB (U) 746*64kB (U) 124*128kB (U) 11*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 382160kB [ 1777.833266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1777.857553] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1777.872991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1777.885401] 29380 total pagecache pages [ 1777.901142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1777.911001] 0 pages in swap cache [ 1777.914501] Swap cache stats: add 0, delete 0, find 0/0 [ 1777.926692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1777.944648] Free swap = 0kB [ 1777.947702] Total swap = 0kB [ 1777.953419] 2097051 pages RAM [ 1777.967906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1777.976533] 0 pages HighMem/MovableOnly [ 1777.980536] 363849 pages reserved [ 1777.983977] 0 pages cma reserved [ 1777.987336] Out of memory (oom_kill_allocating_task): Kill process 9044 (systemd-journal) score 0 or sacrifice child [ 1778.028871] 29380 total pagecache pages [ 1778.032879] 0 pages in swap cache [ 1778.036332] Swap cache stats: add 0, delete 0, find 0/0 [ 1778.068891] Free swap = 0kB [ 1778.071995] Total swap = 0kB [ 1778.075009] 2097051 pages RAM [ 1778.078102] 0 pages HighMem/MovableOnly [ 1778.082162] Killed process 9044 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:652kB, shmem-rss:4396kB [ 1778.112009] oom_reaper: reaped process 9044 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:4396kB [ 1778.123719] 363849 pages reserved 15:43:05 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) [ 1778.133147] 0 pages cma reserved [ 1778.223849] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1778.252978] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1778.302467] systemd[1]: Stopped Journal Service. [ 1778.379583] systemd[1]: Starting Journal Service... [ 1778.699972] systemd-journald[9696]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1780.116460] systemd[1]: Started Journal Service. [ 1781.629620] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1781.641651] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1781.646956] CPU: 1 PID: 9690 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1781.654746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1781.664097] Call Trace: [ 1781.666685] dump_stack+0x1b2/0x281 [ 1781.670430] warn_alloc.cold+0x96/0x1cc [ 1781.674403] ? zone_watermark_ok_safe+0x220/0x220 [ 1781.679262] __alloc_pages_nodemask+0x2127/0x2720 [ 1781.684135] ? lock_acquire+0x170/0x3f0 [ 1781.688110] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1781.692951] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1781.698396] ? __mutex_unlock_slowpath+0x75/0x770 [ 1781.703323] alloc_pages_current+0x155/0x260 [ 1781.707726] ion_page_pool_alloc+0x118/0x1b0 [ 1781.712140] ion_system_heap_allocate+0x133/0x8c0 [ 1781.716980] ? ion_alloc+0x187/0x810 [ 1781.720702] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1781.726142] ? ion_system_contig_heap_create+0x130/0x130 [ 1781.731588] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1781.736614] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1781.741447] ion_alloc+0x204/0x810 [ 1781.744989] ? ion_dma_buf_release+0x40/0x40 [ 1781.749410] ? __might_fault+0x177/0x1b0 [ 1781.753486] ion_ioctl+0xea/0x1f0 [ 1781.756931] ? ion_query_heaps+0x360/0x360 [ 1781.761158] ? lock_acquire+0x170/0x3f0 [ 1781.765143] ? ion_query_heaps+0x360/0x360 [ 1781.769373] do_vfs_ioctl+0x75a/0xff0 [ 1781.773169] ? ioctl_preallocate+0x1a0/0x1a0 [ 1781.777569] ? lock_downgrade+0x740/0x740 [ 1781.781712] ? __fget+0x225/0x360 [ 1781.785159] ? do_vfs_ioctl+0xff0/0xff0 [ 1781.789130] ? security_file_ioctl+0x83/0xb0 [ 1781.793534] SyS_ioctl+0x7f/0xb0 [ 1781.796891] ? do_vfs_ioctl+0xff0/0xff0 [ 1781.800861] do_syscall_64+0x1d5/0x640 [ 1781.804749] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1781.809932] RIP: 0033:0x4665d9 [ 1781.813110] RSP: 002b:00007fe1da39e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1781.820807] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1781.828075] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1781.835338] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1781.842602] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1781.849864] R13: 00007ffee467076f R14: 00007fe1da39e300 R15: 0000000000022000 [ 1781.868513] warn_alloc_show_mem: 2 callbacks suppressed [ 1781.868516] Mem-Info: [ 1781.876755] active_anon:17879 inactive_anon:28353 isolated_anon:0 [ 1781.876755] active_file:18 inactive_file:327 isolated_file:0 [ 1781.876755] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1781.876755] slab_reclaimable:12522 slab_unreclaimable:120332 [ 1781.876755] mapped:52731 shmem:29460 pagetables:835 bounce:0 [ 1781.876755] free:35844 free_pcp:372 free_cma:0 [ 1781.914538] Node 0 active_anon:67868kB inactive_anon:83516kB active_file:16kB inactive_file:1948kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143468kB dirty:0kB writeback:0kB shmem:87744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1781.947675] Node 1 active_anon:3648kB inactive_anon:29896kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67856kB dirty:0kB writeback:0kB shmem:30096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1781.980740] Node 0 DMA free:11256kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1782.011075] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1782.016671] Node 0 DMA32 free:88480kB min:36200kB low:45248kB high:54296kB active_anon:67868kB inactive_anon:83516kB active_file:16kB inactive_file:2868kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2576kB bounce:0kB free_pcp:208kB local_pcp:40kB free_cma:0kB [ 1782.049221] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1782.052074] lowmem_reserve[]: 0 0 0 0 0 [ 1782.067957] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1782.068874] syz-executor.3 cpuset= [ 1782.097956] lowmem_reserve[]: 0 0 0 0 0 [ 1782.112828] Node 1 Normal free:81484kB min:53696kB low:67120kB high:80544kB active_anon:3648kB inactive_anon:29896kB active_file:56kB inactive_file:60kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:764kB bounce:0kB free_pcp:92kB local_pcp:12kB free_cma:0kB [ 1782.118846] / [ 1782.158612] lowmem_reserve[]: 0 0 0 0 0 [ 1782.167721] Node 0 DMA: 126*4kB (U) 17*8kB (UE) 49*16kB (U) 26*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 11088kB [ 1782.188796] mems_allowed=0-1 [ 1782.188950] Node 0 [ 1782.191955] CPU: 0 PID: 9694 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1782.191960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1782.191963] Call Trace: [ 1782.191978] dump_stack+0x1b2/0x281 [ 1782.191991] warn_alloc.cold+0x96/0x1cc [ 1782.192002] ? zone_watermark_ok_safe+0x220/0x220 [ 1782.192025] __alloc_pages_nodemask+0x2127/0x2720 [ 1782.192040] ? lock_acquire+0x170/0x3f0 [ 1782.192060] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1782.192077] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1782.192088] ? __mutex_unlock_slowpath+0x75/0x770 [ 1782.192103] alloc_pages_current+0x155/0x260 [ 1782.196196] DMA32: [ 1782.202094] ion_page_pool_alloc+0x118/0x1b0 [ 1782.202103] ion_system_heap_allocate+0x133/0x8c0 [ 1782.202111] ? ion_alloc+0x187/0x810 [ 1782.202120] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1782.202128] ? ion_system_contig_heap_create+0x130/0x130 [ 1782.202135] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1782.202145] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1782.202154] ion_alloc+0x204/0x810 [ 1782.202166] ? ion_dma_buf_release+0x40/0x40 [ 1782.202176] ? __might_fault+0x177/0x1b0 [ 1782.202186] ion_ioctl+0xea/0x1f0 [ 1782.202194] ? ion_query_heaps+0x360/0x360 [ 1782.202205] ? lock_acquire+0x170/0x3f0 [ 1782.202211] ? ion_query_heaps+0x360/0x360 [ 1782.202220] do_vfs_ioctl+0x75a/0xff0 [ 1782.202229] ? ioctl_preallocate+0x1a0/0x1a0 [ 1782.202236] ? lock_downgrade+0x740/0x740 [ 1782.202247] ? __fget+0x225/0x360 [ 1782.202255] ? do_vfs_ioctl+0xff0/0xff0 [ 1782.202265] ? security_file_ioctl+0x83/0xb0 [ 1782.202274] SyS_ioctl+0x7f/0xb0 [ 1782.202280] ? do_vfs_ioctl+0xff0/0xff0 [ 1782.202290] do_syscall_64+0x1d5/0x640 [ 1782.202302] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1782.202308] RIP: 0033:0x4665d9 [ 1782.202312] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1782.202320] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1782.202324] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1782.202328] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1782.202332] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1782.202339] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1782.258785] 223*4kB [ 1782.334747] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask= [ 1782.448545] (UME) [ 1782.460642] (null), order=0, oom_score_adj=0 [ 1782.467297] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1782.472419] CPU: 0 PID: 9667 Comm: rs:main Q:Reg Not tainted 4.14.232-syzkaller #0 [ 1782.473078] 411*8kB [ 1782.480110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1782.480113] Call Trace: [ 1782.480128] dump_stack+0x1b2/0x281 [ 1782.480137] dump_header+0x178/0x82f [ 1782.480146] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1782.480153] ? ___ratelimit+0x2cd/0x530 [ 1782.480161] oom_kill_process.cold+0x10/0xa40 [ 1782.480178] out_of_memory+0xe3e/0x1190 [ 1782.519222] ? oom_killer_disable+0x1c0/0x1c0 [ 1782.523712] ? mutex_trylock+0x152/0x1a0 [ 1782.527768] __alloc_pages_nodemask+0x23e1/0x2720 [ 1782.532610] ? trace_hardirqs_on+0x10/0x10 [ 1782.532888] (ME) 372*16kB [ 1782.536834] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1782.536839] (UME) [ 1782.539675] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1782.539696] alloc_pages_current+0x155/0x260 [ 1782.539707] pagecache_get_page+0x3f5/0xab0 [ 1782.559959] grab_cache_page_write_begin+0x63/0x90 [ 1782.565030] ext4_da_write_begin+0x249/0xe70 [ 1782.569445] ? ext4_write_begin+0x1260/0x1260 [ 1782.573940] generic_perform_write+0x1c9/0x420 [ 1782.578519] ? __mnt_drop_write_file+0x5f/0x90 [ 1782.582523] 840*32kB [ 1782.583110] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 1782.583112] (UME) 0*64kB [ 1782.585524] ? current_time+0xb0/0xb0 [ 1782.596721] ? ext4_file_write_iter+0x1cc/0xd20 [ 1782.601382] __generic_file_write_iter+0x227/0x590 [ 1782.606309] ext4_file_write_iter+0x276/0xd20 [ 1782.610799] ? aa_file_perm+0x304/0xab0 [ 1782.612212] 0*128kB 0*256kB [ 1782.614793] ? ext4_file_read_iter+0x330/0x330 [ 1782.614829] ? trace_hardirqs_on+0x10/0x10 [ 1782.617828] 0*512kB [ 1782.622400] ? iov_iter_init+0xa6/0x1c0 [ 1782.622409] __vfs_write+0x44c/0x630 [ 1782.622417] ? kernel_read+0x110/0x110 [ 1782.622434] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1782.622444] vfs_write+0x17f/0x4d0 [ 1782.639417] 0*1024kB [ 1782.640480] SyS_write+0xf2/0x210 [ 1782.645468] 0*2048kB [ 1782.648988] ? SyS_read+0x210/0x210 [ 1782.648997] ? __do_page_fault+0x159/0xad0 [ 1782.649005] ? do_syscall_64+0x4c/0x640 [ 1782.649013] ? SyS_read+0x210/0x210 [ 1782.651425] 0*4096kB [ 1782.654896] do_syscall_64+0x1d5/0x640 [ 1782.657296] = 37012kB [ 1782.660920] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1782.660927] RIP: 0033:0x7fe9bcef11cd [ 1782.660932] RSP: 002b:00007fe9ba4ac580 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1782.660943] RAX: ffffffffffffffda RBX: 00007fe9b0024760 RCX: 00007fe9bcef11cd [ 1782.665154] Node 0 [ 1782.669111] RDX: 0000000000001000 RSI: 00007fe9b0024760 RDI: 0000000000000006 [ 1782.669115] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1782.669119] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fe9b00244e0 [ 1782.669123] R13: 00007fe9ba4ac5a0 R14: 0000000000000031 R15: 0000000000001000 [ 1782.700416] Mem-Info: [ 1782.776403] active_anon:17879 inactive_anon:28353 isolated_anon:0 [ 1782.776403] active_file:23 inactive_file:0 isolated_file:0 [ 1782.776403] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1782.776403] slab_reclaimable:12522 slab_unreclaimable:120858 [ 1782.776403] mapped:52606 shmem:29460 pagetables:835 bounce:0 [ 1782.776403] free:25180 free_pcp:0 free_cma:0 [ 1782.818925] Node 0 active_anon:67868kB inactive_anon:83516kB active_file:40kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142568kB dirty:0kB writeback:0kB shmem:87744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1782.823891] Normal: [ 1782.846599] Node 1 active_anon:3648kB inactive_anon:29896kB active_file:52kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67884kB dirty:0kB writeback:0kB shmem:30096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1782.846604] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1782.846620] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1782.846637] Node 0 DMA32 free:37056kB min:36200kB low:45248kB high:54296kB active_anon:67868kB inactive_anon:83516kB active_file:68kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2576kB bounce:0kB free_pcp:52kB local_pcp:0kB free_cma:0kB [ 1782.846652] lowmem_reserve[]: 0 0 0 0 0 [ 1782.846669] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1782.846682] lowmem_reserve[]: 0 0 0 0 0 [ 1782.846699] Node 1 Normal free:58940kB min:53696kB low:67120kB high:80544kB active_anon:3648kB inactive_anon:29896kB active_file:56kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:764kB bounce:0kB free_pcp:812kB local_pcp:696kB free_cma:0kB [ 1783.002387] lowmem_reserve[]: 0 0 0 0 0 [ 1783.008295] Node 0 DMA: 119*4kB (U) 17*8kB (UE) 49*16kB (U) 26*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 11060kB [ 1783.008791] 0*4kB [ 1783.027444] Node 0 DMA32: 336*4kB (UME) 472*8kB (UME) 196*16kB (UME) 844*32kB (UME) 2*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35648kB [ 1783.047469] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1783.048184] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1783.070784] Node 1 Normal: 41*4kB (UM) 18*8kB (UM) 17*16kB (UM) 1650*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53380kB [ 1783.084180] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1783.094570] Node 1 Normal: 41*4kB (UM) 18*8kB (UM) 17*16kB (UM) 1650*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53380kB [ 1783.096688] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1783.122182] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1783.130526] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1783.132816] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1783.152776] 29519 total pagecache pages [ 1783.154397] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1783.156768] 0 pages in swap cache [ 1783.168966] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1783.177813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1783.178812] Swap cache stats: add 0, delete 0, find 0/0 [ 1783.193551] 29519 total pagecache pages [ 1783.197523] 0 pages in swap cache [ 1783.201968] Free swap = 0kB [ 1783.204978] Total swap = 0kB [ 1783.207987] 2097051 pages RAM [ 1783.208038] Swap cache stats: add 0, delete 0, find 0/0 [ 1783.218333] 0 pages HighMem/MovableOnly [ 1783.218416] Free swap = 0kB [ 1783.225821] 363849 pages reserved [ 1783.233043] Total swap = 0kB [ 1783.236066] 2097051 pages RAM [ 1783.236622] 0 pages cma reserved [ 1783.242702] 0 pages HighMem/MovableOnly [ 1783.246070] Out of memory (oom_kill_allocating_task): Kill process 9667 (rs:main Q:Reg) score 0 or sacrifice child [ 1783.246685] 363849 pages reserved [ 1783.268312] Killed process 9664 (rsyslogd) total-vm:254332kB, anon-rss:756kB, file-rss:0kB, shmem-rss:0kB [ 1783.270233] 0 pages cma reserved [ 1783.795430] systemd-cgroups invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1783.808509] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 1783.813764] CPU: 1 PID: 9697 Comm: systemd-cgroups Not tainted 4.14.232-syzkaller #0 [ 1783.821637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1783.830980] Call Trace: [ 1783.833564] dump_stack+0x1b2/0x281 [ 1783.837183] dump_header+0x178/0x82f [ 1783.840890] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1783.846002] ? ___ratelimit+0x2cd/0x530 [ 1783.849977] oom_kill_process.cold+0x10/0xa40 [ 1783.854473] out_of_memory+0xe3e/0x1190 [ 1783.858471] ? oom_killer_disable+0x1c0/0x1c0 [ 1783.862958] ? mutex_trylock+0x152/0x1a0 [ 1783.867031] __alloc_pages_nodemask+0x23e1/0x2720 [ 1783.871878] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1783.876746] alloc_pages_current+0x155/0x260 [ 1783.881170] filemap_fault+0x11a1/0x1ad0 [ 1783.885233] ext4_filemap_fault+0x84/0xb0 [ 1783.889377] __do_fault+0xfa/0x380 [ 1783.892908] __handle_mm_fault+0x2497/0x4620 [ 1783.897313] ? vm_insert_page+0x7c0/0x7c0 [ 1783.901453] ? vm_mmap_pgoff+0x168/0x1a0 [ 1783.905534] ? mark_held_locks+0xa6/0xf0 [ 1783.909605] handle_mm_fault+0x455/0x9c0 [ 1783.913660] __do_page_fault+0x549/0xad0 [ 1783.917713] ? spurious_fault+0x640/0x640 [ 1783.921849] ? do_page_fault+0x60/0x500 [ 1783.925824] ? page_fault+0x2f/0x50 [ 1783.929446] page_fault+0x45/0x50 [ 1783.932892] RIP: 0000:0x7f0210ccb040 [ 1783.936597] RSP: 108996a4:0000000000000000 EFLAGS: 7f0210cc8000 [ 1783.956588] Mem-Info: [ 1783.975431] active_anon:17691 inactive_anon:28353 isolated_anon:0 [ 1783.975431] active_file:47 inactive_file:0 isolated_file:0 [ 1783.975431] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1783.975431] slab_reclaimable:12517 slab_unreclaimable:120801 [ 1783.975431] mapped:52589 shmem:29460 pagetables:819 bounce:0 [ 1783.975431] free:25082 free_pcp:30 free_cma:0 [ 1784.018415] Node 0 active_anon:67936kB inactive_anon:83516kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142500kB dirty:0kB writeback:0kB shmem:87744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1784.056517] Node 1 active_anon:2828kB inactive_anon:29896kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67856kB dirty:0kB writeback:0kB shmem:30096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1784.090036] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1784.118305] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1784.127703] Node 0 DMA32 free:35704kB min:36200kB low:45248kB high:54296kB active_anon:67936kB inactive_anon:83516kB active_file:40kB inactive_file:84kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2616kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1784.166145] lowmem_reserve[]: 0 0 0 0 0 [ 1784.170171] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1784.199846] lowmem_reserve[]: 0 0 0 0 0 [ 1784.203829] Node 1 Normal free:53684kB min:53696kB low:67120kB high:80544kB active_anon:2828kB inactive_anon:29896kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:660kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1784.234459] lowmem_reserve[]: 0 0 0 0 0 [ 1784.238472] Node 0 DMA: 119*4kB (U) 17*8kB (UE) 49*16kB (U) 26*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 11060kB [ 1784.255871] Node 0 DMA32: 340*4kB (ME) 459*8kB (ME) 215*16kB (UME) 847*32kB (UME) 2*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35704kB [ 1784.272304] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1784.283045] Node 1 Normal: 41*4kB (UM) 24*8kB (M) 15*16kB (M) 1305*32kB (UM) 173*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53684kB [ 1784.297193] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1784.306053] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1784.314658] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1784.323514] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1784.332108] 29493 total pagecache pages [ 1784.336083] 0 pages in swap cache [ 1784.339548] Swap cache stats: add 0, delete 0, find 0/0 [ 1784.344903] Free swap = 0kB [ 1784.347904] Total swap = 0kB [ 1784.350963] 2097051 pages RAM [ 1784.354072] 0 pages HighMem/MovableOnly [ 1784.358026] 363849 pages reserved [ 1784.361486] 0 pages cma reserved [ 1784.364854] Out of memory (oom_kill_allocating_task): Kill process 9697 (systemd-cgroups) score 0 or sacrifice child [ 1784.375585] Killed process 9697 (systemd-cgroups) total-vm:24288kB, anon-rss:120kB, file-rss:0kB, shmem-rss:0kB [ 1784.386374] oom_reaper: reaped process 9697 (systemd-cgroups), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1784.546300] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1784.613968] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1784.634489] CPU: 0 PID: 7987 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1784.641937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1784.651365] Call Trace: [ 1784.653947] dump_stack+0x1b2/0x281 [ 1784.657564] dump_header+0x178/0x82f [ 1784.661261] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1784.666362] ? ___ratelimit+0x2cd/0x530 [ 1784.670322] oom_kill_process.cold+0x10/0xa40 [ 1784.674946] out_of_memory+0xe3e/0x1190 [ 1784.678920] ? oom_killer_disable+0x1c0/0x1c0 [ 1784.683403] ? mutex_trylock+0x152/0x1a0 [ 1784.687460] __alloc_pages_nodemask+0x23e1/0x2720 [ 1784.692304] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1784.697148] alloc_pages_current+0x155/0x260 [ 1784.701542] filemap_fault+0x11a1/0x1ad0 [ 1784.705602] ext4_filemap_fault+0x84/0xb0 [ 1784.709738] __do_fault+0xfa/0x380 [ 1784.713283] __handle_mm_fault+0x2497/0x4620 [ 1784.717678] ? vm_insert_page+0x7c0/0x7c0 [ 1784.721812] ? lock_downgrade+0x740/0x740 [ 1784.725964] ? mark_held_locks+0xa6/0xf0 [ 1784.730031] handle_mm_fault+0x455/0x9c0 [ 1784.734091] __do_page_fault+0x549/0xad0 [ 1784.738146] ? spurious_fault+0x640/0x640 [ 1784.742287] ? do_page_fault+0x60/0x500 [ 1784.746248] ? page_fault+0x2f/0x50 [ 1784.749950] page_fault+0x45/0x50 [ 1784.753391] RIP: 0000:0x947a5c [ 1784.756567] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1784.824224] Mem-Info: [ 1784.832112] active_anon:17659 inactive_anon:28353 isolated_anon:0 [ 1784.832112] active_file:37 inactive_file:15 isolated_file:0 [ 1784.832112] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1784.832112] slab_reclaimable:12516 slab_unreclaimable:120782 [ 1784.832112] mapped:52589 shmem:29460 pagetables:819 bounce:0 [ 1784.832112] free:25122 free_pcp:81 free_cma:0 [ 1784.871571] Node 0 active_anon:67844kB inactive_anon:83516kB active_file:120kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142500kB dirty:0kB writeback:0kB shmem:87744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1784.905618] Node 1 active_anon:2792kB inactive_anon:29896kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67856kB dirty:0kB writeback:0kB shmem:30096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1784.936185] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1784.972319] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1784.977357] Node 0 DMA32 free:35776kB min:36200kB low:45248kB high:54296kB active_anon:67844kB inactive_anon:83516kB active_file:16kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2576kB bounce:0kB free_pcp:200kB local_pcp:8kB free_cma:0kB [ 1785.012971] lowmem_reserve[]: 0 0 0 0 0 [ 1785.016962] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1785.044484] lowmem_reserve[]: 0 0 0 0 0 [ 1785.048476] Node 1 Normal free:53624kB min:53696kB low:67120kB high:80544kB active_anon:2792kB inactive_anon:29896kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:644kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 1785.088930] lowmem_reserve[]: 0 0 0 0 0 [ 1785.092927] Node 0 DMA: 119*4kB (U) 17*8kB (UE) 49*16kB (U) 26*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 11060kB [ 1785.117687] Node 0 DMA32: 332*4kB (UME) 472*8kB (UME) 213*16kB (UME) 848*32kB (UME) 2*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35776kB [ 1785.136076] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1785.158012] Node 1 Normal: 40*4kB (M) 29*8kB (UM) 17*16kB (M) 1301*32kB (UM) 173*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53624kB [ 1785.176183] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1785.185060] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1785.195645] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1785.204637] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1785.216740] 29493 total pagecache pages [ 1785.220761] 0 pages in swap cache [ 1785.224201] Swap cache stats: add 0, delete 0, find 0/0 [ 1785.231527] Free swap = 0kB [ 1785.234540] Total swap = 0kB [ 1785.237531] 2097051 pages RAM [ 1785.248641] 0 pages HighMem/MovableOnly [ 1785.252649] 363849 pages reserved [ 1785.256086] 0 pages cma reserved [ 1785.266438] Out of memory (oom_kill_allocating_task): Kill process 7987 (syz-fuzzer) score 0 or sacrifice child [ 1785.287338] Killed process 9126 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1785.310894] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1785.346587] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1785.353579] CPU: 0 PID: 7988 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1785.361046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1785.370399] Call Trace: [ 1785.373010] dump_stack+0x1b2/0x281 [ 1785.376634] dump_header+0x178/0x82f [ 1785.380355] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1785.385455] ? ___ratelimit+0x2cd/0x530 [ 1785.389428] oom_kill_process.cold+0x10/0xa40 [ 1785.393925] out_of_memory+0xe3e/0x1190 [ 1785.397898] ? oom_killer_disable+0x1c0/0x1c0 [ 1785.402383] ? mutex_trylock+0x152/0x1a0 [ 1785.406434] __alloc_pages_nodemask+0x23e1/0x2720 [ 1785.411285] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1785.416575] alloc_pages_current+0x155/0x260 [ 1785.418817] syz-executor.3: page allocation failure: order:0 [ 1785.420974] filemap_fault+0x11a1/0x1ad0 [ 1785.420990] ext4_filemap_fault+0x84/0xb0 [ 1785.426776] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1785.430825] __do_fault+0xfa/0x380 [ 1785.430835] __handle_mm_fault+0x2497/0x4620 [ 1785.430844] ? vm_insert_page+0x7c0/0x7c0 [ 1785.430861] ? mark_held_locks+0xa6/0xf0 [ 1785.430872] handle_mm_fault+0x455/0x9c0 [ 1785.430884] __do_page_fault+0x549/0xad0 [ 1785.430896] ? spurious_fault+0x640/0x640 [ 1785.430904] ? do_page_fault+0x60/0x500 [ 1785.430912] ? page_fault+0x2f/0x50 [ 1785.430921] page_fault+0x45/0x50 [ 1785.451117] (null) [ 1785.454163] RIP: 0900:0x19fb145b66c [ 1785.458197] syz-executor.3 cpuset= [ 1785.462235] RSP: 01a4:000000c00003fe40 EFLAGS: 00000003 [ 1785.476527] Mem-Info: [ 1785.497220] / mems_allowed=0-1 [ 1785.504232] CPU: 1 PID: 9694 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1785.512018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1785.513065] active_anon:17659 inactive_anon:28353 isolated_anon:0 [ 1785.513065] active_file:12 inactive_file:9 isolated_file:0 [ 1785.513065] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1785.513065] slab_reclaimable:12516 slab_unreclaimable:120772 [ 1785.513065] mapped:52589 shmem:29460 pagetables:805 bounce:0 [ 1785.513065] free:13961 free_pcp:90 free_cma:0 [ 1785.521367] Call Trace: [ 1785.521387] dump_stack+0x1b2/0x281 [ 1785.521408] warn_alloc.cold+0x96/0x1cc [ 1785.554498] Node 0 active_anon:67844kB inactive_anon:83516kB active_file:44kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142500kB dirty:0kB writeback:0kB shmem:87744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1785.557052] ? zone_watermark_ok_safe+0x220/0x220 [ 1785.560688] Node 1 active_anon:2792kB inactive_anon:29896kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67856kB dirty:0kB writeback:0kB shmem:30096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1785.564611] ? usleep_range+0x130/0x130 [ 1785.592270] Node 0 [ 1785.597074] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1785.624049] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1785.627977] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1785.630190] lowmem_reserve[]: [ 1785.635264] ? run_timer_softirq+0x5a0/0x5a0 [ 1785.660830] 0 [ 1785.665831] __alloc_pages_nodemask+0x2127/0x2720 [ 1785.668914] 2717 [ 1785.673292] ? lock_acquire+0x170/0x3f0 [ 1785.675059] 2718 [ 1785.679886] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1785.679896] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1785.679911] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1785.682042] 2718 [ 1785.686006] alloc_pages_current+0x155/0x260 [ 1785.688030] 2718 [ 1785.692861] ion_page_pool_alloc+0x118/0x1b0 [ 1785.692871] ion_system_heap_allocate+0x133/0x8c0 [ 1785.692879] ? ion_alloc+0x187/0x810 [ 1785.702775] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1785.702784] ? ion_system_contig_heap_create+0x130/0x130 [ 1785.702793] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1785.704824] Node 0 [ 1785.709211] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1785.709220] ion_alloc+0x204/0x810 [ 1785.709232] ? ion_dma_buf_release+0x40/0x40 [ 1785.711287] DMA32 free:18044kB min:36200kB low:45248kB high:54296kB active_anon:67844kB inactive_anon:83516kB active_file:44kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2576kB bounce:0kB free_pcp:176kB local_pcp:56kB free_cma:0kB [ 1785.715670] ? __might_fault+0x177/0x1b0 [ 1785.720498] lowmem_reserve[]: [ 1785.724179] ion_ioctl+0xea/0x1f0 [ 1785.729608] 0 [ 1785.735024] ? ion_query_heaps+0x360/0x360 [ 1785.740022] 0 [ 1785.742228] ? lock_acquire+0x170/0x3f0 [ 1785.747044] 0 [ 1785.750561] ? ion_query_heaps+0x360/0x360 [ 1785.750571] do_vfs_ioctl+0x75a/0xff0 [ 1785.750583] ? ioctl_preallocate+0x1a0/0x1a0 [ 1785.754959] 0 [ 1785.783123] ? lock_downgrade+0x740/0x740 [ 1785.783134] ? __fget+0x225/0x360 [ 1785.783142] ? do_vfs_ioctl+0xff0/0xff0 [ 1785.787168] 0 [ 1785.790251] ? security_file_ioctl+0x83/0xb0 [ 1785.790260] SyS_ioctl+0x7f/0xb0 [ 1785.790267] ? do_vfs_ioctl+0xff0/0xff0 [ 1785.795470] do_syscall_64+0x1d5/0x640 [ 1785.799685] Node 0 [ 1785.801461] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1785.805499] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1785.807274] RIP: 0033:0x4665d9 [ 1785.811674] lowmem_reserve[]: [ 1785.815263] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 [ 1785.819676] 0 [ 1785.821438] ORIG_RAX: 0000000000000010 [ 1785.825559] 0 [ 1785.828997] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1785.829002] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1785.829007] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1785.829012] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1785.829018] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1785.832961] 0 [ 1785.835136] syz-executor.1: [ 1785.857040] 0 [ 1785.858473] warn_alloc_show_mem: 1 callbacks suppressed [ 1785.858475] Mem-Info: [ 1785.901585] 0 [ 1785.902270] page allocation failure: order:0 [ 1785.924045] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1785.946426] Node 1 [ 1785.950550] active_anon:17659 inactive_anon:28353 isolated_anon:0 [ 1785.950550] active_file:17 inactive_file:16 isolated_file:0 [ 1785.950550] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1785.950550] slab_reclaimable:12516 slab_unreclaimable:120772 [ 1785.950550] mapped:52589 shmem:29460 pagetables:805 bounce:0 [ 1785.950550] free:13961 free_pcp:90 free_cma:0 [ 1785.950567] Node 0 active_anon:67844kB inactive_anon:83516kB active_file:64kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142500kB dirty:0kB writeback:0kB shmem:87744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1785.950582] Node 1 active_anon:2792kB inactive_anon:29896kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67856kB dirty:0kB writeback:0kB shmem:30096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1785.950586] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1785.950605] lowmem_reserve[]: [ 1785.961386] Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:2792kB inactive_anon:29896kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:644kB bounce:0kB free_pcp:184kB local_pcp:64kB free_cma:0kB [ 1785.966300] 0 [ 1785.968520] lowmem_reserve[]: [ 1786.002128] (null) [ 1786.031213] 0 [ 1786.060205] 2717 [ 1786.095107] 0 [ 1786.117119] syz-executor.1 cpuset= [ 1786.118508] 0 [ 1786.120654] / mems_allowed=0-1 [ 1786.120668] CPU: 1 PID: 9675 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1786.120674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1786.120677] Call Trace: [ 1786.120696] dump_stack+0x1b2/0x281 [ 1786.120708] warn_alloc.cold+0x96/0x1cc [ 1786.120718] ? zone_watermark_ok_safe+0x220/0x220 [ 1786.120725] ? usleep_range+0x130/0x130 [ 1786.120732] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1786.120742] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1786.120750] ? run_timer_softirq+0x5a0/0x5a0 [ 1786.120764] __alloc_pages_nodemask+0x2127/0x2720 [ 1786.120776] ? lock_acquire+0x170/0x3f0 [ 1786.120787] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1786.120795] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1786.120809] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1786.120825] alloc_pages_current+0x155/0x260 [ 1786.120834] ion_page_pool_alloc+0x118/0x1b0 [ 1786.120842] ion_system_heap_allocate+0x133/0x8c0 [ 1786.120850] ? ion_alloc+0x187/0x810 [ 1786.120859] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1786.120867] ? ion_system_contig_heap_create+0x130/0x130 [ 1786.120874] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1786.120882] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1786.120891] ion_alloc+0x204/0x810 [ 1786.120902] ? ion_dma_buf_release+0x40/0x40 [ 1786.120913] ? __might_fault+0x177/0x1b0 [ 1786.120922] ion_ioctl+0xea/0x1f0 [ 1786.120929] ? ion_query_heaps+0x360/0x360 [ 1786.120939] ? lock_acquire+0x170/0x3f0 [ 1786.120946] ? ion_query_heaps+0x360/0x360 [ 1786.120954] do_vfs_ioctl+0x75a/0xff0 [ 1786.120964] ? ioctl_preallocate+0x1a0/0x1a0 [ 1786.120970] ? lock_downgrade+0x740/0x740 [ 1786.120981] ? __fget+0x225/0x360 [ 1786.120988] ? do_vfs_ioctl+0xff0/0xff0 [ 1786.120997] ? security_file_ioctl+0x83/0xb0 [ 1786.121005] SyS_ioctl+0x7f/0xb0 [ 1786.121011] ? do_vfs_ioctl+0xff0/0xff0 [ 1786.121020] do_syscall_64+0x1d5/0x640 [ 1786.137214] 0 [ 1786.142908] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1786.142917] RIP: 0033:0x4665d9 [ 1786.154186] 0 [ 1786.154826] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 [ 1786.162399] ORIG_RAX: 0000000000000010 [ 1786.162405] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1786.162409] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1786.162414] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1786.162418] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1786.162424] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1786.167236] Node 0 [ 1786.175473] 2718 [ 1786.176283] DMA: [ 1786.181336] 2718 2718 [ 1786.181346] Node 0 DMA32 free:18044kB min:36200kB low:45248kB high:54296kB active_anon:67844kB inactive_anon:83516kB active_file:64kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2576kB bounce:0kB free_pcp:176kB local_pcp:120kB free_cma:0kB [ 1786.181366] lowmem_reserve[]: 0 0 0 0 0 [ 1786.181385] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1786.181400] lowmem_reserve[]: 0 0 0 0 0 [ 1786.197647] 94*4kB [ 1786.209042] (U) [ 1786.228791] Node 1 [ 1786.235969] 17*8kB [ 1786.237865] Normal free:71004kB min:53696kB low:67120kB high:80544kB active_anon:2792kB inactive_anon:29896kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:644kB bounce:0kB free_pcp:180kB local_pcp:116kB free_cma:0kB [ 1786.243623] (UE) [ 1786.288768] lowmem_reserve[]: [ 1786.382108] 49*16kB (U) 26*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 10960kB [ 1786.533805] Node 0 DMA32: 331*4kB (ME) 655*8kB (UME) 260*16kB (UME) 317*32kB (UME) 11*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 21700kB [ 1786.579187] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1786.636571] Node 1 Normal: 0*4kB 2*8kB (UM) 2*16kB (UM) 1*32kB (U) 532*64kB (UM) 398*128kB (UM) 51*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 98128kB [ 1786.689621] 0 0 0 0 0 [ 1786.692148] Node 0 DMA: 94*4kB (U) 18*8kB (UE) 49*16kB (U) 26*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 10968kB [ 1786.702648] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1786.728983] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1786.737662] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1786.748767] Node 0 DMA32: 929*4kB (UME) 1304*8kB (UME) 310*16kB (UME) 341*32kB (UME) 11*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 30852kB [ 1786.811521] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1786.841771] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1786.868777] Node 1 Normal: 369*4kB (UM) 155*8kB (UM) 192*16kB (UM) 139*32kB (UM) 11*64kB (UM) 317*128kB (U) 47*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 63548kB [ 1786.896436] 29578 total pagecache pages [ 1786.928795] 0 pages in swap cache [ 1786.928875] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1786.932269] Swap cache stats: add 0, delete 0, find 0/0 [ 1786.979008] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1786.981657] Free swap = 0kB [ 1786.987593] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1786.998733] Total swap = 0kB [ 1787.002466] 2097051 pages RAM [ 1787.005557] 0 pages HighMem/MovableOnly [ 1787.028958] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1787.052104] 363849 pages reserved [ 1787.055669] 0 pages cma reserved [ 1787.078802] 29520 total pagecache pages [ 1787.088758] Out of memory (oom_kill_allocating_task): Kill process 7988 (syz-fuzzer) score 0 or sacrifice child [ 1787.092307] 0 pages in swap cache [ 1787.108862] Swap cache stats: add 0, delete 0, find 0/0 [ 1787.108906] Killed process 9337 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1787.114318] Free swap = 0kB [ 1787.138607] Total swap = 0kB [ 1787.149047] 2097051 pages RAM [ 1787.152540] 0 pages HighMem/MovableOnly [ 1787.159030] 363849 pages reserved [ 1787.167600] oom_reaper: reaped process 9337 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1787.204963] 0 pages cma reserved [ 1787.272842] oom_reaper: reaped process 9694 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1787.358924] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1787.381510] oom_reaper: reaped process 9675 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1787.391502] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1787.396618] CPU: 1 PID: 9694 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1787.404671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1787.414116] Call Trace: [ 1787.416721] dump_stack+0x1b2/0x281 [ 1787.420325] warn_alloc.cold+0x96/0x1cc [ 1787.424277] ? zone_watermark_ok_safe+0x220/0x220 [ 1787.429102] __alloc_pages_nodemask+0x2127/0x2720 [ 1787.433932] ? lock_acquire+0x170/0x3f0 [ 1787.437885] ? lock_acquire+0x170/0x3f0 [ 1787.441840] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1787.446666] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1787.452105] ? __mutex_unlock_slowpath+0x75/0x770 [ 1787.456951] alloc_pages_current+0x155/0x260 [ 1787.461346] ion_page_pool_alloc+0x118/0x1b0 [ 1787.465750] ion_system_heap_allocate+0x133/0x8c0 [ 1787.470575] ? _raw_spin_unlock+0x29/0x40 [ 1787.474703] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1787.479634] ? ion_system_contig_heap_create+0x130/0x130 [ 1787.485077] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1787.490073] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1787.494913] ion_alloc+0x27a/0x810 [ 1787.498451] ? ion_dma_buf_release+0x40/0x40 [ 1787.502841] ? __might_fault+0x177/0x1b0 [ 1787.506892] ion_ioctl+0xea/0x1f0 [ 1787.510340] ? ion_query_heaps+0x360/0x360 [ 1787.514561] ? lock_acquire+0x170/0x3f0 [ 1787.518521] ? ion_query_heaps+0x360/0x360 [ 1787.522752] do_vfs_ioctl+0x75a/0xff0 [ 1787.526531] ? ioctl_preallocate+0x1a0/0x1a0 [ 1787.530917] ? lock_downgrade+0x740/0x740 [ 1787.535057] ? __fget+0x225/0x360 [ 1787.538495] ? do_vfs_ioctl+0xff0/0xff0 [ 1787.542464] ? security_file_ioctl+0x83/0xb0 [ 1787.546983] SyS_ioctl+0x7f/0xb0 [ 1787.550337] ? do_vfs_ioctl+0xff0/0xff0 [ 1787.554314] do_syscall_64+0x1d5/0x640 [ 1787.558189] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1787.563473] RIP: 0033:0x4665d9 [ 1787.566645] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1787.574337] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1787.581603] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1787.588867] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1787.596114] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1787.603378] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1787.628765] warn_alloc_show_mem: 1 callbacks suppressed [ 1787.628769] Mem-Info: [ 1787.636710] active_anon:17605 inactive_anon:28353 isolated_anon:0 [ 1787.636710] active_file:41 inactive_file:0 isolated_file:2 [ 1787.636710] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1787.636710] slab_reclaimable:12481 slab_unreclaimable:121854 [ 1787.636710] mapped:52655 shmem:29460 pagetables:716 bounce:0 [ 1787.636710] free:17191 free_pcp:38 free_cma:0 [ 1787.665861] oom_reaper: reaped process 9673 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1787.675692] Node 0 active_anon:67600kB inactive_anon:83516kB active_file:80kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:142692kB dirty:0kB writeback:0kB shmem:87744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1787.707589] Node 1 active_anon:2732kB inactive_anon:29896kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67856kB dirty:0kB writeback:0kB shmem:30096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1787.734957] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1787.761849] rsyslogd invoked oom-killer: gfp_mask=0x14002c0(GFP_KERNEL|__GFP_NOWARN), nodemask=(null), order=2, oom_score_adj=0 [ 1787.762003] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1787.778657] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1787.790970] Node 0 DMA32 free:18100kB min:36200kB low:45248kB high:54296kB active_anon:67544kB inactive_anon:83516kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7040kB pagetables:2224kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1787.810653] rsyslogd cpuset= [ 1787.824171] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1787.834444] / mems_allowed=0-1 [ 1787.834634] CPU: 0 PID: 9675 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1787.834641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1787.854948] Call Trace: [ 1787.857536] dump_stack+0x1b2/0x281 [ 1787.861166] warn_alloc.cold+0x96/0x1cc [ 1787.865130] ? zone_watermark_ok_safe+0x220/0x220 [ 1787.869963] __alloc_pages_nodemask+0x2127/0x2720 [ 1787.874795] ? lock_acquire+0x1ec/0x3f0 [ 1787.878764] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1787.883608] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1787.889049] ? __mutex_unlock_slowpath+0x75/0x770 [ 1787.893877] alloc_pages_current+0x155/0x260 [ 1787.898281] ion_page_pool_alloc+0x118/0x1b0 [ 1787.902678] ion_system_heap_allocate+0x133/0x8c0 [ 1787.907504] ? _raw_spin_unlock+0x29/0x40 [ 1787.911721] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1787.916630] ? ion_system_contig_heap_create+0x130/0x130 [ 1787.922060] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1787.927058] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1787.931892] ion_alloc+0x27a/0x810 [ 1787.935428] ? ion_dma_buf_release+0x40/0x40 [ 1787.939830] ? __might_fault+0x177/0x1b0 [ 1787.943870] ion_ioctl+0xea/0x1f0 [ 1787.947302] ? ion_query_heaps+0x360/0x360 [ 1787.951623] ? lock_acquire+0x170/0x3f0 [ 1787.955589] ? ion_query_heaps+0x360/0x360 [ 1787.959806] do_vfs_ioctl+0x75a/0xff0 [ 1787.963597] ? ioctl_preallocate+0x1a0/0x1a0 [ 1787.968070] ? lock_downgrade+0x740/0x740 [ 1787.972198] ? __fget+0x225/0x360 [ 1787.975629] ? do_vfs_ioctl+0xff0/0xff0 [ 1787.979586] ? security_file_ioctl+0x83/0xb0 [ 1787.983995] SyS_ioctl+0x7f/0xb0 [ 1787.987347] ? do_vfs_ioctl+0xff0/0xff0 [ 1787.991302] do_syscall_64+0x1d5/0x640 [ 1787.995173] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1788.000342] RIP: 0033:0x4665d9 [ 1788.003525] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1788.011226] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1788.018475] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1788.025723] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1788.032976] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1788.040233] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1788.047511] CPU: 1 PID: 9698 Comm: rsyslogd Not tainted 4.14.232-syzkaller #0 [ 1788.054805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1788.056742] lowmem_reserve[]: [ 1788.064163] Call Trace: [ 1788.064176] dump_stack+0x1b2/0x281 [ 1788.064187] dump_header+0x178/0x82f [ 1788.064196] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1788.064204] ? ___ratelimit+0x2cd/0x530 [ 1788.064216] oom_kill_process.cold+0x10/0xa40 [ 1788.067303] 0 [ 1788.069874] out_of_memory+0xe3e/0x1190 [ 1788.069885] ? oom_killer_disable+0x1c0/0x1c0 [ 1788.069892] ? mutex_trylock+0x152/0x1a0 [ 1788.069902] __alloc_pages_nodemask+0x23e1/0x2720 [ 1788.069917] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1788.069930] ? __save_stack_trace+0x63/0x160 [ 1788.080584] 0 [ 1788.082417] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1788.086374] 0 [ 1788.090861] ? kernel_text_address+0xbd/0xf0 [ 1788.090872] alloc_pages_current+0x155/0x260 [ 1788.090882] ? __lock_acquire+0x5fc/0x3f20 [ 1788.090893] depot_save_stack+0x3ae/0x3f0 [ 1788.090904] kasan_kmalloc+0x139/0x160 [ 1788.090912] ? kasan_kmalloc+0xeb/0x160 [ 1788.090922] ? __kmalloc+0x144/0x400 [ 1788.096250] 0 [ 1788.096673] ? rw_copy_check_uvector+0x226/0x2b0 [ 1788.104507] 0 [ 1788.105290] ? import_iovec+0x94/0x360 [ 1788.116000] ? vfs_writev+0xae/0x290 [ 1788.123602] Node 0 [ 1788.127025] ? do_writev+0xfc/0x2c0 [ 1788.132527] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1788.133238] ? do_syscall_64+0x1d5/0x640 [ 1788.137618] lowmem_reserve[]: [ 1788.141849] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1788.141858] ? switch_mm_irqs_off+0x601/0xeb0 [ 1788.141870] ? trace_hardirqs_on+0x10/0x10 [ 1788.141879] ? lock_acquire+0x170/0x3f0 [ 1788.141887] ? reacquire_held_locks+0xb5/0x3f0 [ 1788.141894] ? alloc_set_pte+0xd57/0x1610 [ 1788.141902] ? __mod_node_page_state+0x89/0xd0 [ 1788.141910] ? lock_downgrade+0x740/0x740 [ 1788.153161] 0 [ 1788.153902] ? fs_reclaim_release+0xd0/0x110 [ 1788.157588] 0 [ 1788.159382] ? __kmalloc+0x2fb/0x400 [ 1788.159392] __kmalloc+0x144/0x400 [ 1788.159401] ? rw_copy_check_uvector+0x226/0x2b0 [ 1788.159410] rw_copy_check_uvector+0x226/0x2b0 [ 1788.159420] ? do_fault_around+0x359/0x620 [ 1788.164148] 0 [ 1788.165945] import_iovec+0x94/0x360 [ 1788.177050] 0 [ 1788.179359] ? dup_iter+0x240/0x240 [ 1788.179366] ? do_raw_spin_unlock+0x164/0x220 [ 1788.179376] ? _raw_spin_unlock+0x29/0x40 [ 1788.179385] vfs_writev+0xae/0x290 [ 1788.179393] ? vfs_iter_write+0xa0/0xa0 [ 1788.179399] ? __handle_mm_fault+0x80f/0x4620 [ 1788.179408] ? vm_insert_page+0x7c0/0x7c0 [ 1788.179417] ? vm_mmap_pgoff+0x168/0x1a0 [ 1788.179429] ? __do_page_fault+0x571/0xad0 [ 1788.179440] ? lock_downgrade+0x740/0x740 [ 1788.179447] do_writev+0xfc/0x2c0 [ 1788.179455] ? vfs_writev+0x290/0x290 [ 1788.179462] ? __do_page_fault+0x159/0xad0 [ 1788.179470] ? do_syscall_64+0x4c/0x640 [ 1788.179477] ? SyS_readv+0x30/0x30 [ 1788.179483] do_syscall_64+0x1d5/0x640 [ 1788.179495] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1788.179502] RIP: 0033:0x7f7b342e5278 [ 1788.179505] RSP: 002b:00007ffdef7a6b80 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1788.179512] RAX: ffffffffffffffda RBX: 00007f7b342f2570 RCX: 00007f7b342e5278 [ 1788.179517] RDX: 000000000000000a RSI: 00007ffdef7a6bb0 RDI: 0000000000000002 [ 1788.179522] RBP: 00007ffdef7a6fe0 R08: 0000000000000000 R09: ffffffffffffffff [ 1788.179538] R10: 0000000000000020 R11: 0000000000000246 R12: 000000000000000a [ 1788.179542] R13: 00007ffdef7a6ba4 R14: 00007f7b342f1cc0 R15: cccccccccccccccd [ 1788.190616] syz-executor.4: [ 1788.212162] 0 [ 1788.221785] page allocation failure: order:0 [ 1788.227066] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1788.234511] Node 1 [ 1788.242209] (null) [ 1788.247970] Normal free:26812kB min:53696kB low:67120kB high:80544kB active_anon:2716kB inactive_anon:29896kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:660kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1788.248619] syz-executor.4 cpuset= [ 1788.254237] lowmem_reserve[]: [ 1788.257785] / [ 1788.262291] 0 [ 1788.269615] mems_allowed=0-1 [ 1788.278369] 0 [ 1788.285944] CPU: 1 PID: 9673 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1788.293983] 0 [ 1788.296937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1788.302061] 0 [ 1788.304404] Call Trace: [ 1788.304423] dump_stack+0x1b2/0x281 [ 1788.314275] 0 [ 1788.317155] warn_alloc.cold+0x96/0x1cc [ 1788.325489] ? zone_watermark_ok_safe+0x220/0x220 [ 1788.334173] Node 0 [ 1788.336909] ? usleep_range+0x130/0x130 [ 1788.342827] DMA: [ 1788.344383] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1788.348251] 94*4kB [ 1788.353423] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1788.353432] ? run_timer_softirq+0x5a0/0x5a0 [ 1788.353449] __alloc_pages_nodemask+0x2127/0x2720 [ 1788.353465] ? lock_acquire+0x170/0x3f0 [ 1788.353480] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1788.364536] (U) [ 1788.364889] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1788.372191] 18*8kB [ 1788.379410] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1788.379423] ? __alloc_pages_nodemask+0xc/0x2720 [ 1788.379437] alloc_pages_current+0x155/0x260 [ 1788.379448] ion_page_pool_alloc+0x118/0x1b0 [ 1788.379457] ion_system_heap_allocate+0x133/0x8c0 [ 1788.379468] ? ion_alloc+0x187/0x810 [ 1788.393067] (UE) [ 1788.393977] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1788.413815] 49*16kB [ 1788.417589] ? ion_system_contig_heap_create+0x130/0x130 [ 1788.427516] (U) [ 1788.449847] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1788.449863] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1788.449875] ion_alloc+0x204/0x810 [ 1788.449891] ? ion_dma_buf_release+0x40/0x40 [ 1788.449903] ? __might_fault+0x177/0x1b0 [ 1788.449913] ion_ioctl+0xea/0x1f0 [ 1788.449923] ? ion_query_heaps+0x360/0x360 [ 1788.449933] ? ion_query_heaps+0x360/0x360 [ 1788.449943] do_vfs_ioctl+0x75a/0xff0 [ 1788.486797] 26*32kB [ 1788.488149] ? ioctl_preallocate+0x1a0/0x1a0 [ 1788.495335] (UE) [ 1788.497523] ? lock_downgrade+0x740/0x740 [ 1788.502401] syz-executor.1: [ 1788.504559] ? __fget+0x225/0x360 [ 1788.508500] page allocation failure: order:0 [ 1788.510551] ? do_vfs_ioctl+0xff0/0xff0 [ 1788.510562] ? security_file_ioctl+0x83/0xb0 [ 1788.510573] SyS_ioctl+0x7f/0xb0 [ 1788.510581] ? do_vfs_ioctl+0xff0/0xff0 [ 1788.510593] do_syscall_64+0x1d5/0x640 [ 1788.510610] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1788.522103] 2*64kB [ 1788.522918] RIP: 0033:0x4665d9 [ 1788.527295] (UE) [ 1788.532111] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1788.532120] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1788.532125] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1788.532130] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1788.532138] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1788.532142] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1788.542684] Mem-Info: [ 1788.546578] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1788.547477] active_anon:17547 inactive_anon:28353 isolated_anon:0 [ 1788.547477] active_file:17 inactive_file:17 isolated_file:0 [ 1788.547477] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1788.547477] slab_reclaimable:12479 slab_unreclaimable:121862 [ 1788.547477] mapped:52626 shmem:29460 pagetables:721 bounce:0 [ 1788.547477] free:13957 free_pcp:60 free_cma:0 [ 1788.549718] (null) [ 1788.549724] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1788.549745] CPU: 0 PID: 9675 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1788.549750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1788.549755] Call Trace: [ 1788.563041] Node 0 active_anon:67472kB inactive_anon:83516kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142648kB dirty:0kB writeback:0kB shmem:87744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1788.564417] dump_stack+0x1b2/0x281 [ 1788.568827] Node 1 active_anon:2716kB inactive_anon:29896kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67856kB dirty:0kB writeback:0kB shmem:30096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1788.573634] warn_alloc.cold+0x96/0x1cc [ 1788.577312] Node 0 [ 1788.579366] ? zone_watermark_ok_safe+0x220/0x220 [ 1788.579375] ? usleep_range+0x130/0x130 [ 1788.579387] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1788.584847] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1788.587127] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1788.592592] lowmem_reserve[]: [ 1788.594538] ? run_timer_softirq+0x5a0/0x5a0 [ 1788.599546] 0 [ 1788.604358] __alloc_pages_nodemask+0x2127/0x2720 [ 1788.607863] 2717 [ 1788.612258] ? lock_acquire+0x170/0x3f0 [ 1788.612272] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1788.612282] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1788.616331] 2718 [ 1788.619778] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1788.619796] alloc_pages_current+0x155/0x260 [ 1788.619810] ion_page_pool_alloc+0x118/0x1b0 [ 1788.624164] 2718 [ 1788.628383] ion_system_heap_allocate+0x133/0x8c0 [ 1788.632188] 2718 [ 1788.634462] ? _raw_spin_unlock+0x29/0x40 [ 1788.640883] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1788.645001] Node 0 [ 1788.648000] ? ion_system_contig_heap_create+0x130/0x130 [ 1788.651452] DMA32 free:18048kB min:36200kB low:45248kB high:54296kB active_anon:67472kB inactive_anon:83516kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7040kB pagetables:2224kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1788.655815] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1788.659879] lowmem_reserve[]: [ 1788.664278] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1788.667612] 0 [ 1788.671569] ion_alloc+0x27a/0x810 [ 1788.671580] ? ion_dma_buf_release+0x40/0x40 [ 1788.671590] ? __might_fault+0x177/0x1b0 [ 1788.675445] 0 [ 1788.680613] ion_ioctl+0xea/0x1f0 [ 1788.680622] ? ion_query_heaps+0x360/0x360 [ 1788.680634] ? lock_acquire+0x170/0x3f0 [ 1788.682842] 0 [ 1788.686023] ? ion_query_heaps+0x360/0x360 [ 1788.688056] 0 [ 1788.695739] do_vfs_ioctl+0x75a/0xff0 [ 1788.695751] ? ioctl_preallocate+0x1a0/0x1a0 [ 1788.695760] ? lock_downgrade+0x740/0x740 [ 1788.703019] 0 [ 1788.710291] ? __fget+0x225/0x360 [ 1788.710299] ? do_vfs_ioctl+0xff0/0xff0 [ 1788.710311] ? security_file_ioctl+0x83/0xb0 [ 1788.724804] SyS_ioctl+0x7f/0xb0 [ 1788.724811] ? do_vfs_ioctl+0xff0/0xff0 [ 1788.724821] do_syscall_64+0x1d5/0x640 [ 1788.748712] Node 0 [ 1788.774807] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1788.774815] RIP: 0033:0x4665d9 [ 1788.774822] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 [ 1788.808718] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1788.829449] ORIG_RAX: 0000000000000010 [ 1788.829455] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1788.829460] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1788.829464] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1788.829470] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1788.858701] lowmem_reserve[]: [ 1788.860210] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1788.864163] 0 [ 1788.878941] 2*128kB [ 1788.942638] 0 [ 1788.971513] (UE) [ 1789.112372] 0 0 0 [ 1789.112385] Node 1 Normal free:209004kB min:53696kB low:67120kB high:80544kB active_anon:2716kB inactive_anon:29896kB active_file:28kB inactive_file:1028kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:660kB bounce:0kB free_pcp:744kB local_pcp:624kB free_cma:0kB [ 1789.112404] lowmem_reserve[]: [ 1789.137363] 1*256kB [ 1789.144552] 0 [ 1789.148626] (E) [ 1789.156394] 0 [ 1789.188732] 2*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 10968kB [ 1789.255442] Node 0 DMA32: 682*4kB (UME) 533*8kB (UME) 198*16kB (UME) 368*32kB (UE) 95*64kB (UE) 50*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34416kB [ 1789.278723] warn_alloc_show_mem: 2 callbacks suppressed [ 1789.278726] Mem-Info: [ 1789.286506] active_anon:17547 inactive_anon:28353 isolated_anon:0 [ 1789.286506] active_file:17 inactive_file:267 isolated_file:0 [ 1789.286506] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1789.286506] slab_reclaimable:12479 slab_unreclaimable:121862 [ 1789.286506] mapped:52776 shmem:29460 pagetables:721 bounce:0 [ 1789.286506] free:64894 free_pcp:423 free_cma:0 [ 1789.319922] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1789.322217] 0 [ 1789.330805] Node 1 Normal: 830*4kB (U) 510*8kB (UM) 546*16kB (UM) 929*32kB (UM) 1361*64kB (UM) 524*128kB (UM) 60*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 215400kB [ 1789.330877] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1789.330884] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1789.330888] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1789.330893] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1789.330896] 29754 total pagecache pages [ 1789.330904] 0 pages in swap cache [ 1789.330909] Swap cache stats: add 0, delete 0, find 0/0 [ 1789.330912] Free swap = 0kB [ 1789.330915] Total swap = 0kB [ 1789.330921] 2097051 pages RAM [ 1789.330924] 0 pages HighMem/MovableOnly [ 1789.330927] 363849 pages reserved [ 1789.330930] 0 pages cma reserved [ 1789.330969] Node 0 active_anon:67472kB inactive_anon:83516kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142648kB dirty:0kB writeback:0kB shmem:87744kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1789.330983] Node 1 active_anon:2716kB inactive_anon:29896kB active_file:28kB inactive_file:1028kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68456kB dirty:0kB writeback:0kB shmem:30096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1789.330987] Node 0 DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1789.331005] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1789.331025] Node 0 DMA32 free:35724kB min:36200kB low:45248kB high:54296kB active_anon:67472kB inactive_anon:83516kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7040kB pagetables:2224kB bounce:0kB free_pcp:792kB local_pcp:128kB free_cma:0kB [ 1789.331043] lowmem_reserve[]: 0 0 0 0 0 [ 1789.331061] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1789.331078] lowmem_reserve[]: [ 1789.359812] 0 [ 1789.408721] 0 [ 1789.532457] 0 [ 1789.583813] 0 0 0 0 [ 1789.613594] Node 0 DMA: 95*4kB (U) 21*8kB (UE) 49*16kB (U) 26*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 10996kB [ 1789.629182] Node 1 Normal free:185268kB min:53696kB low:67120kB high:80544kB active_anon:2716kB inactive_anon:29896kB active_file:428kB inactive_file:616kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:660kB bounce:0kB free_pcp:224kB local_pcp:160kB free_cma:0kB [ 1789.702996] Node 0 DMA32: 2973*4kB (UE) 609*8kB (UE) 491*16kB (UME) 564*32kB (UME) 150*64kB (UE) 37*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 57004kB [ 1789.721011] lowmem_reserve[]: 0 0 0 0 0 [ 1789.725006] Node 0 DMA: 95*4kB (U) 21*8kB (UE) 49*16kB (U) 26*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 10996kB 15:43:17 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) [ 1789.787127] Node 0 DMA32: 545*4kB (UE) 453*8kB (UE) 525*16kB (UE) 563*32kB (UE) 150*64kB (UME) 25*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45020kB [ 1789.796755] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1789.874887] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1789.892195] Node 1 Normal: 0*4kB 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 1119*64kB (UM) 521*128kB (U) 42*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 149136kB [ 1789.900883] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 1119*64kB (UM) 520*128kB (U) 42*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 149012kB [ 1789.971115] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1789.999003] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1790.007876] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1790.034826] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1790.052231] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1790.106751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1790.127901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1790.155099] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1790.175878] 32053 total pagecache pages [ 1790.187209] 0 pages in swap cache [ 1790.198732] 31253 total pagecache pages [ 1790.202712] 0 pages in swap cache [ 1790.203870] Swap cache stats: add 0, delete 0, find 0/0 [ 1790.206146] Swap cache stats: add 0, delete 0, find 0/0 [ 1790.244420] Free swap = 0kB [ 1790.246630] Free swap = 0kB [ 1790.259052] Total swap = 0kB [ 1790.262076] 2097051 pages RAM [ 1790.265069] Total swap = 0kB [ 1790.265166] 0 pages HighMem/MovableOnly [ 1790.268165] 2097051 pages RAM [ 1790.275412] 363849 pages reserved [ 1790.286872] 0 pages cma reserved [ 1790.336737] 0 pages HighMem/MovableOnly [ 1790.348303] 363849 pages reserved [ 1790.383072] 0 pages cma reserved [ 1790.386580] Out of memory (oom_kill_allocating_task): Kill process 9698 (rsyslogd) score 0 or sacrifice child [ 1790.458756] Killed process 9698 (rsyslogd) total-vm:5272kB, anon-rss:44kB, file-rss:0kB, shmem-rss:0kB [ 1790.492577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1790.509502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1790.572994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1790.602754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1790.618062] device bridge_slave_1 left promiscuous mode [ 1790.632749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1790.644517] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1790.657543] device bridge_slave_0 left promiscuous mode [ 1790.665121] bridge0: port 1(bridge_slave_0) entered disabled state [ 1790.673037] systemd cpuset=/ mems_allowed=0-1 [ 1790.677581] CPU: 1 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 1790.684505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1790.693850] Call Trace: [ 1790.696420] dump_stack+0x1b2/0x281 [ 1790.700046] dump_header+0x178/0x82f [ 1790.703744] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1790.708837] ? ___ratelimit+0x2cd/0x530 [ 1790.712790] oom_kill_process.cold+0x10/0xa40 [ 1790.717279] ? lock_downgrade+0x740/0x740 [ 1790.721422] out_of_memory+0x2dc/0x1190 [ 1790.725376] ? oom_killer_disable+0x1c0/0x1c0 [ 1790.729850] ? mutex_trylock+0x152/0x1a0 [ 1790.733891] __alloc_pages_nodemask+0x23e1/0x2720 [ 1790.738732] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1790.743571] alloc_pages_current+0x155/0x260 [ 1790.747957] filemap_fault+0x11a1/0x1ad0 [ 1790.751999] ext4_filemap_fault+0x84/0xb0 [ 1790.756121] __do_fault+0xfa/0x380 [ 1790.759635] __handle_mm_fault+0x2497/0x4620 [ 1790.764017] ? vm_insert_page+0x7c0/0x7c0 [ 1790.768141] ? putname+0xcd/0x110 [ 1790.771590] ? mark_held_locks+0xa6/0xf0 [ 1790.775630] handle_mm_fault+0x455/0x9c0 [ 1790.779791] __do_page_fault+0x549/0xad0 [ 1790.783848] ? spurious_fault+0x640/0x640 [ 1790.787974] ? do_page_fault+0x60/0x500 [ 1790.791937] ? page_fault+0x2f/0x50 [ 1790.795539] page_fault+0x45/0x50 [ 1790.798983] RIP: 0003:0x561aecb159a0 [ 1790.802669] RSP: ecb5de40:0000000000000000 EFLAGS: 00000001 [ 1790.807604] device veth1_macvtap left promiscuous mode [ 1790.820945] device veth0_macvtap left promiscuous mode [ 1790.826261] device veth1_vlan left promiscuous mode [ 1790.831426] device veth0_vlan left promiscuous mode [ 1790.832903] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1790.855451] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1790.871620] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1790.876741] CPU: 1 PID: 9694 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1790.884521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1790.893882] Call Trace: [ 1790.896474] dump_stack+0x1b2/0x281 [ 1790.900097] warn_alloc.cold+0x96/0x1cc [ 1790.904066] ? zone_watermark_ok_safe+0x220/0x220 [ 1790.908938] ? usleep_range+0x130/0x130 [ 1790.912909] ? _find_next_bit+0xdb/0x100 [ 1790.916968] ? run_timer_softirq+0x5a0/0x5a0 [ 1790.921106] Mem-Info: [ 1790.921386] __alloc_pages_nodemask+0x2127/0x2720 [ 1790.923790] active_anon:17391 inactive_anon:28351 isolated_anon:0 [ 1790.923790] active_file:16 inactive_file:16 isolated_file:0 [ 1790.923790] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1790.923790] slab_reclaimable:12467 slab_unreclaimable:121187 [ 1790.923790] mapped:43976 shmem:29456 pagetables:689 bounce:0 [ 1790.923790] free:14008 free_pcp:0 free_cma:0 [ 1790.928631] ? lock_acquire+0x170/0x3f0 [ 1790.965131] Node 0 active_anon:66728kB inactive_anon:83516kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:108048kB dirty:0kB writeback:0kB shmem:87736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1790.965614] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1790.996859] syz-executor.4 cpuset= [ 1790.998075] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1790.998080] / [ 1791.001613] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1791.006134] Node 1 active_anon:2836kB inactive_anon:29888kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67856kB dirty:0kB writeback:0kB shmem:30088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1791.007777] alloc_pages_current+0x155/0x260 [ 1791.016649] Node 0 [ 1791.040331] ion_page_pool_alloc+0x118/0x1b0 [ 1791.040339] ion_system_heap_allocate+0x133/0x8c0 [ 1791.040350] ? _raw_spin_unlock+0x29/0x40 [ 1791.040358] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1791.040367] ? ion_system_contig_heap_create+0x130/0x130 [ 1791.040375] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1791.040385] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1791.040393] ion_alloc+0x27a/0x810 [ 1791.048315] mems_allowed=0-1 [ 1791.051407] ? ion_dma_buf_release+0x40/0x40 [ 1791.051418] ? __might_fault+0x177/0x1b0 [ 1791.051429] ion_ioctl+0xea/0x1f0 [ 1791.081939] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1791.084040] ? ion_query_heaps+0x360/0x360 [ 1791.087113] lowmem_reserve[]: [ 1791.091523] ? lock_acquire+0x170/0x3f0 [ 1791.091531] ? ion_query_heaps+0x360/0x360 [ 1791.091540] do_vfs_ioctl+0x75a/0xff0 [ 1791.091550] ? ioctl_preallocate+0x1a0/0x1a0 [ 1791.108662] 0 [ 1791.124576] ? lock_downgrade+0x740/0x740 [ 1791.124590] ? __fget+0x225/0x360 [ 1791.124599] ? do_vfs_ioctl+0xff0/0xff0 [ 1791.124609] ? security_file_ioctl+0x83/0xb0 [ 1791.124618] SyS_ioctl+0x7f/0xb0 [ 1791.124625] ? do_vfs_ioctl+0xff0/0xff0 [ 1791.124634] do_syscall_64+0x1d5/0x640 [ 1791.124647] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1791.158675] 2717 [ 1791.161540] RIP: 0033:0x4665d9 [ 1791.165919] 2718 [ 1791.169268] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1791.169277] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1791.169282] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1791.169287] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1791.169291] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1791.169295] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1791.189658] Mem-Info: [ 1791.200720] CPU: 0 PID: 9673 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1791.221106] active_anon:17391 inactive_anon:28351 isolated_anon:0 [ 1791.221106] active_file:16 inactive_file:16 isolated_file:0 [ 1791.221106] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1791.221106] slab_reclaimable:12467 slab_unreclaimable:121187 [ 1791.221106] mapped:43976 shmem:29456 pagetables:689 bounce:0 [ 1791.221106] free:14008 free_pcp:0 free_cma:0 [ 1791.226416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1791.233788] Node 0 active_anon:66728kB inactive_anon:83516kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:108048kB dirty:0kB writeback:0kB shmem:87736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1791.236150] Call Trace: [ 1791.243958] Node 1 active_anon:2836kB inactive_anon:29888kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67856kB dirty:0kB writeback:0kB shmem:30088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1791.277421] dump_stack+0x1b2/0x281 [ 1791.277435] warn_alloc.cold+0x96/0x1cc [ 1791.286776] Node 0 [ 1791.314419] ? zone_watermark_ok_safe+0x220/0x220 [ 1791.314441] __alloc_pages_nodemask+0x2127/0x2720 [ 1791.317015] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1791.344130] ? io_schedule_timeout+0x140/0x140 [ 1791.344143] ? lock_acquire+0x170/0x3f0 [ 1791.344157] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1791.347747] lowmem_reserve[]: [ 1791.351707] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1791.351717] ? check_preemption_disabled+0x35/0x240 [ 1791.353923] 0 [ 1791.358748] ? __mutex_unlock_slowpath+0x75/0x770 [ 1791.358762] alloc_pages_current+0x155/0x260 [ 1791.363570] 2717 [ 1791.389061] ion_page_pool_alloc+0x118/0x1b0 [ 1791.389071] ion_system_heap_allocate+0x133/0x8c0 [ 1791.389082] ? _raw_spin_unlock+0x29/0x40 [ 1791.389092] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1791.393650] 2718 [ 1791.397603] ? ion_system_contig_heap_create+0x130/0x130 [ 1791.402432] 2718 [ 1791.405509] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1791.410956] 2718 [ 1791.415976] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1791.422567] ion_alloc+0x27a/0x810 [ 1791.422579] ? ion_dma_buf_release+0x40/0x40 [ 1791.422591] ? __might_fault+0x177/0x1b0 [ 1791.426972] Node 0 [ 1791.429028] ion_ioctl+0xea/0x1f0 [ 1791.429036] ? ion_query_heaps+0x360/0x360 [ 1791.429047] ? ion_query_heaps+0x360/0x360 [ 1791.433436] DMA32 free:18424kB min:36200kB low:45248kB high:54296kB active_anon:66728kB inactive_anon:83516kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:6944kB pagetables:2040kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1791.438251] do_vfs_ioctl+0x75a/0xff0 [ 1791.442430] lowmem_reserve[]: [ 1791.447320] ? ioctl_preallocate+0x1a0/0x1a0 [ 1791.449364] 0 [ 1791.454804] ? lock_downgrade+0x740/0x740 [ 1791.454818] ? __fget+0x225/0x360 [ 1791.456854] 0 [ 1791.461863] ? do_vfs_ioctl+0xff0/0xff0 [ 1791.461874] ? security_file_ioctl+0x83/0xb0 [ 1791.461882] SyS_ioctl+0x7f/0xb0 [ 1791.461889] ? do_vfs_ioctl+0xff0/0xff0 [ 1791.461899] do_syscall_64+0x1d5/0x640 [ 1791.463931] 0 [ 1791.468756] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1791.468763] RIP: 0033:0x4665d9 [ 1791.468768] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 [ 1791.472287] 0 [ 1791.476672] ORIG_RAX: 0000000000000010 [ 1791.480762] 0 [ 1791.482950] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1791.490593] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1791.490599] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1791.490604] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1791.490609] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1791.492782] 2718 [ 1791.495547] Node 0 [ 1791.524553] 2718 [ 1791.547680] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1791.574017] lowmem_reserve[]: [ 1791.577631] Node 0 [ 1791.596144] 0 [ 1791.605240] DMA32 free:18424kB min:36200kB low:45248kB high:54296kB active_anon:66728kB inactive_anon:83516kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:6944kB pagetables:2040kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1791.624243] 0 [ 1791.631315] lowmem_reserve[]: [ 1791.644406] 0 [ 1791.661772] 0 [ 1791.674741] 0 [ 1791.697069] 0 [ 1791.698489] 0 [ 1791.700287] 0 0 0 [ 1791.700298] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1791.700315] lowmem_reserve[]: 0 0 0 0 0 [ 1791.700334] Node 1 Normal free:26656kB min:53696kB low:67120kB high:80544kB active_anon:2836kB inactive_anon:29888kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:716kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1791.700350] lowmem_reserve[]: 0 0 0 0 0 [ 1791.700366] Node 0 [ 1791.735135] DMA: [ 1791.754080] Node 1 [ 1791.776541] 18*4kB (U) 28*8kB (UE) 50*16kB (U) 26*32kB (UE) 3*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 10952kB [ 1791.783702] Normal free:26656kB min:53696kB low:67120kB high:80544kB active_anon:2836kB inactive_anon:29888kB active_file:32kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:716kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1791.805391] Node 0 [ 1791.823254] Bluetooth: hci0 command 0x0406 tx timeout [ 1791.831934] lowmem_reserve[]: 0 0 0 0 0 [ 1791.835929] Node 0 DMA: 18*4kB (U) 28*8kB (UE) 50*16kB (U) 26*32kB (UE) 3*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 10952kB [ 1791.840837] DMA32: [ 1791.861349] Node 0 [ 1791.862369] 255*4kB [ 1791.863583] DMA32: [ 1791.865800] (UME) [ 1791.868104] 255*4kB [ 1791.875997] 383*8kB (UME) 169*16kB (UME) 26*32kB (UME) 166*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18500kB [ 1791.879293] (UME) 383*8kB (UME) 169*16kB (UME) 26*32kB (UME) 166*64kB (UM) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18500kB [ 1791.902088] Node 0 [ 1791.923228] Node 0 [ 1791.924962] Normal: [ 1791.925470] Normal: [ 1791.927700] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1791.937304] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1791.957514] Node 1 [ 1791.967702] Node 1 [ 1791.968118] Normal: [ 1791.970037] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1791.985151] 90*4kB (UM) 57*8kB (UM) 31*16kB (UM) 20*32kB (UM) 10*64kB (M) 126*128kB (UM) 29*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 26656kB [ 1791.991402] Normal: 90*4kB (UM) 57*8kB (UM) 31*16kB (UM) 20*32kB (UM) 10*64kB (M) 126*128kB (UM) 29*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 26656kB [ 1792.011612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1792.031681] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1792.044763] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1792.048225] CPU: 1 PID: 9673 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1792.056708] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1792.061108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1792.061112] Call Trace: [ 1792.061131] dump_stack+0x1b2/0x281 [ 1792.061143] warn_alloc.cold+0x96/0x1cc [ 1792.061153] ? zone_watermark_ok_safe+0x220/0x220 [ 1792.061162] ? usleep_range+0x130/0x130 [ 1792.061169] ? try_to_free_pages+0x23f/0x6e0 [ 1792.061179] ? _find_next_bit+0xdb/0x100 [ 1792.079853] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1792.081904] ? run_timer_softirq+0x5a0/0x5a0 [ 1792.085502] 29488 total pagecache pages [ 1792.089462] __alloc_pages_nodemask+0x2127/0x2720 [ 1792.089479] ? lock_acquire+0x170/0x3f0 [ 1792.089495] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1792.089505] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1792.089533] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1792.089543] ? check_preemption_disabled+0x35/0x240 [ 1792.089558] alloc_pages_current+0x155/0x260 [ 1792.089567] ion_page_pool_alloc+0x118/0x1b0 [ 1792.104762] 0 pages in swap cache [ 1792.106778] ion_system_heap_allocate+0x133/0x8c0 [ 1792.118525] Swap cache stats: add 0, delete 0, find 0/0 [ 1792.119721] ? _raw_spin_unlock+0x29/0x40 [ 1792.119730] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1792.119739] ? ion_system_contig_heap_create+0x130/0x130 [ 1792.119749] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1792.119759] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1792.119768] ion_alloc+0x27a/0x810 [ 1792.119778] ? ion_dma_buf_release+0x40/0x40 [ 1792.119788] ? __might_fault+0x177/0x1b0 [ 1792.119798] ion_ioctl+0xea/0x1f0 [ 1792.133509] Free swap = 0kB [ 1792.137341] ? ion_query_heaps+0x360/0x360 [ 1792.145238] Total swap = 0kB [ 1792.147251] ? ion_query_heaps+0x360/0x360 [ 1792.162436] 2097051 pages RAM [ 1792.164556] do_vfs_ioctl+0x75a/0xff0 [ 1792.174202] 0 pages HighMem/MovableOnly [ 1792.174712] ? ioctl_preallocate+0x1a0/0x1a0 [ 1792.183857] 363849 pages reserved [ 1792.189167] ? lock_downgrade+0x740/0x740 [ 1792.189180] ? __fget+0x225/0x360 [ 1792.189189] ? do_vfs_ioctl+0xff0/0xff0 [ 1792.189199] ? security_file_ioctl+0x83/0xb0 [ 1792.189209] SyS_ioctl+0x7f/0xb0 [ 1792.189216] ? do_vfs_ioctl+0xff0/0xff0 [ 1792.203809] 0 pages cma reserved [ 1792.206947] do_syscall_64+0x1d5/0x640 [ 1792.215068] Out of memory: Kill process 9689 (syz-executor.0) score 1004 or sacrifice child [ 1792.217462] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1792.226712] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1792.228872] RIP: 0033:0x4665d9 [ 1792.228876] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1792.228885] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1792.228890] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1792.228895] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1792.228900] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1792.228905] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1792.241622] warn_alloc_show_mem: 1 callbacks suppressed [ 1792.241625] Mem-Info: [ 1792.251110] Killed process 9690 (syz-executor.0) total-vm:93384kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 1792.259855] active_anon:17391 inactive_anon:28351 isolated_anon:0 [ 1792.259855] active_file:16 inactive_file:16 isolated_file:0 [ 1792.259855] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1792.259855] slab_reclaimable:12467 slab_unreclaimable:121179 [ 1792.259855] mapped:43976 shmem:29456 pagetables:689 bounce:0 [ 1792.259855] free:13903 free_pcp:30 free_cma:0 [ 1792.265470] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1792.267009] Node 0 active_anon:66728kB inactive_anon:83516kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:108048kB dirty:0kB writeback:0kB shmem:87736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1792.275937] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1792.283374] syz-executor.0: [ 1792.293627] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1792.307502] Node 1 active_anon:2836kB inactive_anon:29888kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67856kB dirty:0kB writeback:0kB shmem:30088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1792.316982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1792.329666] page allocation failure: order:0 [ 1792.340608] (null) [ 1792.350894] Node 0 [ 1792.358229] 29488 total pagecache pages [ 1792.376556] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1792.406108] , order=0, oom_score_adj=0 [ 1792.415044] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1792.445570] syz-fuzzer cpuset= [ 1792.454034] (null) [ 1792.467728] 0 pages in swap cache [ 1792.491472] lowmem_reserve[]: [ 1792.503717] / [ 1792.513224] 0 [ 1792.527285] mems_allowed=0-1 [ 1792.549268] syz-executor.0 cpuset= [ 1792.561860] Swap cache stats: add 0, delete 0, find 0/0 [ 1792.568179] / mems_allowed=0-1 [ 1792.573968] CPU: 1 PID: 9690 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1792.577672] Free swap = 0kB [ 1792.581766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1792.581770] Call Trace: [ 1792.581789] dump_stack+0x1b2/0x281 [ 1792.581803] warn_alloc.cold+0x96/0x1cc [ 1792.581815] ? zone_watermark_ok_safe+0x220/0x220 [ 1792.581824] ? usleep_range+0x130/0x130 [ 1792.581833] ? try_to_free_pages+0x23f/0x6e0 [ 1792.581844] ? _find_next_bit+0xdb/0x100 [ 1792.588511] Total swap = 0kB [ 1792.594403] ? run_timer_softirq+0x5a0/0x5a0 [ 1792.594421] __alloc_pages_nodemask+0x2127/0x2720 [ 1792.594438] ? lock_acquire+0x170/0x3f0 [ 1792.594452] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1792.594464] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1792.594480] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1792.594497] alloc_pages_current+0x155/0x260 [ 1792.607671] 2097051 pages RAM [ 1792.609473] ion_page_pool_alloc+0x118/0x1b0 [ 1792.609483] ion_system_heap_allocate+0x133/0x8c0 [ 1792.609493] ? ion_alloc+0x187/0x810 [ 1792.609502] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1792.609514] ? ion_system_contig_heap_create+0x130/0x130 [ 1792.613471] 0 pages HighMem/MovableOnly [ 1792.617884] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1792.617898] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1792.653510] 363849 pages reserved [ 1792.657284] ion_alloc+0x204/0x810 [ 1792.683751] 0 pages cma reserved [ 1792.684112] ? ion_dma_buf_release+0x40/0x40 [ 1792.712574] ? __might_fault+0x177/0x1b0 [ 1792.716630] ion_ioctl+0xea/0x1f0 [ 1792.720078] ? ion_query_heaps+0x360/0x360 [ 1792.724303] ? lock_acquire+0x170/0x3f0 [ 1792.728262] ? ion_query_heaps+0x360/0x360 [ 1792.732489] do_vfs_ioctl+0x75a/0xff0 [ 1792.736286] ? ioctl_preallocate+0x1a0/0x1a0 [ 1792.740693] ? lock_downgrade+0x740/0x740 [ 1792.744854] ? __fget+0x225/0x360 [ 1792.748301] ? do_vfs_ioctl+0xff0/0xff0 [ 1792.752269] ? security_file_ioctl+0x83/0xb0 [ 1792.756660] SyS_ioctl+0x7f/0xb0 [ 1792.760008] ? do_vfs_ioctl+0xff0/0xff0 [ 1792.763972] do_syscall_64+0x1d5/0x640 [ 1792.767854] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1792.773022] RIP: 0033:0x4665d9 [ 1792.776186] RSP: 002b:00007fe1da39e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1792.783879] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1792.791152] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1792.798413] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1792.805678] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1792.813201] R13: 00007ffee467076f R14: 00007fe1da39e300 R15: 0000000000022000 [ 1792.823340] CPU: 0 PID: 20159 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1792.830886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1792.839263] 2717 [ 1792.840242] Call Trace: [ 1792.840258] dump_stack+0x1b2/0x281 [ 1792.840270] dump_header+0x178/0x82f [ 1792.840279] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1792.840288] ? ___ratelimit+0x2cd/0x530 [ 1792.840298] oom_kill_process.cold+0x10/0xa40 [ 1792.840317] out_of_memory+0xe3e/0x1190 [ 1792.840330] ? oom_killer_disable+0x1c0/0x1c0 [ 1792.840338] ? mutex_trylock+0x152/0x1a0 [ 1792.840349] __alloc_pages_nodemask+0x23e1/0x2720 [ 1792.840370] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1792.840390] alloc_pages_current+0x155/0x260 [ 1792.840400] filemap_fault+0x11a1/0x1ad0 [ 1792.851433] 2718 [ 1792.852339] ext4_filemap_fault+0x84/0xb0 [ 1792.852350] __do_fault+0xfa/0x380 [ 1792.852360] __handle_mm_fault+0x2497/0x4620 [ 1792.852371] ? vm_insert_page+0x7c0/0x7c0 [ 1792.852389] ? mark_held_locks+0xa6/0xf0 [ 1792.861627] 2718 [ 1792.865943] handle_mm_fault+0x455/0x9c0 [ 1792.865957] __do_page_fault+0x549/0xad0 [ 1792.865969] ? spurious_fault+0x640/0x640 [ 1792.865977] ? do_page_fault+0x60/0x500 [ 1792.865986] ? page_fault+0x2f/0x50 [ 1792.865993] page_fault+0x45/0x50 [ 1792.865998] RIP: 83980: (null) 15:43:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) [ 1792.866003] RSP: 0156:000000c001a3fe40 EFLAGS: 00000003 [ 1792.866983] Mem-Info: [ 1792.923087] 2718 [ 1792.980653] active_anon:17441 inactive_anon:28351 isolated_anon:0 [ 1792.980653] active_file:160 inactive_file:2232 isolated_file:0 [ 1792.980653] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1792.980653] slab_reclaimable:12467 slab_unreclaimable:120794 [ 1792.980653] mapped:45434 shmem:29456 pagetables:689 bounce:0 [ 1792.980653] free:44020 free_pcp:651 free_cma:0 [ 1793.082815] Node 0 DMA32 free:53220kB min:36200kB low:45248kB high:54296kB active_anon:67328kB inactive_anon:83516kB active_file:432kB inactive_file:9016kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7040kB pagetables:2188kB bounce:0kB free_pcp:732kB local_pcp:112kB free_cma:0kB [ 1793.136810] Node 0 active_anon:67028kB inactive_anon:83516kB active_file:532kB inactive_file:9116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:133548kB dirty:4kB writeback:0kB shmem:87736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1793.158265] lowmem_reserve[]: 0 0 0 0 0 [ 1793.176075] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1793.215221] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1793.237082] device hsr_slave_1 left promiscuous mode [ 1793.254706] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1793.255455] lowmem_reserve[]: 0 0 0 0 0 [ 1793.265043] Node 1 Normal free:138920kB min:53696kB low:67120kB high:80544kB active_anon:2836kB inactive_anon:29888kB active_file:408kB inactive_file:2900kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:864kB bounce:0kB free_pcp:1340kB local_pcp:684kB free_cma:0kB [ 1793.272050] Node 1 active_anon:2836kB inactive_anon:29888kB active_file:408kB inactive_file:2900kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:76588kB dirty:16kB writeback:0kB shmem:30088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1793.294410] lowmem_reserve[]: [ 1793.339344] CPU: 0 PID: 9711 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1793.339380] device hsr_slave_0 left promiscuous mode [ 1793.342464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1793.342468] Call Trace: [ 1793.342485] dump_stack+0x1b2/0x281 [ 1793.342500] warn_alloc.cold+0x96/0x1cc [ 1793.351792] 0 [ 1793.355632] ? zone_watermark_ok_safe+0x220/0x220 [ 1793.355656] __alloc_pages_nodemask+0x2127/0x2720 [ 1793.377205] 0 [ 1793.381785] ? lock_acquire+0x170/0x3f0 [ 1793.381801] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1793.391074] 0 [ 1793.392395] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1793.392407] ? __mutex_unlock_slowpath+0x75/0x770 [ 1793.399854] 0 [ 1793.404824] alloc_pages_current+0x155/0x260 [ 1793.404838] ion_page_pool_alloc+0x118/0x1b0 [ 1793.419639] 0 [ 1793.420232] ion_system_heap_allocate+0x133/0x8c0 [ 1793.420241] ? ion_alloc+0x187/0x810 [ 1793.425574] Node 0 [ 1793.427055] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1793.427064] ? ion_system_contig_heap_create+0x130/0x130 [ 1793.427075] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1793.435255] DMA: [ 1793.438449] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1793.438464] ion_alloc+0x204/0x810 [ 1793.453898] 37*4kB [ 1793.455774] ? ion_dma_buf_release+0x40/0x40 [ 1793.455787] ? __might_fault+0x177/0x1b0 [ 1793.464875] (U) [ 1793.465976] ion_ioctl+0xea/0x1f0 [ 1793.465989] ? ion_query_heaps+0x360/0x360 [ 1793.475614] 29*8kB [ 1793.479682] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1793.479690] ? ion_query_heaps+0x360/0x360 [ 1793.479701] do_vfs_ioctl+0x75a/0xff0 [ 1793.479712] ? ioctl_preallocate+0x1a0/0x1a0 [ 1793.486422] (UE) [ 1793.487024] ? lock_downgrade+0x740/0x740 [ 1793.495743] 50*16kB [ 1793.499445] ? __fget+0x225/0x360 [ 1793.499455] ? do_vfs_ioctl+0xff0/0xff0 [ 1793.499466] ? security_file_ioctl+0x83/0xb0 [ 1793.499475] SyS_ioctl+0x7f/0xb0 [ 1793.505993] (U) [ 1793.507956] ? do_vfs_ioctl+0xff0/0xff0 [ 1793.507968] do_syscall_64+0x1d5/0x640 [ 1793.507983] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1793.517005] 26*32kB [ 1793.519760] RIP: 0033:0x4665d9 [ 1793.519767] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1793.519777] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1793.519783] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1793.519787] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1793.519795] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1793.526534] (UE) [ 1793.529080] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1793.531420] Node 0 [ 1793.549102] Mem-Info: [ 1793.554744] DMA free:11012kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1793.559422] team0 (unregistering): Port device team_slave_1 removed [ 1793.570126] lowmem_reserve[]: [ 1793.575932] 3*64kB [ 1793.610348] 0 [ 1793.631662] active_anon:17466 inactive_anon:28351 isolated_anon:12 [ 1793.631662] active_file:460 inactive_file:2898 isolated_file:0 [ 1793.631662] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1793.631662] slab_reclaimable:12467 slab_unreclaimable:120017 [ 1793.631662] mapped:54609 shmem:29456 pagetables:726 bounce:0 [ 1793.631662] free:55170 free_pcp:615 free_cma:0 [ 1793.659999] 2717 [ 1793.677454] team0 (unregistering): Port device team_slave_0 removed [ 1793.677803] 2718 [ 1793.682785] (UE) [ 1793.688278] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1793.694281] 2718 [ 1793.697546] Node 0 active_anon:67028kB inactive_anon:83516kB active_file:1232kB inactive_file:9504kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142448kB dirty:4kB writeback:0kB shmem:87736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1793.700815] 2718 [ 1793.728445] 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 11036kB [ 1793.744431] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1793.751636] Node 0 DMA32: 118*4kB (U) 2477*8kB (UE) 1753*16kB (UE) 409*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 61424kB [ 1793.767510] Node 0 DMA32 free:61576kB min:36200kB low:45248kB high:54296kB active_anon:67028kB inactive_anon:83516kB active_file:1232kB inactive_file:9504kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7008kB pagetables:2040kB bounce:0kB free_pcp:1284kB local_pcp:628kB free_cma:0kB [ 1793.779699] Node 0 [ 1793.800518] Node 1 active_anon:2736kB inactive_anon:29888kB active_file:708kB inactive_file:2588kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:76588kB dirty:16kB writeback:0kB shmem:30088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1793.835737] lowmem_reserve[]: 0 0 0 0 0 [ 1793.843003] bond0 (unregistering): Released all slaves [ 1793.849921] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1793.850928] Normal: [ 1793.893109] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1793.922001] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1793.931637] Node 1 Normal: 8504*4kB (UM) 2381*8kB (U) 2452*16kB (U) 1388*32kB (U) 159*64kB (U) 10*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 148168kB [ 1793.947729] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1793.948876] lowmem_reserve[]: 0 0 0 0 0 [ 1793.956769] Node 1 Normal free:144696kB min:53696kB low:67120kB high:80544kB active_anon:2580kB inactive_anon:29888kB active_file:720kB inactive_file:2988kB unevictable:0kB writepending:68kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:820kB bounce:0kB free_pcp:768kB local_pcp:64kB free_cma:0kB [ 1793.957711] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1794.003021] Node 0 DMA32 free:44808kB min:36200kB low:45248kB high:54296kB active_anon:67356kB inactive_anon:83516kB active_file:1332kB inactive_file:9612kB unevictable:0kB writepending:48kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7008kB pagetables:2244kB bounce:0kB free_pcp:892kB local_pcp:680kB free_cma:0kB [ 1794.036244] lowmem_reserve[]: 0 0 0 0 0 [ 1794.045353] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1794.072541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1794.080430] lowmem_reserve[]: 0 0 0 0 0 [ 1794.084170] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1794.085153] Node 0 DMA: 37*4kB [ 1794.113298] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1794.131215] (U) 30*8kB (UE) 50*16kB (U) 26*32kB (UE) 3*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 11044kB [ 1794.132009] lowmem_reserve[]: [ 1794.155439] 33290 total pagecache pages [ 1794.159668] Node 0 DMA32: 63*4kB (UME) 511*8kB (UME) 1415*16kB (UME) 472*32kB (UE) 37*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44452kB [ 1794.162663] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1794.162715] Node 1 Normal: 1*4kB (U) 1*8kB (U) 1183*16kB (UM) 1413*32kB (UM) 159*64kB (UM) 4*128kB (U) 0*256kB [ 1794.181567] 0 pages in swap cache [ 1794.202237] 0 0 0 0 0 [ 1794.204751] Node 1 Normal free:67032kB min:53696kB low:67120kB high:80544kB active_anon:2680kB inactive_anon:29888kB active_file:920kB inactive_file:3288kB unevictable:0kB writepending:68kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:820kB bounce:0kB free_pcp:608kB local_pcp:488kB free_cma:0kB [ 1794.239450] Swap cache stats: add 0, delete 0, find 0/0 [ 1794.245204] Free swap = 0kB [ 1794.254097] Total swap = 0kB [ 1794.262946] 2097051 pages RAM [ 1794.271607] lowmem_reserve[]: 0 0 0 0 0 [ 1794.275671] Node 0 DMA: 37*4kB (U) 30*8kB (UE) 50*16kB (U) 26*32kB (UE) 3*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 11044kB [ 1794.291451] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 74844kB [ 1794.300717] 0 pages HighMem/MovableOnly [ 1794.314580] 363849 pages reserved [ 1794.315717] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1794.331860] 0 pages cma reserved [ 1794.350515] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1794.363918] Node 0 DMA32: 1192*4kB (UME) 757*8kB (UME) 1605*16kB (UE) 937*32kB (UME) 226*64kB (UE) 21*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 83640kB [ 1794.376636] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1794.395613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1794.424251] 32634 total pagecache pages [ 1794.432304] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1794.437863] 0 pages in swap cache [ 1794.468823] Node 1 Normal: 8698*4kB (UM) 100*8kB (UM) 850*16kB (UM) 1445*32kB (UM) 1186*64kB (UM) 375*128kB (UM) 12*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 222408kB [ 1794.471991] Swap cache stats: add 0, delete 0, find 0/0 [ 1794.510553] Free swap = 0kB [ 1794.516900] Total swap = 0kB [ 1794.523274] 2097051 pages RAM [ 1794.528636] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1794.533235] 0 pages HighMem/MovableOnly [ 1794.548606] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1794.560261] 363849 pages reserved [ 1794.566908] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1794.575777] 0 pages cma reserved [ 1794.575785] Out of memory (oom_kill_allocating_task): Kill process 20159 (syz-fuzzer) score 0 or sacrifice child [ 1794.575869] Killed process 9709 (syz-executor.5) total-vm:84924kB, anon-rss:68kB, file-rss:604kB, shmem-rss:0kB [ 1794.622585] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1794.648588] 32844 total pagecache pages [ 1794.652599] 0 pages in swap cache [ 1794.656046] Swap cache stats: add 0, delete 0, find 0/0 [ 1794.679665] oom_reaper: reaped process 9690 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1794.702712] Free swap = 0kB [ 1794.706960] Total swap = 0kB [ 1794.718665] 2097051 pages RAM [ 1794.721893] 0 pages HighMem/MovableOnly [ 1794.730095] 363849 pages reserved [ 1794.754657] 0 pages cma reserved [ 1794.757190] oom_reaper: reaped process 9709 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 15:43:22 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) 15:43:22 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) 15:43:22 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x80800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x38, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x105080, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) [ 1794.992456] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1794.995338] syz-executor.4: [ 1795.004803] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1795.034506] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1795.047720] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1795.051817] CPU: 0 PID: 9730 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1795.065931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1795.074150] syz-executor.3 cpuset= [ 1795.075548] Call Trace: [ 1795.075568] dump_stack+0x1b2/0x281 [ 1795.075581] warn_alloc.cold+0x96/0x1cc [ 1795.087850] syz-executor.4 cpuset= [ 1795.089250] ? zone_watermark_ok_safe+0x220/0x220 [ 1795.089275] __alloc_pages_nodemask+0x2127/0x2720 [ 1795.089291] ? lock_acquire+0x170/0x3f0 [ 1795.093821] / [ 1795.097674] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1795.104751] / [ 1795.106470] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1795.115856] mems_allowed=0-1 [ 1795.120124] ? __mutex_unlock_slowpath+0x75/0x770 [ 1795.120138] alloc_pages_current+0x155/0x260 [ 1795.120150] ion_page_pool_alloc+0x118/0x1b0 [ 1795.134272] mems_allowed=0-1 [ 1795.136870] ion_system_heap_allocate+0x133/0x8c0 [ 1795.136880] ? ion_alloc+0x187/0x810 [ 1795.136891] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1795.153967] ? ion_system_contig_heap_create+0x130/0x130 [ 1795.159413] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1795.164436] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1795.169268] ion_alloc+0x204/0x810 [ 1795.172823] ? ion_dma_buf_release+0x40/0x40 [ 1795.177221] ? __might_fault+0x177/0x1b0 [ 1795.181283] ion_ioctl+0xea/0x1f0 [ 1795.184763] ? ion_query_heaps+0x360/0x360 [ 1795.188990] ? lock_acquire+0x170/0x3f0 [ 1795.192970] ? ion_query_heaps+0x360/0x360 [ 1795.197190] do_vfs_ioctl+0x75a/0xff0 [ 1795.200985] ? ioctl_preallocate+0x1a0/0x1a0 [ 1795.205389] ? lock_downgrade+0x740/0x740 [ 1795.209533] ? __fget+0x225/0x360 [ 1795.213017] ? do_vfs_ioctl+0xff0/0xff0 [ 1795.217018] ? security_file_ioctl+0x83/0xb0 [ 1795.222245] SyS_ioctl+0x7f/0xb0 [ 1795.225606] ? do_vfs_ioctl+0xff0/0xff0 [ 1795.229575] do_syscall_64+0x1d5/0x640 [ 1795.233459] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1795.238646] RIP: 0033:0x4665d9 [ 1795.241828] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1795.249577] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1795.256966] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1795.264239] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1795.271497] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1795.278778] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1795.286057] CPU: 1 PID: 9726 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1795.293855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1795.303202] Call Trace: [ 1795.305795] dump_stack+0x1b2/0x281 [ 1795.309427] warn_alloc.cold+0x96/0x1cc [ 1795.313662] ? zone_watermark_ok_safe+0x220/0x220 [ 1795.318516] __alloc_pages_nodemask+0x2127/0x2720 [ 1795.323362] ? retint_kernel+0x2d/0x2d [ 1795.327255] ? lock_acquire+0x170/0x3f0 [ 1795.331332] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1795.336186] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1795.341642] ? __mutex_unlock_slowpath+0x75/0x770 [ 1795.346490] alloc_pages_current+0x155/0x260 [ 1795.350903] ion_page_pool_alloc+0x118/0x1b0 [ 1795.355311] ion_system_heap_allocate+0x133/0x8c0 [ 1795.360270] ? ion_alloc+0x187/0x810 [ 1795.363998] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1795.369449] ? ion_system_contig_heap_create+0x130/0x130 [ 1795.374903] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1795.379921] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1795.384762] ion_alloc+0x204/0x810 [ 1795.388307] ? ion_dma_buf_release+0x40/0x40 [ 1795.392718] ? __might_fault+0x177/0x1b0 [ 1795.396805] ion_ioctl+0xea/0x1f0 [ 1795.400458] ? ion_query_heaps+0x360/0x360 [ 1795.404700] ? ion_query_heaps+0x360/0x360 [ 1795.408972] do_vfs_ioctl+0x75a/0xff0 [ 1795.412775] ? ioctl_preallocate+0x1a0/0x1a0 [ 1795.417208] ? lock_downgrade+0x740/0x740 [ 1795.421474] ? __fget+0x225/0x360 [ 1795.425014] ? do_vfs_ioctl+0xff0/0xff0 [ 1795.429100] ? security_file_ioctl+0x83/0xb0 [ 1795.433629] SyS_ioctl+0x7f/0xb0 [ 1795.436994] ? do_vfs_ioctl+0xff0/0xff0 [ 1795.440969] do_syscall_64+0x1d5/0x640 [ 1795.444863] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1795.450052] RIP: 0033:0x4665d9 [ 1795.453237] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1795.460966] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1795.468230] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1795.475495] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1795.482765] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1795.490156] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1795.506755] CPU: 1 PID: 9729 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1795.514567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1795.524522] Call Trace: [ 1795.527108] dump_stack+0x1b2/0x281 [ 1795.530745] warn_alloc.cold+0x96/0x1cc [ 1795.534835] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1795.539860] ? zone_watermark_ok_safe+0x220/0x220 [ 1795.544731] __alloc_pages_nodemask+0x2127/0x2720 [ 1795.549603] ? lock_acquire+0x170/0x3f0 [ 1795.553583] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1795.558430] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1795.563884] ? __mutex_unlock_slowpath+0x75/0x770 [ 1795.568730] alloc_pages_current+0x155/0x260 [ 1795.573138] ion_page_pool_alloc+0x118/0x1b0 [ 1795.577545] ion_system_heap_allocate+0x133/0x8c0 [ 1795.582383] ? ion_alloc+0x187/0x810 [ 1795.586097] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1795.591546] ? ion_system_contig_heap_create+0x130/0x130 [ 1795.596997] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1795.602014] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1795.606860] ion_alloc+0x204/0x810 [ 1795.610402] ? ion_dma_buf_release+0x40/0x40 [ 1795.614815] ? __might_fault+0x177/0x1b0 [ 1795.618898] ion_ioctl+0xea/0x1f0 [ 1795.622346] ? ion_query_heaps+0x360/0x360 [ 1795.626578] ? lock_acquire+0x170/0x3f0 [ 1795.630549] ? ion_query_heaps+0x360/0x360 [ 1795.634786] do_vfs_ioctl+0x75a/0xff0 [ 1795.638590] ? ioctl_preallocate+0x1a0/0x1a0 [ 1795.642995] ? lock_downgrade+0x740/0x740 [ 1795.647141] ? __fget+0x225/0x360 [ 1795.650618] ? do_vfs_ioctl+0xff0/0xff0 [ 1795.654593] ? security_file_ioctl+0x83/0xb0 [ 1795.658999] SyS_ioctl+0x7f/0xb0 [ 1795.662376] ? do_vfs_ioctl+0xff0/0xff0 [ 1795.666350] do_syscall_64+0x1d5/0x640 [ 1795.670277] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1795.675471] RIP: 0033:0x4665d9 [ 1795.678657] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1795.686364] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1795.693646] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1795.700912] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1795.708179] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1795.715450] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1795.805894] warn_alloc_show_mem: 1 callbacks suppressed [ 1795.805898] Mem-Info: [ 1795.814327] active_anon:17765 inactive_anon:28329 isolated_anon:24 [ 1795.814327] active_file:1110 inactive_file:3336 isolated_file:0 [ 1795.814327] unevictable:0 dirty:13 writeback:0 unstable:0 [ 1795.814327] slab_reclaimable:12443 slab_unreclaimable:121348 [ 1795.814327] mapped:46740 shmem:29461 pagetables:765 bounce:0 [ 1795.814327] free:176836 free_pcp:400 free_cma:0 [ 1795.877880] Node 0 active_anon:68488kB inactive_anon:83532kB active_file:4436kB inactive_file:13252kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112416kB dirty:76kB writeback:0kB shmem:87756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1795.922143] Node 1 active_anon:2544kB inactive_anon:29884kB active_file:20kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:74660kB dirty:4kB writeback:0kB shmem:30088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1795.981675] Node 0 DMA free:11124kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1796.061858] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1796.088578] Node 0 DMA32 free:132424kB min:36200kB low:45248kB high:54296kB active_anon:68480kB inactive_anon:83532kB active_file:4412kB inactive_file:13232kB unevictable:0kB writepending:76kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2296kB bounce:0kB free_pcp:760kB local_pcp:108kB free_cma:0kB [ 1796.132640] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1796.152840] lowmem_reserve[]: 0 0 0 0 0 [ 1796.157885] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1796.171990] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1796.229184] CPU: 0 PID: 9690 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1796.237003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1796.246444] Call Trace: [ 1796.249061] dump_stack+0x1b2/0x281 [ 1796.252689] warn_alloc.cold+0x96/0x1cc [ 1796.256662] ? zone_watermark_ok_safe+0x220/0x220 [ 1796.261518] __alloc_pages_nodemask+0x2127/0x2720 [ 1796.266360] ? io_schedule_timeout+0x140/0x140 [ 1796.270948] ? lock_acquire+0x170/0x3f0 [ 1796.274929] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1796.279779] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1796.281915] lowmem_reserve[]: [ 1796.285226] ? __mutex_unlock_slowpath+0x75/0x770 [ 1796.285240] alloc_pages_current+0x155/0x260 [ 1796.297601] ion_page_pool_alloc+0x118/0x1b0 [ 1796.302014] ion_system_heap_allocate+0x133/0x8c0 [ 1796.303567] 0 [ 1796.306854] ? _raw_spin_unlock+0x29/0x40 [ 1796.306865] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1796.321496] ? ion_system_contig_heap_create+0x130/0x130 [ 1796.326901] 0 [ 1796.326948] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1796.326949] 0 0 [ 1796.328742] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1796.328753] ion_alloc+0x27a/0x810 [ 1796.328770] ? ion_dma_buf_release+0x40/0x40 [ 1796.328781] ? __might_fault+0x177/0x1b0 [ 1796.338137] 0 [ 1796.340566] ion_ioctl+0xea/0x1f0 [ 1796.340575] ? ion_query_heaps+0x360/0x360 [ 1796.340588] ? lock_acquire+0x170/0x3f0 [ 1796.340596] ? ion_query_heaps+0x360/0x360 [ 1796.340605] do_vfs_ioctl+0x75a/0xff0 [ 1796.340616] ? ioctl_preallocate+0x1a0/0x1a0 [ 1796.362182] ? lock_downgrade+0x740/0x740 [ 1796.362196] ? __fget+0x225/0x360 [ 1796.378165] Node 1 [ 1796.378571] ? do_vfs_ioctl+0xff0/0xff0 [ 1796.378582] ? security_file_ioctl+0x83/0xb0 [ 1796.378591] SyS_ioctl+0x7f/0xb0 [ 1796.397678] Normal free:597040kB min:53696kB low:67120kB high:80544kB active_anon:2544kB inactive_anon:29884kB active_file:20kB inactive_file:80kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:764kB bounce:0kB free_pcp:812kB local_pcp:200kB free_cma:0kB [ 1796.400093] ? do_vfs_ioctl+0xff0/0xff0 [ 1796.400108] do_syscall_64+0x1d5/0x640 [ 1796.400122] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1796.441305] RIP: 0033:0x4665d9 [ 1796.444486] RSP: 002b:00007fe1da39e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1796.452190] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1796.459454] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1796.466719] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1796.473986] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1796.481362] R13: 00007ffee467076f R14: 00007fe1da39e300 R15: 0000000000022000 [ 1796.525862] lowmem_reserve[]: 0 0 0 0 0 [ 1796.545868] Node 0 DMA: 58*4kB (UM) 36*8kB (UE) 52*16kB (UM) 28*32kB (UE) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11016kB [ 1796.565484] Node 0 DMA32: 23*4kB (ME) 343*8kB (UME) 287*16kB (UME) 1184*32kB (UE) 1*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45380kB [ 1796.638844] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1796.681338] Node 1 Normal: 1*4kB (M) 12495*8kB (UM) 12573*16kB (UM) 7346*32kB (U) 163*64kB (U) 4*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 547148kB [ 1796.704760] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1796.738623] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1796.748656] Bluetooth: hci4 command 0x0409 tx timeout [ 1796.759204] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1796.768052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1796.801362] 33917 total pagecache pages [ 1796.805380] 0 pages in swap cache [ 1796.818542] Swap cache stats: add 0, delete 0, find 0/0 [ 1796.823923] Free swap = 0kB [ 1796.826934] Total swap = 0kB [ 1796.851493] 2097051 pages RAM [ 1796.854733] 0 pages HighMem/MovableOnly [ 1796.878478] 363849 pages reserved [ 1796.881978] 0 pages cma reserved [ 1796.898498] Bluetooth: hci5 command 0x0406 tx timeout [ 1797.063924] warn_alloc_show_mem: 2 callbacks suppressed [ 1797.063928] Mem-Info: [ 1797.084207] active_anon:17759 inactive_anon:28355 isolated_anon:0 [ 1797.084207] active_file:1114 inactive_file:3345 isolated_file:0 [ 1797.084207] unevictable:0 dirty:26 writeback:0 unstable:0 [ 1797.084207] slab_reclaimable:12437 slab_unreclaimable:121358 [ 1797.084207] mapped:46776 shmem:29461 pagetables:765 bounce:0 [ 1797.084207] free:132375 free_pcp:235 free_cma:0 [ 1797.185325] Node 0 active_anon:68488kB inactive_anon:83532kB active_file:4436kB inactive_file:13300kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112444kB dirty:88kB writeback:0kB shmem:87756kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1797.264246] Node 1 active_anon:2548kB inactive_anon:29888kB active_file:20kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:74660kB dirty:16kB writeback:0kB shmem:30088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1797.320989] Node 0 DMA free:11108kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1797.376455] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1797.392886] Node 0 DMA32 free:45200kB min:36200kB low:45248kB high:54296kB active_anon:68480kB inactive_anon:83532kB active_file:4412kB inactive_file:13280kB unevictable:0kB writepending:88kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2296kB bounce:0kB free_pcp:956kB local_pcp:720kB free_cma:0kB [ 1797.485017] lowmem_reserve[]: 0 0 0 0 0 [ 1797.498041] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1797.578548] lowmem_reserve[]: 0 0 0 0 0 [ 1797.591858] Node 1 Normal free:282924kB min:53696kB low:67120kB high:80544kB active_anon:2548kB inactive_anon:29888kB active_file:20kB inactive_file:80kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:764kB bounce:0kB free_pcp:732kB local_pcp:628kB free_cma:0kB [ 1797.684667] lowmem_reserve[]: 0 0 0 0 0 [ 1797.697644] Node 0 DMA: 49*4kB (UM) 39*8kB (UE) 51*16kB (UM) 32*32kB (UE) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11116kB [ 1797.741866] Node 0 DMA32: 966*4kB (UME) 369*8kB (UME) 178*16kB (UME) 1011*32kB (UME) 92*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 48032kB [ 1797.791822] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1797.815560] Node 1 Normal: 0*4kB 2*8kB (UM) 1*16kB (M) 1766*32kB (U) 1513*64kB (UM) 94*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 165408kB [ 1797.870452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1797.905731] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1797.967449] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1797.990868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1798.039447] 29792 total pagecache pages [ 1798.043447] 0 pages in swap cache [ 1798.046937] Swap cache stats: add 0, delete 0, find 0/0 [ 1798.055648] Free swap = 0kB [ 1798.061376] Total swap = 0kB [ 1798.065164] 2097051 pages RAM [ 1798.072739] 0 pages HighMem/MovableOnly [ 1798.077254] 363849 pages reserved [ 1798.083131] 0 pages cma reserved [ 1798.107452] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1798.191720] in:imklog cpuset=/ mems_allowed=0-1 [ 1798.196432] CPU: 0 PID: 9715 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1798.204007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1798.213361] Call Trace: [ 1798.215951] dump_stack+0x1b2/0x281 [ 1798.219577] dump_header+0x178/0x82f [ 1798.223285] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1798.228382] ? ___ratelimit+0x2cd/0x530 [ 1798.232366] oom_kill_process.cold+0x10/0xa40 [ 1798.236857] out_of_memory+0xe3e/0x1190 [ 1798.240823] ? oom_killer_disable+0x1c0/0x1c0 [ 1798.245311] ? mutex_trylock+0x152/0x1a0 [ 1798.249390] __alloc_pages_nodemask+0x23e1/0x2720 [ 1798.254261] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1798.259123] alloc_pages_current+0x155/0x260 [ 1798.263533] filemap_fault+0x11a1/0x1ad0 [ 1798.267578] ext4_filemap_fault+0x84/0xb0 [ 1798.271725] __do_fault+0xfa/0x380 [ 1798.275265] __handle_mm_fault+0x2497/0x4620 [ 1798.279658] ? vm_insert_page+0x7c0/0x7c0 [ 1798.283792] ? lock_downgrade+0x740/0x740 [ 1798.287921] ? mark_held_locks+0xa6/0xf0 [ 1798.291961] handle_mm_fault+0x455/0x9c0 [ 1798.296019] __do_page_fault+0x549/0xad0 [ 1798.300060] ? spurious_fault+0x640/0x640 [ 1798.304199] ? do_page_fault+0x60/0x500 [ 1798.308153] ? page_fault+0x2f/0x50 [ 1798.311775] page_fault+0x45/0x50 [ 1798.315231] RIP: e41a00b0:0x1f9f [ 1798.318576] RSP: e5993fe6:00007fcde41a00a0 EFLAGS: 7fcde41a01d8 [ 1798.328581] syz-executor.0: [ 1798.333174] Mem-Info: [ 1798.334658] page allocation failure: order:0 [ 1798.337676] active_anon:17740 inactive_anon:28352 isolated_anon:0 [ 1798.337676] active_file:35 inactive_file:26 isolated_file:0 [ 1798.337676] unevictable:0 dirty:30 writeback:0 unstable:0 [ 1798.337676] slab_reclaimable:12435 slab_unreclaimable:120374 [ 1798.337676] mapped:35386 shmem:29457 pagetables:743 bounce:0 [ 1798.337676] free:13947 free_pcp:60 free_cma:0 [ 1798.346731] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1798.391608] Node 0 active_anon:68328kB inactive_anon:83520kB active_file:40kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73644kB dirty:88kB writeback:0kB shmem:87740kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1798.399635] (null) [ 1798.430777] Node 1 active_anon:2632kB inactive_anon:29888kB active_file:100kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67900kB dirty:32kB writeback:0kB shmem:30088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1798.442286] syz-executor.0 cpuset= [ 1798.462191] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1798.471629] / [ 1798.496134] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1798.502919] Node 0 DMA32 free:18176kB min:36200kB low:45248kB high:54296kB active_anon:68320kB inactive_anon:83520kB active_file:52kB inactive_file:28kB unevictable:0kB writepending:88kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2296kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1798.505276] mems_allowed=0-1 [ 1798.541136] lowmem_reserve[]: 0 0 0 0 0 [ 1798.543820] CPU: 1 PID: 9690 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1798.545159] Node 0 [ 1798.552940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1798.552944] Call Trace: [ 1798.552964] dump_stack+0x1b2/0x281 [ 1798.552977] warn_alloc.cold+0x96/0x1cc [ 1798.552988] ? zone_watermark_ok_safe+0x220/0x220 [ 1798.552997] ? usleep_range+0x130/0x130 [ 1798.553006] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1798.553018] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1798.553027] ? run_timer_softirq+0x5a0/0x5a0 [ 1798.553041] __alloc_pages_nodemask+0x2127/0x2720 [ 1798.553055] ? lock_acquire+0x170/0x3f0 [ 1798.564315] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1798.564639] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1798.567221] lowmem_reserve[]: [ 1798.570833] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1798.570848] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1798.570865] alloc_pages_current+0x155/0x260 [ 1798.570875] ion_page_pool_alloc+0x118/0x1b0 [ 1798.570884] ion_system_heap_allocate+0x133/0x8c0 [ 1798.570893] ? _raw_spin_unlock+0x29/0x40 [ 1798.570902] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1798.576774] 0 [ 1798.579701] ? ion_system_contig_heap_create+0x130/0x130 [ 1798.579710] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1798.579719] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1798.579729] ion_alloc+0x27a/0x810 [ 1798.579739] ? ion_dma_buf_release+0x40/0x40 [ 1798.579749] ? __might_fault+0x177/0x1b0 [ 1798.579759] ion_ioctl+0xea/0x1f0 [ 1798.579767] ? ion_query_heaps+0x360/0x360 [ 1798.579779] ? lock_acquire+0x170/0x3f0 [ 1798.579785] ? ion_query_heaps+0x360/0x360 [ 1798.579794] do_vfs_ioctl+0x75a/0xff0 [ 1798.579804] ? ioctl_preallocate+0x1a0/0x1a0 [ 1798.579810] ? lock_downgrade+0x740/0x740 [ 1798.579820] ? __fget+0x225/0x360 [ 1798.579830] ? do_vfs_ioctl+0xff0/0xff0 [ 1798.579840] ? security_file_ioctl+0x83/0xb0 [ 1798.579849] SyS_ioctl+0x7f/0xb0 [ 1798.579856] ? do_vfs_ioctl+0xff0/0xff0 [ 1798.579866] do_syscall_64+0x1d5/0x640 [ 1798.579880] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1798.579888] RIP: 0033:0x4665d9 [ 1798.579892] RSP: 002b:00007fe1da39e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1798.579901] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1798.579906] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1798.579910] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1798.579915] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1798.579920] R13: 00007ffee467076f R14: 00007fe1da39e300 R15: 0000000000022000 [ 1798.588030] Mem-Info: [ 1798.597698] 0 [ 1798.606251] active_anon:17740 inactive_anon:28352 isolated_anon:0 [ 1798.606251] active_file:35 inactive_file:26 isolated_file:0 [ 1798.606251] unevictable:0 dirty:30 writeback:0 unstable:0 [ 1798.606251] slab_reclaimable:12435 slab_unreclaimable:120374 [ 1798.606251] mapped:35386 shmem:29457 pagetables:743 bounce:0 [ 1798.606251] free:13997 free_pcp:0 free_cma:0 [ 1798.607262] 0 [ 1798.640671] Node 0 active_anon:68328kB inactive_anon:83520kB active_file:40kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73644kB dirty:88kB writeback:0kB shmem:87740kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1798.653853] 0 [ 1798.662628] Node 1 active_anon:2632kB inactive_anon:29888kB active_file:100kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67900kB dirty:32kB writeback:0kB shmem:30088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1798.665349] 0 [ 1798.668167] Node 0 [ 1798.694229] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1798.705171] Node 1 [ 1798.709791] lowmem_reserve[]: [ 1798.710075] Normal free:26844kB min:53696kB low:67120kB high:80544kB active_anon:2632kB inactive_anon:29888kB active_file:56kB inactive_file:44kB unevictable:0kB writepending:32kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:676kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1798.714113] 0 [ 1798.718347] lowmem_reserve[]: [ 1798.730183] 2717 [ 1798.739441] 0 [ 1798.750761] 2718 [ 1798.760999] 0 [ 1798.771039] 2718 [ 1798.783494] 0 [ 1798.793260] 2718 [ 1798.805287] 0 [ 1798.852011] 0 [ 1798.883514] Node 0 [ 1798.938512] DMA32 free:18544kB min:36200kB low:45248kB high:54296kB active_anon:68396kB inactive_anon:83520kB active_file:32kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2296kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1798.950843] Node 0 [ 1798.971515] lowmem_reserve[]: [ 1798.980370] DMA: [ 1798.987717] 0 [ 1798.994045] 6*4kB [ 1799.025550] 0 0 0 0 [ 1799.032891] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1799.036789] (UM) 39*8kB (UE) 51*16kB (UM) 33*32kB (UME) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10976kB [ 1799.075284] lowmem_reserve[]: [ 1799.087993] Node 0 [ 1799.090886] 0 [ 1799.091184] DMA32: [ 1799.093364] 0 [ 1799.095154] 350*4kB [ 1799.097369] 0 [ 1799.107162] (UME) 472*8kB (UME) 195*16kB (UME) 158*32kB (UME) 82*64kB (UE) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18600kB [ 1799.112499] 0 [ 1799.130230] Node 0 [ 1799.132035] 0 [ 1799.134252] Normal: [ 1799.136042] Node 1 [ 1799.136049] 0*4kB [ 1799.147037] Normal free:26892kB min:53696kB low:67120kB high:80544kB active_anon:2672kB inactive_anon:29888kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:676kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1799.147460] 0*8kB [ 1799.152779] lowmem_reserve[]: [ 1799.185313] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1799.190439] 0 [ 1799.196828] Node 1 [ 1799.196830] 0 0 [ 1799.206697] Normal: 35*4kB (UM) [ 1799.208745] 0 0 [ 1799.212093] 2*8kB (M) [ 1799.214061] 3*16kB [ 1799.216556] Node 0 [ 1799.216558] (UM) 0*32kB 267*64kB (U) 75*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26892kB [ 1799.229938] DMA: [ 1799.245172] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1799.248080] 6*4kB (UM) 39*8kB (UE) 51*16kB (UM) 33*32kB (UME) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 10976kB [ 1799.258250] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1799.283065] Node 0 DMA32: 350*4kB (UME) 472*8kB (UME) 195*16kB (UME) 158*32kB (UME) 82*64kB (UE) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18600kB [ 1799.288924] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1799.305700] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1799.313416] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1799.327633] 29490 total pagecache pages [ 1799.328424] Node 1 Normal: 35*4kB (UM) 2*8kB (M) 3*16kB (UM) 0*32kB 267*64kB (U) 75*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26892kB [ 1799.337045] 0 pages in swap cache [ 1799.351354] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1799.360910] Swap cache stats: add 0, delete 0, find 0/0 [ 1799.362221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1799.366274] Free swap = 0kB [ 1799.380732] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1799.391652] Total swap = 0kB [ 1799.394706] 2097051 pages RAM [ 1799.397805] 0 pages HighMem/MovableOnly [ 1799.398399] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1799.411710] 363849 pages reserved [ 1799.415178] 0 pages cma reserved [ 1799.418721] 29490 total pagecache pages [ 1799.422704] 0 pages in swap cache [ 1799.424237] Out of memory (oom_kill_allocating_task): Kill process 9715 (in:imklog) score 0 or sacrifice child [ 1799.426152] Swap cache stats: add 0, delete 0, find 0/0 [ 1799.446366] Killed process 9713 (rsyslogd) total-vm:254332kB, anon-rss:932kB, file-rss:0kB, shmem-rss:0kB [ 1799.450801] Free swap = 0kB [ 1799.457609] oom_reaper: reaped process 9713 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1799.467350] Total swap = 0kB [ 1799.471626] 2097051 pages RAM [ 1799.474724] 0 pages HighMem/MovableOnly [ 1799.483897] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1799.497289] 363849 pages reserved [ 1799.504077] 0 pages cma reserved [ 1799.515821] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1799.523638] CPU: 1 PID: 7988 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1799.531085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1799.540434] Call Trace: [ 1799.543030] dump_stack+0x1b2/0x281 [ 1799.546658] dump_header+0x178/0x82f [ 1799.550370] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1799.555481] ? ___ratelimit+0x2cd/0x530 [ 1799.559462] oom_kill_process.cold+0x10/0xa40 [ 1799.563975] out_of_memory+0xe3e/0x1190 [ 1799.568086] ? oom_killer_disable+0x1c0/0x1c0 [ 1799.572578] ? mutex_trylock+0x152/0x1a0 [ 1799.576643] __alloc_pages_nodemask+0x23e1/0x2720 [ 1799.581616] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1799.586507] alloc_pages_current+0x155/0x260 [ 1799.590911] filemap_fault+0x11a1/0x1ad0 [ 1799.594982] ext4_filemap_fault+0x84/0xb0 [ 1799.599126] __do_fault+0xfa/0x380 [ 1799.602664] __handle_mm_fault+0x2497/0x4620 [ 1799.607067] ? vm_insert_page+0x7c0/0x7c0 [ 1799.611227] ? mark_held_locks+0xa6/0xf0 [ 1799.615304] handle_mm_fault+0x455/0x9c0 [ 1799.619367] __do_page_fault+0x549/0xad0 [ 1799.623435] ? spurious_fault+0x640/0x640 [ 1799.627588] ? do_page_fault+0x60/0x500 [ 1799.631556] ? page_fault+0x2f/0x50 [ 1799.635208] page_fault+0x45/0x50 [ 1799.638665] RIP: 0000:0xb7de00 [ 1799.641855] RSP: 0000:000000c00003ff80 EFLAGS: 00000003 [ 1800.151004] Mem-Info: [ 1800.204869] active_anon:17500 inactive_anon:28352 isolated_anon:0 [ 1800.204869] active_file:18 inactive_file:14 isolated_file:0 [ 1800.204869] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1800.204869] slab_reclaimable:12425 slab_unreclaimable:120321 [ 1800.204869] mapped:35359 shmem:29457 pagetables:711 bounce:0 [ 1800.204869] free:25204 free_pcp:30 free_cma:0 [ 1800.397460] Node 0 active_anon:67548kB inactive_anon:83520kB active_file:36kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:73580kB dirty:0kB writeback:0kB shmem:87740kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1800.510514] Node 1 active_anon:2452kB inactive_anon:29888kB active_file:28kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67856kB dirty:0kB writeback:0kB shmem:30088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1800.674674] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1800.822249] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1800.827315] Node 0 DMA32 free:36192kB min:36200kB low:45248kB high:54296kB active_anon:67540kB inactive_anon:83520kB active_file:92kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7040kB pagetables:2232kB bounce:0kB free_pcp:128kB local_pcp:128kB free_cma:0kB [ 1800.966521] lowmem_reserve[]: 0 0 0 0 0 [ 1801.003521] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1801.156923] lowmem_reserve[]: 0 0 0 0 0 [ 1801.182490] Node 1 Normal free:53568kB min:53696kB low:67120kB high:80544kB active_anon:2452kB inactive_anon:29888kB active_file:148kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:612kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1801.353998] lowmem_reserve[]: 0 0 0 0 0 [ 1801.358185] Node 0 DMA: 1*4kB (M) 38*8kB (UE) 51*16kB (UM) 33*32kB (UME) 3*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11076kB [ 1801.462314] Node 0 DMA32: 360*4kB (UME) 467*8kB (UME) 192*16kB (UME) 185*32kB (UME) 327*64kB (UE) 8*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36120kB [ 1801.555106] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1801.615982] Node 1 Normal: 34*4kB (M) 5*8kB (UM) 3*16kB (M) 0*32kB 650*64kB (U) 92*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53600kB [ 1801.696436] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1801.737391] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1801.820303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1801.862630] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1801.888209] 29490 total pagecache pages [ 1801.908263] 0 pages in swap cache [ 1801.916089] Swap cache stats: add 0, delete 0, find 0/0 [ 1801.952206] Free swap = 0kB [ 1801.955283] Total swap = 0kB [ 1801.978626] 2097051 pages RAM [ 1801.981876] 0 pages HighMem/MovableOnly [ 1801.985859] 363849 pages reserved [ 1802.035665] 0 pages cma reserved [ 1802.046039] Out of memory (oom_kill_allocating_task): Kill process 7988 (syz-fuzzer) score 0 or sacrifice child [ 1802.107261] Killed process 7694 (syz-executor.3) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1802.193709] oom_reaper: reaped process 7694 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1802.361153] oom_reaper: reaped process 9729 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1802.482184] kworker/u4:2 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1802.620323] kworker/u4:2 cpuset=/ mems_allowed=0-1 [ 1802.625314] CPU: 0 PID: 34 Comm: kworker/u4:2 Not tainted 4.14.232-syzkaller #0 [ 1802.632758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1802.642123] Workqueue: events_unbound call_usermodehelper_exec_work [ 1802.648534] Call Trace: [ 1802.651128] dump_stack+0x1b2/0x281 [ 1802.654754] dump_header+0x178/0x82f [ 1802.658467] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1802.663568] ? ___ratelimit+0x2cd/0x530 [ 1802.667540] oom_kill_process.cold+0x10/0xa40 [ 1802.672032] ? lock_downgrade+0x740/0x740 [ 1802.676177] out_of_memory+0x2dc/0x1190 [ 1802.680148] ? oom_killer_disable+0x1c0/0x1c0 [ 1802.684633] ? mutex_trylock+0x152/0x1a0 [ 1802.688688] __alloc_pages_nodemask+0x23e1/0x2720 [ 1802.693552] ? trace_hardirqs_on+0x10/0x10 [ 1802.697805] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1802.702640] ? fs_reclaim_release+0xd0/0x110 [ 1802.707036] ? kmem_cache_alloc_node+0x38b/0x410 [ 1802.711782] copy_process.part.0+0x265/0x71c0 [ 1802.716257] ? __lock_acquire+0x5fc/0x3f20 [ 1802.720471] ? debug_object_activate+0x292/0x490 [ 1802.725204] ? trace_hardirqs_on+0x10/0x10 [ 1802.729430] ? static_obj+0x50/0x50 [ 1802.733175] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1802.738625] ? __cleanup_sighand+0x40/0x40 [ 1802.742852] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1802.748281] _do_fork+0x184/0xc80 [ 1802.751720] ? fork_idle+0x270/0x270 [ 1802.755416] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1802.760509] ? process_one_work+0x6c4/0x14a0 [ 1802.764896] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1802.770325] kernel_thread+0x2f/0x40 [ 1802.774016] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1802.779269] ? call_usermodehelper+0x80/0x80 [ 1802.783656] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1802.789085] process_one_work+0x793/0x14a0 [ 1802.793302] ? work_busy+0x320/0x320 [ 1802.797025] ? worker_thread+0x158/0xff0 [ 1802.801066] ? _raw_spin_unlock_irq+0x24/0x80 [ 1802.805551] worker_thread+0x5cc/0xff0 [ 1802.809425] ? rescuer_thread+0xc80/0xc80 [ 1802.813550] kthread+0x30d/0x420 [ 1802.816909] ? kthread_create_on_node+0xd0/0xd0 [ 1802.821551] ret_from_fork+0x24/0x30 [ 1802.833099] Mem-Info: [ 1802.834288] syz-executor.3: page allocation failure: order:0 [ 1802.835541] active_anon:17450 inactive_anon:28352 isolated_anon:0 [ 1802.835541] active_file:0 inactive_file:0 isolated_file:0 [ 1802.835541] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1802.835541] slab_reclaimable:12425 slab_unreclaimable:120301 [ 1802.835541] mapped:26684 shmem:29457 pagetables:674 bounce:0 [ 1802.835541] free:13971 free_pcp:60 free_cma:0 [ 1802.835556] Node 0 active_anon:67348kB inactive_anon:83520kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38880kB dirty:0kB writeback:0kB shmem:87740kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1802.852355] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1802.884189] Node 1 active_anon:2452kB inactive_anon:29888kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67856kB dirty:0kB writeback:0kB shmem:30088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1802.904560] (null) [ 1802.942547] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1802.947673] CPU: 1 PID: 9729 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1802.955458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1802.964812] Call Trace: [ 1802.967353] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1802.967419] dump_stack+0x1b2/0x281 [ 1802.967432] warn_alloc.cold+0x96/0x1cc [ 1803.001112] ? zone_watermark_ok_safe+0x220/0x220 [ 1803.005951] ? usleep_range+0x130/0x130 [ 1803.009920] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1803.015021] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1803.020032] ? run_timer_softirq+0x5a0/0x5a0 [ 1803.024442] __alloc_pages_nodemask+0x2127/0x2720 [ 1803.029287] ? lock_acquire+0x170/0x3f0 [ 1803.033282] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1803.038121] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1803.042620] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1803.048079] alloc_pages_current+0x155/0x260 [ 1803.052488] ion_page_pool_alloc+0x118/0x1b0 [ 1803.056892] ion_system_heap_allocate+0x133/0x8c0 [ 1803.057850] lowmem_reserve[]: [ 1803.061812] ? ion_alloc+0x187/0x810 [ 1803.061823] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1803.061832] ? ion_system_contig_heap_create+0x130/0x130 [ 1803.061840] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1803.061851] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1803.061861] ion_alloc+0x204/0x810 [ 1803.061873] ? ion_dma_buf_release+0x40/0x40 [ 1803.061885] ? __might_fault+0x177/0x1b0 [ 1803.061896] ion_ioctl+0xea/0x1f0 [ 1803.061904] ? ion_query_heaps+0x360/0x360 [ 1803.061916] ? lock_acquire+0x170/0x3f0 [ 1803.061924] ? ion_query_heaps+0x360/0x360 [ 1803.061933] do_vfs_ioctl+0x75a/0xff0 [ 1803.061942] ? ioctl_preallocate+0x1a0/0x1a0 [ 1803.125382] ? lock_downgrade+0x740/0x740 [ 1803.129533] ? __fget+0x225/0x360 [ 1803.132982] ? do_vfs_ioctl+0xff0/0xff0 [ 1803.136947] ? security_file_ioctl+0x83/0xb0 [ 1803.137055] 0 [ 1803.141344] SyS_ioctl+0x7f/0xb0 [ 1803.141353] ? do_vfs_ioctl+0xff0/0xff0 [ 1803.141363] do_syscall_64+0x1d5/0x640 [ 1803.141378] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1803.141386] RIP: 0033:0x4665d9 [ 1803.141391] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1803.141401] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1803.141406] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1803.141411] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1803.141418] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1803.199542] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1803.207405] 2717 2718 2718 2718 [ 1803.207420] Node 0 DMA32 free:18232kB min:36200kB low:45248kB high:54296kB active_anon:67312kB inactive_anon:83520kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7008kB pagetables:1948kB bounce:0kB free_pcp:244kB local_pcp:108kB free_cma:0kB [ 1803.207437] lowmem_reserve[]: 0 0 0 0 0 [ 1803.207454] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1803.207469] lowmem_reserve[]: [ 1803.218230] Mem-Info: [ 1803.293046] active_anon:17436 inactive_anon:28352 isolated_anon:0 [ 1803.293046] active_file:17 inactive_file:17 isolated_file:0 [ 1803.293046] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1803.293046] slab_reclaimable:12425 slab_unreclaimable:120248 [ 1803.293046] mapped:26655 shmem:29457 pagetables:640 bounce:0 [ 1803.293046] free:14090 free_pcp:3 free_cma:0 [ 1803.347979] 0 0 [ 1803.362332] Node 0 active_anon:67312kB inactive_anon:83520kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38764kB dirty:0kB writeback:0kB shmem:87740kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1803.443069] 0 0 0 [ 1803.445256] Node 1 Normal free:26952kB min:53696kB low:67120kB high:80544kB active_anon:2432kB inactive_anon:29888kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:612kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1803.463658] Node 1 active_anon:2432kB inactive_anon:29888kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:67856kB dirty:0kB writeback:0kB shmem:30088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1803.625283] lowmem_reserve[]: 0 0 0 0 0 [ 1803.654983] Node 0 DMA: 0*4kB 24*8kB (UE) 50*16kB (U) 32*32kB (UE) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 10976kB [ 1803.747632] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1803.761412] Node 0 DMA32: 372*4kB (UME) 2718*8kB (UME) 209*16kB (UME) 38*32kB (UME) 121*64kB (UE) 7*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36432kB [ 1803.873460] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1803.873638] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1803.881440] Node 0 DMA32 free:36184kB min:36200kB low:45248kB high:54296kB active_anon:67320kB inactive_anon:83520kB active_file:40kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7008kB pagetables:1948kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1803.890963] Node 1 Normal: 36*4kB (UM) 3*8kB (UM) 4*16kB (UM) 0*32kB 234*64kB (U) 92*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26984kB [ 1803.922291] lowmem_reserve[]: [ 1803.932029] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1803.932035] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1803.935151] 0 [ 1803.944073] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1803.955604] 0 0 0 0 [ 1803.963513] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1803.965800] Node 0 [ 1803.974404] 29491 total pagecache pages [ 1803.974413] 0 pages in swap cache [ 1803.974418] Swap cache stats: add 0, delete 0, find 0/0 [ 1803.974421] Free swap = 0kB [ 1803.974424] Total swap = 0kB [ 1803.974430] 2097051 pages RAM [ 1803.974434] 0 pages HighMem/MovableOnly [ 1803.974437] 363849 pages reserved [ 1803.974440] 0 pages cma reserved [ 1803.974446] Out of memory: Kill process 9710 (syz-executor.1) score 1004 or sacrifice child [ 1803.974466] Killed process 9711 (syz-executor.1) total-vm:93252kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 1804.020804] oom_reaper: reaped process 9711 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1804.034024] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1804.079438] lowmem_reserve[]: 0 0 0 0 0 [ 1804.083500] Node 1 Normal free:26368kB min:53696kB low:67120kB high:80544kB active_anon:2424kB inactive_anon:29888kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:612kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1804.115671] lowmem_reserve[]: 0 0 0 0 0 [ 1804.119724] Node 0 DMA: 0*4kB 24*8kB (UE) 50*16kB (U) 32*32kB (UE) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 10976kB [ 1804.133146] oom_reaper: reaped process 9730 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1804.137512] Node 0 DMA32: 340*4kB (ME) 469*8kB (UME) 192*16kB (ME) 34*32kB (UME) 121*64kB (UE) 7*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17912kB [ 1804.162020] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 1804.169077] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1804.175363] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1804.194588] CPU: 1 PID: 4638 Comm: systemd-udevd Not tainted 4.14.232-syzkaller #0 [ 1804.198212] syz-executor.1: [ 1804.202390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1804.202397] page allocation failure: order:0 [ 1804.205392] Call Trace: [ 1804.214901] Node 1 [ 1804.219247] dump_stack+0x1b2/0x281 [ 1804.219258] dump_header+0x178/0x82f [ 1804.219271] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1804.226068] Normal: [ 1804.227753] ? ___ratelimit+0x2cd/0x530 [ 1804.231929] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1804.236524] oom_kill_process.cold+0x10/0xa40 [ 1804.238874] 35*4kB [ 1804.242889] ? lock_downgrade+0x740/0x740 [ 1804.251189] syz-executor.2: [ 1804.254621] out_of_memory+0x2dc/0x1190 [ 1804.256838] page allocation failure: order:0 [ 1804.260969] ? oom_killer_disable+0x1c0/0x1c0 [ 1804.260978] ? mutex_trylock+0x152/0x1a0 [ 1804.260987] __alloc_pages_nodemask+0x23e1/0x2720 [ 1804.261005] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1804.261029] alloc_pages_current+0x155/0x260 [ 1804.261037] filemap_fault+0x11a1/0x1ad0 [ 1804.261055] ext4_filemap_fault+0x84/0xb0 [ 1804.261063] __do_fault+0xfa/0x380 [ 1804.261071] __handle_mm_fault+0x2497/0x4620 [ 1804.261081] ? vm_insert_page+0x7c0/0x7c0 [ 1804.261097] ? mark_held_locks+0xa6/0xf0 [ 1804.261107] handle_mm_fault+0x455/0x9c0 [ 1804.261118] __do_page_fault+0x549/0xad0 [ 1804.261129] ? spurious_fault+0x640/0x640 [ 1804.261136] ? do_page_fault+0x60/0x500 [ 1804.261146] ? page_fault+0x2f/0x50 [ 1804.278198] (null) [ 1804.281039] page_fault+0x45/0x50 [ 1804.285859] syz-executor.1 cpuset= [ 1804.290679] RIP: 0001:0x1 [ 1804.290683] RSP: 8f2d600:00007ffc671ceb10 EFLAGS: 7ffc671ce9a0 [ 1804.301913] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1804.303404] (UM) [ 1804.306927] (null) [ 1804.314882] 2*8kB [ 1804.320431] Mem-Info: [ 1804.324435] (M) [ 1804.346062] active_anon:17411 inactive_anon:28352 isolated_anon:0 [ 1804.346062] active_file:16 inactive_file:12 isolated_file:1 [ 1804.346062] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1804.346062] slab_reclaimable:12412 slab_unreclaimable:119790 [ 1804.346062] mapped:26655 shmem:29457 pagetables:640 bounce:0 [ 1804.346062] free:13783 free_pcp:31 free_cma:0 [ 1804.349644] / [ 1804.361118] syz-executor.2 cpuset= [ 1804.365549] mems_allowed=0-1 [ 1804.367548] / [ 1804.371364] CPU: 0 PID: 9711 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1804.374777] Node 0 active_anon:67220kB inactive_anon:83520kB active_file:40kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:38764kB dirty:0kB writeback:0kB shmem:87740kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1804.376205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1804.376218] Call Trace: [ 1804.410887] mems_allowed=0-1 [ 1804.412545] dump_stack+0x1b2/0x281 [ 1804.438165] Node 1 active_anon:2424kB inactive_anon:29888kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:67856kB dirty:0kB writeback:0kB shmem:30088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1804.456464] warn_alloc.cold+0x96/0x1cc [ 1804.456479] ? zone_watermark_ok_safe+0x220/0x220 [ 1804.498140] Node 0 [ 1804.502174] ? usleep_range+0x130/0x130 [ 1804.506150] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1804.511579] ? _find_next_bit+0xdb/0x100 [ 1804.511590] ? run_timer_softirq+0x5a0/0x5a0 [ 1804.511610] __alloc_pages_nodemask+0x2127/0x2720 [ 1804.528143] lowmem_reserve[]: [ 1804.543373] ? lock_acquire+0x170/0x3f0 [ 1804.543390] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1804.568155] 0 2717 [ 1804.568535] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1804.568552] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1804.570776] 2718 [ 1804.575258] ? retint_kernel+0x2d/0x2d [ 1804.586590] alloc_pages_current+0x155/0x260 [ 1804.590983] ion_page_pool_alloc+0x118/0x1b0 [ 1804.595373] ion_system_heap_allocate+0x133/0x8c0 [ 1804.598161] 2718 2718 [ 1804.600198] ? ion_alloc+0x187/0x810 [ 1804.600208] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1804.606372] ? ion_system_contig_heap_create+0x130/0x130 [ 1804.617572] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1804.622568] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1804.627401] ion_alloc+0x204/0x810 [ 1804.628133] Node 0 DMA32 free:17788kB min:36200kB low:45248kB high:54296kB active_anon:67320kB inactive_anon:83520kB active_file:40kB inactive_file:144kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:6976kB pagetables:1948kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 1804.630933] ? ion_dma_buf_release+0x40/0x40 [ 1804.630945] ? __might_fault+0x177/0x1b0 [ 1804.668329] ion_ioctl+0xea/0x1f0 [ 1804.671770] ? ion_query_heaps+0x360/0x360 [ 1804.675987] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1804.681067] ? ion_query_heaps+0x360/0x360 [ 1804.685372] do_vfs_ioctl+0x75a/0xff0 [ 1804.688142] lowmem_reserve[]: 0 [ 1804.689168] ? ioctl_preallocate+0x1a0/0x1a0 [ 1804.689179] ? lock_downgrade+0x740/0x740 [ 1804.692452] 0 [ 1804.696838] ? __fget+0x225/0x360 [ 1804.706167] ? do_vfs_ioctl+0xff0/0xff0 [ 1804.708122] 0 [ 1804.710225] ? security_file_ioctl+0x83/0xb0 [ 1804.710226] 0 0 [ 1804.712058] SyS_ioctl+0x7f/0xb0 [ 1804.718733] ? do_vfs_ioctl+0xff0/0xff0 [ 1804.718744] do_syscall_64+0x1d5/0x640 [ 1804.718757] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1804.735071] RIP: 0033:0x4665d9 [ 1804.738123] Node 0 [ 1804.738240] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1804.740475] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1804.748153] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1804.748159] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1804.748164] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1804.748169] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1804.748173] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1804.749491] 4*16kB [ 1804.792248] CPU: 1 PID: 9730 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1804.795732] (UM) [ 1804.802999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1804.803002] Call Trace: [ 1804.803019] dump_stack+0x1b2/0x281 [ 1804.803032] warn_alloc.cold+0x96/0x1cc [ 1804.803044] ? zone_watermark_ok_safe+0x220/0x220 [ 1804.810515] 1*32kB [ 1804.812534] ? usleep_range+0x130/0x130 [ 1804.820343] (U) [ 1804.822384] ? _find_next_bit+0xdb/0x100 [ 1804.831808] 226*64kB [ 1804.834303] ? run_timer_softirq+0x5a0/0x5a0 [ 1804.837898] (U) [ 1804.841858] __alloc_pages_nodemask+0x2127/0x2720 [ 1804.841876] ? lock_acquire+0x170/0x3f0 [ 1804.846686] 92*128kB [ 1804.848921] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1804.848932] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1804.848948] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1804.848968] alloc_pages_current+0x155/0x260 [ 1804.852929] (UM) [ 1804.854887] ion_page_pool_alloc+0x118/0x1b0 [ 1804.858989] 0*256kB [ 1804.861452] ion_system_heap_allocate+0x133/0x8c0 [ 1804.865832] 0*512kB [ 1804.867787] ? ion_alloc+0x187/0x810 [ 1804.873289] 0*1024kB [ 1804.876669] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1804.879099] 0*2048kB [ 1804.884072] ? ion_system_contig_heap_create+0x130/0x130 [ 1804.893823] 0*4096kB [ 1804.893981] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1804.899071] = 26492kB [ 1804.900499] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1804.904908] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1804.907217] ion_alloc+0x204/0x810 [ 1804.912131] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1804.914357] ? ion_dma_buf_release+0x40/0x40 [ 1804.918153] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1804.920517] ? __might_fault+0x177/0x1b0 [ 1804.925948] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1804.928341] ion_ioctl+0xea/0x1f0 [ 1804.928351] ? ion_query_heaps+0x360/0x360 [ 1804.928364] ? lock_acquire+0x170/0x3f0 [ 1804.928372] ? ion_query_heaps+0x360/0x360 [ 1804.928382] do_vfs_ioctl+0x75a/0xff0 [ 1804.928393] ? ioctl_preallocate+0x1a0/0x1a0 [ 1804.933833] 29498 total pagecache pages [ 1804.936209] ? lock_downgrade+0x740/0x740 [ 1804.941242] 0 pages in swap cache [ 1804.943607] ? __fget+0x225/0x360 [ 1804.948482] Swap cache stats: add 0, delete 0, find 0/0 [ 1804.957247] ? do_vfs_ioctl+0xff0/0xff0 [ 1804.960786] Free swap = 0kB [ 1804.969319] ? security_file_ioctl+0x83/0xb0 [ 1804.969330] SyS_ioctl+0x7f/0xb0 [ 1804.969338] ? do_vfs_ioctl+0xff0/0xff0 [ 1804.969349] do_syscall_64+0x1d5/0x640 [ 1804.969362] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1804.969371] RIP: 0033:0x4665d9 [ 1804.973770] Total swap = 0kB [ 1804.982564] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1804.982575] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1804.982580] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1804.982585] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1804.982603] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1804.982608] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1804.988913] lowmem_reserve[]: [ 1804.995531] 2097051 pages RAM [ 1805.001738] 0 [ 1805.003014] 0 pages HighMem/MovableOnly [ 1805.006946] 0 0 [ 1805.014163] 363849 pages reserved [ 1805.014994] 0 [ 1805.019406] 0 pages cma reserved [ 1805.145435] 0 [ 1805.147241] Node 1 Normal free:196264kB min:53696kB low:67120kB high:80544kB active_anon:2416kB inactive_anon:29888kB active_file:124kB inactive_file:4720kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:612kB bounce:0kB free_pcp:112kB local_pcp:0kB free_cma:0kB [ 1805.233221] Mem-Info: [ 1805.235979] active_anon:17389 inactive_anon:28352 isolated_anon:0 [ 1805.235979] active_file:66 inactive_file:2141 isolated_file:0 [ 1805.235979] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1805.235979] slab_reclaimable:12412 slab_unreclaimable:119349 [ 1805.235979] mapped:28205 shmem:29457 pagetables:640 bounce:0 [ 1805.235979] free:115403 free_pcp:660 free_cma:0 15:43:32 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) [ 1805.308119] lowmem_reserve[]: 0 0 0 0 0 [ 1805.312170] Node 0 DMA: 14*4kB (U) 24*8kB (UE) 50*16kB (U) 32*32kB (UE) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 11032kB [ 1805.368136] Node 0 DMA32: 6077*4kB (UE) 3895*8kB (UE) 1665*16kB (UE) 268*32kB (UE) 582*64kB (UME) 6*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 128700kB [ 1805.384722] Node 0 active_anon:67140kB inactive_anon:83520kB active_file:140kB inactive_file:1744kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:39764kB dirty:0kB writeback:0kB shmem:87740kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1805.428120] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1805.448113] Node 1 Normal: 13905*4kB (UM) 3291*8kB (UM) 397*16kB (U) 223*32kB (UM) 5433*64kB (UM) 570*128kB (U) 71*256kB (U) 3*512kB (UM) 3*1024kB (U) 0*2048kB 0*4096kB = 538892kB [ 1805.508113] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1805.517493] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1805.548223] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1805.550962] Node 1 active_anon:2416kB inactive_anon:29888kB active_file:124kB inactive_file:8520kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:74456kB dirty:0kB writeback:0kB shmem:30088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1805.557080] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1805.587431] Node 0 DMA free:11016kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1805.658106] 32155 total pagecache pages [ 1805.658115] lowmem_reserve[]: 0 [ 1805.662106] 0 pages in swap cache [ 1805.662108] 2717 2718 [ 1805.665369] Swap cache stats: add 0, delete 0, find 0/0 [ 1805.671945] 2718 2718 [ 1805.688102] Free swap = 0kB [ 1805.691131] Total swap = 0kB [ 1805.694138] 2097051 pages RAM [ 1805.697228] 0 pages HighMem/MovableOnly [ 1805.718138] Node 0 DMA32 free:216644kB min:36200kB low:45248kB high:54296kB active_anon:67140kB inactive_anon:83520kB active_file:140kB inactive_file:1744kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:6976kB pagetables:1948kB bounce:0kB free_pcp:1348kB local_pcp:724kB free_cma:0kB [ 1805.768134] 363849 pages reserved [ 1805.771607] 0 pages cma reserved [ 1805.774997] Out of memory: Kill process 9725 (syz-executor.4) score 1004 or sacrifice child [ 1805.858157] lowmem_reserve[]: 0 0 0 0 0 [ 1805.862265] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1805.868099] Killed process 9726 (syz-executor.4) total-vm:93252kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 1805.958095] lowmem_reserve[]: 0 0 0 0 0 [ 1805.962129] Node 1 Normal free:809032kB min:53696kB low:67120kB high:80544kB active_anon:2464kB inactive_anon:29888kB active_file:180kB inactive_file:8588kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:612kB bounce:0kB free_pcp:1360kB local_pcp:728kB free_cma:0kB [ 1805.997867] oom_reaper: reaped process 9726 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1806.058097] lowmem_reserve[]: 0 0 0 0 0 [ 1806.062394] Node 0 DMA: 22*4kB (U) 38*8kB (UE) 50*16kB (U) 32*32kB (UE) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 11176kB [ 1806.138761] Node 0 DMA32: 24819*4kB (UE) 13328*8kB (UE) 7410*16kB (UE) 2218*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 395436kB [ 1806.201155] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1806.238154] Node 1 Normal: 32379*4kB (UM) 15442*8kB (UM) 10006*16kB (UM) 4579*32kB (UM) 1617*64kB (UM) 674*128kB (U) 73*256kB (U) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 769660kB [ 1806.269390] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1806.338307] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1806.346947] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1806.378084] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1806.386783] 32528 total pagecache pages [ 1806.398088] 0 pages in swap cache [ 1806.401577] Swap cache stats: add 0, delete 0, find 0/0 [ 1806.407019] Free swap = 0kB [ 1806.428079] Total swap = 0kB [ 1806.431122] 2097051 pages RAM [ 1806.434216] 0 pages HighMem/MovableOnly [ 1806.448080] 363849 pages reserved [ 1806.451551] 0 pages cma reserved [ 1807.180734] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1807.181507] syz-executor.3: [ 1807.193029] syz-executor.2 cpuset= [ 1807.193782] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1807.215095] / mems_allowed=0-1 [ 1807.230798] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1807.237453] CPU: 0 PID: 9730 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1807.245255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1807.254612] Call Trace: [ 1807.257230] dump_stack+0x1b2/0x281 [ 1807.260857] warn_alloc.cold+0x96/0x1cc [ 1807.264833] ? zone_watermark_ok_safe+0x220/0x220 [ 1807.269698] __alloc_pages_nodemask+0x2127/0x2720 [ 1807.274553] ? lock_acquire+0x170/0x3f0 [ 1807.278542] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1807.283391] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1807.288839] ? __mutex_unlock_slowpath+0x75/0x770 [ 1807.293682] alloc_pages_current+0x155/0x260 [ 1807.298095] ion_page_pool_alloc+0x118/0x1b0 [ 1807.302507] ion_system_heap_allocate+0x133/0x8c0 [ 1807.307443] ? _raw_spin_unlock+0x29/0x40 [ 1807.311588] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1807.316515] ? ion_system_contig_heap_create+0x130/0x130 [ 1807.321963] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1807.326979] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1807.331830] ion_alloc+0x27a/0x810 [ 1807.335374] ? ion_dma_buf_release+0x40/0x40 [ 1807.339772] ? __might_fault+0x177/0x1b0 [ 1807.343861] ion_ioctl+0xea/0x1f0 [ 1807.347306] ? ion_query_heaps+0x360/0x360 [ 1807.351534] ? lock_acquire+0x170/0x3f0 [ 1807.355499] ? ion_query_heaps+0x360/0x360 [ 1807.359728] do_vfs_ioctl+0x75a/0xff0 [ 1807.363616] ? ioctl_preallocate+0x1a0/0x1a0 [ 1807.368017] ? lock_downgrade+0x740/0x740 [ 1807.372158] ? __fget+0x225/0x360 [ 1807.375679] ? do_vfs_ioctl+0xff0/0xff0 [ 1807.379647] ? security_file_ioctl+0x83/0xb0 [ 1807.384142] SyS_ioctl+0x7f/0xb0 [ 1807.387592] ? do_vfs_ioctl+0xff0/0xff0 [ 1807.391575] do_syscall_64+0x1d5/0x640 [ 1807.395659] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1807.400865] RIP: 0033:0x4665d9 [ 1807.404054] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1807.411762] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1807.419025] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1807.426275] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1807.433549] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1807.440817] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1807.448093] CPU: 1 PID: 9729 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1807.455900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1807.465262] Call Trace: [ 1807.467854] dump_stack+0x1b2/0x281 [ 1807.471481] warn_alloc.cold+0x96/0x1cc [ 1807.475454] ? zone_watermark_ok_safe+0x220/0x220 [ 1807.480308] __alloc_pages_nodemask+0x2127/0x2720 [ 1807.485146] ? lock_acquire+0x170/0x3f0 [ 1807.489133] ? lock_acquire+0x170/0x3f0 [ 1807.493145] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1807.498011] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1807.503488] ? __mutex_unlock_slowpath+0x75/0x770 [ 1807.508352] alloc_pages_current+0x155/0x260 [ 1807.512766] ion_page_pool_alloc+0x118/0x1b0 [ 1807.517178] ion_system_heap_allocate+0x133/0x8c0 [ 1807.522045] ? _raw_spin_unlock+0x29/0x40 [ 1807.526190] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1807.531212] ? ion_system_contig_heap_create+0x130/0x130 [ 1807.536682] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1807.541700] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1807.546553] ion_alloc+0x27a/0x810 [ 1807.550096] ? ion_dma_buf_release+0x40/0x40 [ 1807.554515] ? __might_fault+0x177/0x1b0 [ 1807.558580] ion_ioctl+0xea/0x1f0 [ 1807.562045] ? ion_query_heaps+0x360/0x360 [ 1807.566443] ? lock_acquire+0x170/0x3f0 [ 1807.570420] ? ion_query_heaps+0x360/0x360 [ 1807.574657] do_vfs_ioctl+0x75a/0xff0 [ 1807.578460] ? ioctl_preallocate+0x1a0/0x1a0 [ 1807.582865] ? lock_downgrade+0x740/0x740 [ 1807.587016] ? __fget+0x225/0x360 [ 1807.590485] ? do_vfs_ioctl+0xff0/0xff0 [ 1807.594463] ? security_file_ioctl+0x83/0xb0 [ 1807.598965] SyS_ioctl+0x7f/0xb0 [ 1807.602333] ? do_vfs_ioctl+0xff0/0xff0 [ 1807.606310] do_syscall_64+0x1d5/0x640 [ 1807.611106] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1807.616385] RIP: 0033:0x4665d9 [ 1807.619636] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1807.629037] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1807.636534] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1807.643892] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1807.651163] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1807.658426] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1807.711645] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1807.725252] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1807.731088] CPU: 1 PID: 9711 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1807.738885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1807.748236] Call Trace: [ 1807.750831] dump_stack+0x1b2/0x281 [ 1807.754485] warn_alloc.cold+0x96/0x1cc [ 1807.758460] ? zone_watermark_ok_safe+0x220/0x220 [ 1807.763310] __alloc_pages_nodemask+0x2127/0x2720 [ 1807.768158] ? lock_acquire+0x170/0x3f0 [ 1807.772135] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1807.776982] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1807.782436] ? __mutex_unlock_slowpath+0x75/0x770 [ 1807.787282] alloc_pages_current+0x155/0x260 [ 1807.791689] ion_page_pool_alloc+0x118/0x1b0 [ 1807.796098] ion_system_heap_allocate+0x133/0x8c0 [ 1807.800942] ? _raw_spin_unlock+0x29/0x40 [ 1807.805086] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1807.810018] ? ion_system_contig_heap_create+0x130/0x130 [ 1807.815463] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1807.820477] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1807.825419] ion_alloc+0x27a/0x810 [ 1807.828963] ? ion_dma_buf_release+0x40/0x40 [ 1807.833370] ? __might_fault+0x177/0x1b0 [ 1807.837428] ion_ioctl+0xea/0x1f0 [ 1807.840877] ? ion_query_heaps+0x360/0x360 [ 1807.845130] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1807.850229] ? ion_query_heaps+0x360/0x360 [ 1807.854462] do_vfs_ioctl+0x75a/0xff0 [ 1807.858303] ? ioctl_preallocate+0x1a0/0x1a0 [ 1807.862710] ? lock_downgrade+0x740/0x740 [ 1807.866857] ? __fget+0x225/0x360 [ 1807.870307] ? do_vfs_ioctl+0xff0/0xff0 [ 1807.874277] ? security_file_ioctl+0x83/0xb0 [ 1807.878682] SyS_ioctl+0x7f/0xb0 [ 1807.882042] ? do_vfs_ioctl+0xff0/0xff0 [ 1807.886016] do_syscall_64+0x1d5/0x640 [ 1807.889913] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1807.895096] RIP: 0033:0x4665d9 [ 1807.898282] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1807.905989] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1807.913260] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1807.917998] warn_alloc_show_mem: 1 callbacks suppressed [ 1807.918001] Mem-Info: [ 1807.920521] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1807.920528] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1807.925978] active_anon:17316 inactive_anon:28349 isolated_anon:0 [ 1807.925978] active_file:988 inactive_file:4548 isolated_file:0 [ 1807.925978] unevictable:0 dirty:15 writeback:0 unstable:0 [ 1807.925978] slab_reclaimable:12408 slab_unreclaimable:121113 [ 1807.925978] mapped:30556 shmem:29453 pagetables:641 bounce:0 [ 1807.925978] free:440005 free_pcp:103 free_cma:0 [ 1807.928460] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1808.074504] Node 0 active_anon:66924kB inactive_anon:83520kB active_file:2972kB inactive_file:11764kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48272kB dirty:40kB writeback:0kB shmem:87740kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1808.103214] Node 1 active_anon:2312kB inactive_anon:29876kB active_file:988kB inactive_file:7172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:74560kB dirty:20kB writeback:0kB shmem:30072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1808.146870] Node 0 DMA free:10992kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1808.176160] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1808.181954] Node 0 DMA32 free:420664kB min:36200kB low:45248kB high:54296kB active_anon:67024kB inactive_anon:83520kB active_file:3272kB inactive_file:12664kB unevictable:0kB writepending:40kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:6976kB pagetables:2148kB bounce:0kB free_pcp:168kB local_pcp:144kB free_cma:0kB [ 1808.236922] lowmem_reserve[]: 0 0 0 0 0 [ 1808.251613] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1808.287163] lowmem_reserve[]: 0 0 0 0 0 [ 1808.291330] Node 1 Normal free:1141084kB min:53696kB low:67120kB high:80544kB active_anon:2312kB inactive_anon:29876kB active_file:988kB inactive_file:7172kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:612kB bounce:0kB free_pcp:212kB local_pcp:212kB free_cma:0kB [ 1808.326250] lowmem_reserve[]: 0 0 0 0 0 [ 1808.341928] Node 0 DMA: 92*4kB (U) 40*8kB (UE) 50*16kB (U) 37*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 10992kB [ 1808.362170] Node 0 DMA32: 1*4kB (M) 344*8kB (UME) 3826*16kB (UME) 5593*32kB (UME) 44*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 245764kB [ 1808.377427] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1808.418142] Node 1 Normal: 40885*4kB (UM) 27173*8kB (UM) 20458*16kB (UM) 13526*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1141084kB [ 1808.480341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1808.487082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1808.498229] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1808.517968] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1808.526874] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1808.538498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1808.545208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1808.555095] device bridge_slave_1 left promiscuous mode [ 1808.561994] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1808.571237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1808.579173] device bridge_slave_0 left promiscuous mode [ 1808.588468] 36110 total pagecache pages [ 1808.593332] bridge0: port 1(bridge_slave_0) entered disabled state [ 1808.600885] 0 pages in swap cache [ 1808.604345] Swap cache stats: add 0, delete 0, find 0/0 [ 1808.627985] Free swap = 0kB [ 1808.631430] device veth1_macvtap left promiscuous mode [ 1808.636726] device veth0_macvtap left promiscuous mode [ 1808.646988] Total swap = 0kB [ 1808.650604] 2097051 pages RAM [ 1808.653726] 0 pages HighMem/MovableOnly [ 1808.657712] 363849 pages reserved [ 1808.668051] device veth1_vlan left promiscuous mode [ 1808.673127] device veth0_vlan left promiscuous mode [ 1808.688011] 0 pages cma reserved [ 1808.989350] device hsr_slave_1 left promiscuous mode [ 1809.017954] device hsr_slave_0 left promiscuous mode [ 1809.048428] team0 (unregistering): Port device team_slave_1 removed [ 1809.068478] team0 (unregistering): Port device team_slave_0 removed [ 1809.100150] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1809.121864] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1809.211936] bond0 (unregistering): Released all slaves [ 1809.703810] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 1809.745974] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1809.830318] CPU: 1 PID: 4638 Comm: systemd-udevd Not tainted 4.14.232-syzkaller #0 [ 1809.838068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1809.847412] Call Trace: [ 1809.849997] dump_stack+0x1b2/0x281 [ 1809.853638] dump_header+0x178/0x82f [ 1809.857346] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1809.862465] ? ___ratelimit+0x2cd/0x530 [ 1809.866463] oom_kill_process.cold+0x10/0xa40 [ 1809.870955] ? lock_downgrade+0x740/0x740 [ 1809.875105] out_of_memory+0x2dc/0x1190 [ 1809.879083] ? oom_killer_disable+0x1c0/0x1c0 [ 1809.883577] ? mutex_trylock+0x152/0x1a0 [ 1809.887628] __alloc_pages_nodemask+0x23e1/0x2720 [ 1809.892468] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1809.897319] alloc_pages_current+0x155/0x260 [ 1809.901726] filemap_fault+0x11a1/0x1ad0 [ 1809.905787] ext4_filemap_fault+0x84/0xb0 [ 1809.910190] __do_fault+0xfa/0x380 [ 1809.913717] __handle_mm_fault+0x2497/0x4620 [ 1809.918113] ? vm_insert_page+0x7c0/0x7c0 [ 1809.922257] ? mark_held_locks+0xa6/0xf0 [ 1809.926316] handle_mm_fault+0x455/0x9c0 [ 1809.930370] __do_page_fault+0x549/0xad0 [ 1809.934425] ? spurious_fault+0x640/0x640 [ 1809.938566] ? do_page_fault+0x60/0x500 [ 1809.942529] ? page_fault+0x2f/0x50 [ 1809.946145] page_fault+0x45/0x50 [ 1809.949586] RIP: 0001:0xffffffffffffffff [ 1809.953633] RSP: 8f2d600:00007ffc671ceb10 EFLAGS: 7ffc671ce9a0 [ 1810.037909] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1810.071705] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1810.076840] CPU: 1 PID: 9730 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1810.084623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1810.094055] Call Trace: [ 1810.096662] dump_stack+0x1b2/0x281 [ 1810.100285] warn_alloc.cold+0x96/0x1cc [ 1810.104251] ? zone_watermark_ok_safe+0x220/0x220 [ 1810.109084] ? usleep_range+0x130/0x130 [ 1810.113049] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1810.118142] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1810.123148] ? run_timer_softirq+0x5a0/0x5a0 [ 1810.127552] __alloc_pages_nodemask+0x2127/0x2720 [ 1810.132387] ? lock_acquire+0x170/0x3f0 [ 1810.136362] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1810.141193] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1810.145682] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1810.151133] alloc_pages_current+0x155/0x260 [ 1810.155543] ion_page_pool_alloc+0x118/0x1b0 [ 1810.156102] syz-executor.4: [ 1810.159988] ion_system_heap_allocate+0x133/0x8c0 [ 1810.160000] ? _raw_spin_unlock+0x29/0x40 [ 1810.160008] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1810.160017] ? ion_system_contig_heap_create+0x130/0x130 [ 1810.160032] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1810.160043] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1810.160052] ion_alloc+0x27a/0x810 [ 1810.160064] ? ion_dma_buf_release+0x40/0x40 [ 1810.185740] page allocation failure: order:0 [ 1810.187374] ? __might_fault+0x177/0x1b0 [ 1810.208561] ion_ioctl+0xea/0x1f0 [ 1810.212010] ? ion_query_heaps+0x360/0x360 [ 1810.216310] ? lock_acquire+0x170/0x3f0 [ 1810.220277] ? ion_query_heaps+0x360/0x360 [ 1810.224502] do_vfs_ioctl+0x75a/0xff0 [ 1810.228317] ? ioctl_preallocate+0x1a0/0x1a0 [ 1810.232717] ? lock_downgrade+0x740/0x740 [ 1810.235362] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1810.236863] ? __fget+0x225/0x360 [ 1810.247906] ? do_vfs_ioctl+0xff0/0xff0 [ 1810.251878] ? security_file_ioctl+0x83/0xb0 [ 1810.256280] SyS_ioctl+0x7f/0xb0 [ 1810.256495] syz-executor.3: [ 1810.259636] ? do_vfs_ioctl+0xff0/0xff0 [ 1810.259647] do_syscall_64+0x1d5/0x640 [ 1810.259661] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1810.259669] RIP: 0033:0x4665d9 [ 1810.259673] RSP: 002b:00007f5e4daa7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1810.259682] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1810.259690] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1810.266105] page allocation failure: order:0 [ 1810.266664] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1810.295146] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1810.301070] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1810.301076] R13: 00007ffd29a3709f R14: 00007f5e4daa7300 R15: 0000000000022000 [ 1810.310042] syz-executor.1: [ 1810.331184] syz-executor.4 cpuset= [ 1810.342502] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1810.364522] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1810.369715] CPU: 1 PID: 9711 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1810.372913] / [ 1810.377493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1810.377501] mems_allowed=0-1 [ 1810.379205] Call Trace: [ 1810.379223] dump_stack+0x1b2/0x281 [ 1810.379237] warn_alloc.cold+0x96/0x1cc [ 1810.379246] ? SyS_msync+0x1b0/0x3a0 [ 1810.379255] ? zone_watermark_ok_safe+0x220/0x220 [ 1810.379264] ? usleep_range+0x130/0x130 [ 1810.379273] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1810.379283] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1810.379292] ? run_timer_softirq+0x5a0/0x5a0 [ 1810.428939] __alloc_pages_nodemask+0x2127/0x2720 [ 1810.433783] ? lock_acquire+0x170/0x3f0 [ 1810.435789] (null) [ 1810.437763] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1810.444718] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1810.449302] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1810.454872] alloc_pages_current+0x155/0x260 [ 1810.456321] syz-executor.3 cpuset= [ 1810.459275] ion_page_pool_alloc+0x118/0x1b0 [ 1810.459285] ion_system_heap_allocate+0x133/0x8c0 [ 1810.459296] ? _raw_spin_unlock+0x29/0x40 [ 1810.459304] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1810.459313] ? ion_system_contig_heap_create+0x130/0x130 [ 1810.459322] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1810.459332] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1810.459342] ion_alloc+0x27a/0x810 [ 1810.499920] ? ion_dma_buf_release+0x40/0x40 [ 1810.504410] ? __might_fault+0x177/0x1b0 [ 1810.508461] ion_ioctl+0xea/0x1f0 [ 1810.511912] ? ion_query_heaps+0x360/0x360 [ 1810.516143] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1810.521240] ? ion_query_heaps+0x360/0x360 [ 1810.521516] / mems_allowed=0-1 [ 1810.525470] do_vfs_ioctl+0x75a/0xff0 [ 1810.525482] ? ioctl_preallocate+0x1a0/0x1a0 [ 1810.536853] ? lock_downgrade+0x740/0x740 [ 1810.541081] ? __fget+0x225/0x360 [ 1810.544535] ? do_vfs_ioctl+0xff0/0xff0 [ 1810.548526] ? security_file_ioctl+0x83/0xb0 [ 1810.552927] SyS_ioctl+0x7f/0xb0 [ 1810.556341] ? do_vfs_ioctl+0xff0/0xff0 [ 1810.560304] do_syscall_64+0x1d5/0x640 [ 1810.564186] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1810.569362] RIP: 0033:0x4665d9 [ 1810.572548] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1810.580251] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1810.587514] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1810.594767] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1810.602035] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1810.609308] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1810.616590] CPU: 0 PID: 9729 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1810.623811] Mem-Info: [ 1810.624385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1810.626786] active_anon:17701 inactive_anon:28349 isolated_anon:0 [ 1810.626786] active_file:8 inactive_file:2 isolated_file:0 [ 1810.626786] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1810.626786] slab_reclaimable:12375 slab_unreclaimable:120236 [ 1810.626786] mapped:44148 shmem:29453 pagetables:758 bounce:0 [ 1810.626786] free:13881 free_pcp:60 free_cma:0 [ 1810.636121] Call Trace: [ 1810.636141] dump_stack+0x1b2/0x281 [ 1810.636154] warn_alloc.cold+0x96/0x1cc [ 1810.636173] ? zone_watermark_ok_safe+0x220/0x220 [ 1810.669422] Node 0 active_anon:67496kB inactive_anon:83516kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:76040kB dirty:0kB writeback:0kB shmem:87736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1810.671968] ? usleep_range+0x130/0x130 [ 1810.675585] Node 1 active_anon:3308kB inactive_anon:29880kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100552kB dirty:0kB writeback:0kB shmem:30076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1810.679617] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1810.679641] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1810.679650] ? run_timer_softirq+0x5a0/0x5a0 [ 1810.684478] Node 0 [ 1810.711970] __alloc_pages_nodemask+0x2127/0x2720 [ 1810.711985] ? lock_acquire+0x170/0x3f0 [ 1810.711998] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1810.716148] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1810.743266] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1810.743282] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1810.743300] alloc_pages_current+0x155/0x260 [ 1810.748383] lowmem_reserve[]: [ 1810.753388] ion_page_pool_alloc+0x118/0x1b0 [ 1810.757878] 0 [ 1810.760084] ion_system_heap_allocate+0x133/0x8c0 [ 1810.764925] 2717 [ 1810.768900] ? _raw_spin_unlock+0x29/0x40 [ 1810.768910] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1810.768919] ? ion_system_contig_heap_create+0x130/0x130 [ 1810.773764] warn_alloc_show_mem: 2 callbacks suppressed [ 1810.773766] Mem-Info: [ 1810.799234] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1810.799245] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1810.799256] ion_alloc+0x27a/0x810 [ 1810.803729] 2718 [ 1810.809157] ? ion_dma_buf_release+0x40/0x40 [ 1810.809171] ? __might_fault+0x177/0x1b0 [ 1810.813551] 2718 [ 1810.816637] ion_ioctl+0xea/0x1f0 [ 1810.821291] 2718 [ 1810.823061] ? ion_query_heaps+0x360/0x360 [ 1810.829930] ? lock_acquire+0x170/0x3f0 [ 1810.834044] Node 0 [ 1810.838949] ? ion_query_heaps+0x360/0x360 [ 1810.838960] do_vfs_ioctl+0x75a/0xff0 [ 1810.838971] ? ioctl_preallocate+0x1a0/0x1a0 [ 1810.844423] active_anon:17701 inactive_anon:28349 isolated_anon:0 [ 1810.844423] active_file:8 inactive_file:2 isolated_file:0 [ 1810.844423] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1810.844423] slab_reclaimable:12375 slab_unreclaimable:120236 [ 1810.844423] mapped:44148 shmem:29453 pagetables:758 bounce:0 [ 1810.844423] free:13881 free_pcp:60 free_cma:0 [ 1810.849841] ? lock_downgrade+0x740/0x740 [ 1810.849866] ? __fget+0x225/0x360 [ 1810.849874] ? do_vfs_ioctl+0xff0/0xff0 [ 1810.852271] Node 0 active_anon:67496kB inactive_anon:83516kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:76040kB dirty:0kB writeback:0kB shmem:87736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1810.857276] ? security_file_ioctl+0x83/0xb0 [ 1810.862117] DMA32 free:17728kB min:36200kB low:45248kB high:54296kB active_anon:67496kB inactive_anon:83516kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7040kB pagetables:2128kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1810.865607] SyS_ioctl+0x7f/0xb0 [ 1810.867640] lowmem_reserve[]: [ 1810.872021] ? do_vfs_ioctl+0xff0/0xff0 [ 1810.872032] do_syscall_64+0x1d5/0x640 [ 1810.872045] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1810.876088] Node 1 active_anon:3308kB inactive_anon:29880kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100552kB dirty:0kB writeback:0kB shmem:30076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1810.878114] RIP: 0033:0x4665d9 [ 1810.878119] RSP: 002b:00007f85f9b35188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1810.878130] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1810.881566] Node 0 [ 1810.883611] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1810.887837] 0 [ 1810.891858] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1810.894081] 0 [ 1810.898293] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1810.898298] R13: 00007ffee30e2fdf R14: 00007f85f9b35300 R15: 0000000000022000 [ 1810.913198] CPU: 0 PID: 9726 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1810.947095] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1810.947133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1810.957798] lowmem_reserve[]: [ 1810.978558] Call Trace: [ 1810.978576] dump_stack+0x1b2/0x281 [ 1810.978588] warn_alloc.cold+0x96/0x1cc [ 1811.007782] 0 [ 1811.010977] ? zone_watermark_ok_safe+0x220/0x220 [ 1811.014316] 2717 [ 1811.017400] ? usleep_range+0x130/0x130 [ 1811.037777] 2718 [ 1811.057529] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1811.057541] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1811.060732] 0 [ 1811.068490] ? run_timer_softirq+0x5a0/0x5a0 [ 1811.068511] __alloc_pages_nodemask+0x2127/0x2720 [ 1811.097789] 0 [ 1811.103292] ? lock_acquire+0x170/0x3f0 [ 1811.110573] 2718 [ 1811.118347] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1811.118358] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1811.148178] 0 [ 1811.153172] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1811.158813] alloc_pages_current+0x155/0x260 [ 1811.158826] ion_page_pool_alloc+0x118/0x1b0 [ 1811.162426] Node 0 [ 1811.166376] ion_system_heap_allocate+0x133/0x8c0 [ 1811.168189] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1811.172984] ? ion_alloc+0x187/0x810 [ 1811.175103] lowmem_reserve[]: [ 1811.179056] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1811.179065] ? ion_system_contig_heap_create+0x130/0x130 [ 1811.179074] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1811.181117] 2718 [ 1811.186191] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1811.191196] 0 [ 1811.192962] ion_alloc+0x204/0x810 [ 1811.197340] 0 [ 1811.202176] ? ion_dma_buf_release+0x40/0x40 [ 1811.202188] ? __might_fault+0x177/0x1b0 [ 1811.207924] ion_ioctl+0xea/0x1f0 [ 1811.207933] ? ion_query_heaps+0x360/0x360 [ 1811.207944] ? ion_query_heaps+0x360/0x360 [ 1811.210411] Node 0 [ 1811.215247] do_vfs_ioctl+0x75a/0xff0 [ 1811.219732] 0 [ 1811.221507] ? ioctl_preallocate+0x1a0/0x1a0 [ 1811.226925] 0 [ 1811.231318] ? lock_downgrade+0x740/0x740 [ 1811.231329] ? __fget+0x225/0x360 [ 1811.231337] ? do_vfs_ioctl+0xff0/0xff0 [ 1811.235736] DMA32 free:17728kB min:36200kB low:45248kB high:54296kB active_anon:67496kB inactive_anon:83516kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7040kB pagetables:2128kB bounce:0kB free_pcp:156kB local_pcp:4kB free_cma:0kB [ 1811.237941] ? security_file_ioctl+0x83/0xb0 [ 1811.237950] SyS_ioctl+0x7f/0xb0 [ 1811.237960] ? do_vfs_ioctl+0xff0/0xff0 [ 1811.242778] lowmem_reserve[]: [ 1811.267998] do_syscall_64+0x1d5/0x640 [ 1811.268015] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1811.271707] 0 [ 1811.274792] RIP: 0033:0x4665d9 [ 1811.285639] RSP: 002b:00007f8bc6c32188 EFLAGS: 00000246 [ 1811.290647] Node 1 [ 1811.292671] ORIG_RAX: 0000000000000010 [ 1811.297498] Normal free:26844kB min:53696kB low:67120kB high:80544kB active_anon:3308kB inactive_anon:29880kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:904kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1811.299267] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1811.299273] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1811.299279] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1811.299283] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1811.299290] R13: 00007ffc75e3c03f R14: 00007f8bc6c32300 R15: 0000000000022000 [ 1811.302896] 0 [ 1811.455929] lowmem_reserve[]: [ 1811.463794] 0 0 0 0 [ 1811.494968] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1811.517810] 0 0 0 0 0 [ 1811.521402] lowmem_reserve[]: [ 1811.527085] Node 0 [ 1811.527397] 0 0 0 0 0 [ 1811.540034] DMA: 78*4kB (U) 42*8kB (UE) 50*16kB (U) 37*32kB (UE) 3*64kB (UE) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 11144kB [ 1811.540235] Node 1 [ 1811.577789] Node 0 DMA32: 583*4kB (UE) 7206*8kB (UME) 5163*16kB (UME) 634*32kB (UE) 59*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 166652kB [ 1811.594744] Normal free:93144kB min:53696kB low:67120kB high:80544kB active_anon:3308kB inactive_anon:29880kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:904kB bounce:0kB free_pcp:120kB local_pcp:620kB free_cma:0kB [ 1811.630268] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1811.650207] Node 1 Normal: 10581*4kB (UM) 3349*8kB (UM) 21*16kB (UM) 751*32kB (UM) 502*64kB (UM) 11*128kB (U) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 127788kB [ 1811.687767] lowmem_reserve[]: 0 0 0 0 0 [ 1811.690096] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1811.691783] Node 0 [ 1811.710245] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1811.728186] DMA: 78*4kB (U) 42*8kB (UE) 50*16kB (U) 37*32kB (UE) 3*64kB (UE) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 11144kB [ 1811.737774] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1811.767747] Node 0 DMA32: 583*4kB (UE) 7206*8kB (UME) 5163*16kB (UME) 634*32kB (UE) 59*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 166652kB [ 1811.770031] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1811.817755] Node 0 [ 1811.817764] 30333 total pagecache pages [ 1811.817766] Normal: 0*4kB [ 1811.820020] 0 pages in swap cache [ 1811.824074] 0*8kB 0*16kB [ 1811.826904] Swap cache stats: add 0, delete 0, find 0/0 [ 1811.847780] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1811.855546] Node 1 Normal: 11577*4kB (UM) 8415*8kB (UM) 5619*16kB (UM) 2451*32kB (UM) 502*64kB (UM) 11*128kB (U) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 316268kB [ 1811.860078] Free swap = 0kB [ 1811.888360] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1811.907755] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1811.907757] Total swap = 0kB [ 1811.907765] 2097051 pages RAM [ 1811.916356] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1811.939863] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1811.940372] 0 pages HighMem/MovableOnly [ 1811.948846] 30335 total pagecache pages [ 1811.957210] 0 pages in swap cache [ 1811.961703] Swap cache stats: add 0, delete 0, find 0/0 [ 1811.968203] Free swap = 0kB [ 1811.971525] 363849 pages reserved [ 1811.975857] Total swap = 0kB [ 1811.979622] 2097051 pages RAM [ 1811.980289] 0 pages cma reserved [ 1811.983263] 0 pages HighMem/MovableOnly [ 1811.990509] Out of memory: Kill process 7986 (syz-fuzzer) score 7 or sacrifice child [ 1811.990711] 363849 pages reserved [ 1812.003328] 0 pages cma reserved [ 1812.027825] Killed process 9751 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1812.048948] warn_alloc_show_mem: 1 callbacks suppressed [ 1812.065706] Mem-Info: [ 1812.075508] active_anon:17712 inactive_anon:28349 isolated_anon:0 [ 1812.075508] active_file:315 inactive_file:1189 isolated_file:0 [ 1812.075508] unevictable:0 dirty:26 writeback:0 unstable:0 [ 1812.075508] slab_reclaimable:12374 slab_unreclaimable:120600 [ 1812.075508] mapped:45259 shmem:29453 pagetables:721 bounce:0 [ 1812.075508] free:137156 free_pcp:642 free_cma:0 [ 1812.116355] oom_reaper: reaped process 9751 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1812.132974] Node 0 active_anon:67540kB inactive_anon:83516kB active_file:1452kB inactive_file:6044kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:81484kB dirty:104kB writeback:0kB shmem:87736kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1812.174069] Node 1 active_anon:3308kB inactive_anon:29880kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82252kB dirty:0kB writeback:0kB shmem:30076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1812.206744] Node 0 DMA free:11144kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 15:43:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) 15:43:39 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) [ 1812.238032] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1812.243713] Node 0 DMA32 free:174164kB min:36200kB low:45248kB high:54296kB active_anon:67540kB inactive_anon:83516kB active_file:1652kB inactive_file:9344kB unevictable:0kB writepending:104kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:6944kB pagetables:1832kB bounce:0kB free_pcp:1332kB local_pcp:596kB free_cma:0kB [ 1812.282282] lowmem_reserve[]: 0 0 0 0 0 15:43:39 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) [ 1812.299382] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 15:43:39 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x731fc52a, 0x2}) [ 1812.476474] lowmem_reserve[]: 0 0 0 0 0 15:43:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 1812.497465] Node 1 Normal free:362780kB min:53696kB low:67120kB high:80544kB active_anon:3308kB inactive_anon:29880kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:756kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 15:43:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) inotify_init1(0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 1812.594957] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1812.603494] IPVS: ftp: loaded support on port[0] = 21 [ 1812.620002] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1812.631356] CPU: 0 PID: 9774 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1812.639179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1812.648537] Call Trace: [ 1812.651133] dump_stack+0x1b2/0x281 [ 1812.654762] warn_alloc.cold+0x96/0x1cc [ 1812.658760] ? zone_watermark_ok_safe+0x220/0x220 [ 1812.663615] __alloc_pages_nodemask+0x2127/0x2720 [ 1812.668456] ? _raw_spin_unlock_irq+0x24/0x80 [ 1812.672955] ? lock_acquire+0x170/0x3f0 [ 1812.676935] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1812.681789] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1812.687780] ? __mutex_unlock_slowpath+0x75/0x770 [ 1812.692638] alloc_pages_current+0x155/0x260 [ 1812.697047] ion_page_pool_alloc+0x118/0x1b0 [ 1812.701457] ion_system_heap_allocate+0x133/0x8c0 [ 1812.706302] ? ion_alloc+0x187/0x810 [ 1812.710048] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1812.715543] ? ion_system_contig_heap_create+0x130/0x130 [ 1812.720990] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1812.726206] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1812.731050] ion_alloc+0x204/0x810 [ 1812.734590] ? ion_dma_buf_release+0x40/0x40 [ 1812.739029] ? __might_fault+0x177/0x1b0 [ 1812.743098] ion_ioctl+0xea/0x1f0 [ 1812.746546] ? ion_query_heaps+0x360/0x360 [ 1812.750778] ? ion_query_heaps+0x360/0x360 [ 1812.755012] do_vfs_ioctl+0x75a/0xff0 [ 1812.758819] ? ioctl_preallocate+0x1a0/0x1a0 [ 1812.763222] ? lock_downgrade+0x740/0x740 [ 1812.767459] ? __fget+0x225/0x360 [ 1812.770909] ? do_vfs_ioctl+0xff0/0xff0 [ 1812.774884] ? security_file_ioctl+0x83/0xb0 [ 1812.779305] SyS_ioctl+0x7f/0xb0 [ 1812.782679] ? do_vfs_ioctl+0xff0/0xff0 [ 1812.786664] do_syscall_64+0x1d5/0x640 [ 1812.790552] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1812.795737] RIP: 0033:0x4665d9 [ 1812.798919] RSP: 002b:00007ff7e4627188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1812.806648] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1812.813912] RDX: 0000000020000100 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1812.821203] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1812.828470] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1812.835840] R13: 00007ffc510e8a2f R14: 00007ff7e4627300 R15: 0000000000022000 [ 1812.890257] lowmem_reserve[]: 0 0 0 0 0 [ 1812.894413] Node 0 DMA: 85*4kB (U) 42*8kB (UE) 50*16kB (U) 37*32kB (UE) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 11108kB [ 1812.958024] Node 0 DMA32: 764*4kB (UE) 11238*8kB (UME) 5851*16kB (UE) 1613*32kB (UME) 5*64kB (U) 1*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 238640kB [ 1812.975234] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1812.990899] Node 1 Normal: 20081*4kB (UM) 16660*8kB (UM) 11346*16kB (UM) 6311*32kB (UM) 18*64kB (U) 10*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 599524kB [ 1813.007087] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1813.050815] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1813.073210] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1813.089140] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1813.103894] 35385 total pagecache pages [ 1813.110045] 0 pages in swap cache [ 1813.113577] Swap cache stats: add 0, delete 0, find 0/0 [ 1813.132721] Free swap = 0kB [ 1813.136472] Total swap = 0kB [ 1813.139387] chnl_net:caif_netlink_parms(): no params data found [ 1813.145616] 2097051 pages RAM [ 1813.149980] 0 pages HighMem/MovableOnly [ 1813.154444] 363849 pages reserved [ 1813.162854] 0 pages cma reserved [ 1813.439782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1813.446213] bridge0: port 1(bridge_slave_0) entered disabled state [ 1813.461770] device bridge_slave_0 entered promiscuous mode [ 1813.474068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1813.490368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1813.499912] device bridge_slave_1 entered promiscuous mode [ 1813.537777] Bluetooth: hci1 command 0x0409 tx timeout [ 1813.541291] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1813.556091] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1813.567568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1813.580077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1813.592313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1813.602856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1813.615478] device bridge_slave_1 left promiscuous mode [ 1813.623134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1813.634047] device bridge_slave_0 left promiscuous mode [ 1813.667887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1813.677290] device veth1_macvtap left promiscuous mode [ 1813.683651] device veth0_macvtap left promiscuous mode [ 1813.698038] device veth1_vlan left promiscuous mode [ 1813.703156] device veth0_vlan left promiscuous mode [ 1813.820526] device hsr_slave_1 left promiscuous mode [ 1813.829251] device hsr_slave_0 left promiscuous mode [ 1813.844576] team0 (unregistering): Port device team_slave_1 removed [ 1813.854520] team0 (unregistering): Port device team_slave_0 removed [ 1813.870578] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1813.881014] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1813.924241] bond0 (unregistering): Released all slaves [ 1813.963142] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1813.970889] team0: Port device team_slave_0 added [ 1813.976533] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1813.988629] team0: Port device team_slave_1 added [ 1814.020102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1814.026404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1814.056037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1814.078764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1814.085052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1814.157612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1814.178552] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1814.186106] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1814.241192] device hsr_slave_0 entered promiscuous mode [ 1814.257852] device hsr_slave_1 entered promiscuous mode [ 1814.268696] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1814.275840] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1814.483709] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1814.556827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1814.589865] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1814.609866] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1814.616374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1814.628058] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1814.650202] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1814.656271] 8021q: adding VLAN 0 to HW filter on device team0 [ 1814.685585] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1814.708809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1814.716919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1814.728379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1814.734745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1814.748372] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1814.756371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1814.766949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1814.776211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1814.788883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1814.795241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1814.822177] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1814.846643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1814.880938] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1814.930055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1814.953438] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1814.970848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1814.981759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1814.994937] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1815.003706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1815.014158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1815.022905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1815.043788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1815.067606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1815.094832] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1815.101790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1815.110862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1815.120529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1815.134596] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1815.158625] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1815.164887] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1815.178694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1815.190328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1815.312934] IPVS: ftp: loaded support on port[0] = 21 [ 1815.415565] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1815.432491] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1815.440139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1815.451974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1815.577986] chnl_net:caif_netlink_parms(): no params data found [ 1815.598589] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1815.605992] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1815.617867] Bluetooth: hci1 command 0x041b tx timeout [ 1815.630269] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1815.637257] syz-executor.0: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 1815.647961] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1815.653314] CPU: 1 PID: 9929 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1815.661105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1815.670725] Call Trace: [ 1815.673336] dump_stack+0x1b2/0x281 [ 1815.676996] warn_alloc.cold+0x96/0x1cc [ 1815.680979] ? zone_watermark_ok_safe+0x220/0x220 [ 1815.685824] ? wake_all_kswapds+0x175/0x360 [ 1815.690146] __alloc_pages_nodemask+0x2127/0x2720 [ 1815.695002] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1815.700106] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 1815.705167] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1815.710022] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1815.714862] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1815.720247] ? calc_wheel_index+0xb1/0x1c0 [ 1815.724493] ? cache_alloc_refill+0x2fa/0x350 [ 1815.728983] ? ____cache_alloc_node+0x156/0x1d0 [ 1815.733663] cache_grow_begin+0x91/0x700 [ 1815.737731] fallback_alloc+0x207/0x2c0 [ 1815.741700] __kmalloc+0x213/0x400 [ 1815.745255] ? batadv_hash_new+0xaa/0x270 [ 1815.749400] batadv_hash_new+0xaa/0x270 [ 1815.753451] ? batadv_bla_status_update+0x2b0/0x2b0 [ 1815.758478] batadv_dat_init+0x61/0x170 [ 1815.762444] batadv_mesh_init+0x4a8/0x630 [ 1815.766586] batadv_softif_init_late+0xa26/0xc90 [ 1815.771336] ? batadv_get_strings+0x40/0x40 [ 1815.775648] ? dev_valid_name+0x1a0/0x1a0 [ 1815.779788] ? batadv_get_strings+0x40/0x40 [ 1815.784101] register_netdevice+0x291/0xe40 [ 1815.788417] ? netdev_change_features+0xa0/0xa0 [ 1815.793078] ? rtnl_create_link+0x129/0x890 [ 1815.797396] rtnl_newlink+0x14ff/0x1860 [ 1815.801360] ? rtnl_newlink+0x43d/0x1860 [ 1815.805424] ? mark_held_locks+0xa6/0xf0 [ 1815.809477] ? rtnl_dellink+0x6a0/0x6a0 [ 1815.813443] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1815.818453] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1815.822981] ? rtnl_dellink+0x6a0/0x6a0 [ 1815.826950] rtnetlink_rcv_msg+0x3be/0xb10 [ 1815.831184] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1815.835679] ? rcu_read_unlock_special+0x8db/0xdd0 [ 1815.840614] netlink_rcv_skb+0x125/0x390 [ 1815.844672] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1815.849168] ? netlink_ack+0x9a0/0x9a0 [ 1815.853058] netlink_unicast+0x437/0x610 [ 1815.857117] ? netlink_sendskb+0xd0/0xd0 [ 1815.861176] ? __check_object_size+0x179/0x230 [ 1815.865752] netlink_sendmsg+0x62e/0xb80 [ 1815.869813] ? nlmsg_notify+0x170/0x170 [ 1815.873784] ? security_socket_sendmsg+0x83/0xb0 [ 1815.878529] ? nlmsg_notify+0x170/0x170 [ 1815.882491] sock_sendmsg+0xb5/0x100 [ 1815.886197] SyS_sendto+0x1c7/0x2c0 [ 1815.889817] ? SyS_getpeername+0x220/0x220 [ 1815.894052] ? sock_poll+0x220/0x220 [ 1815.897789] ? SyS_socket+0x12f/0x1b0 [ 1815.901584] ? move_addr_to_kernel+0x60/0x60 [ 1815.905983] ? do_syscall_64+0x4c/0x640 [ 1815.909947] ? SyS_getpeername+0x220/0x220 [ 1815.914176] do_syscall_64+0x1d5/0x640 [ 1815.918062] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1815.923244] RIP: 0033:0x41956c [ 1815.926523] RSP: 002b:00007fffb1f5dd50 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1815.934223] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041956c [ 1815.941501] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1815.948779] RBP: 0000000000000000 R08: 00007fffb1f5dda4 R09: 000000000000000c [ 1815.956148] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1815.963422] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1815.970750] warn_alloc_show_mem: 2 callbacks suppressed [ 1815.970753] Mem-Info: [ 1815.978535] active_anon:17682 inactive_anon:28352 isolated_anon:0 [ 1815.978535] active_file:1238 inactive_file:5047 isolated_file:0 [ 1815.978535] unevictable:0 dirty:74 writeback:0 unstable:0 [ 1815.978535] slab_reclaimable:12357 slab_unreclaimable:117078 [ 1815.978535] mapped:48414 shmem:29456 pagetables:702 bounce:0 [ 1815.978535] free:288877 free_pcp:711 free_cma:0 [ 1816.012289] Node 0 active_anon:67460kB inactive_anon:83528kB active_file:4944kB inactive_file:20176kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:111356kB dirty:292kB writeback:0kB shmem:87748kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1816.040484] Node 1 active_anon:3268kB inactive_anon:29880kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:82300kB dirty:4kB writeback:0kB shmem:30076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1816.067542] Node 0 DMA free:11148kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1816.093659] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1816.099243] Node 0 DMA32 free:536440kB min:36200kB low:45248kB high:54296kB active_anon:67460kB inactive_anon:83528kB active_file:4944kB inactive_file:20176kB unevictable:0kB writepending:292kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7008kB pagetables:2028kB bounce:0kB free_pcp:1332kB local_pcp:692kB free_cma:0kB [ 1816.128935] lowmem_reserve[]: 0 0 0 0 0 [ 1816.133047] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1816.158566] lowmem_reserve[]: 0 0 0 0 0 [ 1816.162554] Node 1 Normal free:869944kB min:53696kB low:67120kB high:80544kB active_anon:3268kB inactive_anon:29880kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:780kB bounce:0kB free_pcp:1412kB local_pcp:736kB free_cma:0kB [ 1816.191357] lowmem_reserve[]: 0 0 0 0 0 [ 1816.195343] Node 0 DMA: 98*4kB (UH) 46*8kB (UEH) 48*16kB (UH) 35*32kB (UEH) 5*64kB (UEH) 2*128kB (EH) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 3*2048kB (UM) 0*4096kB = 11160kB [ 1816.210850] Node 0 DMA32: 38104*4kB (UE) 15890*8kB (UE) 8826*16kB (UE) 3521*32kB (UE) 53*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 537072kB [ 1816.225657] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1816.236356] Node 1 Normal: 29635*4kB (UM) 22474*8kB (UM) 15816*16kB (UM) 11092*32kB (UM) 858*64kB (U) 21*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 963932kB [ 1816.251669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1816.260493] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1816.269059] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1816.277884] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1816.286446] 35673 total pagecache pages [ 1816.290412] 0 pages in swap cache [ 1816.293850] Swap cache stats: add 0, delete 0, find 0/0 [ 1816.299196] Free swap = 0kB [ 1816.302204] Total swap = 0kB [ 1816.305367] 2097051 pages RAM [ 1816.308460] 0 pages HighMem/MovableOnly [ 1816.312421] 363849 pages reserved [ 1816.315858] 0 pages cma reserved [ 1816.321611] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 1816.331839] ------------[ cut here ]------------ [ 1816.336622] WARNING: CPU: 1 PID: 9929 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 1816.345629] Kernel panic - not syncing: panic_on_warn set ... [ 1816.345629] [ 1816.352993] CPU: 1 PID: 9929 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1816.361135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1816.370508] Call Trace: [ 1816.373100] dump_stack+0x1b2/0x281 [ 1816.376737] panic+0x1f9/0x42d [ 1816.379921] ? add_taint.cold+0x16/0x16 [ 1816.383898] ? debug_print_object.cold+0xa7/0xdb [ 1816.388655] ? debug_print_object.cold+0xa7/0xdb [ 1816.389226] syz-executor.4: page allocation failure: order:4 [ 1816.393404] __warn.cold+0x20/0x44 [ 1816.393414] ? ist_end_non_atomic+0x10/0x10 [ 1816.407033] ? debug_print_object.cold+0xa7/0xdb [ 1816.411788] report_bug+0x208/0x250 [ 1816.415417] do_error_trap+0x195/0x2d0 [ 1816.419305] ? math_error+0x2d0/0x2d0 [ 1816.423104] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1816.427950] invalid_op+0x1b/0x40 [ 1816.429210] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1816.431419] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 1816.431425] RSP: 0018:ffff888021a57248 EFLAGS: 00010086 [ 1816.449653] syz-executor.4 cpuset= [ 1816.449768] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 1816.449773] / [ 1816.453299] RDX: 0000000000000000 RSI: ffffffff878bbbc0 RDI: ffffed100434ae3f [ 1816.453305] RBP: ffffffff878b6e80 R08: 0000000000000061 R09: 0000000000000001 [ 1816.476829] R10: 0000000000000000 R11: ffff8880a073e540 R12: 0000000000000000 [ 1816.478032] mems_allowed=0-1 [ 1816.484086] R13: 0000000000000000 R14: ffff8880425f2e70 R15: 1ffff1100434ae52 [ 1816.484109] ? debug_print_object.cold+0xa7/0xdb [ 1816.499206] debug_object_assert_init+0x1d3/0x2d0 [ 1816.504125] ? debug_object_active_state+0x330/0x330 [ 1816.509213] ? rtnl_newlink+0x14ff/0x1860 [ 1816.513350] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 1816.517752] ? netlink_rcv_skb+0x125/0x390 [ 1816.521985] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1816.527331] del_timer+0x5d/0xe0 [ 1816.530689] ? process_timeout+0x20/0x20 [ 1816.534742] try_to_grab_pending+0x243/0x610 [ 1816.539143] __cancel_work_timer+0x90/0x460 [ 1816.543457] ? work_on_cpu_safe+0x70/0x70 [ 1816.547596] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 1816.552543] batadv_nc_mesh_free+0x41/0x120 [ 1816.556865] batadv_mesh_free+0x70/0x150 [ 1816.560936] batadv_mesh_init+0x561/0x630 [ 1816.565077] batadv_softif_init_late+0xa26/0xc90 [ 1816.569821] ? batadv_get_strings+0x40/0x40 [ 1816.574134] ? dev_valid_name+0x1a0/0x1a0 [ 1816.578278] ? batadv_get_strings+0x40/0x40 [ 1816.582600] register_netdevice+0x291/0xe40 [ 1816.586924] ? netdev_change_features+0xa0/0xa0 [ 1816.591603] ? rtnl_create_link+0x129/0x890 [ 1816.596010] rtnl_newlink+0x14ff/0x1860 [ 1816.599971] ? rtnl_newlink+0x43d/0x1860 [ 1816.604030] ? mark_held_locks+0xa6/0xf0 [ 1816.608083] ? rtnl_dellink+0x6a0/0x6a0 [ 1816.612057] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1816.617141] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1816.621665] ? rtnl_dellink+0x6a0/0x6a0 [ 1816.625633] rtnetlink_rcv_msg+0x3be/0xb10 [ 1816.629857] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1816.634337] ? rcu_read_unlock_special+0x8db/0xdd0 [ 1816.639261] netlink_rcv_skb+0x125/0x390 [ 1816.643318] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1816.647825] ? netlink_ack+0x9a0/0x9a0 [ 1816.651705] netlink_unicast+0x437/0x610 [ 1816.655760] ? netlink_sendskb+0xd0/0xd0 [ 1816.659811] ? __check_object_size+0x179/0x230 [ 1816.664385] netlink_sendmsg+0x62e/0xb80 [ 1816.668443] ? nlmsg_notify+0x170/0x170 [ 1816.672407] ? security_socket_sendmsg+0x83/0xb0 [ 1816.677140] ? nlmsg_notify+0x170/0x170 [ 1816.681102] sock_sendmsg+0xb5/0x100 [ 1816.684812] SyS_sendto+0x1c7/0x2c0 [ 1816.688433] ? SyS_getpeername+0x220/0x220 [ 1816.692668] ? sock_poll+0x220/0x220 [ 1816.696368] ? SyS_socket+0x12f/0x1b0 [ 1816.700165] ? move_addr_to_kernel+0x60/0x60 [ 1816.704574] ? do_syscall_64+0x4c/0x640 [ 1816.708565] ? SyS_getpeername+0x220/0x220 [ 1816.712824] do_syscall_64+0x1d5/0x640 [ 1816.716711] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1816.721885] RIP: 0033:0x41956c [ 1816.725059] RSP: 002b:00007fffb1f5dd50 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1816.732757] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041956c [ 1816.740025] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1816.747294] RBP: 0000000000000000 R08: 00007fffb1f5dda4 R09: 000000000000000c [ 1816.754564] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1816.761832] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1816.770534] Kernel Offset: disabled [ 1816.774206] Rebooting in 86400 seconds..