4900 RDI: 0000000000000003 [ 1227.932758] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1227.940027] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1227.947293] R13: 00007ffec17d0c7f R14: 00007f6b7163a300 R15: 0000000000022000 [ 1227.954650] Mem-Info: [ 1227.957086] active_anon:22185 inactive_anon:20951 isolated_anon:0 [ 1227.957086] active_file:11 inactive_file:12 isolated_file:0 [ 1227.957086] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1227.957086] slab_reclaimable:12713 slab_unreclaimable:115812 [ 1227.957086] mapped:43525 shmem:21267 pagetables:688 bounce:0 [ 1227.957086] free:14465 free_pcp:25 free_cma:0 [ 1227.990396] Node 0 active_anon:88320kB inactive_anon:67632kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174100kB dirty:0kB writeback:0kB shmem:68828kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1228.023405] Mem-Info: [ 1228.026824] Node 1 active_anon:420kB inactive_anon:16172kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1228.030992] active_anon:22185 inactive_anon:20951 isolated_anon:0 [ 1228.030992] active_file:11 inactive_file:12 isolated_file:0 [ 1228.030992] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1228.030992] slab_reclaimable:12713 slab_unreclaimable:115812 [ 1228.030992] mapped:43525 shmem:21267 pagetables:688 bounce:0 [ 1228.030992] free:15940 free_pcp:161 free_cma:0 [ 1228.064753] Node 0 [ 1228.153880] Node 0 active_anon:88196kB inactive_anon:67632kB active_file:136kB inactive_file:5536kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177484kB dirty:0kB writeback:0kB shmem:68828kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1228.153885] IPVS: ftp: loaded support on port[0] = 21 [ 1228.163854] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1228.189174] Node 1 active_anon:420kB inactive_anon:16172kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1228.218064] lowmem_reserve[]: [ 1228.255406] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1228.294038] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1228.299173] Node 0 DMA32 free:46948kB min:36200kB low:45248kB high:54296kB active_anon:88196kB inactive_anon:67632kB active_file:236kB inactive_file:7636kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7456kB pagetables:2544kB bounce:0kB free_pcp:800kB local_pcp:656kB free_cma:0kB [ 1228.310998] 0 [ 1228.338023] lowmem_reserve[]: 0 0 0 0 0 [ 1228.348895] 2717 2718 2718 2718 [ 1228.349339] Node 0 [ 1228.352809] Node 0 DMA32 free:45376kB min:36200kB low:45248kB high:54296kB active_anon:88196kB inactive_anon:67632kB active_file:236kB inactive_file:8636kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2544kB bounce:0kB free_pcp:772kB local_pcp:224kB free_cma:0kB [ 1228.359668] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1228.430025] lowmem_reserve[]: 0 0 0 0 0 [ 1228.434292] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1228.467002] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1228.485463] systemd[1]: systemd-rfkill.service: Main process exited, code=exited, status=127/n/a [ 1228.502293] lowmem_reserve[]: 0 0 0 0 0 [ 1228.512666] Node 1 Normal free:27064kB min:53696kB low:67120kB high:80544kB active_anon:420kB inactive_anon:16172kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1228.584393] systemd[1]: Failed to start Load/Save RF Kill Switch Status. [ 1228.611042] lowmem_reserve[]: 0 0 0 0 0 [ 1228.617775] Node 0 DMA: 0*4kB 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10952kB [ 1228.626076] systemd[1]: systemd-rfkill.service: Unit entered failed state. [ 1228.654449] Node 0 DMA32: 170*4kB (UE) 1632*8kB (UME) 1517*16kB (UME) 111*32kB (UME) 4*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41816kB [ 1228.669827] lowmem_reserve[]: 0 0 0 0 0 [ 1228.675230] systemd[1]: systemd-rfkill.service: Failed with result 'exit-code'. [ 1228.684259] Node 1 Normal free:27164kB min:53696kB low:67120kB high:80544kB active_anon:420kB inactive_anon:16172kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1228.694299] Node 0 [ 1228.733790] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1228.746211] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1228.764245] chnl_net:caif_netlink_parms(): no params data found [ 1228.771030] Node 1 Normal: 46*4kB (UM) 32*8kB (UME) 21*16kB (UM) 16*32kB (UM) 11*64kB (UM) 15*128kB (UM) 55*256kB (UM) 16*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 27208kB [ 1228.783237] systemd[1]: systemd-rfkill.service: Failed to fork: Cannot allocate memory [ 1228.797732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1228.819900] lowmem_reserve[]: 0 0 0 0 0 [ 1228.821013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1228.827236] Node 0 [ 1228.832710] systemd[1]: systemd-rfkill.service: Failed to run 'start' task: Cannot allocate memory [ 1228.854461] DMA: 0*4kB 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 3*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10952kB [ 1228.861038] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1228.883753] systemd[1]: Failed to start Load/Save RF Kill Switch Status. [ 1228.891131] Node 0 DMA32: 736*4kB (UME) 2476*8kB (UME) 1584*16kB (UME) 139*32kB (UME) 7*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 52992kB [ 1228.891202] Node 0 Normal: 0*4kB 0*8kB 0*16kB [ 1228.921341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1228.934809] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1228.954257] 21429 total pagecache pages [ 1228.959027] Node 1 [ 1228.959031] 0 pages in swap cache [ 1228.959039] Swap cache stats: add 0, delete 0, find 0/0 [ 1228.965148] Normal: 46*4kB (UM) 32*8kB (UME) 21*16kB (UM) 16*32kB (UM) 11*64kB (UM) 15*128kB (UM) 55*256kB (UM) 16*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 27208kB [ 1228.981187] Free swap = 0kB [ 1229.001109] Total swap = 0kB [ 1229.005714] 2097051 pages RAM [ 1229.014640] 0 pages HighMem/MovableOnly [ 1229.018633] 363849 pages reserved [ 1229.021003] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1229.036546] 0 pages cma reserved [ 1229.041303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1229.050590] Out of memory: Kill process 7959 (syz-fuzzer) score 10 or sacrifice child [ 1229.059215] Killed process 30452 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1229.077927] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1229.105620] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1229.116351] oom_reaper: reaped process 30452 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1229.132200] 21666 total pagecache pages [ 1229.136769] 0 pages in swap cache [ 1229.141030] Swap cache stats: add 0, delete 0, find 0/0 [ 1229.160289] Free swap = 0kB [ 1229.167738] Total swap = 0kB [ 1229.170860] 2097051 pages RAM [ 1229.174166] Bluetooth: hci1 command 0x041b tx timeout [ 1229.184078] systemd[1]: systemd-rfkill.service: Failed with result 'resources'. [ 1229.193228] 0 pages HighMem/MovableOnly [ 1229.197224] 363849 pages reserved [ 1229.200797] 0 pages cma reserved [ 1229.682123] systemd-journald[30609]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1229.871889] bond0 (unregistering): Released all slaves [ 1231.442776] IPVS: ftp: loaded support on port[0] = 21 [ 1231.598589] chnl_net:caif_netlink_parms(): no params data found [ 1231.807762] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.843658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.856826] device bridge_slave_0 entered promiscuous mode [ 1231.879817] IPVS: ftp: loaded support on port[0] = 21 [ 1231.888501] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.917630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.928563] device bridge_slave_1 entered promiscuous mode [ 1231.986178] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1232.004322] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1232.037987] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1232.045576] team0: Port device team_slave_0 added [ 1232.055588] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1232.063054] team0: Port device team_slave_1 added [ 1232.093699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1232.099986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.127061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1232.143477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1232.149742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1232.176566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1232.188200] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1232.196387] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1232.224925] device hsr_slave_0 entered promiscuous mode [ 1232.232053] device hsr_slave_1 entered promiscuous mode [ 1232.238484] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1232.247107] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1232.405957] chnl_net:caif_netlink_parms(): no params data found [ 1232.495912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.502342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.509014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.515486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.595402] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1232.601671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1232.607976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.615602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.624144] device bridge_slave_0 entered promiscuous mode [ 1232.632588] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.639918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.651290] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1232.661508] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1232.670467] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1232.677159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.684248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.691872] device bridge_slave_1 entered promiscuous mode [ 1232.698653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1232.708171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1232.718890] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1232.725495] 8021q: adding VLAN 0 to HW filter on device team0 [ 1232.744033] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1232.751600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1232.759591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1232.767778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.774211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.793105] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1232.801295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1232.809253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1232.817850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.824395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.834042] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1232.844620] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1232.852331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1232.861858] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1232.880241] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1232.900644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1232.917460] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1232.931837] team0: Port device team_slave_0 added [ 1232.937698] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1232.945756] team0: Port device team_slave_1 added [ 1232.965374] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1232.987191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1233.001860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1233.010779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1233.018304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1233.044454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1233.056927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1233.064087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1233.090360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1233.105261] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1233.117082] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1233.125379] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1233.133329] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1233.140376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1233.149609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1233.160019] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1233.181247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1233.189526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1233.214863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1233.226811] device hsr_slave_0 entered promiscuous mode [ 1233.236917] device hsr_slave_1 entered promiscuous mode [ 1233.243621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1233.252679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1233.261262] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1233.268534] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1233.288453] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1233.294619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1233.333485] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1233.345911] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1233.352832] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1233.359599] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1233.380900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1233.476283] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1233.491997] Bluetooth: hci1 command 0x0409 tx timeout [ 1233.527492] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1233.534314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1233.543707] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1233.562823] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1233.569032] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1233.578442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1233.588689] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1233.595539] 8021q: adding VLAN 0 to HW filter on device team0 [ 1233.604757] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1233.616258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1233.623617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1233.632116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1233.639935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.646377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.657901] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1233.666422] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1233.674157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1233.682058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1233.689937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1233.697786] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.704208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.713301] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1233.721128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1233.729026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1233.740793] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1233.749138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1233.760344] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1233.767907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1233.779574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1233.786733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1233.795103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1233.803286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1233.814505] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1233.823115] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1233.830239] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1233.837660] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1233.844442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1233.854792] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1233.865435] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1233.875370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1233.883127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1233.891275] Bluetooth: hci3 command 0x0409 tx timeout [ 1233.892270] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1233.904358] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1233.912631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1233.922330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1233.930073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1233.937811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1233.947638] device veth0_vlan entered promiscuous mode [ 1233.956918] device veth1_vlan entered promiscuous mode [ 1233.963509] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1233.972219] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1233.978263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1233.985709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1233.995289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1234.002424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1234.012689] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1234.029303] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1234.037466] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1234.048959] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1234.056776] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1234.063570] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1234.070745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1234.078685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1234.086417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1234.093441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1234.102361] device veth0_macvtap entered promiscuous mode [ 1234.108657] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1234.121984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1234.132937] device veth1_macvtap entered promiscuous mode [ 1234.139294] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1234.149754] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1234.160749] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1234.171453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1234.181981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.192276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1234.202070] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.211331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1234.221136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.230244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1234.240973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.251715] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1234.258660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1234.267131] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1234.275449] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1234.283040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1234.290689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1234.301802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1234.312096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.321617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1234.331393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.341547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1234.351359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.360477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1234.371467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.382095] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1234.389080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1234.400828] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1234.409192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1234.436187] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1234.449850] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1234.457582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1234.466574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1234.510015] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1234.517741] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1234.525014] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1234.538703] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1234.546138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1234.554706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1234.563349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1234.570360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1234.580144] device veth0_vlan entered promiscuous mode [ 1234.593270] device veth1_vlan entered promiscuous mode [ 1234.599339] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1234.610026] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1234.625639] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1234.637166] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1234.644307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1234.652121] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1234.659471] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1234.667544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1234.677964] device veth0_macvtap entered promiscuous mode [ 1234.687327] device veth1_macvtap entered promiscuous mode [ 1234.699013] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1234.710845] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1234.720741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1234.730777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.740760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1234.750542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.759730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1234.769533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.779013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1234.788851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.798300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1234.808098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.818294] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1234.825576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1234.832889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1234.840714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1234.854673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1234.864474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.874199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1234.884184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.893573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1234.903344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.912535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1234.922829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.932078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1234.942113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.952567] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1234.959474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1234.967654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1234.976187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 08:22:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x0, 0x22}) 08:22:44 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:22:44 executing program 4: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) clock_gettime(0x4, &(0x7f00000000c0)) rt_sigtimedwait(&(0x7f0000000400)={[0x81]}, &(0x7f0000000440), &(0x7f00000004c0)={0x77359400}, 0x8) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:22:44 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:22:44 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x7fffffff}) 08:22:44 executing program 5: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:22:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x0, 0x22}) 08:22:44 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:22:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x7fffffff}) 08:22:44 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x7fffffff}) 08:22:44 executing program 5: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:22:44 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 08:22:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x7fffffff}) 08:22:44 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x7fffffff}) 08:22:44 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 1235.571682] Bluetooth: hci1 command 0x041b tx timeout [ 1235.971609] Bluetooth: hci3 command 0x041b tx timeout [ 1236.879031] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1236.891616] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1236.896826] CPU: 0 PID: 31119 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1236.904802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1236.914163] Call Trace: [ 1236.916773] dump_stack+0x1b2/0x281 [ 1236.920418] warn_alloc.cold+0x96/0x1cc [ 1236.924432] ? zone_watermark_ok_safe+0x220/0x220 [ 1236.929317] __alloc_pages_nodemask+0x2127/0x2720 [ 1236.934333] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1236.938857] ? finish_task_switch+0x178/0x610 [ 1236.943386] ? finish_task_switch+0x14d/0x610 [ 1236.947908] ? lock_acquire+0x170/0x3f0 [ 1236.951910] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1236.956787] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1236.962270] ? __mutex_unlock_slowpath+0x75/0x770 [ 1236.967139] ? alloc_pages_current+0xe3/0x260 [ 1236.971661] alloc_pages_current+0x155/0x260 [ 1236.976117] ion_page_pool_alloc+0x118/0x1b0 [ 1236.980540] ion_system_heap_allocate+0x133/0x8c0 [ 1236.985393] ? ion_alloc+0x187/0x810 [ 1236.989160] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1236.994624] ? ion_system_contig_heap_create+0x130/0x130 [ 1237.000100] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1237.005137] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1237.010012] ion_alloc+0x204/0x810 [ 1237.013584] ? ion_dma_buf_release+0x40/0x40 [ 1237.017996] ? __might_fault+0x177/0x1b0 [ 1237.022067] ion_ioctl+0xea/0x1f0 [ 1237.025530] ? ion_query_heaps+0x360/0x360 [ 1237.029815] ? lock_downgrade+0x740/0x740 [ 1237.033980] ? _raw_spin_unlock_irq+0x24/0x80 [ 1237.038503] ? ion_query_heaps+0x360/0x360 [ 1237.042762] do_vfs_ioctl+0x75a/0xff0 [ 1237.046660] ? ioctl_preallocate+0x1a0/0x1a0 [ 1237.051093] ? lock_downgrade+0x740/0x740 [ 1237.055250] ? __fget+0x225/0x360 [ 1237.058816] ? do_vfs_ioctl+0xff0/0xff0 [ 1237.062809] ? security_file_ioctl+0x83/0xb0 [ 1237.067353] SyS_ioctl+0x7f/0xb0 [ 1237.070743] ? do_vfs_ioctl+0xff0/0xff0 [ 1237.074736] do_syscall_64+0x1d5/0x640 [ 1237.078672] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1237.083893] RIP: 0033:0x4665f9 [ 1237.087133] RSP: 002b:00007f6b7163a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1237.094873] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665f9 [ 1237.102167] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1237.109466] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1237.116741] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008 [ 1237.124041] R13: 00007ffec17d0c7f R14: 00007f6b7163a300 R15: 0000000000022000 [ 1237.158103] Mem-Info: [ 1237.160627] active_anon:22365 inactive_anon:22983 isolated_anon:0 [ 1237.160627] active_file:2462 inactive_file:4515 isolated_file:0 [ 1237.160627] unevictable:0 dirty:50 writeback:0 unstable:0 [ 1237.160627] slab_reclaimable:12616 slab_unreclaimable:113630 [ 1237.160627] mapped:57260 shmem:23314 pagetables:715 bounce:0 [ 1237.160627] free:186949 free_pcp:152 free_cma:0 [ 1237.196029] Node 0 active_anon:89156kB inactive_anon:75824kB active_file:9832kB inactive_file:18060kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:229040kB dirty:184kB writeback:0kB shmem:77020kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1237.226120] Node 1 active_anon:304kB inactive_anon:16108kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1237.253774] Node 0 DMA free:11144kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1237.280729] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1237.286497] Node 0 DMA32 free:547756kB min:36200kB low:45248kB high:54296kB active_anon:89156kB inactive_anon:75824kB active_file:9832kB inactive_file:18060kB unevictable:0kB writepending:184kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2828kB bounce:0kB free_pcp:720kB local_pcp:116kB free_cma:0kB [ 1237.317418] lowmem_reserve[]: 0 0 0 0 0 [ 1237.322060] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1237.376480] lowmem_reserve[]: 0 0 0 0 0 [ 1237.383934] Node 1 Normal free:240664kB min:53696kB low:67120kB high:80544kB active_anon:304kB inactive_anon:16108kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1237.417683] lowmem_reserve[]: 0 0 0 0 0 [ 1237.422995] Node 0 DMA: 10*4kB (UE) 10*8kB (U) 17*16kB (UE) 14*32kB (UE) 3*64kB (UE) 1*128kB (E) 1*256kB (E) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11144kB [ 1237.459289] Node 0 DMA32: 10219*4kB (UE) 13976*8kB (UE) 11098*16kB (UE) 6369*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 534060kB [ 1237.497720] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1237.512419] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1237.524162] Node 1 Normal: 220*4kB (UME) 605*8kB (UME) 490*16kB (UME) 281*32kB (UME) 271*64kB (UM) 35*128kB (UME) 23*256kB (UME) 22*512kB (UM) 3*1024kB (U) 1*2048kB (U) 6*4096kB (U) = 91224kB [ 1237.525610] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1237.547937] CPU: 0 PID: 31124 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1237.556365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1237.563713] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1237.565725] Call Trace: [ 1237.565749] dump_stack+0x1b2/0x281 [ 1237.565763] warn_alloc.cold+0x96/0x1cc [ 1237.584831] ? zone_watermark_ok_safe+0x220/0x220 [ 1237.586684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1237.589708] __alloc_pages_nodemask+0x2127/0x2720 [ 1237.589723] ? _raw_spin_unlock_irq+0x24/0x80 [ 1237.607734] ? lock_acquire+0x170/0x3f0 [ 1237.610462] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1237.611717] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1237.611737] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1237.611749] ? __mutex_unlock_slowpath+0x75/0x770 [ 1237.630959] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1237.632202] alloc_pages_current+0x155/0x260 [ 1237.637037] 30255 total pagecache pages [ 1237.645613] ion_page_pool_alloc+0x118/0x1b0 [ 1237.645623] ion_system_heap_allocate+0x133/0x8c0 [ 1237.645633] ? ion_alloc+0x187/0x810 [ 1237.645648] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1237.659904] 0 pages in swap cache [ 1237.663301] ? ion_system_contig_heap_create+0x130/0x130 [ 1237.663313] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1237.663326] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1237.663336] ion_alloc+0x204/0x810 [ 1237.671466] Swap cache stats: add 0, delete 0, find 0/0 [ 1237.672518] ? ion_dma_buf_release+0x40/0x40 [ 1237.680397] Free swap = 0kB [ 1237.681501] ? __might_fault+0x177/0x1b0 [ 1237.681515] ion_ioctl+0xea/0x1f0 [ 1237.681525] ? ion_query_heaps+0x360/0x360 [ 1237.681537] ? ion_query_heaps+0x360/0x360 [ 1237.687686] Total swap = 0kB [ 1237.691392] do_vfs_ioctl+0x75a/0xff0 [ 1237.691405] ? ioctl_preallocate+0x1a0/0x1a0 [ 1237.691414] ? lock_downgrade+0x740/0x740 [ 1237.691431] ? __fget+0x225/0x360 [ 1237.701016] 2097051 pages RAM [ 1237.705354] ? do_vfs_ioctl+0xff0/0xff0 [ 1237.705366] ? security_file_ioctl+0x83/0xb0 [ 1237.705377] SyS_ioctl+0x7f/0xb0 [ 1237.721002] 0 pages HighMem/MovableOnly [ 1237.721924] ? do_vfs_ioctl+0xff0/0xff0 [ 1237.726313] 363849 pages reserved [ 1237.729293] do_syscall_64+0x1d5/0x640 [ 1237.729310] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1237.737515] 0 pages cma reserved [ 1237.741630] RIP: 0033:0x4665f9 [ 1237.741636] RSP: 002b:00007f6d3989a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1237.741645] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1237.741651] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1237.741656] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1237.741660] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1237.741669] R13: 00007ffc681b1ebf R14: 00007f6d3989a300 R15: 0000000000022000 [ 1237.841068] Bluetooth: hci1 command 0x040f tx timeout [ 1238.051185] Bluetooth: hci3 command 0x040f tx timeout 08:22:49 executing program 4: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) clock_gettime(0x4, &(0x7f00000000c0)) rt_sigtimedwait(&(0x7f0000000400)={[0x81]}, &(0x7f0000000440), &(0x7f00000004c0)={0x77359400}, 0x8) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:22:49 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x7fffffff}) 08:22:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 08:22:49 executing program 3: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:22:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:22:49 executing program 5: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1239.891356] Bluetooth: hci1 command 0x0419 tx timeout 08:22:49 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:22:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x0, 0x22}) 08:22:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x0, 0x22}) 08:22:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x0, 0x22}) [ 1240.131147] Bluetooth: hci3 command 0x0419 tx timeout 08:22:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x7fffffff}) 08:22:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x7fffffff}) [ 1240.448169] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1240.448726] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1240.488779] syz-executor.0 cpuset= [ 1240.491486] syz-executor.1: [ 1240.496347] / [ 1240.502664] page allocation failure: order:4 [ 1240.502932] mems_allowed=0-1 [ 1240.505612] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1240.510153] CPU: 1 PID: 31144 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1240.523545] syz-executor.5 cpuset= [ 1240.526974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1240.526979] Call Trace: [ 1240.527003] dump_stack+0x1b2/0x281 [ 1240.527017] warn_alloc.cold+0x96/0x1cc [ 1240.527032] ? zone_watermark_ok_safe+0x220/0x220 [ 1240.539985] (null) [ 1240.540284] __alloc_pages_nodemask+0x2127/0x2720 [ 1240.545193] / [ 1240.546459] ? _raw_spin_unlock_irq+0x24/0x80 [ 1240.557798] syz-executor.1 cpuset= [ 1240.562244] ? lock_acquire+0x170/0x3f0 [ 1240.562269] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1240.562286] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1240.562298] ? __mutex_unlock_slowpath+0x75/0x770 [ 1240.562312] alloc_pages_current+0x155/0x260 [ 1240.562329] ion_page_pool_alloc+0x118/0x1b0 [ 1240.568537] mems_allowed=0-1 [ 1240.572052] ion_system_heap_allocate+0x133/0x8c0 [ 1240.572064] ? ion_alloc+0x187/0x810 [ 1240.572074] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1240.572082] ? ion_system_contig_heap_create+0x130/0x130 [ 1240.572092] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1240.572103] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1240.572113] ion_alloc+0x204/0x810 [ 1240.572125] ? ion_dma_buf_release+0x40/0x40 [ 1240.572137] ? __might_fault+0x177/0x1b0 [ 1240.572149] ion_ioctl+0xea/0x1f0 [ 1240.572158] ? ion_query_heaps+0x360/0x360 [ 1240.572169] ? ion_query_heaps+0x360/0x360 [ 1240.572179] do_vfs_ioctl+0x75a/0xff0 [ 1240.572190] ? ioctl_preallocate+0x1a0/0x1a0 [ 1240.572202] ? lock_downgrade+0x740/0x740 [ 1240.587050] / [ 1240.591271] ? __fget+0x225/0x360 [ 1240.618161] mems_allowed=0-1 [ 1240.622542] ? do_vfs_ioctl+0xff0/0xff0 [ 1240.622557] ? security_file_ioctl+0x83/0xb0 [ 1240.622567] SyS_ioctl+0x7f/0xb0 [ 1240.622575] ? do_vfs_ioctl+0xff0/0xff0 [ 1240.622586] do_syscall_64+0x1d5/0x640 [ 1240.622601] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1240.622609] RIP: 0033:0x4665f9 [ 1240.622614] RSP: 002b:00007f8f37cd7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1240.622624] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1240.622630] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1240.622635] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1240.622641] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1240.622646] R13: 00007fffa483907f R14: 00007f8f37cd7300 R15: 0000000000022000 [ 1240.686273] warn_alloc_show_mem: 1 callbacks suppressed [ 1240.686278] Mem-Info: [ 1240.687738] CPU: 0 PID: 31154 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1240.695968] syz-executor.3: [ 1240.697866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1240.697870] Call Trace: [ 1240.697889] dump_stack+0x1b2/0x281 [ 1240.697905] warn_alloc.cold+0x96/0x1cc [ 1240.697918] ? zone_watermark_ok_safe+0x220/0x220 [ 1240.697940] __alloc_pages_nodemask+0x2127/0x2720 [ 1240.703349] active_anon:22976 inactive_anon:22983 isolated_anon:0 [ 1240.703349] active_file:2613 inactive_file:3468 isolated_file:0 [ 1240.703349] unevictable:0 dirty:56 writeback:0 unstable:0 [ 1240.703349] slab_reclaimable:12614 slab_unreclaimable:113608 [ 1240.703349] mapped:57311 shmem:23314 pagetables:803 bounce:0 [ 1240.703349] free:26388 free_pcp:0 free_cma:0 [ 1240.706304] ? lock_acquire+0x170/0x3f0 [ 1240.706318] ? lock_acquire+0x170/0x3f0 [ 1240.706337] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1240.706356] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1240.706372] ? __mutex_unlock_slowpath+0x75/0x770 [ 1240.719577] page allocation failure: order:4 [ 1240.721326] ? retint_kernel+0x2d/0x2d [ 1240.721342] alloc_pages_current+0x155/0x260 [ 1240.721357] ion_page_pool_alloc+0x118/0x1b0 [ 1240.721368] ion_system_heap_allocate+0x133/0x8c0 [ 1240.721379] ? ion_alloc+0x187/0x810 [ 1240.721388] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1240.721397] ? ion_system_contig_heap_create+0x130/0x130 [ 1240.721407] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1240.721418] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1240.721428] ion_alloc+0x204/0x810 [ 1240.734167] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1240.735980] ? ion_dma_buf_release+0x40/0x40 [ 1240.735995] ? __might_fault+0x177/0x1b0 [ 1240.736008] ion_ioctl+0xea/0x1f0 [ 1240.736017] ? ion_query_heaps+0x360/0x360 [ 1240.736029] ? ion_query_heaps+0x360/0x360 [ 1240.736041] do_vfs_ioctl+0x75a/0xff0 [ 1240.743577] Node 0 active_anon:91508kB inactive_anon:75820kB active_file:10436kB inactive_file:13872kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:229244kB dirty:208kB writeback:0kB shmem:77016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1240.750612] ? ioctl_preallocate+0x1a0/0x1a0 [ 1240.750623] ? lock_downgrade+0x740/0x740 [ 1240.750636] ? __fget+0x225/0x360 [ 1240.750646] ? do_vfs_ioctl+0xff0/0xff0 [ 1240.750658] ? security_file_ioctl+0x83/0xb0 [ 1240.750669] SyS_ioctl+0x7f/0xb0 [ 1240.750676] ? do_vfs_ioctl+0xff0/0xff0 08:22:50 executing program 4: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) clock_gettime(0x4, &(0x7f00000000c0)) rt_sigtimedwait(&(0x7f0000000400)={[0x81]}, &(0x7f0000000440), &(0x7f00000004c0)={0x77359400}, 0x8) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:22:50 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x7fffffff}) [ 1240.750687] do_syscall_64+0x1d5/0x640 [ 1240.750701] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1240.763393] (null) [ 1240.766329] RIP: 0033:0x4665f9 [ 1240.766335] RSP: 002b:00007f6d3989a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1240.766346] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1240.766352] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1240.766358] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1240.766363] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1240.766369] R13: 00007ffc681b1ebf R14: 00007f6d3989a300 R15: 0000000000022000 [ 1240.910090] CPU: 0 PID: 31159 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1240.920667] Node 1 active_anon:396kB inactive_anon:16112kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:16240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1240.923062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1240.923066] Call Trace: [ 1240.923086] dump_stack+0x1b2/0x281 [ 1240.923100] warn_alloc.cold+0x96/0x1cc [ 1240.923113] ? zone_watermark_ok_safe+0x220/0x220 [ 1240.923135] __alloc_pages_nodemask+0x2127/0x2720 [ 1240.929273] Node 0 [ 1240.930829] ? _raw_spin_unlock_irq+0x24/0x80 [ 1240.930845] ? lock_acquire+0x170/0x3f0 [ 1240.930862] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1240.936838] DMA free:11052kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1240.938905] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1240.938918] ? __mutex_unlock_slowpath+0x75/0x770 [ 1240.973065] lowmem_reserve[]: [ 1240.976073] alloc_pages_current+0x155/0x260 [ 1240.976088] ion_page_pool_alloc+0x118/0x1b0 [ 1240.980301] 0 [ 1240.983724] ion_system_heap_allocate+0x133/0x8c0 [ 1240.983734] ? ion_alloc+0x187/0x810 08:22:50 executing program 2: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1240.983744] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1240.983752] ? ion_system_contig_heap_create+0x130/0x130 [ 1240.983769] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1240.983782] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1240.991000] 2717 [ 1240.992137] ion_alloc+0x204/0x810 [ 1240.992152] ? ion_dma_buf_release+0x40/0x40 [ 1240.996649] 2718 [ 1240.999494] ? __might_fault+0x177/0x1b0 [ 1240.999508] ion_ioctl+0xea/0x1f0 [ 1241.006100] 2718 [ 1241.008562] ? ion_query_heaps+0x360/0x360 [ 1241.008578] ? ion_query_heaps+0x360/0x360 [ 1241.010750] 2718 [ 1241.013912] do_vfs_ioctl+0x75a/0xff0 [ 1241.013924] ? ioctl_preallocate+0x1a0/0x1a0 [ 1241.013934] ? lock_downgrade+0x740/0x740 [ 1241.013947] ? __fget+0x225/0x360 [ 1241.013956] ? do_vfs_ioctl+0xff0/0xff0 [ 1241.013971] ? security_file_ioctl+0x83/0xb0 [ 1241.028995] SyS_ioctl+0x7f/0xb0 [ 1241.029005] ? do_vfs_ioctl+0xff0/0xff0 [ 1241.029017] do_syscall_64+0x1d5/0x640 [ 1241.029031] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1241.038095] Node 0 [ 1241.043600] RIP: 0033:0x4665f9 [ 1241.043605] RSP: 002b:00007f36bd391188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1241.043614] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1241.043619] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1241.043624] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1241.043629] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1241.043634] R13: 00007fff735a0e3f R14: 00007f36bd391300 R15: 0000000000022000 [ 1241.348744] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1241.354000] CPU: 1 PID: 31153 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1241.361888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1241.371516] Call Trace: [ 1241.374118] dump_stack+0x1b2/0x281 [ 1241.377838] warn_alloc.cold+0x96/0x1cc [ 1241.381819] ? zone_watermark_ok_safe+0x220/0x220 [ 1241.386949] __alloc_pages_nodemask+0x2127/0x2720 [ 1241.391910] ? finish_task_switch+0x178/0x610 [ 1241.396423] ? switch_mm_irqs_off+0x601/0xeb0 [ 1241.400945] ? lock_acquire+0x170/0x3f0 [ 1241.404939] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1241.409801] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1241.415271] ? __mutex_unlock_slowpath+0x75/0x770 [ 1241.420151] alloc_pages_current+0x155/0x260 [ 1241.424578] ion_page_pool_alloc+0x118/0x1b0 [ 1241.429094] ion_system_heap_allocate+0x133/0x8c0 [ 1241.434053] ? ion_alloc+0x187/0x810 [ 1241.437776] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1241.443238] ? ion_system_contig_heap_create+0x130/0x130 [ 1241.448699] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1241.453727] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1241.458584] ion_alloc+0x204/0x810 [ 1241.462142] ? ion_dma_buf_release+0x40/0x40 [ 1241.466561] ? __might_fault+0x177/0x1b0 [ 1241.471497] ion_ioctl+0xea/0x1f0 [ 1241.474954] ? ion_query_heaps+0x360/0x360 [ 1241.479191] ? ion_query_heaps+0x360/0x360 [ 1241.483460] do_vfs_ioctl+0x75a/0xff0 [ 1241.487265] ? ioctl_preallocate+0x1a0/0x1a0 [ 1241.491687] ? lock_downgrade+0x740/0x740 [ 1241.498536] ? __fget+0x225/0x360 [ 1241.502018] ? do_vfs_ioctl+0xff0/0xff0 [ 1241.506005] ? security_file_ioctl+0x83/0xb0 [ 1241.510415] SyS_ioctl+0x7f/0xb0 [ 1241.513783] ? do_vfs_ioctl+0xff0/0xff0 [ 1241.517773] do_syscall_64+0x1d5/0x640 [ 1241.521698] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1241.526890] RIP: 0033:0x4665f9 [ 1241.530080] RSP: 002b:00007f5728ef6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1241.537818] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1241.545092] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1241.552369] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1241.559654] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1241.566947] R13: 00007ffddad98d9f R14: 00007f5728ef6300 R15: 0000000000022000 [ 1241.616928] DMA32 free:63008kB min:36200kB low:45248kB high:54296kB active_anon:91428kB inactive_anon:75820kB active_file:10532kB inactive_file:13884kB unevictable:0kB writepending:216kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:3208kB bounce:0kB free_pcp:164kB local_pcp:28kB free_cma:0kB [ 1241.712918] lowmem_reserve[]: 0 0 0 0 0 [ 1241.729197] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1241.810007] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1241.825572] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1241.830899] CPU: 1 PID: 31180 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1241.835746] lowmem_reserve[]: [ 1241.838807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1241.838812] Call Trace: [ 1241.838835] dump_stack+0x1b2/0x281 [ 1241.838849] warn_alloc.cold+0x96/0x1cc [ 1241.849926] 0 [ 1241.851304] ? zone_watermark_ok_safe+0x220/0x220 [ 1241.851327] __alloc_pages_nodemask+0x2127/0x2720 [ 1241.851338] ? io_schedule_timeout+0x140/0x140 [ 1241.851353] ? lock_acquire+0x170/0x3f0 [ 1241.851369] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1241.851385] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1241.851398] ? __mutex_unlock_slowpath+0x75/0x770 [ 1241.851412] alloc_pages_current+0x155/0x260 [ 1241.866028] 0 [ 1241.868713] ion_page_pool_alloc+0x118/0x1b0 [ 1241.868725] ion_system_heap_allocate+0x133/0x8c0 [ 1241.887057] 0 [ 1241.892385] ? ion_alloc+0x187/0x810 [ 1241.892398] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1241.892407] ? ion_system_contig_heap_create+0x130/0x130 [ 1241.892417] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1241.892433] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1241.908244] 0 [ 1241.912734] ion_alloc+0x204/0x810 [ 1241.912756] ? ion_dma_buf_release+0x40/0x40 [ 1241.912771] ? __might_fault+0x177/0x1b0 [ 1241.912785] ion_ioctl+0xea/0x1f0 [ 1241.920079] 0 [ 1241.923734] ? ion_query_heaps+0x360/0x360 [ 1241.923745] ? ion_query_heaps+0x360/0x360 [ 1241.923762] do_vfs_ioctl+0x75a/0xff0 [ 1241.923774] ? ioctl_preallocate+0x1a0/0x1a0 [ 1241.923784] ? lock_downgrade+0x740/0x740 [ 1241.923797] ? __fget+0x225/0x360 [ 1241.923806] ? do_vfs_ioctl+0xff0/0xff0 [ 1241.923818] ? security_file_ioctl+0x83/0xb0 [ 1241.923828] SyS_ioctl+0x7f/0xb0 [ 1241.923836] ? do_vfs_ioctl+0xff0/0xff0 [ 1241.923846] do_syscall_64+0x1d5/0x640 [ 1241.923868] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1241.923878] RIP: 0033:0x4665f9 [ 1241.923882] RSP: 002b:00007f397d2ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1241.944491] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1241.944497] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1241.944503] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1241.944508] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1241.944516] R13: 00007ffef3a3887f R14: 00007f397d2ee300 R15: 0000000000022000 [ 1241.959298] Node 1 Normal free:53596kB min:53696kB low:67120kB high:80544kB active_anon:316kB inactive_anon:16112kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:120kB free_cma:0kB [ 1242.260403] lowmem_reserve[]: 0 0 0 0 0 [ 1242.271702] warn_alloc_show_mem: 3 callbacks suppressed [ 1242.271706] Mem-Info: [ 1242.275164] Node 0 [ 1242.289309] active_anon:22972 inactive_anon:22983 isolated_anon:0 [ 1242.289309] active_file:2849 inactive_file:2301 isolated_file:0 [ 1242.289309] unevictable:0 dirty:59 writeback:0 unstable:0 [ 1242.289309] slab_reclaimable:12620 slab_unreclaimable:112970 [ 1242.289309] mapped:57085 shmem:23314 pagetables:819 bounce:0 [ 1242.289309] free:25662 free_pcp:291 free_cma:0 [ 1242.289312] DMA: 1*4kB [ 1242.295087] Node 0 active_anon:91572kB inactive_anon:75820kB active_file:11380kB inactive_file:9204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:228340kB dirty:220kB writeback:0kB shmem:77016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1242.346605] (E) 1*8kB (U) 2*16kB (UE) 2*32kB (UE) 9*64kB (UE) 5*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11052kB [ 1242.408873] Node 0 DMA32: 248*4kB (UME) 102*8kB (UME) 151*16kB (ME) 22*32kB (ME) 450*64kB (U) 16*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35776kB [ 1242.454098] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1242.504799] Node 1 Normal: 20*4kB (UM) 15*8kB (UME) 2*16kB (UM) 1*32kB (U) 586*64kB (U) 32*128kB (U) 22*256kB (U) 25*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 60296kB [ 1242.530551] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1242.551656] Node 1 active_anon:316kB inactive_anon:16112kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:16240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1242.585532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1242.602976] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1242.624365] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1242.639661] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1242.669280] 27586 total pagecache pages [ 1242.677765] 0 pages in swap cache [ 1242.684645] Swap cache stats: add 0, delete 0, find 0/0 [ 1242.691249] Free swap = 0kB [ 1242.694341] Total swap = 0kB [ 1242.697411] 2097051 pages RAM [ 1242.700572] 0 pages HighMem/MovableOnly [ 1242.711023] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1242.718041] 363849 pages reserved [ 1242.726029] Node 0 DMA32 free:35616kB min:36200kB low:45248kB high:54296kB active_anon:91572kB inactive_anon:75820kB active_file:8372kB inactive_file:7288kB unevictable:0kB writepending:220kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:3244kB bounce:0kB free_pcp:364kB local_pcp:192kB free_cma:0kB [ 1242.757810] 0 pages cma reserved [ 1242.778783] lowmem_reserve[]: 0 0 0 0 0 [ 1242.785492] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1242.851687] lowmem_reserve[]: 0 0 0 0 0 [ 1242.855831] Node 1 Normal free:57544kB min:53696kB low:67120kB high:80544kB active_anon:316kB inactive_anon:16112kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:856kB local_pcp:112kB free_cma:0kB [ 1242.926560] lowmem_reserve[]: 0 0 0 0 0 [ 1242.951111] Node 0 DMA: 1*4kB (E) 1*8kB (U) 2*16kB (UE) 2*32kB (UE) 9*64kB (UE) 5*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11052kB [ 1243.000441] Node 0 DMA32: 343*4kB (UME) 124*8kB (UME) 160*16kB (UME) 26*32kB (UME) 450*64kB (UM) 18*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36860kB [ 1243.047470] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1243.084185] Node 1 Normal: 20*4kB (UM) 15*8kB (UME) 2*16kB (UM) 0*32kB 1*64kB (U) 0*128kB 0*256kB 0*512kB 52*1024kB (U) 0*2048kB 0*4096kB = 53544kB [ 1243.140986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1243.149871] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1243.160256] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1243.171593] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1243.211006] 24083 total pagecache pages [ 1243.215023] 0 pages in swap cache [ 1243.218478] Swap cache stats: add 0, delete 0, find 0/0 [ 1243.225302] Free swap = 0kB [ 1243.250820] Total swap = 0kB [ 1243.253940] 2097051 pages RAM [ 1243.258036] 0 pages HighMem/MovableOnly [ 1243.280971] 363849 pages reserved [ 1243.284451] 0 pages cma reserved [ 1244.072488] oom_reaper: reaped process 31154 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1244.170434] oom_reaper: reaped process 31144 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1244.196002] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1244.216792] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1244.217442] syz-executor.0: [ 1244.229005] systemd-journal cpuset= [ 1244.235588] page allocation failure: order:0 [ 1244.238720] / [ 1244.239243] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1244.243718] mems_allowed=0-1 [ 1244.245447] (null) [ 1244.259314] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1244.263217] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1244.264493] CPU: 1 PID: 31154 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1244.278592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1244.287987] Call Trace: [ 1244.290587] dump_stack+0x1b2/0x281 [ 1244.294217] warn_alloc.cold+0x96/0x1cc [ 1244.298203] ? zone_watermark_ok_safe+0x220/0x220 [ 1244.303047] ? usleep_range+0x130/0x130 [ 1244.307031] ? try_to_free_pages+0x23f/0x6e0 [ 1244.311448] ? _find_next_bit+0xdb/0x100 [ 1244.315518] ? run_timer_softirq+0x5a0/0x5a0 [ 1244.320094] __alloc_pages_nodemask+0x2127/0x2720 [ 1244.324955] ? lock_acquire+0x170/0x3f0 [ 1244.328949] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1244.333795] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1244.338305] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1244.343791] alloc_pages_current+0x155/0x260 [ 1244.348207] ion_page_pool_alloc+0x118/0x1b0 [ 1244.352626] ion_system_heap_allocate+0x133/0x8c0 [ 1244.357491] ? ion_alloc+0x187/0x810 [ 1244.361204] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1244.366657] ? ion_system_contig_heap_create+0x130/0x130 [ 1244.372130] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1244.377179] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1244.382020] ion_alloc+0x204/0x810 [ 1244.385579] ? ion_dma_buf_release+0x40/0x40 [ 1244.390006] ? __might_fault+0x177/0x1b0 [ 1244.394063] ion_ioctl+0xea/0x1f0 [ 1244.397512] ? ion_query_heaps+0x360/0x360 [ 1244.401742] ? ion_query_heaps+0x360/0x360 [ 1244.405979] do_vfs_ioctl+0x75a/0xff0 [ 1244.409775] ? ioctl_preallocate+0x1a0/0x1a0 [ 1244.414197] ? lock_downgrade+0x740/0x740 [ 1244.418367] ? __fget+0x225/0x360 [ 1244.421816] ? do_vfs_ioctl+0xff0/0xff0 [ 1244.425791] ? security_file_ioctl+0x83/0xb0 [ 1244.430193] SyS_ioctl+0x7f/0xb0 [ 1244.433553] ? do_vfs_ioctl+0xff0/0xff0 [ 1244.437535] do_syscall_64+0x1d5/0x640 [ 1244.441509] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1244.446719] RIP: 0033:0x4665f9 [ 1244.449894] RSP: 002b:00007f6d3989a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1244.457602] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1244.464866] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1244.472131] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1244.479400] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1244.486675] R13: 00007ffc681b1ebf R14: 00007f6d3989a300 R15: 0000000000022000 [ 1244.495074] CPU: 0 PID: 31144 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1244.501244] Mem-Info: [ 1244.502978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1244.505385] active_anon:22436 inactive_anon:22983 isolated_anon:0 [ 1244.505385] active_file:32 inactive_file:0 isolated_file:0 [ 1244.505385] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1244.505385] slab_reclaimable:12610 slab_unreclaimable:112955 [ 1244.505385] mapped:52665 shmem:23314 pagetables:793 bounce:0 [ 1244.505385] free:13934 free_pcp:113 free_cma:0 [ 1244.514721] Call Trace: [ 1244.514746] dump_stack+0x1b2/0x281 [ 1244.514764] warn_alloc.cold+0x96/0x1cc [ 1244.514776] ? zone_watermark_ok_safe+0x220/0x220 [ 1244.514804] ? usleep_range+0x130/0x130 [ 1244.568922] ? try_to_free_pages+0x23f/0x6e0 [ 1244.573452] ? _find_next_bit+0xdb/0x100 [ 1244.577522] ? run_timer_softirq+0x5a0/0x5a0 [ 1244.581967] __alloc_pages_nodemask+0x2127/0x2720 [ 1244.586924] ? lock_acquire+0x170/0x3f0 [ 1244.590935] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1244.591013] Node 0 active_anon:89428kB inactive_anon:75820kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210660kB dirty:0kB writeback:0kB shmem:77016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1244.595799] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1244.630508] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1244.635973] alloc_pages_current+0x155/0x260 [ 1244.640381] ion_page_pool_alloc+0x118/0x1b0 [ 1244.644783] ion_system_heap_allocate+0x133/0x8c0 [ 1244.651014] ? ion_alloc+0x187/0x810 [ 1244.654815] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1244.660294] ? ion_system_contig_heap_create+0x130/0x130 [ 1244.665903] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1244.670928] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1244.671009] Node 1 active_anon:316kB inactive_anon:16112kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1244.675790] ion_alloc+0x204/0x810 [ 1244.706237] ? ion_dma_buf_release+0x40/0x40 [ 1244.710656] ? __might_fault+0x177/0x1b0 [ 1244.714743] ion_ioctl+0xea/0x1f0 [ 1244.718201] ? ion_query_heaps+0x360/0x360 [ 1244.722444] ? ion_query_heaps+0x360/0x360 [ 1244.726680] do_vfs_ioctl+0x75a/0xff0 [ 1244.730486] ? ioctl_preallocate+0x1a0/0x1a0 [ 1244.730996] Node 0 [ 1244.734895] ? lock_downgrade+0x740/0x740 [ 1244.734909] ? __fget+0x225/0x360 [ 1244.737152] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1244.741362] ? do_vfs_ioctl+0xff0/0xff0 [ 1244.741374] ? security_file_ioctl+0x83/0xb0 [ 1244.741383] SyS_ioctl+0x7f/0xb0 [ 1244.741391] ? do_vfs_ioctl+0xff0/0xff0 [ 1244.741403] do_syscall_64+0x1d5/0x640 [ 1244.741418] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1244.760995] lowmem_reserve[]: [ 1244.770446] RIP: 0033:0x4665f9 [ 1244.780974] 0 [ 1244.782164] RSP: 002b:00007f8f37cd7188 EFLAGS: 00000246 [ 1244.786127] 2717 [ 1244.790008] ORIG_RAX: 0000000000000010 [ 1244.810982] 2718 [ 1244.814604] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1244.814616] 2718 [ 1244.816681] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1244.833343] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1244.840615] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1244.840978] 2718 [ 1244.847884] R13: 00007fffa483907f R14: 00007f8f37cd7300 R15: 0000000000022000 [ 1244.867493] CPU: 1 PID: 30609 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1244.875568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1244.884941] Call Trace: [ 1244.887535] dump_stack+0x1b2/0x281 [ 1244.891164] dump_header+0x178/0x82f [ 1244.894877] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1244.900003] ? ___ratelimit+0x2cd/0x530 [ 1244.904002] oom_kill_process.cold+0x10/0xa40 [ 1244.908529] out_of_memory+0xe3e/0x1190 [ 1244.912514] ? oom_killer_disable+0x1c0/0x1c0 [ 1244.917007] ? mutex_trylock+0x152/0x1a0 [ 1244.921071] __alloc_pages_nodemask+0x23e1/0x2720 [ 1244.925944] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1244.930804] alloc_pages_current+0x155/0x260 [ 1244.935240] filemap_fault+0x11a1/0x1ad0 [ 1244.939310] ext4_filemap_fault+0x84/0xb0 [ 1244.943462] __do_fault+0xfa/0x380 [ 1244.947022] __handle_mm_fault+0x2497/0x4620 [ 1244.951445] ? vm_insert_page+0x7c0/0x7c0 [ 1244.955591] ? lock_downgrade+0x740/0x740 [ 1244.959741] ? mark_held_locks+0xa6/0xf0 [ 1244.963802] handle_mm_fault+0x455/0x9c0 [ 1244.967894] __do_page_fault+0x549/0xad0 [ 1244.971959] ? spurious_fault+0x640/0x640 [ 1244.976114] ? do_page_fault+0x60/0x500 [ 1244.980103] ? page_fault+0x2f/0x50 [ 1244.983742] page_fault+0x45/0x50 [ 1244.987298] RIP: 82617cb8:0x55c73aed7958 [ 1244.991358] RSP: 82617bc0:00007ffd82617bb8 EFLAGS: 55c73c2222b0 [ 1245.011502] Node 0 DMA32 free:45200kB min:36200kB low:45248kB high:54296kB active_anon:89428kB inactive_anon:75820kB active_file:60kB inactive_file:568kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:3140kB bounce:0kB free_pcp:360kB local_pcp:228kB free_cma:0kB [ 1245.053470] lowmem_reserve[]: 0 0 0 0 0 [ 1245.057557] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1245.083388] lowmem_reserve[]: 0 0 0 0 0 [ 1245.087445] Node 1 Normal free:123516kB min:53696kB low:67120kB high:80544kB active_anon:316kB inactive_anon:16112kB active_file:44kB inactive_file:568kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:392kB local_pcp:232kB free_cma:0kB [ 1245.116320] lowmem_reserve[]: 0 0 0 0 0 [ 1245.120388] Node 0 DMA: 3*4kB (UME) 1*8kB (M) 3*16kB (UME) 1*32kB (E) 6*64kB (UE) 7*128kB (UME) 4*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11108kB [ 1245.136568] Node 0 DMA32: 531*4kB (ME) 385*8kB (ME) 186*16kB (UME) 49*32kB (UME) 407*64kB (UM) 47*128kB (UM) 6*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43348kB [ 1245.164023] Mem-Info: [ 1245.172028] active_anon:22432 inactive_anon:22983 isolated_anon:0 [ 1245.172028] active_file:55 inactive_file:49 isolated_file:0 [ 1245.172028] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1245.172028] slab_reclaimable:12610 slab_unreclaimable:112955 [ 1245.172028] mapped:52732 shmem:23314 pagetables:792 bounce:0 [ 1245.172028] free:28490 free_pcp:436 free_cma:0 [ 1245.221950] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1245.249809] Node 1 Normal: 22*4kB (UM) 14*8kB (UME) 3*16kB (UM) 4*32kB (UM) 2*64kB (M) 102*128kB (UM) 31*256kB (UM) 11*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 27128kB [ 1245.260488] syz-executor.0: [ 1245.276615] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1245.277892] page allocation failure: order:4 [ 1245.279673] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1245.299592] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1245.303914] Node 0 active_anon:89412kB inactive_anon:75820kB active_file:84kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210724kB dirty:0kB writeback:0kB shmem:77016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1245.310600] syz-executor.0 cpuset= [ 1245.344757] Node 1 active_anon:316kB inactive_anon:16112kB active_file:60kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:16240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1245.357731] / [ 1245.377495] Node 0 DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1245.389719] mems_allowed=0-1 [ 1245.409258] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1245.414754] Node 0 DMA32 free:17944kB min:36200kB low:45248kB high:54296kB active_anon:89412kB inactive_anon:75820kB active_file:260kB inactive_file:336kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:3136kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1245.424764] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1245.450635] lowmem_reserve[]: 0 0 0 0 0 [ 1245.457661] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1245.464281] CPU: 0 PID: 31144 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1245.485591] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1245.491184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1245.491190] Call Trace: [ 1245.491213] dump_stack+0x1b2/0x281 [ 1245.491228] warn_alloc.cold+0x96/0x1cc [ 1245.491242] ? zone_watermark_ok_safe+0x220/0x220 [ 1245.499828] 23346 total pagecache pages [ 1245.509230] __alloc_pages_nodemask+0x2127/0x2720 [ 1245.509246] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1245.509257] ? lock_acquire+0x170/0x3f0 [ 1245.509271] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1245.511895] lowmem_reserve[]: [ 1245.515511] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1245.519448] 0 [ 1245.524292] ? __mutex_unlock_slowpath+0x75/0x770 [ 1245.524307] alloc_pages_current+0x155/0x260 [ 1245.524321] ion_page_pool_alloc+0x118/0x1b0 [ 1245.524333] ion_system_heap_allocate+0x133/0x8c0 [ 1245.528317] 0 [ 1245.533151] ? _raw_spin_unlock+0x29/0x40 [ 1245.533162] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1245.533171] ? ion_system_contig_heap_create+0x130/0x130 [ 1245.533182] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1245.533195] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1245.538218] 0 pages in swap cache [ 1245.542169] ion_alloc+0x27a/0x810 [ 1245.542184] ? ion_dma_buf_release+0x40/0x40 [ 1245.542199] ? __might_fault+0x177/0x1b0 [ 1245.547029] Swap cache stats: add 0, delete 0, find 0/0 [ 1245.550151] ion_ioctl+0xea/0x1f0 [ 1245.555638] 0 [ 1245.557368] ? ion_query_heaps+0x360/0x360 [ 1245.562215] 0 [ 1245.566687] ? ion_query_heaps+0x360/0x360 [ 1245.571123] 0 [ 1245.575940] do_vfs_ioctl+0x75a/0xff0 [ 1245.581860] ? ioctl_preallocate+0x1a0/0x1a0 [ 1245.581871] ? lock_downgrade+0x740/0x740 [ 1245.581883] ? __fget+0x225/0x360 [ 1245.581891] ? do_vfs_ioctl+0xff0/0xff0 [ 1245.581905] ? security_file_ioctl+0x83/0xb0 [ 1245.586836] Free swap = 0kB [ 1245.592263] SyS_ioctl+0x7f/0xb0 [ 1245.592272] ? do_vfs_ioctl+0xff0/0xff0 [ 1245.592283] do_syscall_64+0x1d5/0x640 [ 1245.592301] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1245.597394] Total swap = 0kB [ 1245.602237] RIP: 0033:0x4665f9 [ 1245.602242] RSP: 002b:00007f8f37cd7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1245.602251] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1245.602256] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1245.602261] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1245.602265] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1245.602274] R13: 00007fffa483907f R14: 00007f8f37cd7300 R15: 0000000000022000 [ 1245.605726] Node 1 [ 1245.616481] warn_alloc_show_mem: 1 callbacks suppressed [ 1245.616484] Mem-Info: [ 1245.635358] 2097051 pages RAM [ 1245.642751] active_anon:22432 inactive_anon:22983 isolated_anon:0 [ 1245.642751] active_file:36 inactive_file:3 isolated_file:0 [ 1245.642751] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1245.642751] slab_reclaimable:12610 slab_unreclaimable:112955 [ 1245.642751] mapped:52682 shmem:23314 pagetables:792 bounce:0 [ 1245.642751] free:13957 free_pcp:0 free_cma:0 [ 1245.653046] Normal free:26896kB min:53696kB low:67120kB high:80544kB active_anon:316kB inactive_anon:16112kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1245.653051] lowmem_reserve[]: 0 0 0 0 0 [ 1245.653071] Node 0 DMA: 1*4kB [ 1245.658451] Node 0 active_anon:89412kB inactive_anon:75820kB active_file:84kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210724kB dirty:0kB writeback:0kB shmem:77016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1245.676182] 0 pages HighMem/MovableOnly [ 1245.680404] Node 1 active_anon:316kB inactive_anon:16112kB active_file:60kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:16240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1245.680491] 363849 pages reserved [ 1245.685741] Node 0 DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1245.685763] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1245.685784] Node 0 DMA32 free:17944kB min:36200kB low:45248kB high:54296kB active_anon:89412kB inactive_anon:75820kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:3136kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1245.685804] lowmem_reserve[]: 0 0 0 0 [ 1245.699816] (E) [ 1245.710899] 0 [ 1245.729262] 0 pages cma reserved [ 1245.759761] 0*8kB [ 1245.786731] Node 0 [ 1245.947084] 2*16kB [ 1245.948342] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1245.965840] (UE) [ 1245.994527] lowmem_reserve[]: 0 0 0 0 0 [ 1246.020992] Node 1 Normal free:254000kB min:53696kB low:67120kB high:80544kB active_anon:316kB inactive_anon:16112kB active_file:4kB inactive_file:1164kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:288kB local_pcp:72kB free_cma:0kB [ 1246.043927] 1*32kB (E) 2*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10948kB [ 1246.115665] lowmem_reserve[]: [ 1246.115670] Node 0 DMA32: [ 1246.118816] 0 [ 1246.118826] 712*4kB [ 1246.121763] 0 0 0 0 [ 1246.128208] Node 0 DMA: 1*4kB (E) 1*8kB (U) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10940kB [ 1246.141024] (ME) 391*8kB (ME) 188*16kB (UME) 50*32kB (UME) 436*64kB (UM) 134*128kB (UM) 6*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 57176kB [ 1246.171011] Node 0 DMA32: 712*4kB (ME) 391*8kB (ME) 187*16kB (ME) 49*32kB (ME) 274*64kB (UM) 134*128kB (UM) 6*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 46760kB [ 1246.205040] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1246.241002] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1246.246399] Node 1 Normal: 1*4kB (U) 1*8kB (E) 1*16kB (M) 2*32kB (UM) 1095*64kB (U) 104*128kB (U) 36*256kB (UM) 12*512kB (U) 150*1024kB (U) 30*2048kB (U) 0*4096kB = 313884kB [ 1246.281034] Node 1 Normal: 1*4kB (M) 2*8kB (UE) 1*16kB (M) 2*32kB (UM) 1031*64kB (U) 105*128kB (UM) 35*256kB (U) 12*512kB (U) 117*1024kB (U) 30*2048kB (U) 0*4096kB = 275876kB [ 1246.331006] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1246.331012] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1246.331022] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1246.340313] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1246.400995] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1246.409891] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1246.435742] 23369 total pagecache pages [ 1246.439794] 0 pages in swap cache [ 1246.445087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1246.445394] Swap cache stats: add 0, delete 0, find 0/0 [ 1246.454860] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1246.465011] Free swap = 0kB [ 1246.481965] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1246.482216] Total swap = 0kB [ 1246.490608] 23369 total pagecache pages [ 1246.497990] 2097051 pages RAM [ 1246.498557] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1246.505572] 0 pages HighMem/MovableOnly [ 1246.508619] CPU: 0 PID: 31154 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1246.512624] 363849 pages reserved [ 1246.520454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1246.523952] 0 pages cma reserved [ 1246.533261] Call Trace: [ 1246.533286] dump_stack+0x1b2/0x281 [ 1246.533299] warn_alloc.cold+0x96/0x1cc [ 1246.533349] ? zone_watermark_ok_safe+0x220/0x220 [ 1246.533370] __alloc_pages_nodemask+0x2127/0x2720 [ 1246.536722] Out of memory (oom_kill_allocating_task): Kill process 30609 (systemd-journal) score 0 or sacrifice child [ 1246.539303] ? lock_acquire+0x170/0x3f0 [ 1246.542978] Killed process 30609 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1764kB [ 1246.546876] ? lock_acquire+0x170/0x3f0 [ 1246.556814] oom_reaper: reaped process 30609 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1764kB [ 1246.567288] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1246.567312] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1246.567325] ? __mutex_unlock_slowpath+0x75/0x770 [ 1246.582843] kworker/u4:1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask= [ 1246.585958] alloc_pages_current+0x155/0x260 [ 1246.596550] (null) [ 1246.601193] ion_page_pool_alloc+0x118/0x1b0 [ 1246.601205] ion_system_heap_allocate+0x133/0x8c0 [ 1246.601219] ? _raw_spin_unlock+0x29/0x40 [ 1246.606677] , order=3, oom_score_adj=0 [ 1246.611527] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1246.611538] ? ion_system_contig_heap_create+0x130/0x130 [ 1246.611549] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1246.611561] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1246.611571] ion_alloc+0x27a/0x810 [ 1246.611584] ? ion_dma_buf_release+0x40/0x40 [ 1246.621349] kworker/u4:1 cpuset= [ 1246.625720] ? __might_fault+0x177/0x1b0 [ 1246.627854] / [ 1246.632267] ion_ioctl+0xea/0x1f0 [ 1246.637158] mems_allowed=0-1 [ 1246.641246] ? ion_query_heaps+0x360/0x360 [ 1246.641258] ? ion_query_heaps+0x360/0x360 [ 1246.641269] do_vfs_ioctl+0x75a/0xff0 [ 1246.641281] ? ioctl_preallocate+0x1a0/0x1a0 [ 1246.705602] ? lock_downgrade+0x740/0x740 [ 1246.709774] ? __fget+0x225/0x360 [ 1246.713248] ? do_vfs_ioctl+0xff0/0xff0 [ 1246.717228] ? security_file_ioctl+0x83/0xb0 [ 1246.721639] SyS_ioctl+0x7f/0xb0 [ 1246.725005] ? do_vfs_ioctl+0xff0/0xff0 [ 1246.728992] do_syscall_64+0x1d5/0x640 [ 1246.732884] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1246.738078] RIP: 0033:0x4665f9 [ 1246.741258] RSP: 002b:00007f6d3989a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1246.748985] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1246.756288] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1246.763663] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1246.770936] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1246.778419] R13: 00007ffc681b1ebf R14: 00007f6d3989a300 R15: 0000000000022000 [ 1246.785750] CPU: 1 PID: 22 Comm: kworker/u4:1 Not tainted 4.14.232-syzkaller #0 [ 1246.793215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1246.801560] 0 pages in swap cache [ 1246.803643] Workqueue: events_unbound call_usermodehelper_exec_work [ 1246.807085] Swap cache stats: add 0, delete 0, find 0/0 [ 1246.807093] Free swap = 0kB [ 1246.813489] Call Trace: [ 1246.813511] dump_stack+0x1b2/0x281 [ 1246.813523] dump_header+0x178/0x82f [ 1246.813533] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1246.813541] ? ___ratelimit+0x2cd/0x530 [ 1246.813550] oom_kill_process.cold+0x10/0xa40 [ 1246.813561] ? lock_downgrade+0x740/0x740 [ 1246.813576] out_of_memory+0x2dc/0x1190 [ 1246.813588] ? oom_killer_disable+0x1c0/0x1c0 [ 1246.829029] Total swap = 0kB [ 1246.831849] ? mutex_trylock+0x152/0x1a0 [ 1246.831863] __alloc_pages_nodemask+0x23e1/0x2720 [ 1246.831879] ? batadv_bla_send_claim+0x287/0xba0 [ 1246.831887] ? batadv_bla_periodic_work+0x56d/0xa80 [ 1246.831900] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1246.837001] 2097051 pages RAM [ 1246.840973] ? fs_reclaim_release+0xd0/0x110 [ 1246.840992] ? kmem_cache_alloc_node+0x38b/0x410 [ 1246.841003] copy_process.part.0+0x265/0x71c0 [ 1246.841016] ? __lock_acquire+0x5fc/0x3f20 [ 1246.841028] ? debug_object_activate+0x292/0x490 [ 1246.841034] ? trace_hardirqs_on+0x10/0x10 [ 1246.841042] ? static_obj+0x50/0x50 [ 1246.841055] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1246.841062] ? __cleanup_sighand+0x40/0x40 [ 1246.841072] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1246.841081] _do_fork+0x184/0xc80 [ 1246.841092] ? fork_idle+0x270/0x270 [ 1246.849360] 0 pages HighMem/MovableOnly [ 1246.849739] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1246.854873] 363849 pages reserved [ 1246.858204] ? process_one_work+0x6c4/0x14a0 [ 1246.863458] 0 pages cma reserved [ 1246.865255] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1246.924353] Mem-Info: [ 1246.927883] kernel_thread+0x2f/0x40 [ 1246.935759] active_anon:22332 inactive_anon:22983 isolated_anon:0 [ 1246.935759] active_file:31 inactive_file:17 isolated_file:0 [ 1246.935759] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1246.935759] slab_reclaimable:12610 slab_unreclaimable:112521 [ 1246.935759] mapped:52258 shmem:23314 pagetables:792 bounce:0 [ 1246.935759] free:13795 free_pcp:60 free_cma:0 [ 1246.936826] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1246.940532] Node 0 active_anon:89012kB inactive_anon:75820kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208960kB dirty:0kB writeback:0kB shmem:77016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1246.944492] ? call_usermodehelper+0x80/0x80 [ 1246.944502] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1246.944511] process_one_work+0x793/0x14a0 [ 1246.944523] ? work_busy+0x320/0x320 [ 1246.944528] ? worker_thread+0x158/0xff0 [ 1246.944539] ? _raw_spin_unlock_irq+0x24/0x80 [ 1246.944548] worker_thread+0x5cc/0xff0 [ 1246.944562] ? rescuer_thread+0xc80/0xc80 [ 1246.944571] kthread+0x30d/0x420 [ 1246.944579] ? kthread_create_on_node+0xd0/0xd0 [ 1246.944586] ret_from_fork+0x24/0x30 [ 1246.967145] Mem-Info: [ 1246.969016] syz-executor.0: [ 1246.982203] active_anon:22332 inactive_anon:22983 isolated_anon:0 [ 1246.982203] active_file:31 inactive_file:17 isolated_file:0 [ 1246.982203] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1246.982203] slab_reclaimable:12610 slab_unreclaimable:112521 [ 1246.982203] mapped:52258 shmem:23314 pagetables:792 bounce:0 [ 1246.982203] free:13795 free_pcp:88 free_cma:0 [ 1247.010537] Node 1 active_anon:316kB inactive_anon:16112kB active_file:64kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72kB dirty:0kB writeback:0kB shmem:16240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1247.024555] Node 0 active_anon:88948kB inactive_anon:75816kB active_file:52kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:77016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1247.043706] page allocation failure: order:0 [ 1247.056042] Node 1 active_anon:320kB inactive_anon:16112kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:0kB writeback:0kB shmem:16240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1247.057268] Node 0 [ 1247.071120] Node 0 [ 1247.078202] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1247.094901] DMA free:10940kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1247.128835] DMA free:10940kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1247.163918] lowmem_reserve[]: [ 1247.184699] (null) [ 1247.198913] 0 [ 1247.216996] lowmem_reserve[]: [ 1247.229027] 2717 [ 1247.254468] syz-executor.0 cpuset= [ 1247.287758] 2718 2718 2718 [ 1247.292549] 0 [ 1247.294978] Node 0 [ 1247.294986] 2717 [ 1247.296783] DMA32 free:17904kB min:36200kB low:45248kB high:54296kB active_anon:88948kB inactive_anon:75816kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:3040kB bounce:0kB free_pcp:348kB local_pcp:228kB free_cma:0kB [ 1247.298997] 2718 2718 [ 1247.313423] lowmem_reserve[]: [ 1247.334029] / mems_allowed=0-1 [ 1247.340401] CPU: 0 PID: 31144 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1247.346703] 0 [ 1247.348302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1247.348311] 0 [ 1247.350103] Call Trace: [ 1247.359523] 0 [ 1247.361295] dump_stack+0x1b2/0x281 [ 1247.361311] warn_alloc.cold+0x96/0x1cc [ 1247.363883] 0 [ 1247.365685] ? zone_watermark_ok_safe+0x220/0x220 [ 1247.369301] 0 [ 1247.373298] ? usleep_range+0x130/0x130 [ 1247.373308] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1247.373320] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1247.373329] ? run_timer_softirq+0x5a0/0x5a0 [ 1247.373347] __alloc_pages_nodemask+0x2127/0x2720 [ 1247.380028] ? lock_acquire+0x170/0x3f0 [ 1247.381848] Node 0 [ 1247.385790] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1247.390880] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1247.395894] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1247.395912] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1247.395931] alloc_pages_current+0x155/0x260 [ 1247.395943] ion_page_pool_alloc+0x118/0x1b0 [ 1247.400353] lowmem_reserve[]: 0 [ 1247.405236] ion_system_heap_allocate+0x133/0x8c0 [ 1247.405248] ? _raw_spin_unlock+0x29/0x40 [ 1247.405256] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1247.405268] ? ion_system_contig_heap_create+0x130/0x130 [ 1247.409240] 0 [ 1247.411471] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1247.411485] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1247.411496] ion_alloc+0x27a/0x810 [ 1247.411510] ? ion_dma_buf_release+0x40/0x40 [ 1247.416331] 0 [ 1247.441237] ? __might_fault+0x177/0x1b0 [ 1247.441251] ion_ioctl+0xea/0x1f0 [ 1247.441261] ? ion_query_heaps+0x360/0x360 [ 1247.441273] ? ion_query_heaps+0x360/0x360 [ 1247.445773] 0 [ 1247.451236] do_vfs_ioctl+0x75a/0xff0 [ 1247.451249] ? ioctl_preallocate+0x1a0/0x1a0 [ 1247.451259] ? lock_downgrade+0x740/0x740 [ 1247.451272] ? __fget+0x225/0x360 [ 1247.455662] 0 [ 1247.460101] ? do_vfs_ioctl+0xff0/0xff0 [ 1247.468208] ? security_file_ioctl+0x83/0xb0 [ 1247.472379] Node 1 [ 1247.477291] SyS_ioctl+0x7f/0xb0 [ 1247.482782] Normal free:26640kB min:53696kB low:67120kB high:80544kB active_anon:320kB inactive_anon:16112kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 1247.484529] ? do_vfs_ioctl+0xff0/0xff0 [ 1247.489520] lowmem_reserve[]: [ 1247.494364] do_syscall_64+0x1d5/0x640 [ 1247.494380] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1247.494389] RIP: 0033:0x4665f9 [ 1247.494394] RSP: 002b:00007f8f37cd7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1247.497926] 0 [ 1247.502324] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1247.502330] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1247.502334] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1247.502339] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1247.502344] R13: 00007fffa483907f R14: 00007f8f37cd7300 R15: 0000000000022000 [ 1247.506811] 2718 [ 1247.508222] 0 [ 1247.511720] Node 0 DMA32 free:17904kB min:36200kB low:45248kB high:54296kB active_anon:88948kB inactive_anon:75816kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:3040kB bounce:0kB free_pcp:344kB local_pcp:120kB free_cma:0kB [ 1247.511743] lowmem_reserve[]: 0 0 0 0 0 [ 1247.511762] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1247.511781] lowmem_reserve[]: 0 0 0 0 0 [ 1247.511801] Node 1 Normal free:26640kB min:53696kB low:67120kB high:80544kB active_anon:320kB inactive_anon:16112kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 1247.511821] lowmem_reserve[]: 0 0 0 0 0 [ 1247.511840] Node 0 DMA: 1*4kB (E) 1*8kB (U) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10940kB [ 1247.511919] Node 0 DMA32: 726*4kB (UME) 391*8kB (UME) 188*16kB (UME) 49*32kB (ME) 8*64kB (M) 37*128kB (UM) 8*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 1247.529496] 0 [ 1247.533049] = 17904kB [ 1247.539094] 0 [ 1247.539878] Node 0 [ 1247.551896] 0 [ 1247.558667] Normal: [ 1247.602863] 0*4kB [ 1247.617663] Node 0 [ 1247.618571] 0*8kB [ 1247.630214] DMA: [ 1247.639598] 0*16kB [ 1247.643478] 1*4kB [ 1247.647942] 0*32kB [ 1247.649945] (E) [ 1247.658228] 0*64kB [ 1247.691394] 1*8kB [ 1247.717026] 0*128kB [ 1247.753574] (U) [ 1247.771051] 0*256kB [ 1247.830534] 1*16kB (E) 1*32kB (E) 2*64kB (UE) 6*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10940kB [ 1247.895624] Node 0 DMA32: 601*4kB (ME) 391*8kB (UME) 188*16kB (UME) 50*32kB (UME) 126*64kB (UM) 41*128kB (UM) 9*256kB (UM) 0*512kB 20*1024kB (U) 1*2048kB (U) 0*4096kB = 48284kB [ 1247.931012] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1247.936177] Node 1 Normal: 2*4kB (UM) 2*8kB (ME) 1*16kB (U) 0*32kB 405*64kB (UM) 20*128kB (UME) 5*256kB (UM) 5*512kB (U) 137*1024kB (U) 16*2048kB (UM) 0*4096kB = 205416kB [ 1247.949565] Node 0 [ 1247.960884] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1247.962373] Normal: [ 1247.981053] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1248.008367] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1248.031334] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1248.040234] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1248.062350] Node 1 Normal: 1*4kB (U) 2*8kB (ME) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 1*128kB (E) 1*256kB (U) 1*512kB (U) 81*1024kB (U) 15*2048kB (U) 0*4096kB = 114772kB [ 1248.091005] 24516 total pagecache pages [ 1248.095048] 0 pages in swap cache [ 1248.098539] Swap cache stats: add 0, delete 0, find 0/0 [ 1248.105120] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1248.124176] Free swap = 0kB [ 1248.127229] Total swap = 0kB [ 1248.130245] 2097051 pages RAM [ 1248.154023] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1248.197828] 0 pages HighMem/MovableOnly [ 1248.223897] 363849 pages reserved [ 1248.227429] 0 pages cma reserved [ 1248.231018] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1248.239872] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1248.278034] 23388 total pagecache pages [ 1248.282111] 0 pages in swap cache [ 1248.285588] Swap cache stats: add 0, delete 0, find 0/0 [ 1248.295450] Free swap = 0kB [ 1248.298506] Total swap = 0kB [ 1248.301582] 2097051 pages RAM [ 1248.304715] 0 pages HighMem/MovableOnly [ 1248.308695] 363849 pages reserved [ 1248.316815] 0 pages cma reserved [ 1248.320210] Out of memory: Kill process 31147 (syz-executor.3) score 1004 or sacrifice child [ 1248.328934] Killed process 31153 (syz-executor.3) total-vm:93252kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 1248.381028] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1248.397662] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1248.401320] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1248.409589] syz-executor.3: [ 1248.427714] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1248.430853] oom_reaper: reaped process 31153 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1248.436067] CPU: 0 PID: 31159 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1248.452728] syz-executor.5 cpuset= [ 1248.453895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1248.453904] / [ 1248.457452] Call Trace: [ 1248.466998] page allocation failure: order:0 [ 1248.468642] dump_stack+0x1b2/0x281 [ 1248.472508] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1248.475728] warn_alloc.cold+0x96/0x1cc [ 1248.479350] (null) [ 1248.479359] syz-executor.3 cpuset= [ 1248.486566] ? lock_downgrade+0x740/0x740 [ 1248.486578] ? zone_watermark_ok_safe+0x220/0x220 [ 1248.486590] ? wake_up_q+0x82/0xd0 [ 1248.486611] ? wait_for_completion_io+0x10/0x10 [ 1248.490622] syz-executor.2 cpuset= [ 1248.492750] __alloc_pages_nodemask+0x2127/0x2720 [ 1248.492769] ? lock_acquire+0x170/0x3f0 [ 1248.492783] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1248.492796] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1248.496439] / [ 1248.500600] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1248.510991] mems_allowed=0-1 [ 1248.513653] ? alloc_pages_current+0x37/0x260 [ 1248.524593] oom_reaper: reaped process 31180 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1248.526240] alloc_pages_current+0x155/0x260 [ 1248.531141] mems_allowed=0-1 [ 1248.535586] ion_page_pool_alloc+0x118/0x1b0 [ 1248.541009] / [ 1248.542740] ion_system_heap_allocate+0x133/0x8c0 [ 1248.545826] mems_allowed=0-1 [ 1248.550325] ? ion_alloc+0x187/0x810 [ 1248.550337] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1248.550345] ? ion_system_contig_heap_create+0x130/0x130 [ 1248.550355] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1248.550371] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1248.607031] ion_alloc+0x204/0x810 [ 1248.611536] ? ion_dma_buf_release+0x40/0x40 [ 1248.615964] ? __might_fault+0x177/0x1b0 [ 1248.620029] ion_ioctl+0xea/0x1f0 [ 1248.624198] ? ion_query_heaps+0x360/0x360 [ 1248.628442] ? ion_query_heaps+0x360/0x360 [ 1248.632683] do_vfs_ioctl+0x75a/0xff0 [ 1248.636512] ? ioctl_preallocate+0x1a0/0x1a0 [ 1248.641095] ? lock_downgrade+0x740/0x740 [ 1248.645256] ? __fget+0x225/0x360 [ 1248.648728] ? do_vfs_ioctl+0xff0/0xff0 [ 1248.652722] ? security_file_ioctl+0x83/0xb0 [ 1248.657133] SyS_ioctl+0x7f/0xb0 [ 1248.660517] ? do_vfs_ioctl+0xff0/0xff0 [ 1248.664496] do_syscall_64+0x1d5/0x640 [ 1248.668417] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1248.673621] RIP: 0033:0x4665f9 [ 1248.676804] RSP: 002b:00007f36bd391188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1248.685410] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1248.693219] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1248.700513] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1248.707788] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1248.715075] R13: 00007fff735a0e3f R14: 00007f36bd391300 R15: 0000000000022000 [ 1248.722401] CPU: 1 PID: 31180 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1248.730308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1248.735154] warn_alloc_show_mem: 1 callbacks suppressed [ 1248.735159] Mem-Info: [ 1248.739882] Call Trace: [ 1248.749443] active_anon:22292 inactive_anon:22982 isolated_anon:0 [ 1248.749443] active_file:41 inactive_file:0 isolated_file:0 [ 1248.749443] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1248.749443] slab_reclaimable:12588 slab_unreclaimable:112614 [ 1248.749443] mapped:52225 shmem:23314 pagetables:731 bounce:0 [ 1248.749443] free:13699 free_pcp:180 free_cma:0 [ 1248.750245] dump_stack+0x1b2/0x281 [ 1248.787290] warn_alloc.cold+0x96/0x1cc [ 1248.791275] ? lock_downgrade+0x740/0x740 [ 1248.791815] Node 0 active_anon:88848kB inactive_anon:75816kB active_file:160kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:77016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1248.795427] ? zone_watermark_ok_safe+0x220/0x220 [ 1248.828838] ? wake_up_q+0x82/0xd0 [ 1248.832383] ? wait_for_completion_io+0x10/0x10 [ 1248.837330] __alloc_pages_nodemask+0x2127/0x2720 [ 1248.842183] ? lock_acquire+0x170/0x3f0 [ 1248.846168] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1248.851012] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1248.855516] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1248.861052] ? retint_kernel+0x2d/0x2d [ 1248.864955] alloc_pages_current+0x155/0x260 [ 1248.869390] ion_page_pool_alloc+0x118/0x1b0 [ 1248.873226] Node 1 active_anon:320kB inactive_anon:16112kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1248.873798] ion_system_heap_allocate+0x133/0x8c0 [ 1248.905514] ? ion_alloc+0x187/0x810 [ 1248.909451] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1248.914922] ? ion_system_contig_heap_create+0x130/0x130 [ 1248.920382] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1248.925408] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1248.930260] ion_alloc+0x204/0x810 [ 1248.933800] ? ion_dma_buf_release+0x40/0x40 [ 1248.938248] ? __might_fault+0x177/0x1b0 [ 1248.942326] ion_ioctl+0xea/0x1f0 [ 1248.945793] ? ion_query_heaps+0x360/0x360 [ 1248.950050] ? ion_query_heaps+0x360/0x360 [ 1248.954281] do_vfs_ioctl+0x75a/0xff0 [ 1248.958078] ? ioctl_preallocate+0x1a0/0x1a0 [ 1248.962503] ? lock_downgrade+0x740/0x740 [ 1248.966662] ? __fget+0x225/0x360 [ 1248.969375] Node 0 [ 1248.970121] ? do_vfs_ioctl+0xff0/0xff0 [ 1248.970138] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1248.970143] lowmem_reserve[]: [ 1248.972369] ? security_file_ioctl+0x83/0xb0 [ 1248.972379] SyS_ioctl+0x7f/0xb0 [ 1248.972387] ? do_vfs_ioctl+0xff0/0xff0 [ 1248.972398] do_syscall_64+0x1d5/0x640 [ 1248.972413] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1248.972421] RIP: 0033:0x4665f9 [ 1248.972425] RSP: 002b:00007f397d2ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1248.972438] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1248.976430] 0 [ 1249.001933] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1249.001939] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1249.001943] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1249.001948] R13: 00007ffef3a3887f R14: 00007f397d2ee300 R15: 0000000000022000 [ 1249.018513] CPU: 1 PID: 31154 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1249.070484] oom_reaper: reaped process 31159 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1249.075698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1249.075704] Call Trace: [ 1249.075737] dump_stack+0x1b2/0x281 [ 1249.075751] warn_alloc.cold+0x96/0x1cc [ 1249.075762] ? zone_watermark_ok_safe+0x220/0x220 [ 1249.075773] ? usleep_range+0x130/0x130 [ 1249.075785] ? try_to_free_pages+0x23f/0x6e0 [ 1249.092236] 2717 [ 1249.093846] ? _find_next_bit+0xdb/0x100 [ 1249.111013] 2718 [ 1249.113394] ? run_timer_softirq+0x5a0/0x5a0 [ 1249.118229] 2718 [ 1249.122221] __alloc_pages_nodemask+0x2127/0x2720 [ 1249.122239] ? lock_acquire+0x170/0x3f0 [ 1249.122259] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1249.122269] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1249.122286] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1249.122305] alloc_pages_current+0x155/0x260 [ 1249.141039] 2718 [ 1249.141512] ion_page_pool_alloc+0x118/0x1b0 [ 1249.150327] ion_system_heap_allocate+0x133/0x8c0 [ 1249.171026] Node 0 [ 1249.171768] ? _raw_spin_unlock+0x29/0x40 [ 1249.176300] DMA32 free:17960kB min:36200kB low:45248kB high:54296kB active_anon:88748kB inactive_anon:75816kB active_file:112kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2940kB bounce:0kB free_pcp:584kB local_pcp:328kB free_cma:0kB [ 1249.181149] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1249.181159] ? ion_system_contig_heap_create+0x130/0x130 [ 1249.181169] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1249.181181] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1249.181191] ion_alloc+0x27a/0x810 [ 1249.181205] ? ion_dma_buf_release+0x40/0x40 [ 1249.181216] ? __might_fault+0x177/0x1b0 [ 1249.181227] ion_ioctl+0xea/0x1f0 [ 1249.181243] ? ion_query_heaps+0x360/0x360 [ 1249.181255] ? ion_query_heaps+0x360/0x360 [ 1249.191036] lowmem_reserve[]: [ 1249.215932] do_vfs_ioctl+0x75a/0xff0 [ 1249.215946] ? ioctl_preallocate+0x1a0/0x1a0 [ 1249.215956] ? lock_downgrade+0x740/0x740 [ 1249.215968] ? __fget+0x225/0x360 [ 1249.215976] ? do_vfs_ioctl+0xff0/0xff0 [ 1249.215987] ? security_file_ioctl+0x83/0xb0 [ 1249.215997] SyS_ioctl+0x7f/0xb0 [ 1249.216004] ? do_vfs_ioctl+0xff0/0xff0 [ 1249.216018] do_syscall_64+0x1d5/0x640 [ 1249.251048] 0 [ 1249.251945] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1249.256273] 0 [ 1249.260651] RIP: 0033:0x4665f9 [ 1249.281011] 0 [ 1249.283552] RSP: 002b:00007f6d3989a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1249.287960] 0 [ 1249.291312] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1249.291317] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1249.291322] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1249.291331] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1249.291336] R13: 00007ffc681b1ebf R14: 00007f6d3989a300 R15: 0000000000022000 [ 1249.303319] kworker/u4:1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask= [ 1249.306268] CPU: 0 PID: 31153 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1249.308052] (null) [ 1249.311231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1249.311236] Call Trace: [ 1249.311264] dump_stack+0x1b2/0x281 [ 1249.311278] warn_alloc.cold+0x96/0x1cc [ 1249.311291] ? zone_watermark_ok_safe+0x220/0x220 [ 1249.311303] ? usleep_range+0x130/0x130 [ 1249.323603] , order=3, oom_score_adj=0 [ 1249.330289] ? try_to_free_pages+0x23f/0x6e0 [ 1249.351206] kworker/u4:1 cpuset= [ 1249.352253] ? _find_next_bit+0xdb/0x100 [ 1249.360052] / [ 1249.369868] ? run_timer_softirq+0x5a0/0x5a0 [ 1249.411000] mems_allowed=0-1 [ 1249.412770] __alloc_pages_nodemask+0x2127/0x2720 [ 1249.438952] ? lock_acquire+0x170/0x3f0 [ 1249.442954] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1249.447896] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1249.452552] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1249.458384] alloc_pages_current+0x155/0x260 [ 1249.462800] ion_page_pool_alloc+0x118/0x1b0 [ 1249.467241] ion_system_heap_allocate+0x133/0x8c0 [ 1249.472172] ? ion_alloc+0x187/0x810 [ 1249.475909] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1249.481371] ? ion_system_contig_heap_create+0x130/0x130 [ 1249.486826] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1249.491848] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1249.496708] ion_alloc+0x204/0x810 [ 1249.500261] ? ion_dma_buf_release+0x40/0x40 [ 1249.504679] ? __might_fault+0x177/0x1b0 [ 1249.508759] ion_ioctl+0xea/0x1f0 [ 1249.512223] ? ion_query_heaps+0x360/0x360 [ 1249.516474] ? ion_query_heaps+0x360/0x360 [ 1249.520729] do_vfs_ioctl+0x75a/0xff0 [ 1249.524539] ? ioctl_preallocate+0x1a0/0x1a0 [ 1249.528974] ? lock_downgrade+0x740/0x740 [ 1249.533139] ? __fget+0x225/0x360 [ 1249.536591] ? do_vfs_ioctl+0xff0/0xff0 [ 1249.541006] ? security_file_ioctl+0x83/0xb0 [ 1249.545427] SyS_ioctl+0x7f/0xb0 [ 1249.548805] ? do_vfs_ioctl+0xff0/0xff0 [ 1249.552787] do_syscall_64+0x1d5/0x640 [ 1249.556702] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1249.562958] RIP: 0033:0x4665f9 [ 1249.566143] RSP: 002b:00007f5728ef6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1249.573868] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1249.581265] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1249.588856] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1249.596158] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1249.604500] R13: 00007ffddad98d9f R14: 00007f5728ef6300 R15: 0000000000022000 [ 1249.612502] 0 [ 1249.614185] CPU: 1 PID: 22 Comm: kworker/u4:1 Not tainted 4.14.232-syzkaller #0 [ 1249.614324] Node 0 [ 1249.621978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1249.621996] Workqueue: events_unbound call_usermodehelper_exec_work [ 1249.622002] Call Trace: [ 1249.622021] dump_stack+0x1b2/0x281 [ 1249.622032] dump_header+0x178/0x82f [ 1249.622042] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1249.622050] ? ___ratelimit+0x2cd/0x530 [ 1249.622062] oom_kill_process.cold+0x10/0xa40 [ 1249.624312] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1249.633772] ? lock_downgrade+0x740/0x740 [ 1249.633788] out_of_memory+0x2dc/0x1190 [ 1249.633800] ? oom_killer_disable+0x1c0/0x1c0 [ 1249.633809] ? mutex_trylock+0x152/0x1a0 [ 1249.633819] __alloc_pages_nodemask+0x23e1/0x2720 [ 1249.633834] ? batadv_bla_send_claim+0x287/0xba0 [ 1249.633842] ? batadv_bla_periodic_work+0x56d/0xa80 [ 1249.633855] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1249.640272] lowmem_reserve[]: [ 1249.642857] ? fs_reclaim_release+0xd0/0x110 [ 1249.642876] ? kmem_cache_alloc_node+0x38b/0x410 [ 1249.642888] copy_process.part.0+0x265/0x71c0 [ 1249.642901] ? __lock_acquire+0x5fc/0x3f20 [ 1249.642915] ? debug_object_activate+0x292/0x490 [ 1249.646524] 0 [ 1249.650244] ? trace_hardirqs_on+0x10/0x10 [ 1249.655405] 0 [ 1249.659306] ? static_obj+0x50/0x50 [ 1249.663843] 0 [ 1249.688897] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1249.688907] ? __cleanup_sighand+0x40/0x40 [ 1249.688916] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1249.688924] _do_fork+0x184/0xc80 [ 1249.688935] ? fork_idle+0x270/0x270 [ 1249.688948] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1249.688961] ? process_one_work+0x6c4/0x14a0 [ 1249.693157] 0 [ 1249.697217] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1249.701786] 0 [ 1249.705751] kernel_thread+0x2f/0x40 [ 1249.715353] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1249.715362] ? call_usermodehelper+0x80/0x80 [ 1249.715370] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1249.715378] process_one_work+0x793/0x14a0 [ 1249.715391] ? work_busy+0x320/0x320 [ 1249.715397] ? worker_thread+0x158/0xff0 [ 1249.715407] ? _raw_spin_unlock_irq+0x24/0x80 [ 1249.715418] worker_thread+0x5cc/0xff0 [ 1249.720433] Node 1 [ 1249.725296] ? rescuer_thread+0xc80/0xc80 [ 1249.725305] kthread+0x30d/0x420 [ 1249.725311] ? kthread_create_on_node+0xd0/0xd0 [ 1249.725320] ret_from_fork+0x24/0x30 [ 1249.867823] Normal free:48496kB min:53696kB low:67120kB high:80544kB active_anon:320kB inactive_anon:16112kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:228kB local_pcp:108kB free_cma:0kB [ 1249.898796] lowmem_reserve[]: 0 0 0 0 0 [ 1249.906933] Node 0 DMA: 20*4kB (UE) 4*8kB (U) 2*16kB (UE) 2*32kB (UE) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11152kB [ 1249.926168] warn_alloc_show_mem: 2 callbacks suppressed [ 1249.926173] Mem-Info: [ 1249.934101] active_anon:22243 inactive_anon:22982 isolated_anon:0 [ 1249.934101] active_file:15 inactive_file:17 isolated_file:0 [ 1249.934101] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1249.934101] slab_reclaimable:12588 slab_unreclaimable:112620 [ 1249.934101] mapped:52225 shmem:23314 pagetables:743 bounce:0 [ 1249.934101] free:75026 free_pcp:443 free_cma:0 [ 1249.983667] Node 0 DMA32: 11393*4kB (UME) 6518*8kB (UME) 4111*16kB (UME) 1351*32kB (UME) 707*64kB (UM) 75*128kB (UM) 14*256kB (UM) 2*512kB (U) 18*1024kB (U) 1*2048kB (U) 0*4096kB = 286660kB [ 1250.071004] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1250.105189] Node 0 active_anon:88652kB inactive_anon:75816kB active_file:56kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:77016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1250.137168] Node 1 Normal: 7088*4kB (UM) 523*8kB (UME) 476*16kB (UM) 456*32kB (UM) 1273*64kB (UM) 115*128kB (UME) 43*256kB (UM) 22*512kB (UM) 41*1024kB (U) 11*2048kB (UM) 0*4096kB = 237720kB [ 1250.161797] Mem-Info: [ 1250.164232] active_anon:22243 inactive_anon:22982 isolated_anon:0 [ 1250.164232] active_file:15 inactive_file:17 isolated_file:0 [ 1250.164232] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1250.164232] slab_reclaimable:12563 slab_unreclaimable:112622 [ 1250.164232] mapped:52225 shmem:23314 pagetables:743 bounce:0 [ 1250.164232] free:157752 free_pcp:690 free_cma:0 [ 1250.206646] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1250.208355] Node 0 active_anon:88652kB inactive_anon:75816kB active_file:256kB inactive_file:468kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:209200kB dirty:0kB writeback:0kB shmem:77016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1250.215625] Node 1 active_anon:320kB inactive_anon:16112kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1250.215631] Node 0 DMA free:11168kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1250.215650] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1250.215668] Node 0 DMA32 free:335040kB min:36200kB low:45248kB high:54296kB active_anon:88652kB inactive_anon:75816kB active_file:256kB inactive_file:468kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2940kB bounce:0kB free_pcp:1384kB local_pcp:708kB free_cma:0kB [ 1250.215688] lowmem_reserve[]: 0 0 0 0 0 [ 1250.215706] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1250.215725] lowmem_reserve[]: 0 0 0 0 0 [ 1250.215746] Node 1 Normal free:237644kB min:53696kB low:67120kB high:80544kB active_anon:320kB inactive_anon:16112kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:1372kB local_pcp:684kB free_cma:0kB [ 1250.215774] lowmem_reserve[]: 0 0 0 0 0 [ 1250.245119] Node 1 active_anon:320kB inactive_anon:16112kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1250.274840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1250.340499] Node 0 [ 1250.365803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1250.398200] DMA free:11168kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1250.473250] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1250.476747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1250.486994] 24652 total pagecache pages [ 1250.494549] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1250.495904] 0 pages in swap cache [ 1250.505513] Swap cache stats: add 0, delete 0, find 0/0 [ 1250.507674] Node 0 [ 1250.511182] Free swap = 0kB [ 1250.514847] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1250.521021] Total swap = 0kB [ 1250.532426] 2097051 pages RAM [ 1250.534819] DMA32 free:241524kB min:36200kB low:45248kB high:54296kB active_anon:88652kB inactive_anon:75816kB active_file:940kB inactive_file:5288kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2940kB bounce:0kB free_pcp:140kB local_pcp:68kB free_cma:0kB [ 1250.535528] 0 pages HighMem/MovableOnly [ 1250.535533] 363849 pages reserved [ 1250.535536] 0 pages cma reserved [ 1250.571024] Node 0 DMA: 24*4kB (UE) 4*8kB (U) 2*16kB (UE) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1250.577515] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1250.606906] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1250.611045] Node 0 DMA32: 14502*4kB (U) 6917*8kB (UE) 4981*16kB (UE) 1504*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 241168kB [ 1250.613663] CPU: 1 PID: 31180 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1250.630997] Node 0 [ 1250.633921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1250.633930] Normal: [ 1250.636174] Call Trace: [ 1250.650430] dump_stack+0x1b2/0x281 [ 1250.654079] warn_alloc.cold+0x96/0x1cc [ 1250.658054] ? zone_watermark_ok_safe+0x220/0x220 [ 1250.661000] 0*4kB 0*8kB 0*16kB 0*32kB [ 1250.662922] __alloc_pages_nodemask+0x2127/0x2720 [ 1250.662939] ? lock_acquire+0x170/0x3f0 [ 1250.666809] 0*64kB [ 1250.671759] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1250.671776] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1250.671788] ? __mutex_unlock_slowpath+0x75/0x770 [ 1250.671795] ? retint_kernel+0x2d/0x2d [ 1250.671808] alloc_pages_current+0x155/0x260 [ 1250.671822] ion_page_pool_alloc+0x118/0x1b0 [ 1250.671831] ion_system_heap_allocate+0x133/0x8c0 [ 1250.671843] ? _raw_spin_unlock+0x29/0x40 [ 1250.691144] 0*128kB [ 1250.693301] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1250.697190] 0*256kB [ 1250.701621] ? ion_system_contig_heap_create+0x130/0x130 [ 1250.701632] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1250.701645] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1250.701655] ion_alloc+0x27a/0x810 [ 1250.701670] ? ion_dma_buf_release+0x40/0x40 [ 1250.721004] 0*512kB [ 1250.722303] ? __might_fault+0x177/0x1b0 [ 1250.724610] 0*1024kB [ 1250.730058] ion_ioctl+0xea/0x1f0 [ 1250.751027] 0*2048kB [ 1250.754233] ? ion_query_heaps+0x360/0x360 [ 1250.756626] 0*4096kB [ 1250.760352] ? ion_query_heaps+0x360/0x360 [ 1250.773772] do_vfs_ioctl+0x75a/0xff0 [ 1250.777582] ? ioctl_preallocate+0x1a0/0x1a0 [ 1250.781054] = 0kB [ 1250.782008] ? lock_downgrade+0x740/0x740 [ 1250.784063] Node 1 Normal: [ 1250.788224] ? __fget+0x225/0x360 [ 1250.788235] 6979*4kB [ 1250.791153] ? do_vfs_ioctl+0xff0/0xff0 [ 1250.791165] ? security_file_ioctl+0x83/0xb0 [ 1250.791173] SyS_ioctl+0x7f/0xb0 [ 1250.791182] ? do_vfs_ioctl+0xff0/0xff0 [ 1250.791193] do_syscall_64+0x1d5/0x640 [ 1250.791206] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1250.791214] RIP: 0033:0x4665f9 [ 1250.791218] RSP: 002b:00007f397d2ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1250.791228] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1250.791233] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1250.791241] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1250.801004] (UM) [ 1250.801032] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1250.805544] 515*8kB [ 1250.808895] R13: 00007ffef3a3887f R14: 00007f397d2ee300 R15: 0000000000022000 [ 1250.816205] lowmem_reserve[]: [ 1250.817029] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1250.831851] 0 [ 1250.850996] (UME) [ 1250.861780] 0 [ 1250.881016] 469*16kB [ 1250.888288] 0 [ 1250.889753] (U) [ 1250.893361] 0 [ 1250.894116] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1250.895709] 0 [ 1250.895717] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1250.895740] lowmem_reserve[]: 0 0 0 0 0 [ 1250.895761] Node 1 Normal free:61252kB min:53696kB low:67120kB high:80544kB active_anon:320kB inactive_anon:16112kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:668kB local_pcp:0kB free_cma:0kB [ 1250.895777] lowmem_reserve[]: 0 0 0 0 0 [ 1250.895794] Node 0 DMA: 24*4kB (UE) 4*8kB (U) 2*16kB (UE) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1250.895861] Node 0 DMA32: 14715*4kB (U) 7949*8kB (UME) 6049*16kB (UME) 2202*32kB (UME) 128*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 297892kB [ 1250.896139] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1250.896186] Node 1 Normal: 7158*4kB (UM) 903*8kB (UME) 672*16kB (UME) 458*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 61264kB [ 1250.896249] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1250.896255] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1250.896261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1250.896267] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1250.896271] 25515 total pagecache pages [ 1250.896281] 0 pages in swap cache [ 1250.896286] Swap cache stats: add 0, delete 0, find 0/0 [ 1250.896290] Free swap = 0kB [ 1250.896293] Total swap = 0kB [ 1250.896299] 2097051 pages RAM [ 1250.896302] 0 pages HighMem/MovableOnly [ 1250.896306] 363849 pages reserved [ 1250.896309] 0 pages cma reserved [ 1250.896317] Out of memory: Kill process 7959 (syz-fuzzer) score 10 or sacrifice child [ 1250.896379] Killed process 30616 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1250.957351] 458*32kB [ 1251.041129] systemd[1]: Stopped Journal Service. [ 1251.135189] (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54196kB [ 1251.155205] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1251.164378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1251.177829] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1251.187685] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1251.211217] 25846 total pagecache pages [ 1251.215253] 0 pages in swap cache [ 1251.225399] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1251.235366] Swap cache stats: add 0, delete 0, find 0/0 [ 1251.248458] Free swap = 0kB [ 1251.252141] Total swap = 0kB [ 1251.255164] 2097051 pages RAM [ 1251.258264] 0 pages HighMem/MovableOnly [ 1251.261042] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1251.266531] 363849 pages reserved [ 1251.267370] CPU: 0 PID: 31159 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1251.271772] 0 pages cma reserved [ 1251.278819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1251.278824] Call Trace: [ 1251.278844] dump_stack+0x1b2/0x281 [ 1251.278858] warn_alloc.cold+0x96/0x1cc [ 1251.278870] ? zone_watermark_ok_safe+0x220/0x220 [ 1251.278893] __alloc_pages_nodemask+0x2127/0x2720 [ 1251.278912] ? lock_acquire+0x170/0x3f0 [ 1251.278926] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1251.320370] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1251.325925] ? __mutex_unlock_slowpath+0x75/0x770 [ 1251.330777] ? retint_kernel+0x2d/0x2d [ 1251.334701] alloc_pages_current+0x155/0x260 [ 1251.339127] ion_page_pool_alloc+0x118/0x1b0 [ 1251.343581] ion_system_heap_allocate+0x133/0x8c0 [ 1251.348442] ? _raw_spin_unlock+0x29/0x40 [ 1251.352704] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1251.357851] ? ion_system_contig_heap_create+0x130/0x130 [ 1251.363549] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1251.368589] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1251.373658] ion_alloc+0x27a/0x810 [ 1251.377501] ? ion_dma_buf_release+0x40/0x40 [ 1251.382097] ? __might_fault+0x177/0x1b0 [ 1251.386279] ion_ioctl+0xea/0x1f0 [ 1251.390257] ? ion_query_heaps+0x360/0x360 [ 1251.394716] ? ion_query_heaps+0x360/0x360 [ 1251.399136] do_vfs_ioctl+0x75a/0xff0 [ 1251.402949] ? ioctl_preallocate+0x1a0/0x1a0 [ 1251.407369] ? lock_downgrade+0x740/0x740 [ 1251.411565] ? __fget+0x225/0x360 [ 1251.415030] ? do_vfs_ioctl+0xff0/0xff0 [ 1251.419049] ? security_file_ioctl+0x83/0xb0 [ 1251.423492] SyS_ioctl+0x7f/0xb0 [ 1251.426866] ? do_vfs_ioctl+0xff0/0xff0 [ 1251.430851] do_syscall_64+0x1d5/0x640 [ 1251.434756] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1251.440123] RIP: 0033:0x4665f9 [ 1251.443332] RSP: 002b:00007f36bd391188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1251.451152] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1251.458689] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1251.465967] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1251.473243] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1251.480522] R13: 00007fff735a0e3f R14: 00007f36bd391300 R15: 0000000000022000 [ 1251.491290] systemd[1]: Starting Journal Service... [ 1251.542425] warn_alloc_show_mem: 1 callbacks suppressed [ 1251.542429] Mem-Info: [ 1251.551551] active_anon:22286 inactive_anon:22982 isolated_anon:0 [ 1251.551551] active_file:845 inactive_file:2265 isolated_file:0 [ 1251.551551] unevictable:0 dirty:13 writeback:0 unstable:0 [ 1251.551551] slab_reclaimable:12554 slab_unreclaimable:112438 [ 1251.551551] mapped:45662 shmem:23314 pagetables:681 bounce:0 [ 1251.551551] free:104657 free_pcp:322 free_cma:0 [ 1251.585925] Node 0 active_anon:88924kB inactive_anon:75816kB active_file:3372kB inactive_file:9456kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182948kB dirty:48kB writeback:0kB shmem:77016kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1251.614615] Node 1 active_anon:320kB inactive_anon:16112kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:16240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1251.642171] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1251.668956] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1251.674037] Node 0 DMA32 free:319376kB min:36200kB low:45248kB high:54296kB active_anon:88524kB inactive_anon:75816kB active_file:2980kB inactive_file:9516kB unevictable:0kB writepending:48kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2692kB bounce:0kB free_pcp:712kB local_pcp:76kB free_cma:0kB [ 1251.704069] lowmem_reserve[]: 0 0 0 0 0 [ 1251.708111] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1251.740746] lowmem_reserve[]: 0 0 0 0 0 [ 1251.744862] Node 1 Normal free:96292kB min:53696kB low:67120kB high:80544kB active_anon:320kB inactive_anon:16112kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:1328kB local_pcp:620kB free_cma:0kB [ 1251.780298] lowmem_reserve[]: 0 0 0 0 0 [ 1251.784597] Node 0 DMA: 75*4kB (UE) 6*8kB (U) 6*16kB (UE) 4*32kB (UE) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11004kB [ 1251.821072] Node 0 DMA32: 7286*4kB (UME) 11784*8kB (UME) 8591*16kB (UE) 2994*32kB (UME) 4*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 356936kB [ 1251.838859] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1251.867848] Node 1 Normal: 15905*4kB (UM) 1329*8kB (UME) 1032*16kB (UME) 769*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 115372kB [ 1251.883013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1251.894184] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1251.910557] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1251.911613] systemd-journald[31186]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1251.919491] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1251.945243] 26683 total pagecache pages [ 1251.952295] 0 pages in swap cache [ 1251.955761] Swap cache stats: add 0, delete 0, find 0/0 [ 1251.961317] Free swap = 0kB [ 1251.965844] Total swap = 0kB [ 1251.968872] 2097051 pages RAM [ 1251.973564] 0 pages HighMem/MovableOnly [ 1251.977555] 363849 pages reserved [ 1251.988755] 0 pages cma reserved [ 1251.993446] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1252.021005] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1252.026161] CPU: 0 PID: 31153 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1252.034044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1252.043424] Call Trace: [ 1252.046019] dump_stack+0x1b2/0x281 [ 1252.049661] warn_alloc.cold+0x96/0x1cc [ 1252.052034] systemd-journald[31186]: /dev/kmsg buffer overrun, some messages lost. [ 1252.053657] ? zone_watermark_ok_safe+0x220/0x220 [ 1252.066221] __alloc_pages_nodemask+0x2127/0x2720 [ 1252.071079] ? lock_acquire+0x170/0x3f0 [ 1252.075064] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1252.079923] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1252.085380] ? check_preemption_disabled+0x35/0x240 [ 1252.090400] ? __mutex_unlock_slowpath+0x75/0x770 [ 1252.095250] alloc_pages_current+0x155/0x260 [ 1252.099666] ion_page_pool_alloc+0x118/0x1b0 [ 1252.104081] ion_system_heap_allocate+0x133/0x8c0 [ 1252.108941] ? _raw_spin_unlock+0x29/0x40 [ 1252.113091] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1252.118023] ? ion_system_contig_heap_create+0x130/0x130 [ 1252.123486] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1252.128520] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1252.133374] ion_alloc+0x27a/0x810 [ 1252.136926] ? ion_dma_buf_release+0x40/0x40 [ 1252.141343] ? __might_fault+0x177/0x1b0 [ 1252.145410] ion_ioctl+0xea/0x1f0 [ 1252.148863] ? ion_query_heaps+0x360/0x360 [ 1252.153104] ? ion_query_heaps+0x360/0x360 [ 1252.157340] do_vfs_ioctl+0x75a/0xff0 [ 1252.161146] ? ioctl_preallocate+0x1a0/0x1a0 [ 1252.165554] ? lock_downgrade+0x740/0x740 [ 1252.169717] ? __fget+0x225/0x360 [ 1252.173181] ? do_vfs_ioctl+0xff0/0xff0 [ 1252.177202] ? security_file_ioctl+0x83/0xb0 [ 1252.181631] SyS_ioctl+0x7f/0xb0 [ 1252.185086] ? do_vfs_ioctl+0xff0/0xff0 [ 1252.189081] do_syscall_64+0x1d5/0x640 [ 1252.192975] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1252.198169] RIP: 0033:0x4665f9 [ 1252.201357] RSP: 002b:00007f5728ef6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1252.209067] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1252.216344] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1252.223620] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1252.231461] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1252.238829] R13: 00007ffddad98d9f R14: 00007f5728ef6300 R15: 0000000000022000 [ 1252.921859] systemd[1]: Started Journal Service. [ 1254.633637] syz-executor.3 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1254.652181] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1254.665188] CPU: 0 PID: 31153 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1254.673087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1254.682542] Call Trace: [ 1254.685139] dump_stack+0x1b2/0x281 [ 1254.688767] dump_header+0x178/0x82f [ 1254.692508] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1254.697612] ? ___ratelimit+0x2cd/0x530 [ 1254.701613] oom_kill_process.cold+0x10/0xa40 [ 1254.706225] out_of_memory+0xe3e/0x1190 [ 1254.710284] ? oom_killer_disable+0x1c0/0x1c0 [ 1254.714779] ? mutex_trylock+0x152/0x1a0 [ 1254.718834] __alloc_pages_nodemask+0x23e1/0x2720 [ 1254.723767] ? lock_acquire+0x170/0x3f0 [ 1254.727750] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1254.732597] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1254.737081] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1254.742532] ? __sanitizer_cov_trace_pc+0xe/0x50 [ 1254.747407] alloc_pages_current+0x155/0x260 [ 1254.751817] ion_page_pool_alloc+0x118/0x1b0 [ 1254.756300] ion_system_heap_allocate+0x133/0x8c0 [ 1254.761128] ? _raw_spin_unlock+0x29/0x40 [ 1254.765260] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1254.770181] ? ion_system_contig_heap_create+0x130/0x130 [ 1254.775618] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1254.780739] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1254.785614] ion_alloc+0x27a/0x810 [ 1254.789283] ? ion_dma_buf_release+0x40/0x40 [ 1254.793683] ? __might_fault+0x177/0x1b0 [ 1254.797753] ion_ioctl+0xea/0x1f0 [ 1254.801187] ? ion_query_heaps+0x360/0x360 [ 1254.805421] ? ion_query_heaps+0x360/0x360 [ 1254.809650] do_vfs_ioctl+0x75a/0xff0 [ 1254.813438] ? ioctl_preallocate+0x1a0/0x1a0 [ 1254.817868] ? lock_downgrade+0x740/0x740 [ 1254.822004] ? __fget+0x225/0x360 [ 1254.825459] ? do_vfs_ioctl+0xff0/0xff0 [ 1254.829435] ? security_file_ioctl+0x83/0xb0 [ 1254.833830] SyS_ioctl+0x7f/0xb0 [ 1254.837194] ? do_vfs_ioctl+0xff0/0xff0 [ 1254.841170] do_syscall_64+0x1d5/0x640 [ 1254.845045] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1254.850215] RIP: 0033:0x4665f9 [ 1254.853384] RSP: 002b:00007f5728ef6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1254.861187] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1254.868550] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1254.876186] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1254.883456] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1254.890741] R13: 00007ffddad98d9f R14: 00007f5728ef6300 R15: 0000000000022000 [ 1254.900588] Mem-Info: [ 1254.903246] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1254.906100] active_anon:22339 inactive_anon:25015 isolated_anon:0 [ 1254.906100] active_file:18 inactive_file:16 isolated_file:0 [ 1254.906100] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1254.906100] slab_reclaimable:12539 slab_unreclaimable:114578 [ 1254.906100] mapped:43955 shmem:25362 pagetables:670 bounce:0 [ 1254.906100] free:14035 free_pcp:30 free_cma:0 [ 1254.917157] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1254.955580] CPU: 1 PID: 31159 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1254.959103] Node 0 active_anon:89040kB inactive_anon:83952kB active_file:68kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175820kB dirty:0kB writeback:0kB shmem:85212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1254.963456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1254.963461] Call Trace: [ 1254.963483] dump_stack+0x1b2/0x281 [ 1254.963498] warn_alloc.cold+0x96/0x1cc [ 1254.963509] ? zone_watermark_ok_safe+0x220/0x220 [ 1254.963518] ? usleep_range+0x130/0x130 [ 1254.963526] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1254.963541] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1254.997516] Node 1 active_anon:316kB inactive_anon:16108kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1255.000758] ? run_timer_softirq+0x5a0/0x5a0 [ 1255.003392] Node 0 [ 1255.006952] __alloc_pages_nodemask+0x2127/0x2720 [ 1255.010934] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1255.019725] ? lock_acquire+0x170/0x3f0 [ 1255.024871] lowmem_reserve[]: [ 1255.029842] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1255.062616] 0 [ 1255.063090] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1255.067909] 2717 [ 1255.093419] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1255.093439] alloc_pages_current+0x155/0x260 [ 1255.093453] ion_page_pool_alloc+0x118/0x1b0 [ 1255.093462] ion_system_heap_allocate+0x133/0x8c0 [ 1255.093472] ? _raw_spin_unlock+0x29/0x40 [ 1255.093480] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1255.093489] ? ion_system_contig_heap_create+0x130/0x130 [ 1255.093499] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1255.093509] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1255.093519] ion_alloc+0x27a/0x810 [ 1255.093533] ? ion_dma_buf_release+0x40/0x40 [ 1255.093544] ? __might_fault+0x177/0x1b0 [ 1255.093555] ion_ioctl+0xea/0x1f0 [ 1255.093564] ? ion_query_heaps+0x360/0x360 [ 1255.093576] ? ion_query_heaps+0x360/0x360 [ 1255.093585] do_vfs_ioctl+0x75a/0xff0 [ 1255.093596] ? ioctl_preallocate+0x1a0/0x1a0 [ 1255.093604] ? lock_downgrade+0x740/0x740 [ 1255.093617] ? __fget+0x225/0x360 [ 1255.103235] 2718 [ 1255.105524] ? do_vfs_ioctl+0xff0/0xff0 [ 1255.107301] 2718 [ 1255.111782] ? security_file_ioctl+0x83/0xb0 [ 1255.111793] SyS_ioctl+0x7f/0xb0 [ 1255.111802] ? do_vfs_ioctl+0xff0/0xff0 [ 1255.111813] do_syscall_64+0x1d5/0x640 [ 1255.111827] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1255.111836] RIP: 0033:0x4665f9 [ 1255.111841] RSP: 002b:00007f36bd391188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1255.111851] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1255.111856] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1255.111864] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1255.118060] 2718 [ 1255.119346] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1255.128126] R13: 00007fff735a0e3f R14: 00007f36bd391300 R15: 0000000000022000 [ 1255.136842] Node 0 [ 1255.139609] warn_alloc_show_mem: 1 callbacks suppressed [ 1255.139612] Mem-Info: [ 1255.144255] DMA32 free:18156kB min:36200kB low:45248kB high:54296kB active_anon:89040kB inactive_anon:83952kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2648kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1255.147517] active_anon:22339 inactive_anon:25015 isolated_anon:0 [ 1255.147517] active_file:16 inactive_file:18 isolated_file:0 [ 1255.147517] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1255.147517] slab_reclaimable:12539 slab_unreclaimable:114578 [ 1255.147517] mapped:43955 shmem:25362 pagetables:670 bounce:0 [ 1255.147517] free:14035 free_pcp:30 free_cma:0 [ 1255.156364] lowmem_reserve[]: [ 1255.157435] Node 0 active_anon:89040kB inactive_anon:83952kB active_file:64kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175820kB dirty:0kB writeback:0kB shmem:85212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1255.163154] 0 [ 1255.165409] Node 1 active_anon:316kB inactive_anon:16108kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1255.169440] 0 [ 1255.172923] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1255.172944] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1255.172965] Node 0 DMA32 free:18156kB min:36200kB low:45248kB high:54296kB active_anon:89040kB inactive_anon:83952kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2648kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1255.172985] lowmem_reserve[]: 0 0 0 0 0 [ 1255.173004] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1255.173022] lowmem_reserve[]: 0 0 0 0 0 [ 1255.173042] Node 1 Normal free:27020kB min:53696kB low:67120kB high:80544kB active_anon:316kB inactive_anon:16108kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1255.173062] lowmem_reserve[]: 0 0 0 0 0 [ 1255.173082] Node 0 DMA: 1*4kB (E) 0*8kB 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 4*128kB (UE) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 1255.173161] Node 0 DMA32: 763*4kB (ME) 268*8kB (UME) 170*16kB (UME) 24*32kB (UME) 10*64kB (UME) 1*128kB (E) 4*256kB (M) 3*512kB (UM) 4*1024kB (U) 1*2048kB (U) 0*4096kB = 18156kB [ 1255.173236] Node 0 Normal: 0*4kB [ 1255.183230] 0 [ 1255.185551] 0*8kB [ 1255.190012] 0 [ 1255.194195] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1255.203558] 0 [ 1255.203790] Node 1 [ 1255.210189] Normal: [ 1255.216797] Node 0 [ 1255.217564] 9*4kB [ 1255.224574] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1255.226764] (UME) [ 1255.229944] lowmem_reserve[]: [ 1255.237715] 5*8kB (ME) 12*16kB (ME) 10*32kB (ME) 5*64kB (M) 4*128kB (ME) 4*256kB (UM) 0*512kB 0*1024kB 12*2048kB [ 1255.251196] 0 [ 1255.252544] (U) [ 1255.259626] 0 [ 1255.262304] 0*4096kB [ 1255.273249] 0 [ 1255.276390] = 27020kB [ 1255.278536] 0 [ 1255.283933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1255.283939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1255.283946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1255.289523] 0 [ 1255.314570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1255.314576] 25396 total pagecache pages [ 1255.314587] 0 pages in swap cache [ 1255.314611] Swap cache stats: add 0, delete 0, find 0/0 [ 1255.355270] Free swap = 0kB [ 1255.381251] Node 1 [ 1255.412053] Total swap = 0kB [ 1255.437931] Normal free:27020kB min:53696kB low:67120kB high:80544kB active_anon:316kB inactive_anon:16108kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1255.444397] 2097051 pages RAM [ 1255.471994] lowmem_reserve[]: [ 1255.477365] 0 pages HighMem/MovableOnly [ 1255.501417] 0 [ 1255.506978] 363849 pages reserved [ 1255.533714] 0 [ 1255.539705] 0 pages cma reserved [ 1255.549840] 0 0 0 [ 1255.549859] Node 0 DMA: 1*4kB (E) 0*8kB 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 4*128kB (UE) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 1255.772941] Node 0 DMA32: 298*4kB (ME) 268*8kB (UME) 170*16kB (UME) 24*32kB (UME) 629*64kB (UME) 32*128kB (UE) 6*256kB (UM) 3*512kB (UM) 4*1024kB (U) 1*2048kB (U) 0*4096kB = 60392kB [ 1255.789430] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1255.800292] Node 1 Normal: 4*4kB (UME) 2*8kB (ME) 7*16kB (ME) 10*32kB (ME) 2681*64kB (UM) 156*128kB (UME) 19*256kB (UM) 0*512kB 85*1024kB (U) 17*2048kB (U) 1*4096kB (U) = 322832kB [ 1255.816629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1255.825537] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1255.834221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1255.850448] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1255.859148] 26284 total pagecache pages [ 1255.863238] 0 pages in swap cache [ 1255.866693] Swap cache stats: add 0, delete 0, find 0/0 [ 1255.872115] Free swap = 0kB [ 1255.875153] Total swap = 0kB [ 1255.878174] 2097051 pages RAM [ 1255.881363] 0 pages HighMem/MovableOnly [ 1255.885454] 363849 pages reserved [ 1255.888898] 0 pages cma reserved [ 1255.892731] Out of memory (oom_kill_allocating_task): Kill process 31153 (syz-executor.3) score 0 or sacrifice child [ 1255.904133] Killed process 31153 (syz-executor.3) total-vm:93252kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1255.914455] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1255.936003] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1255.951331] CPU: 0 PID: 31153 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1255.959246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1255.968603] Call Trace: [ 1255.971204] dump_stack+0x1b2/0x281 [ 1255.974850] warn_alloc.cold+0x96/0x1cc [ 1255.978831] ? zone_watermark_ok_safe+0x220/0x220 [ 1255.983713] ? wait_for_completion_io+0x10/0x10 [ 1255.988395] __alloc_pages_nodemask+0x2127/0x2720 [ 1255.993262] ? lock_acquire+0x170/0x3f0 [ 1255.997280] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1256.002132] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1256.006643] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1256.012115] ? __sanitizer_cov_trace_pc+0xe/0x50 [ 1256.016882] alloc_pages_current+0x155/0x260 [ 1256.021391] ion_page_pool_alloc+0x118/0x1b0 [ 1256.025805] ion_system_heap_allocate+0x133/0x8c0 [ 1256.030654] ? _raw_spin_unlock+0x29/0x40 [ 1256.034798] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1256.039726] ? ion_system_contig_heap_create+0x130/0x130 [ 1256.045176] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1256.050194] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1256.055060] ion_alloc+0x27a/0x810 [ 1256.058599] ? ion_dma_buf_release+0x40/0x40 [ 1256.063008] ? __might_fault+0x177/0x1b0 [ 1256.067068] ion_ioctl+0xea/0x1f0 [ 1256.070518] ? ion_query_heaps+0x360/0x360 [ 1256.074751] ? ion_query_heaps+0x360/0x360 [ 1256.078983] do_vfs_ioctl+0x75a/0xff0 [ 1256.082784] ? ioctl_preallocate+0x1a0/0x1a0 [ 1256.087190] ? lock_downgrade+0x740/0x740 [ 1256.091367] ? __fget+0x225/0x360 [ 1256.094820] ? do_vfs_ioctl+0xff0/0xff0 [ 1256.098798] ? security_file_ioctl+0x83/0xb0 [ 1256.103216] SyS_ioctl+0x7f/0xb0 [ 1256.106603] ? do_vfs_ioctl+0xff0/0xff0 [ 1256.110578] do_syscall_64+0x1d5/0x640 [ 1256.114503] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1256.119690] RIP: 0033:0x4665f9 [ 1256.122948] RSP: 002b:00007f5728ef6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1256.130659] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1256.137940] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1256.145252] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1256.152548] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1256.159823] R13: 00007ffddad98d9f R14: 00007f5728ef6300 R15: 0000000000022000 [ 1256.217783] Mem-Info: [ 1256.220238] active_anon:22339 inactive_anon:25015 isolated_anon:0 [ 1256.220238] active_file:67 inactive_file:865 isolated_file:0 [ 1256.220238] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1256.220238] slab_reclaimable:12539 slab_unreclaimable:114588 [ 1256.220238] mapped:44577 shmem:25362 pagetables:644 bounce:0 [ 1256.220238] free:166165 free_pcp:551 free_cma:0 [ 1256.254785] Node 0 active_anon:89040kB inactive_anon:83952kB active_file:268kB inactive_file:3384kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:178280kB dirty:0kB writeback:0kB shmem:85212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1256.284538] Node 1 active_anon:316kB inactive_anon:16108kB active_file:0kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1256.312075] Node 0 DMA free:11156kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1256.339227] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1256.344873] Node 0 DMA32 free:371440kB min:36200kB low:45248kB high:54296kB active_anon:89040kB inactive_anon:83952kB active_file:268kB inactive_file:3384kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2544kB bounce:0kB free_pcp:948kB local_pcp:236kB free_cma:0kB [ 1256.381079] lowmem_reserve[]: 0 0 0 0 0 [ 1256.385110] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1256.411951] lowmem_reserve[]: 0 0 0 0 0 [ 1256.415988] Node 1 Normal free:454156kB min:53696kB low:67120kB high:80544kB active_anon:316kB inactive_anon:16108kB active_file:0kB inactive_file:76kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:1328kB local_pcp:620kB free_cma:0kB [ 1256.445748] lowmem_reserve[]: 0 0 0 0 0 [ 1256.449753] Node 0 DMA: 1*4kB (E) 0*8kB 1*16kB (E) 2*32kB (UE) 3*64kB (UE) 5*128kB (UE) 2*256kB (UE) 1*512kB (E) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11156kB [ 1256.465399] Node 0 DMA32: 3938*4kB (UME) 12431*8kB (UME) 8441*16kB (UME) 2123*32kB (UME) 1822*64kB (UME) 334*128kB (UE) 22*256kB (UM) 6*512kB (UM) 5*1024kB (U) 1*2048kB (U) 0*4096kB = 493424kB [ 1256.483529] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1256.495821] Node 1 Normal: 11432*4kB (UE) 1920*8kB (UME) 972*16kB (UME) 633*32kB (UME) 2939*64kB (UM) 241*128kB (UME) 61*256kB (UM) 9*512kB (U) 98*1024kB (U) 18*2048kB (U) 1*4096kB (U) = 477376kB [ 1256.514232] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1256.523675] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1256.532833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1256.542301] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1256.551575] 26245 total pagecache pages [ 1256.555572] 0 pages in swap cache [ 1256.559020] Swap cache stats: add 0, delete 0, find 0/0 [ 1256.565784] Free swap = 0kB [ 1256.568807] Total swap = 0kB [ 1256.572766] 2097051 pages RAM [ 1256.576044] 0 pages HighMem/MovableOnly [ 1256.580098] 363849 pages reserved [ 1256.584889] 0 pages cma reserved 08:23:06 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:23:06 executing program 3: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:23:06 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:23:06 executing program 5: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:23:06 executing program 2: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:23:06 executing program 4: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) clock_gettime(0x4, &(0x7f00000000c0)) rt_sigtimedwait(&(0x7f0000000400)={[0x81]}, &(0x7f0000000440), &(0x7f00000004c0)={0x77359400}, 0x8) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1257.505139] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1257.505166] syz-executor.2: [ 1257.505168] (null) [ 1257.505176] syz-executor.5 cpuset= [ 1257.516705] syz-executor.0: [ 1257.523777] / [ 1257.528160] page allocation failure: order:4 [ 1257.528895] syz-executor.3: [ 1257.531897] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1257.535624] page allocation failure: order:4 [ 1257.538812] page allocation failure: order:4 [ 1257.548597] mems_allowed=0-1 [ 1257.551238] (null) [ 1257.555164] CPU: 0 PID: 31206 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1257.558258] syz-executor.0 cpuset= [ 1257.559469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1257.559473] Call Trace: [ 1257.559492] dump_stack+0x1b2/0x281 [ 1257.559508] warn_alloc.cold+0x96/0x1cc [ 1257.559521] ? zone_watermark_ok_safe+0x220/0x220 [ 1257.559544] __alloc_pages_nodemask+0x2127/0x2720 [ 1257.570586] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1257.572593] ? ___preempt_schedule+0x16/0x18 [ 1257.572612] ? lock_acquire+0x170/0x3f0 [ 1257.572631] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1257.572651] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1257.572664] ? __mutex_unlock_slowpath+0x75/0x770 [ 1257.572679] alloc_pages_current+0x155/0x260 [ 1257.572692] ion_page_pool_alloc+0x118/0x1b0 [ 1257.585283] / [ 1257.588287] ion_system_heap_allocate+0x133/0x8c0 [ 1257.593682] (null) [ 1257.597222] ? ion_alloc+0x187/0x810 [ 1257.597235] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1257.597246] ? ion_system_contig_heap_create+0x130/0x130 [ 1257.597256] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1257.597268] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1257.597279] ion_alloc+0x204/0x810 [ 1257.597294] ? ion_dma_buf_release+0x40/0x40 [ 1257.602364] mems_allowed=0-1 [ 1257.609428] ? __might_fault+0x177/0x1b0 [ 1257.609443] ion_ioctl+0xea/0x1f0 [ 1257.609454] ? ion_query_heaps+0x360/0x360 [ 1257.609467] ? ion_query_heaps+0x360/0x360 [ 1257.609478] do_vfs_ioctl+0x75a/0xff0 [ 1257.609490] ? ioctl_preallocate+0x1a0/0x1a0 [ 1257.609503] ? lock_downgrade+0x740/0x740 [ 1257.621083] syz-executor.2 cpuset= [ 1257.622701] ? __fget+0x225/0x360 [ 1257.622713] ? do_vfs_ioctl+0xff0/0xff0 [ 1257.622726] ? security_file_ioctl+0x83/0xb0 [ 1257.622738] SyS_ioctl+0x7f/0xb0 [ 1257.622746] ? do_vfs_ioctl+0xff0/0xff0 [ 1257.622758] do_syscall_64+0x1d5/0x640 [ 1257.629454] / [ 1257.633028] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1257.648538] mems_allowed=0-1 [ 1257.650474] RIP: 0033:0x4665f9 [ 1257.650480] RSP: 002b:00007f6d3989a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1257.650490] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1257.650496] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1257.650502] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1257.650508] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1257.650514] R13: 00007ffc681b1ebf R14: 00007f6d3989a300 R15: 0000000000022000 [ 1257.659482] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1257.660545] CPU: 1 PID: 31208 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1257.666394] (null) [ 1257.670362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1257.670367] Call Trace: [ 1257.670386] dump_stack+0x1b2/0x281 [ 1257.670402] warn_alloc.cold+0x96/0x1cc [ 1257.670414] ? zone_watermark_ok_safe+0x220/0x220 [ 1257.670436] __alloc_pages_nodemask+0x2127/0x2720 [ 1257.675500] syz-executor.3 cpuset= [ 1257.678798] ? __schedule+0x893/0x1de0 [ 1257.678817] ? lock_acquire+0x170/0x3f0 [ 1257.678835] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1257.678870] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1257.687982] / [ 1257.690417] ? __mutex_unlock_slowpath+0x75/0x770 [ 1257.694848] mems_allowed=0-1 [ 1257.698080] ? __sanitizer_cov_trace_pc+0x34/0x50 [ 1257.698098] alloc_pages_current+0x155/0x260 [ 1257.698112] ion_page_pool_alloc+0x118/0x1b0 [ 1257.698122] ion_system_heap_allocate+0x133/0x8c0 [ 1257.698132] ? ion_alloc+0x187/0x810 [ 1257.767747] Mem-Info: [ 1257.769272] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1257.769285] ? ion_system_contig_heap_create+0x130/0x130 [ 1257.769295] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1257.769311] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1257.789896] active_anon:22480 inactive_anon:25013 isolated_anon:48 [ 1257.789896] active_file:1921 inactive_file:4374 isolated_file:3 [ 1257.789896] unevictable:0 dirty:44 writeback:0 unstable:0 [ 1257.789896] slab_reclaimable:12539 slab_unreclaimable:116550 [ 1257.789896] mapped:48380 shmem:25359 pagetables:754 bounce:0 [ 1257.789896] free:137072 free_pcp:107 free_cma:0 [ 1257.791124] ion_alloc+0x204/0x810 [ 1257.791142] ? ion_dma_buf_release+0x40/0x40 [ 1257.791154] ? __might_fault+0x177/0x1b0 [ 1257.791165] ion_ioctl+0xea/0x1f0 [ 1257.791173] ? ion_query_heaps+0x360/0x360 [ 1257.791184] ? ion_query_heaps+0x360/0x360 [ 1257.791195] do_vfs_ioctl+0x75a/0xff0 [ 1257.791207] ? ioctl_preallocate+0x1a0/0x1a0 [ 1257.799699] Node 0 active_anon:89620kB inactive_anon:83944kB active_file:7656kB inactive_file:17476kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:193492kB dirty:172kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1257.805592] ? lock_downgrade+0x740/0x740 [ 1257.805609] ? __fget+0x225/0x360 [ 1257.805620] ? do_vfs_ioctl+0xff0/0xff0 [ 1257.805631] ? security_file_ioctl+0x83/0xb0 [ 1257.805640] SyS_ioctl+0x7f/0xb0 [ 1257.805649] ? do_vfs_ioctl+0xff0/0xff0 [ 1257.805660] do_syscall_64+0x1d5/0x640 [ 1257.805674] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1257.805682] RIP: 0033:0x4665f9 [ 1257.805687] RSP: 002b:00007f8f37cd7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1257.844448] Node 1 active_anon:300kB inactive_anon:16108kB active_file:28kB inactive_file:20kB unevictable:0kB isolated(anon):192kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1257.844862] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1257.862954] Node 0 [ 1257.866471] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1257.866477] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1257.866483] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1257.866488] R13: 00007fffa483907f R14: 00007f8f37cd7300 R15: 0000000000022000 [ 1257.887524] CPU: 1 PID: 31209 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1257.921058] DMA free:10064kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1257.921491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1258.000784] lowmem_reserve[]: [ 1258.015575] Call Trace: [ 1258.015601] dump_stack+0x1b2/0x281 [ 1258.015614] warn_alloc.cold+0x96/0x1cc [ 1258.015626] ? zone_watermark_ok_safe+0x220/0x220 [ 1258.015647] __alloc_pages_nodemask+0x2127/0x2720 [ 1258.015665] ? lock_acquire+0x170/0x3f0 [ 1258.015680] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1258.015698] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1258.015709] ? __mutex_unlock_slowpath+0x75/0x770 [ 1258.015717] ? __sanitizer_cov_trace_pc+0x3d/0x50 [ 1258.015738] alloc_pages_current+0x155/0x260 [ 1258.038461] 0 [ 1258.039938] ion_page_pool_alloc+0x118/0x1b0 [ 1258.039950] ion_system_heap_allocate+0x133/0x8c0 [ 1258.039962] ? ion_alloc+0x187/0x810 [ 1258.054715] 2717 [ 1258.059921] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1258.059935] ? ion_system_contig_heap_create+0x130/0x130 [ 1258.129697] 2718 [ 1258.136806] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1258.136821] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1258.136839] ion_alloc+0x204/0x810 [ 1258.136853] ? ion_dma_buf_release+0x40/0x40 [ 1258.136869] ? __might_fault+0x177/0x1b0 [ 1258.206443] 2718 [ 1258.209707] ion_ioctl+0xea/0x1f0 [ 1258.209719] ? ion_query_heaps+0x360/0x360 [ 1258.209732] ? retint_kernel+0x2d/0x2d [ 1258.227692] 2718 [ 1258.230103] ? ion_query_heaps+0x360/0x360 [ 1258.230116] do_vfs_ioctl+0x75a/0xff0 [ 1258.246157] ? ioctl_preallocate+0x1a0/0x1a0 [ 1258.258266] Node 0 [ 1258.258673] ? retint_kernel+0x2d/0x2d [ 1258.272544] DMA32 free:397736kB min:36200kB low:45248kB high:54296kB active_anon:89516kB inactive_anon:83944kB active_file:7708kB inactive_file:17452kB unevictable:0kB writepending:180kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2880kB bounce:0kB free_pcp:1012kB local_pcp:684kB free_cma:0kB [ 1258.275615] ? do_vfs_ioctl+0xff0/0xff0 [ 1258.275627] ? __fdget+0x196/0x1f0 [ 1258.284391] lowmem_reserve[]: [ 1258.285363] ? __sanitizer_cov_trace_pc+0x2d/0x50 [ 1258.293645] 0 [ 1258.295530] ? security_file_ioctl+0x83/0xb0 [ 1258.295542] SyS_ioctl+0x7f/0xb0 [ 1258.295552] ? do_vfs_ioctl+0xff0/0xff0 [ 1258.295563] do_syscall_64+0x1d5/0x640 [ 1258.295578] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1258.305956] 0 [ 1258.306040] RIP: 0033:0x4665f9 [ 1258.314376] 0 [ 1258.339529] RSP: 002b:00007f397d2ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1258.339540] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1258.339545] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1258.339549] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1258.339553] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1258.339558] R13: 00007ffef3a3887f R14: 00007f397d2ee300 R15: 0000000000022000 [ 1258.432484] CPU: 0 PID: 31205 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1258.440385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1258.449749] Call Trace: [ 1258.452387] dump_stack+0x1b2/0x281 [ 1258.456060] warn_alloc.cold+0x96/0x1cc [ 1258.460079] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1258.465113] ? zone_watermark_ok_safe+0x220/0x220 [ 1258.469991] __alloc_pages_nodemask+0x2127/0x2720 [ 1258.474865] ? lock_acquire+0x170/0x3f0 [ 1258.478875] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1258.483778] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1258.489234] ? __mutex_unlock_slowpath+0x75/0x770 [ 1258.494097] ? retint_kernel+0x2d/0x2d [ 1258.497988] alloc_pages_current+0x155/0x260 [ 1258.502401] ion_page_pool_alloc+0x118/0x1b0 [ 1258.506823] ion_system_heap_allocate+0x133/0x8c0 [ 1258.511677] ? ion_alloc+0x187/0x810 [ 1258.515421] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1258.520966] ? ion_system_contig_heap_create+0x130/0x130 [ 1258.526417] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1258.531439] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1258.536755] ion_alloc+0x204/0x810 [ 1258.540305] ? ion_dma_buf_release+0x40/0x40 [ 1258.544745] ? __might_fault+0x177/0x1b0 [ 1258.548830] ion_ioctl+0xea/0x1f0 [ 1258.552292] ? ion_query_heaps+0x360/0x360 [ 1258.556564] ? ion_query_heaps+0x360/0x360 [ 1258.560799] do_vfs_ioctl+0x75a/0xff0 [ 1258.564616] ? ioctl_preallocate+0x1a0/0x1a0 [ 1258.569044] ? lock_downgrade+0x740/0x740 [ 1258.573195] ? __fget+0x225/0x360 [ 1258.576653] ? do_vfs_ioctl+0xff0/0xff0 [ 1258.580631] ? security_file_ioctl+0x83/0xb0 [ 1258.585052] SyS_ioctl+0x7f/0xb0 [ 1258.588419] ? do_vfs_ioctl+0xff0/0xff0 [ 1258.592391] do_syscall_64+0x1d5/0x640 [ 1258.596286] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1258.601499] RIP: 0033:0x4665f9 08:23:08 executing program 4: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) clock_gettime(0x4, &(0x7f00000000c0)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1258.604853] RSP: 002b:00007f5728ef6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1258.612659] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1258.619928] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1258.627289] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1258.634559] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1258.641853] R13: 00007ffddad98d9f R14: 00007f5728ef6300 R15: 0000000000022000 [ 1258.650564] 0 0 [ 1258.652653] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1258.682595] lowmem_reserve[]: 0 0 0 0 0 [ 1258.694365] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1258.706392] Node 1 Normal free:140924kB min:53696kB low:67120kB high:80544kB active_anon:300kB inactive_anon:16108kB active_file:28kB inactive_file:20kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1258.734859] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1258.740088] CPU: 0 PID: 31216 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1258.747978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1258.757349] Call Trace: [ 1258.759953] dump_stack+0x1b2/0x281 [ 1258.763587] warn_alloc.cold+0x96/0x1cc [ 1258.767556] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1258.772740] ? zone_watermark_ok_safe+0x220/0x220 [ 1258.777602] __alloc_pages_nodemask+0x2127/0x2720 [ 1258.782455] ? lock_acquire+0x170/0x3f0 [ 1258.786457] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1258.791316] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1258.796774] ? __mutex_unlock_slowpath+0x75/0x770 [ 1258.801623] alloc_pages_current+0x155/0x260 [ 1258.806058] ion_page_pool_alloc+0x118/0x1b0 [ 1258.810468] ion_system_heap_allocate+0x133/0x8c0 [ 1258.815318] ? ion_alloc+0x187/0x810 [ 1258.819069] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1258.824522] ? ion_system_contig_heap_create+0x130/0x130 [ 1258.829976] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1258.835000] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1258.839868] ion_alloc+0x204/0x810 [ 1258.843414] ? ion_dma_buf_release+0x40/0x40 [ 1258.847820] ? __might_fault+0x177/0x1b0 [ 1258.851876] ion_ioctl+0xea/0x1f0 [ 1258.855327] ? ion_query_heaps+0x360/0x360 [ 1258.859559] ? ion_query_heaps+0x360/0x360 [ 1258.863812] do_vfs_ioctl+0x75a/0xff0 [ 1258.867616] ? ioctl_preallocate+0x1a0/0x1a0 [ 1258.872028] ? lock_downgrade+0x740/0x740 [ 1258.876195] ? __fget+0x225/0x360 [ 1258.879648] ? do_vfs_ioctl+0xff0/0xff0 [ 1258.883710] ? security_file_ioctl+0x83/0xb0 [ 1258.888119] SyS_ioctl+0x7f/0xb0 [ 1258.891484] ? do_vfs_ioctl+0xff0/0xff0 [ 1258.895460] do_syscall_64+0x1d5/0x640 [ 1258.899352] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1258.904536] RIP: 0033:0x4665f9 [ 1258.907734] RSP: 002b:00007f6b7165b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1258.915441] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1258.922734] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1258.930006] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1258.937292] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1258.944561] R13: 00007ffec17d0c7f R14: 00007f6b7165b300 R15: 0000000000022000 [ 1258.952072] lowmem_reserve[]: 0 0 0 0 0 [ 1258.956155] Node 0 DMA: 124*4kB (UE) 27*8kB (U) 1*16kB (E) 2*32kB (UE) 5*64kB (UE) 4*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10072kB [ 1258.971528] Node 0 DMA32: 182*4kB (ME) 10518*8kB (UME) 9733*16kB (UME) 3224*32kB (UME) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 343896kB [ 1258.986141] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1258.997015] Node 1 Normal: 9463*4kB (U) 2778*8kB (UE) 1723*16kB (UM) 1667*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 140988kB [ 1259.011010] warn_alloc_show_mem: 2 callbacks suppressed [ 1259.011013] Mem-Info: [ 1259.018874] active_anon:22456 inactive_anon:25013 isolated_anon:0 [ 1259.018874] active_file:2111 inactive_file:4232 isolated_file:0 [ 1259.018874] unevictable:0 dirty:52 writeback:0 unstable:0 [ 1259.018874] slab_reclaimable:12539 slab_unreclaimable:117863 [ 1259.018874] mapped:57202 shmem:25359 pagetables:744 bounce:0 [ 1259.018874] free:123416 free_pcp:73 free_cma:0 [ 1259.053719] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1259.062685] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1259.071447] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1259.080382] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 08:23:08 executing program 0: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1259.089725] Node 0 active_anon:89524kB inactive_anon:83944kB active_file:8416kB inactive_file:16908kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:228780kB dirty:204kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1259.119008] 31649 total pagecache pages [ 1259.123630] 0 pages in swap cache [ 1259.127161] Swap cache stats: add 0, delete 0, find 0/0 [ 1259.133469] Free swap = 0kB [ 1259.136563] Total swap = 0kB [ 1259.148563] 2097051 pages RAM [ 1259.151864] 0 pages HighMem/MovableOnly [ 1259.155928] Node 1 active_anon:300kB inactive_anon:16108kB active_file:28kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1259.185059] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1259.186716] 363849 pages reserved [ 1259.201305] 0 pages cma reserved [ 1259.205951] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1259.219249] CPU: 1 PID: 31219 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1259.225177] Node 0 [ 1259.227159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1259.227164] Call Trace: [ 1259.227186] dump_stack+0x1b2/0x281 [ 1259.227200] warn_alloc.cold+0x96/0x1cc [ 1259.236817] DMA free:10072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1259.238805] ? zone_watermark_ok_safe+0x220/0x220 [ 1259.238828] __alloc_pages_nodemask+0x2127/0x2720 [ 1259.250272] lowmem_reserve[]: [ 1259.274560] ? lock_acquire+0x170/0x3f0 [ 1259.274578] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1259.274595] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1259.274606] ? __mutex_unlock_slowpath+0x75/0x770 [ 1259.274621] alloc_pages_current+0x155/0x260 [ 1259.274634] ion_page_pool_alloc+0x118/0x1b0 [ 1259.274643] ion_system_heap_allocate+0x133/0x8c0 [ 1259.274651] ? ion_alloc+0x187/0x810 [ 1259.274662] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1259.274671] ? ion_system_contig_heap_create+0x130/0x130 [ 1259.274681] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1259.274691] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1259.274701] ion_alloc+0x204/0x810 [ 1259.274713] ? ion_dma_buf_release+0x40/0x40 [ 1259.337238] 0 [ 1259.340078] ? __might_fault+0x177/0x1b0 [ 1259.340097] ion_ioctl+0xea/0x1f0 [ 1259.362384] ? ion_query_heaps+0x360/0x360 [ 1259.363325] 2717 [ 1259.366618] ? ion_query_heaps+0x360/0x360 [ 1259.366630] do_vfs_ioctl+0x75a/0xff0 [ 1259.366642] ? ioctl_preallocate+0x1a0/0x1a0 [ 1259.378552] 2718 [ 1259.381398] ? lock_downgrade+0x740/0x740 [ 1259.381414] ? __fget+0x225/0x360 [ 1259.381423] ? do_vfs_ioctl+0xff0/0xff0 [ 1259.381435] ? security_file_ioctl+0x83/0xb0 [ 1259.381446] SyS_ioctl+0x7f/0xb0 [ 1259.381455] ? do_vfs_ioctl+0xff0/0xff0 [ 1259.389048] 2718 [ 1259.391121] do_syscall_64+0x1d5/0x640 [ 1259.391138] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1259.391146] RIP: 0033:0x4665f9 [ 1259.391151] RSP: 002b:00007f8f37cd7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1259.391160] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1259.391166] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1259.391170] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1259.391175] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1259.391180] R13: 00007fffa483907f R14: 00007f8f37cd7300 R15: 0000000000022000 [ 1259.468275] 2718 [ 1259.471110] Node 0 DMA32 free:115272kB min:36200kB low:45248kB high:54296kB active_anon:89600kB inactive_anon:83944kB active_file:8608kB inactive_file:16264kB unevictable:0kB writepending:204kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7808kB pagetables:3172kB bounce:0kB free_pcp:200kB local_pcp:188kB free_cma:0kB [ 1259.520412] lowmem_reserve[]: 0 0 0 0 0 [ 1259.527040] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1259.586211] lowmem_reserve[]: 0 0 0 0 0 [ 1259.593845] Node 1 Normal free:91448kB min:53696kB low:67120kB high:80544kB active_anon:300kB inactive_anon:16108kB active_file:28kB inactive_file:20kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:164kB local_pcp:108kB free_cma:0kB [ 1259.686958] lowmem_reserve[]: 0 0 0 0 0 [ 1259.699922] Node 0 DMA: 124*4kB (UE) 27*8kB (U) 1*16kB (E) 2*32kB (UE) 5*64kB (UE) 4*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10072kB [ 1259.740065] Node 0 DMA32: 748*4kB (ME) 277*8kB (ME) 258*16kB (ME) 688*32kB (UME) 35*64kB (UM) 9*128kB (UM) 3*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36536kB [ 1259.772650] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1259.798317] Node 1 Normal: 1*4kB (M) 2*8kB (ME) 2*16kB (UM) 628*32kB (UM) 0*64kB 1*128kB (M) 0*256kB 1*512kB (M) 68*1024kB (U) 0*2048kB 0*4096kB = 90420kB [ 1259.817335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1259.826262] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1259.834911] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1259.852520] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1259.890383] 25613 total pagecache pages [ 1259.901159] 0 pages in swap cache [ 1259.910245] Swap cache stats: add 0, delete 0, find 0/0 [ 1259.921275] Free swap = 0kB [ 1259.927706] Total swap = 0kB [ 1259.934160] 2097051 pages RAM [ 1259.940705] 0 pages HighMem/MovableOnly [ 1259.949247] 363849 pages reserved [ 1259.956165] 0 pages cma reserved [ 1260.209295] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1260.230892] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1260.278155] CPU: 1 PID: 7973 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1260.286144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1260.295502] Call Trace: [ 1260.298103] dump_stack+0x1b2/0x281 [ 1260.301738] dump_header+0x178/0x82f [ 1260.305570] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1260.310791] ? ___ratelimit+0x2cd/0x530 [ 1260.314885] oom_kill_process.cold+0x10/0xa40 [ 1260.319392] out_of_memory+0xe3e/0x1190 [ 1260.323371] ? oom_killer_disable+0x1c0/0x1c0 [ 1260.327869] ? mutex_trylock+0x152/0x1a0 [ 1260.331934] __alloc_pages_nodemask+0x23e1/0x2720 [ 1260.336795] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1260.341663] alloc_pages_current+0x155/0x260 [ 1260.346194] filemap_fault+0x11a1/0x1ad0 [ 1260.350265] ext4_filemap_fault+0x84/0xb0 [ 1260.354423] __do_fault+0xfa/0x380 [ 1260.357958] __handle_mm_fault+0x2497/0x4620 [ 1260.362400] ? vm_insert_page+0x7c0/0x7c0 [ 1260.366591] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1260.370996] ? nanosleep_copyout+0x100/0x100 [ 1260.375404] ? mark_held_locks+0xa6/0xf0 [ 1260.379467] handle_mm_fault+0x455/0x9c0 [ 1260.383536] __do_page_fault+0x549/0xad0 [ 1260.387595] ? spurious_fault+0x640/0x640 [ 1260.391738] ? do_page_fault+0x60/0x500 [ 1260.395706] ? page_fault+0x2f/0x50 [ 1260.399327] page_fault+0x45/0x50 [ 1260.402862] RIP: 1339ed:0x6 [ 1260.405779] RSP: 1de7:00007fffa483933c EFLAGS: 00000032 [ 1260.411583] Mem-Info: [ 1260.420113] active_anon:22531 inactive_anon:25013 isolated_anon:0 [ 1260.420113] active_file:31 inactive_file:52 isolated_file:0 [ 1260.420113] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1260.420113] slab_reclaimable:12539 slab_unreclaimable:117919 [ 1260.420113] mapped:52716 shmem:25359 pagetables:814 bounce:0 [ 1260.420113] free:81978 free_pcp:218 free_cma:0 [ 1260.461089] Node 0 active_anon:89824kB inactive_anon:83944kB active_file:156kB inactive_file:448kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210952kB dirty:4kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1260.497294] Node 1 active_anon:300kB inactive_anon:16108kB active_file:0kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:16kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1260.588007] Node 0 DMA free:11800kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1260.664353] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1260.669426] Node 0 DMA32 free:45136kB min:36200kB low:45248kB high:54296kB active_anon:89824kB inactive_anon:83944kB active_file:0kB inactive_file:3700kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:3224kB bounce:0kB free_pcp:392kB local_pcp:228kB free_cma:0kB [ 1260.733226] lowmem_reserve[]: 0 0 0 0 0 [ 1260.737254] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1260.777369] lowmem_reserve[]: 0 0 0 0 0 [ 1260.781480] Node 1 Normal free:53608kB min:53696kB low:67120kB high:80544kB active_anon:300kB inactive_anon:16108kB active_file:304kB inactive_file:292kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1260.813788] lowmem_reserve[]: 0 0 0 0 0 [ 1260.817812] Node 0 DMA: 2*4kB (UE) 51*8kB (U) 15*16kB (UE) 3*32kB (UE) 5*64kB (UE) 4*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11056kB [ 1260.841562] Node 0 DMA32: 786*4kB (UME) 399*8kB (ME) 275*16kB (UME) 88*32kB (ME) 37*64kB (ME) 134*128kB (UM) 8*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36144kB [ 1260.880975] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1260.901157] Node 1 Normal: 2*4kB (UM) 2*8kB (UE) 1*16kB (U) 475*32kB (UM) 688*64kB (UE) 10*128kB (U) 0*256kB 1*512kB (U) 5*1024kB (UM) 22*2048kB (U) 0*4096kB = 111240kB [ 1260.921096] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1260.941004] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1260.949612] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1260.983434] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1260.996088] 25492 total pagecache pages [ 1261.000068] 0 pages in swap cache [ 1261.003594] Swap cache stats: add 0, delete 0, find 0/0 [ 1261.009056] Free swap = 0kB [ 1261.019243] Total swap = 0kB [ 1261.022319] 2097051 pages RAM [ 1261.025415] 0 pages HighMem/MovableOnly [ 1261.029374] 363849 pages reserved [ 1261.037122] 0 pages cma reserved [ 1261.040497] Out of memory (oom_kill_allocating_task): Kill process 7973 (syz-executor.0) score 0 or sacrifice child [ 1261.055422] Killed process 31219 (syz-executor.0) total-vm:93252kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 1261.072766] oom_reaper: reaped process 31219 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1261.243067] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1261.271011] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1261.276263] CPU: 0 PID: 7973 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1261.284164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1261.293607] Call Trace: [ 1261.296685] dump_stack+0x1b2/0x281 [ 1261.300312] dump_header+0x178/0x82f [ 1261.304027] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1261.309214] ? ___ratelimit+0x2cd/0x530 [ 1261.313206] oom_kill_process.cold+0x10/0xa40 [ 1261.317746] out_of_memory+0xe3e/0x1190 [ 1261.321759] ? oom_killer_disable+0x1c0/0x1c0 [ 1261.326396] ? mutex_trylock+0x152/0x1a0 [ 1261.330462] __alloc_pages_nodemask+0x23e1/0x2720 [ 1261.335323] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1261.340285] alloc_pages_current+0x155/0x260 [ 1261.344813] filemap_fault+0x11a1/0x1ad0 [ 1261.348917] ext4_filemap_fault+0x84/0xb0 [ 1261.353075] __do_fault+0xfa/0x380 [ 1261.356619] __handle_mm_fault+0x2497/0x4620 [ 1261.361041] ? vm_insert_page+0x7c0/0x7c0 [ 1261.365199] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1261.369634] ? nanosleep_copyout+0x100/0x100 [ 1261.375037] ? mark_held_locks+0xa6/0xf0 [ 1261.379111] handle_mm_fault+0x455/0x9c0 [ 1261.383192] __do_page_fault+0x549/0xad0 [ 1261.387268] ? spurious_fault+0x640/0x640 [ 1261.391424] ? do_page_fault+0x60/0x500 [ 1261.395503] ? page_fault+0x2f/0x50 [ 1261.399235] page_fault+0x45/0x50 [ 1261.402713] RIP: 1339ed:0x6 [ 1261.405827] RSP: 1de7:00007fffa483933c EFLAGS: 00000032 [ 1261.406551] Mem-Info: [ 1261.415268] active_anon:22509 inactive_anon:25013 isolated_anon:0 [ 1261.415268] active_file:20 inactive_file:40 isolated_file:0 [ 1261.415268] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1261.415268] slab_reclaimable:12538 slab_unreclaimable:117851 [ 1261.415268] mapped:52751 shmem:25359 pagetables:814 bounce:0 [ 1261.415268] free:19697 free_pcp:23 free_cma:0 [ 1261.449433] Node 0 active_anon:89732kB inactive_anon:83944kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210928kB dirty:0kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1261.471103] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1261.478630] Node 1 active_anon:304kB inactive_anon:16108kB active_file:36kB inactive_file:116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1261.496792] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1261.521464] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1261.526171] CPU: 1 PID: 31219 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1261.526180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1261.553467] lowmem_reserve[]: [ 1261.560274] Call Trace: [ 1261.569884] 0 [ 1261.572949] dump_stack+0x1b2/0x281 [ 1261.572966] warn_alloc.cold+0x96/0x1cc [ 1261.572979] ? zone_watermark_ok_safe+0x220/0x220 [ 1261.575541] 2717 [ 1261.577336] ? usleep_range+0x130/0x130 [ 1261.580979] 2718 [ 1261.584996] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1261.585010] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1261.589831] 2718 [ 1261.591884] ? run_timer_softirq+0x5a0/0x5a0 [ 1261.591901] __alloc_pages_nodemask+0x2127/0x2720 [ 1261.591917] ? lock_acquire+0x170/0x3f0 [ 1261.591932] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1261.595899] 2718 [ 1261.597962] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1261.608150] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1261.610179] Node 0 [ 1261.614585] alloc_pages_current+0x155/0x260 [ 1261.614599] ion_page_pool_alloc+0x118/0x1b0 [ 1261.614608] ion_system_heap_allocate+0x133/0x8c0 [ 1261.614618] ? ion_alloc+0x187/0x810 [ 1261.619735] DMA32 free:18084kB min:36200kB low:45248kB high:54296kB active_anon:89732kB inactive_anon:83944kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:3224kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1261.623693] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1261.623702] ? ion_system_contig_heap_create+0x130/0x130 [ 1261.623711] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1261.623722] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1261.623736] ion_alloc+0x204/0x810 [ 1261.628555] lowmem_reserve[]: [ 1261.630611] ? ion_dma_buf_release+0x40/0x40 [ 1261.635115] 0 [ 1261.640543] ? __might_fault+0x177/0x1b0 [ 1261.642783] 0 [ 1261.647158] ion_ioctl+0xea/0x1f0 [ 1261.651583] 0 [ 1261.656412] ? ion_query_heaps+0x360/0x360 [ 1261.660096] 0 [ 1261.688311] ? ion_query_heaps+0x360/0x360 [ 1261.688323] do_vfs_ioctl+0x75a/0xff0 [ 1261.688335] ? ioctl_preallocate+0x1a0/0x1a0 [ 1261.688349] ? lock_downgrade+0x740/0x740 [ 1261.693893] 0 [ 1261.699319] ? __fget+0x225/0x360 [ 1261.709138] ? do_vfs_ioctl+0xff0/0xff0 [ 1261.712708] Node 0 [ 1261.715771] ? security_file_ioctl+0x83/0xb0 [ 1261.720164] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1261.721950] SyS_ioctl+0x7f/0xb0 [ 1261.721960] ? do_vfs_ioctl+0xff0/0xff0 [ 1261.721970] do_syscall_64+0x1d5/0x640 [ 1261.721988] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1261.726027] lowmem_reserve[]: [ 1261.727840] RIP: 0033:0x4665f9 [ 1261.731310] 0 [ 1261.733059] RSP: 002b:00007f8f37cd7188 EFLAGS: 00000246 [ 1261.737274] 0 [ 1261.739060] ORIG_RAX: 0000000000000010 [ 1261.743392] 0 [ 1261.747152] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1261.751591] 0 [ 1261.755685] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1261.755693] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1261.757498] 0 [ 1261.760943] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1261.760948] R13: 00007fffa483907f R14: 00007f8f37cd7300 R15: 0000000000022000 [ 1261.762587] warn_alloc_show_mem: 2 callbacks suppressed [ 1261.762591] Mem-Info: [ 1261.767194] active_anon:22509 inactive_anon:25013 isolated_anon:0 [ 1261.767194] active_file:20 inactive_file:40 isolated_file:0 [ 1261.767194] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1261.767194] slab_reclaimable:12538 slab_unreclaimable:117851 [ 1261.767194] mapped:52751 shmem:25359 pagetables:814 bounce:0 [ 1261.767194] free:20098 free_pcp:164 free_cma:0 [ 1261.777199] Node 1 [ 1261.797664] Node 0 active_anon:89732kB inactive_anon:83944kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210928kB dirty:0kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1261.805391] Normal free:51332kB min:53696kB low:67120kB high:80544kB active_anon:304kB inactive_anon:16108kB active_file:0kB inactive_file:72kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:656kB local_pcp:0kB free_cma:0kB [ 1261.808188] Node 1 active_anon:304kB inactive_anon:16108kB active_file:36kB inactive_file:116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1261.817004] lowmem_reserve[]: [ 1261.820381] Node 0 [ 1261.823178] 0 [ 1261.826981] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1261.828759] 0 [ 1261.833644] lowmem_reserve[]: [ 1261.838119] 0 [ 1261.842003] 0 2717 2718 2718 2718 [ 1261.842021] Node 0 DMA32 free:18084kB min:36200kB low:45248kB high:54296kB active_anon:89732kB inactive_anon:83944kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:3224kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1261.842043] lowmem_reserve[]: 0 0 0 0 [ 1261.845451] 0 [ 1261.852082] 0 [ 1261.861952] 0 [ 1261.881710] Node 0 [ 1261.883202] Node 0 [ 1261.924490] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1261.949105] DMA: [ 1261.980673] lowmem_reserve[]: [ 1262.004222] 2*4kB [ 1262.011559] 0 [ 1262.037411] (UE) [ 1262.042033] 0 [ 1262.043379] 39*8kB [ 1262.046417] 0 [ 1262.078049] (U) [ 1262.087575] 0 [ 1262.089115] 16*16kB [ 1262.118291] 0 [ 1262.121225] (UE) [ 1262.123395] 3*32kB [ 1262.125411] Node 1 [ 1262.127195] (UE) [ 1262.129430] Normal free:50964kB min:53696kB low:67120kB high:80544kB active_anon:304kB inactive_anon:16108kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:656kB local_pcp:656kB free_cma:0kB [ 1262.132978] 5*64kB [ 1262.137985] lowmem_reserve[]: [ 1262.139167] (UE) [ 1262.141272] 0 0 0 0 [ 1262.143536] 4*128kB [ 1262.145732] 0 [ 1262.147774] (UE) [ 1262.182263] 1*256kB [ 1262.183545] Node 0 [ 1262.185457] (E) [ 1262.187766] DMA: [ 1262.189550] 2*512kB [ 1262.196338] 2*4kB [ 1262.199244] (UE) [ 1262.200389] (UE) [ 1262.202756] 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1262.202776] Node 0 DMA32: 767*4kB [ 1262.205734] 39*8kB [ 1262.206971] (UME) [ 1262.209016] (U) [ 1262.216041] 397*8kB [ 1262.223656] 16*16kB [ 1262.224742] (UME) [ 1262.227053] (UE) [ 1262.229366] 263*16kB [ 1262.233497] 3*32kB [ 1262.234981] (UME) [ 1262.236062] (UE) 5*64kB [ 1262.238306] 84*32kB [ 1262.240442] (UE) [ 1262.243164] (UME) 35*64kB (UME) 14*128kB (UM) 4*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18708kB [ 1262.243208] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 1262.248657] 4*128kB [ 1262.258773] = 0kB [ 1262.274431] (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1262.275075] Node 1 Normal: 997*4kB (UM) 8*8kB (UME) 618*16kB (UM) 341*32kB (UM) 18*64kB (UME) 3*128kB (UM) 2*256kB (UM) 1*512kB (M) 5*1024kB (UM) 9*2048kB (U) 0*4096kB = 50964kB [ 1262.284188] Node 0 [ 1262.300374] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1262.304348] DMA32: 767*4kB (UME) 397*8kB (UME) 263*16kB (UME) 84*32kB (UME) 35*64kB (UME) 14*128kB (UM) 4*256kB (M) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18708kB [ 1262.312822] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1262.333230] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1262.337464] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1262.347876] Node 1 Normal: 997*4kB (UM) 8*8kB (UME) 618*16kB (UM) 341*32kB (UM) 18*64kB (UME) 3*128kB (UM) 2*256kB (UM) 1*512kB (M) 5*1024kB (UM) 9*2048kB (U) 0*4096kB = 50964kB [ 1262.361040] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1262.377634] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1262.382619] 25382 total pagecache pages [ 1262.390391] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1262.394425] 0 pages in swap cache [ 1262.394432] Swap cache stats: add 0, delete 0, find 0/0 [ 1262.394435] Free swap = 0kB [ 1262.394439] Total swap = 0kB [ 1262.394447] 2097051 pages RAM [ 1262.394450] 0 pages HighMem/MovableOnly [ 1262.394453] 363849 pages reserved [ 1262.394456] 0 pages cma reserved [ 1262.394464] Out of memory (oom_kill_allocating_task): Kill process 7973 (syz-executor.0) score 0 or sacrifice child [ 1262.394492] Killed process 7973 (syz-executor.0) total-vm:93120kB, anon-rss:112kB, file-rss:33936kB, shmem-rss:0kB [ 1262.403717] oom_reaper: reaped process 7973 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1262.412095] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1262.416158] systemd-rfkill invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1262.418410] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1262.421555] (null), order=0, oom_score_adj=0 [ 1262.421567] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 1262.429500] 25382 total pagecache pages [ 1262.433701] CPU: 0 PID: 31193 Comm: systemd-rfkill Not tainted 4.14.232-syzkaller #0 [ 1262.447833] 0 pages in swap cache [ 1262.453456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1262.453460] Call Trace: [ 1262.453482] dump_stack+0x1b2/0x281 [ 1262.453494] dump_header+0x178/0x82f [ 1262.453505] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1262.453513] ? ___ratelimit+0x2cd/0x530 [ 1262.453522] oom_kill_process.cold+0x10/0xa40 [ 1262.453541] out_of_memory+0xe3e/0x1190 [ 1262.453556] ? oom_killer_disable+0x1c0/0x1c0 [ 1262.453563] ? mutex_trylock+0x152/0x1a0 [ 1262.453573] __alloc_pages_nodemask+0x23e1/0x2720 [ 1262.453594] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1262.453617] alloc_pages_current+0x155/0x260 [ 1262.453627] filemap_fault+0x11a1/0x1ad0 [ 1262.453647] ext4_filemap_fault+0x84/0xb0 [ 1262.453657] __do_fault+0xfa/0x380 [ 1262.453668] __handle_mm_fault+0x2497/0x4620 [ 1262.453679] ? vm_insert_page+0x7c0/0x7c0 [ 1262.453689] ? compat_poll_select_copy_remaining+0x2c0/0x2c0 [ 1262.453699] ? ktime_get_ts64+0x261/0x3a0 [ 1262.453715] ? mark_held_locks+0xa6/0xf0 [ 1262.453727] handle_mm_fault+0x455/0x9c0 [ 1262.453739] __do_page_fault+0x549/0xad0 [ 1262.453752] ? spurious_fault+0x640/0x640 [ 1262.453760] ? do_page_fault+0x60/0x500 [ 1262.453768] ? page_fault+0x2f/0x50 [ 1262.453775] page_fault+0x45/0x50 [ 1262.453782] RIP: 5d889cd0:0x1 [ 1262.453786] RSP: 47a98040:00007fff5d889cd8 EFLAGS: 0000000b [ 1262.455296] Mem-Info: [ 1262.469048] Swap cache stats: add 0, delete 0, find 0/0 [ 1262.483710] active_anon:22509 inactive_anon:25013 isolated_anon:0 [ 1262.483710] active_file:12 inactive_file:11 isolated_file:0 [ 1262.483710] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1262.483710] slab_reclaimable:12538 slab_unreclaimable:117711 [ 1262.483710] mapped:52732 shmem:25359 pagetables:814 bounce:0 [ 1262.483710] free:20333 free_pcp:60 free_cma:0 [ 1262.497214] Free swap = 0kB [ 1262.502919] Node 0 active_anon:89732kB inactive_anon:83944kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210928kB dirty:0kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1262.506146] Total swap = 0kB [ 1262.511569] Node 1 active_anon:304kB inactive_anon:16108kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1262.511575] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1262.511593] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1262.511612] Node 0 DMA32 free:18792kB min:36200kB low:45248kB high:54296kB active_anon:89732kB inactive_anon:83944kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:3224kB bounce:0kB free_pcp:240kB local_pcp:240kB free_cma:0kB [ 1262.511631] lowmem_reserve[]: 0 0 0 [ 1262.520208] 2097051 pages RAM [ 1262.525748] 0 [ 1262.527943] 0 pages HighMem/MovableOnly [ 1262.538511] 0 [ 1262.550656] 363849 pages reserved [ 1262.557468] 0 pages cma reserved [ 1262.562010] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1262.562031] lowmem_reserve[]: 0 0 0 0 0 [ 1262.562051] Node 1 Normal free:51564kB min:53696kB low:67120kB high:80544kB active_anon:304kB inactive_anon:16108kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1262.562069] lowmem_reserve[]: 0 0 0 0 0 [ 1262.660435] syz-executor.0: [ 1262.711308] page allocation failure: order:4 [ 1262.732200] Node 0 [ 1262.739119] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1262.763338] DMA: [ 1262.792995] (null) [ 1262.794609] 2*4kB [ 1262.827373] syz-executor.0 cpuset= [ 1262.830259] (UE) [ 1262.831073] / [ 1262.835035] 39*8kB [ 1262.836845] mems_allowed=0-1 [ 1262.840296] (U) [ 1262.848363] CPU: 1 PID: 31219 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1262.870558] 16*16kB [ 1262.873238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1262.873243] Call Trace: [ 1262.873264] dump_stack+0x1b2/0x281 [ 1262.873279] warn_alloc.cold+0x96/0x1cc [ 1262.901340] (UE) [ 1262.905284] ? zone_watermark_ok_safe+0x220/0x220 [ 1262.908293] 3*32kB [ 1262.912713] __alloc_pages_nodemask+0x2127/0x2720 [ 1262.912725] ? lock_acquire+0x170/0x3f0 [ 1262.912746] ? lock_acquire+0x170/0x3f0 [ 1262.914963] (UE) [ 1262.922072] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1262.922090] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1262.922102] ? __mutex_unlock_slowpath+0x75/0x770 [ 1262.922116] alloc_pages_current+0x155/0x260 [ 1262.924162] 5*64kB [ 1262.926301] ion_page_pool_alloc+0x118/0x1b0 [ 1262.928438] (UE) [ 1262.931969] ion_system_heap_allocate+0x133/0x8c0 [ 1262.931981] ? _raw_spin_unlock+0x29/0x40 [ 1262.931988] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1262.931997] ? ion_system_contig_heap_create+0x130/0x130 [ 1262.932007] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1262.932020] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1262.934084] 4*128kB [ 1262.935790] ion_alloc+0x27a/0x810 [ 1262.937997] (UE) [ 1262.941138] ? ion_dma_buf_release+0x40/0x40 [ 1262.941150] ? __might_fault+0x177/0x1b0 [ 1262.941160] ion_ioctl+0xea/0x1f0 [ 1262.941168] ? ion_query_heaps+0x360/0x360 [ 1262.941182] ? ion_query_heaps+0x360/0x360 [ 1262.943139] 1*256kB [ 1262.951019] do_vfs_ioctl+0x75a/0xff0 [ 1262.951031] ? ioctl_preallocate+0x1a0/0x1a0 [ 1262.951041] ? lock_downgrade+0x740/0x740 [ 1262.951056] ? __fget+0x225/0x360 [ 1262.953384] (E) [ 1262.962754] ? do_vfs_ioctl+0xff0/0xff0 [ 1262.962766] ? security_file_ioctl+0x83/0xb0 [ 1262.962776] SyS_ioctl+0x7f/0xb0 [ 1262.962784] ? do_vfs_ioctl+0xff0/0xff0 [ 1262.962796] do_syscall_64+0x1d5/0x640 [ 1262.965361] 2*512kB [ 1262.968998] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1262.972978] (UE) [ 1262.974989] RIP: 0033:0x4665f9 [ 1262.979822] 2*1024kB [ 1262.982038] RSP: 002b:00007f8f37cd7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1262.982048] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1262.982052] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1262.982057] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1262.982062] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1262.982067] R13: 00007fffa483907f R14: 00007f8f37cd7300 R15: 0000000000022000 [ 1262.987735] Mem-Info: [ 1262.990885] (UE) [ 1262.994917] active_anon:22509 inactive_anon:25013 isolated_anon:0 [ 1262.994917] active_file:12 inactive_file:11 isolated_file:0 [ 1262.994917] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1262.994917] slab_reclaimable:12538 slab_unreclaimable:117711 [ 1262.994917] mapped:52732 shmem:25359 pagetables:814 bounce:0 [ 1262.994917] free:15830 free_pcp:243 free_cma:0 [ 1262.994935] Node 0 active_anon:89732kB inactive_anon:83944kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210928kB dirty:0kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1262.994951] Node 1 active_anon:304kB inactive_anon:16108kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1262.994955] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1262.994974] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1262.994994] Node 0 DMA32 free:18156kB min:36200kB low:45248kB high:54296kB active_anon:89732kB inactive_anon:83944kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:3224kB bounce:0kB free_pcp:244kB local_pcp:4kB free_cma:0kB [ 1262.995014] lowmem_reserve[]: 0 0 0 0 0 [ 1262.995033] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1262.995053] lowmem_reserve[]: 0 0 0 0 0 [ 1262.995070] Node 1 Normal free:34188kB min:53696kB low:67120kB high:80544kB active_anon:304kB inactive_anon:16108kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:728kB local_pcp:728kB free_cma:0kB [ 1262.995091] lowmem_reserve[]: 0 0 0 0 0 [ 1262.995110] Node 0 DMA: 2*4kB (UE) 39*8kB (U) 16*16kB (UE) 3*32kB (UE) 5*64kB (UE) 4*128kB (UE) 1*256kB (E) 2*512kB [ 1262.998476] 3*2048kB [ 1263.006681] (UE) [ 1263.007549] (UME) [ 1263.012985] 2*1024kB [ 1263.018203] 0*4096kB [ 1263.019139] (UE) [ 1263.023581] = 10976kB [ 1263.023586] Node 0 DMA32: 780*4kB (UME) 397*8kB (UME) 263*16kB (UME) 84*32kB (UME) 33*64kB (ME) 12*128kB (UM) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18120kB [ 1263.023654] Node 0 Normal: 0*4kB 0*8kB 0*16kB [ 1263.030271] 3*2048kB [ 1263.030558] 0*32kB [ 1263.034791] (UME) 0*4096kB = 10976kB [ 1263.034804] Node 0 DMA32: [ 1263.041142] 0*64kB [ 1263.049840] 780*4kB [ 1263.050187] 0*128kB [ 1263.055075] (UME) 397*8kB (UME) 263*16kB (UME) 84*32kB (UME) 33*64kB (ME) 12*128kB (UM) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18120kB [ 1263.058840] 0*256kB [ 1263.065955] Node 0 [ 1263.067567] 0*512kB [ 1263.071648] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1263.071697] Node 1 Normal: 999*4kB (UM) 9*8kB (UE) [ 1263.076456] 0*1024kB [ 1263.079386] 619*16kB [ 1263.083678] 0*2048kB 0*4096kB = 0kB [ 1263.083689] Node 1 Normal: 999*4kB (UM) 9*8kB (UE) 619*16kB (UM) 593*32kB (U) 10*64kB (UME) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 34228kB [ 1263.083759] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1263.083765] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1263.083770] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1263.083779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1263.090775] (UM) [ 1263.095627] 25382 total pagecache pages [ 1263.100792] 593*32kB [ 1263.102337] 0 pages in swap cache [ 1263.102343] Swap cache stats: add 0, delete 0, find 0/0 [ 1263.102347] Free swap = 0kB [ 1263.102350] Total swap = 0kB [ 1263.102358] 2097051 pages RAM [ 1263.102361] 0 pages HighMem/MovableOnly [ 1263.102365] 363849 pages reserved [ 1263.102368] 0 pages cma reserved [ 1263.102376] Out of memory (oom_kill_allocating_task): Kill process 31193 (systemd-rfkill) score 0 or sacrifice child [ 1263.102399] Killed process 31193 (systemd-rfkill) total-vm:37800kB, anon-rss:376kB, file-rss:0kB, shmem-rss:0kB [ 1263.103136] oom_reaper: reaped process 31193 (systemd-rfkill), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1263.108913] (U) [ 1263.117422] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1263.125141] 10*64kB [ 1263.128756] (null) [ 1263.131782] (UME) [ 1263.133827] , order=0, oom_score_adj=0 [ 1263.137001] 1*128kB [ 1263.139392] systemd cpuset= [ 1263.151406] (U) [ 1263.156442] / [ 1263.165056] 0*256kB [ 1263.169163] mems_allowed=0-1 [ 1263.179041] 1*512kB [ 1263.186502] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 1263.194601] (U) [ 1263.221860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1263.221865] Call Trace: [ 1263.221886] dump_stack+0x1b2/0x281 [ 1263.221897] dump_header+0x178/0x82f [ 1263.221908] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1263.221916] ? ___ratelimit+0x2cd/0x530 [ 1263.221925] oom_kill_process.cold+0x10/0xa40 [ 1263.221935] ? lock_downgrade+0x740/0x740 [ 1263.221949] out_of_memory+0x2dc/0x1190 [ 1263.221962] ? oom_killer_disable+0x1c0/0x1c0 [ 1263.221970] ? mutex_trylock+0x152/0x1a0 [ 1263.221981] __alloc_pages_nodemask+0x23e1/0x2720 [ 1263.222002] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1263.222027] alloc_pages_current+0x155/0x260 [ 1263.222036] filemap_fault+0x11a1/0x1ad0 [ 1263.222054] ext4_filemap_fault+0x84/0xb0 [ 1263.254779] 0*1024kB [ 1263.276651] __do_fault+0xfa/0x380 [ 1263.276662] __handle_mm_fault+0x2497/0x4620 [ 1263.276670] ? vm_insert_page+0x7c0/0x7c0 [ 1263.276688] ? mark_held_locks+0xa6/0xf0 [ 1263.276697] handle_mm_fault+0x455/0x9c0 [ 1263.276709] __do_page_fault+0x549/0xad0 [ 1263.276727] ? spurious_fault+0x640/0x640 [ 1263.276736] ? do_page_fault+0x60/0x500 [ 1263.276745] ? page_fault+0x2f/0x50 [ 1263.276752] page_fault+0x45/0x50 [ 1263.276760] RIP: 0001:0xffffffffffffffff [ 1263.276764] RSP: bf8c7f50:00007ffd1d54bef0 EFLAGS: 7ffd1d54bc20 [ 1263.279341] Mem-Info: [ 1263.307188] 0*2048kB [ 1263.310740] active_anon:22386 inactive_anon:25013 isolated_anon:0 [ 1263.310740] active_file:16 inactive_file:7 isolated_file:0 [ 1263.310740] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1263.310740] slab_reclaimable:12530 slab_unreclaimable:117702 [ 1263.310740] mapped:52732 shmem:25359 pagetables:791 bounce:0 [ 1263.310740] free:16152 free_pcp:28 free_cma:0 [ 1263.341641] 0*4096kB [ 1263.369589] Node 0 active_anon:89240kB inactive_anon:83944kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210928kB dirty:0kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1263.380096] = 34228kB [ 1263.406967] Node 1 active_anon:304kB inactive_anon:16108kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1263.411576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1263.419980] Node 0 [ 1263.425880] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1263.426726] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1263.429134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1263.433883] lowmem_reserve[]: [ 1263.436055] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1263.453461] 0 [ 1263.459716] 25382 total pagecache pages [ 1263.460524] 2717 [ 1263.464284] 0 pages in swap cache [ 1263.467103] 2718 [ 1263.469336] Swap cache stats: add 0, delete 0, find 0/0 [ 1263.473940] 2718 [ 1263.477860] Free swap = 0kB [ 1263.487298] 2718 [ 1263.489633] Total swap = 0kB [ 1263.508188] 2097051 pages RAM [ 1263.509561] Node 0 [ 1263.512009] 0 pages HighMem/MovableOnly [ 1263.512013] 363849 pages reserved [ 1263.512017] 0 pages cma reserved [ 1263.652443] syz-executor.0: [ 1263.653056] DMA32 free:18004kB min:36200kB low:45248kB high:54296kB active_anon:89240kB inactive_anon:83944kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:3132kB bounce:0kB free_pcp:112kB local_pcp:112kB free_cma:0kB [ 1263.655085] page allocation failure: order:0 [ 1263.659039] lowmem_reserve[]: [ 1263.667439] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1263.667989] 0 [ 1263.670315] (null) [ 1263.673458] 0 0 0 0 [ 1263.673473] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1263.673495] lowmem_reserve[]: [ 1263.676384] syz-executor.0 cpuset= [ 1263.682790] 0 0 0 0 0 [ 1263.682807] Node 1 Normal free:49672kB min:53696kB low:67120kB high:80544kB active_anon:304kB inactive_anon:16108kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:688kB local_pcp:0kB free_cma:0kB [ 1263.682825] lowmem_reserve[]: 0 0 0 0 0 [ 1263.682845] Node 0 DMA: 2*4kB (UE) 39*8kB (U) 16*16kB (UE) 3*32kB (UE) 5*64kB (UE) 4*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1263.682920] Node 0 DMA32: 772*4kB (UME) 380*8kB (UME) 255*16kB (ME) 80*32kB [ 1263.691053] / [ 1263.694417] (ME) [ 1263.696950] mems_allowed=0-1 [ 1263.700582] 33*64kB [ 1263.710142] CPU: 1 PID: 31219 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1263.713439] (UME) [ 1263.717984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1263.722146] 11*128kB [ 1263.726090] Call Trace: [ 1263.730565] (UM) [ 1263.734623] dump_stack+0x1b2/0x281 [ 1263.734638] warn_alloc.cold+0x96/0x1cc [ 1263.734650] ? zone_watermark_ok_safe+0x220/0x220 [ 1263.739473] 5*256kB [ 1263.744326] ? usleep_range+0x130/0x130 [ 1263.744336] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1263.744349] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1263.744362] ? run_timer_softirq+0x5a0/0x5a0 [ 1263.748757] (M) [ 1263.752828] __alloc_pages_nodemask+0x2127/0x2720 [ 1263.752848] ? lock_acquire+0x170/0x3f0 [ 1263.752862] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1263.757093] 1*512kB [ 1263.759494] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1263.763041] (M) [ 1263.767413] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1263.771580] 0*1024kB [ 1263.775611] alloc_pages_current+0x155/0x260 [ 1263.779641] 0*2048kB [ 1263.783715] ion_page_pool_alloc+0x118/0x1b0 [ 1263.783725] ion_system_heap_allocate+0x133/0x8c0 [ 1263.783738] ? _raw_spin_unlock+0x29/0x40 [ 1263.783748] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1263.787885] 0*4096kB [ 1263.791857] ? ion_system_contig_heap_create+0x130/0x130 [ 1263.791869] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1263.791881] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1263.791892] ion_alloc+0x27a/0x810 [ 1263.795519] = 18080kB [ 1263.799490] ? ion_dma_buf_release+0x40/0x40 [ 1263.803581] Node 0 [ 1263.809595] ? __might_fault+0x177/0x1b0 [ 1263.812002] Normal: [ 1263.814389] ion_ioctl+0xea/0x1f0 [ 1263.847485] 0*4kB [ 1263.849860] ? ion_query_heaps+0x360/0x360 [ 1263.877725] 0*8kB [ 1263.880104] ? ion_query_heaps+0x360/0x360 [ 1263.906756] 0*16kB [ 1263.915583] do_vfs_ioctl+0x75a/0xff0 [ 1263.915598] ? ioctl_preallocate+0x1a0/0x1a0 [ 1263.915608] ? lock_downgrade+0x740/0x740 [ 1263.915620] ? __fget+0x225/0x360 [ 1263.917841] 0*32kB [ 1263.926415] ? do_vfs_ioctl+0xff0/0xff0 [ 1263.926428] ? security_file_ioctl+0x83/0xb0 [ 1263.926438] SyS_ioctl+0x7f/0xb0 [ 1263.926448] ? do_vfs_ioctl+0xff0/0xff0 [ 1263.951987] 0*64kB [ 1263.960804] do_syscall_64+0x1d5/0x640 [ 1263.963935] 0*128kB [ 1263.972499] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1263.972509] RIP: 0033:0x4665f9 [ 1263.972517] RSP: 002b:00007f8f37cd7188 EFLAGS: 00000246 [ 1263.974308] 0*256kB [ 1263.978257] ORIG_RAX: 0000000000000010 [ 1263.978264] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1263.980310] 0*512kB [ 1263.983768] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1263.983773] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1263.983777] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1263.983782] R13: 00007fffa483907f R14: 00007f8f37cd7300 R15: 0000000000022000 [ 1263.994182] Mem-Info: [ 1263.995070] 0*1024kB [ 1263.998118] active_anon:22386 inactive_anon:25013 isolated_anon:0 [ 1263.998118] active_file:16 inactive_file:7 isolated_file:0 [ 1263.998118] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1263.998118] slab_reclaimable:12530 slab_unreclaimable:117702 [ 1263.998118] mapped:52732 shmem:25359 pagetables:791 bounce:0 [ 1263.998118] free:19663 free_pcp:230 free_cma:0 [ 1264.000151] 0*2048kB [ 1264.007404] Node 0 active_anon:89240kB inactive_anon:83944kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210928kB dirty:0kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1264.010993] 0*4096kB [ 1264.014741] Node 1 active_anon:304kB inactive_anon:16108kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1264.016037] = 0kB [ 1264.019385] Node 0 [ 1264.022451] Node 1 Normal: 85*4kB (UM) 66*8kB (UE) 427*16kB (UM) 683*32kB (U) 73*64kB (UME) 3*128kB (U) 4*256kB (U) 3*512kB (U) 16*1024kB (U) 0*2048kB 0*4096kB = 53556kB [ 1264.022532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1264.022538] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1264.022543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1264.022549] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1264.022552] 25382 total pagecache pages [ 1264.022562] 0 pages in swap cache [ 1264.057198] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1264.059148] Swap cache stats: add 0, delete 0, find 0/0 [ 1264.065866] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1264.065888] Node 0 DMA32 free:18080kB min:36200kB low:45248kB high:54296kB active_anon:89232kB inactive_anon:83944kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:3044kB bounce:0kB free_pcp:232kB local_pcp:120kB free_cma:0kB [ 1264.067734] Free swap = 0kB [ 1264.069882] lowmem_reserve[]: 0 [ 1264.072247] Total swap = 0kB [ 1264.072255] 2097051 pages RAM [ 1264.072258] 0 pages HighMem/MovableOnly [ 1264.072262] 363849 pages reserved [ 1264.072265] 0 pages cma reserved [ 1264.072273] Out of memory: Kill process 31201 (syz-executor.3) score 1004 or sacrifice child [ 1264.072302] Killed process 31205 (syz-executor.3) total-vm:93252kB, anon-rss:160kB, file-rss:34816kB, shmem-rss:0kB [ 1264.107675] oom_reaper: reaped process 31205 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1264.281624] 0 [ 1264.686490] systemd-cgroups invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask= [ 1264.693546] 0 [ 1264.725519] (null) [ 1264.736361] 0 0 [ 1264.751670] , order=0, oom_score_adj=0 [ 1264.752421] Node 0 [ 1264.755940] systemd-cgroups cpuset= [ 1264.755963] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1264.755968] lowmem_reserve[]: [ 1264.758185] / [ 1264.761870] 0 0 0 0 0 [ 1264.794723] Node 1 Normal free:50544kB min:53696kB low:67120kB high:80544kB active_anon:304kB inactive_anon:16108kB active_file:0kB inactive_file:528kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:36kB local_pcp:0kB free_cma:0kB [ 1264.824144] lowmem_reserve[]: 0 0 0 0 0 [ 1264.828182] Node 0 DMA: 2*4kB (UE) 39*8kB (U) 16*16kB (UE) 3*32kB (UE) 5*64kB (UE) 4*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1264.844205] mems_allowed=0-1 [ 1264.847344] CPU: 1 PID: 31220 Comm: systemd-cgroups Not tainted 4.14.232-syzkaller #0 [ 1264.851102] syz-executor.3: [ 1264.855310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1264.855323] page allocation failure: order:0 [ 1264.858325] Call Trace: [ 1264.872052] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1264.872195] dump_stack+0x1b2/0x281 [ 1264.874783] (null) [ 1264.874790] syz-executor.3 cpuset= [ 1264.881900] dump_header+0x178/0x82f [ 1264.881912] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1264.881920] ? ___ratelimit+0x2cd/0x530 [ 1264.881930] oom_kill_process.cold+0x10/0xa40 [ 1264.881954] out_of_memory+0xe3e/0x1190 [ 1264.885556] / [ 1264.887739] ? oom_killer_disable+0x1c0/0x1c0 [ 1264.900991] mems_allowed=0-1 [ 1264.904163] ? mutex_trylock+0x152/0x1a0 [ 1264.926567] __alloc_pages_nodemask+0x23e1/0x2720 [ 1264.931438] ? lock_acquire+0x170/0x3f0 [ 1264.935444] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1264.940474] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1264.946020] ? debug_check_no_obj_freed+0x2c0/0x680 [ 1264.951047] ? __lock_acquire+0x5fc/0x3f20 [ 1264.955304] alloc_pages_vma+0xd2/0x6d0 [ 1264.959283] __handle_mm_fault+0xe4f/0x4620 [ 1264.963613] ? vm_insert_page+0x7c0/0x7c0 [ 1264.967766] ? vm_mmap_pgoff+0x168/0x1a0 [ 1264.971853] ? mark_held_locks+0xa6/0xf0 [ 1264.975932] handle_mm_fault+0x455/0x9c0 [ 1264.979997] __do_page_fault+0x549/0xad0 [ 1264.984146] ? spurious_fault+0x640/0x640 [ 1264.988284] ? do_page_fault+0x60/0x500 [ 1264.992260] ? page_fault+0x2f/0x50 [ 1264.995893] page_fault+0x45/0x50 [ 1264.999336] RIP: 0002:0x801 [ 1265.002261] RSP: 96eea500:00007ffec06501b0 EFLAGS: 7ffec0650298 [ 1265.002285] CPU: 0 PID: 31205 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1265.012104] Node 0 [ 1265.016253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1265.016262] DMA32: [ 1265.018515] Call Trace: [ 1265.032710] dump_stack+0x1b2/0x281 [ 1265.035369] 922*4kB (UME) [ 1265.036345] warn_alloc.cold+0x96/0x1cc [ 1265.036358] ? zone_watermark_ok_safe+0x220/0x220 [ 1265.039809] 401*8kB [ 1265.043806] ? usleep_range+0x130/0x130 [ 1265.043815] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1265.043827] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1265.043836] ? run_timer_softirq+0x5a0/0x5a0 [ 1265.043853] __alloc_pages_nodemask+0x2127/0x2720 [ 1265.043876] ? lock_acquire+0x170/0x3f0 [ 1265.043890] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1265.048730] (UME) [ 1265.051047] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1265.051063] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1265.051082] alloc_pages_current+0x155/0x260 [ 1265.051093] ion_page_pool_alloc+0x118/0x1b0 [ 1265.051102] ion_system_heap_allocate+0x133/0x8c0 [ 1265.051111] ? ion_alloc+0x187/0x810 [ 1265.051121] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1265.051130] ? ion_system_contig_heap_create+0x130/0x130 [ 1265.051143] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1265.057643] 265*16kB [ 1265.060236] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1265.069522] (UME) [ 1265.069632] ion_alloc+0x204/0x810 [ 1265.074520] 99*32kB [ 1265.078458] ? ion_dma_buf_release+0x40/0x40 [ 1265.088312] (UME) [ 1265.089913] ? __might_fault+0x177/0x1b0 [ 1265.096279] 110*64kB [ 1265.099776] ion_ioctl+0xea/0x1f0 [ 1265.109433] (UME) [ 1265.112830] ? ion_query_heaps+0x360/0x360 [ 1265.112842] ? ion_query_heaps+0x360/0x360 [ 1265.112852] do_vfs_ioctl+0x75a/0xff0 [ 1265.112863] ? ioctl_preallocate+0x1a0/0x1a0 [ 1265.112872] ? lock_downgrade+0x740/0x740 [ 1265.112888] ? __fget+0x225/0x360 [ 1265.118337] 13*128kB [ 1265.123822] ? do_vfs_ioctl+0xff0/0xff0 [ 1265.123835] ? security_file_ioctl+0x83/0xb0 [ 1265.123844] SyS_ioctl+0x7f/0xb0 [ 1265.123852] ? do_vfs_ioctl+0xff0/0xff0 [ 1265.123870] do_syscall_64+0x1d5/0x640 [ 1265.123884] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1265.123892] RIP: 0033:0x4665f9 [ 1265.123896] RSP: 002b:00007f5728ef6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1265.123906] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1265.123910] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1265.123915] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1265.123920] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1265.123925] R13: 00007ffddad98d9f R14: 00007f5728ef6300 R15: 0000000000022000 [ 1265.137197] Mem-Info: [ 1265.140626] (UM) [ 1265.147087] active_anon:22371 inactive_anon:25013 isolated_anon:0 [ 1265.147087] active_file:16 inactive_file:18 isolated_file:0 [ 1265.147087] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1265.147087] slab_reclaimable:12527 slab_unreclaimable:117777 [ 1265.147087] mapped:52734 shmem:25359 pagetables:774 bounce:0 [ 1265.147087] free:22758 free_pcp:30 free_cma:0 [ 1265.152647] 6*256kB [ 1265.157124] Node 0 active_anon:89160kB inactive_anon:83944kB active_file:64kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210936kB dirty:0kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1265.157904] (UM) [ 1265.164009] Node 1 active_anon:324kB inactive_anon:16108kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1265.167828] 1*512kB [ 1265.175078] Node 0 [ 1265.177839] (M) [ 1265.180504] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1265.184712] 0*1024kB 0*2048kB 0*4096kB = 25056kB [ 1265.184728] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB [ 1265.190837] lowmem_reserve[]: [ 1265.196540] 0*64kB [ 1265.200994] 0 [ 1265.202632] 0*128kB [ 1265.206521] 2717 [ 1265.210400] 0*256kB [ 1265.220246] 2718 [ 1265.228567] Mem-Info: [ 1265.240232] 2718 [ 1265.245189] active_anon:22371 inactive_anon:25013 isolated_anon:0 [ 1265.245189] active_file:16 inactive_file:18 isolated_file:0 [ 1265.245189] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1265.245189] slab_reclaimable:12527 slab_unreclaimable:117777 [ 1265.245189] mapped:52734 shmem:25359 pagetables:774 bounce:0 [ 1265.245189] free:22572 free_pcp:30 free_cma:0 [ 1265.250551] 2718 [ 1265.250559] Node 0 DMA32 free:25716kB min:36200kB low:45248kB high:54296kB active_anon:89160kB inactive_anon:83944kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:3060kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1265.250580] lowmem_reserve[]: 0 0 0 0 0 [ 1265.250596] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1265.250613] lowmem_reserve[]: 0 0 0 0 0 [ 1265.258180] Node 0 active_anon:89160kB inactive_anon:83944kB active_file:64kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210936kB dirty:0kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1265.271092] 0*512kB [ 1265.305580] Node 1 active_anon:324kB inactive_anon:16108kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1265.305588] Node 0 [ 1265.364129] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1265.368914] Node 1 [ 1265.369031] lowmem_reserve[]: [ 1265.398869] Normal free:53596kB min:53696kB low:67120kB high:80544kB active_anon:324kB inactive_anon:16108kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:36kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1265.401412] 0 [ 1265.404674] lowmem_reserve[]: [ 1265.407753] 2717 [ 1265.410297] 0 [ 1265.413170] 2718 [ 1265.418391] 0*1024kB [ 1265.418565] 2718 [ 1265.420615] 0*2048kB [ 1265.423771] 2718 [ 1265.425148] 0*4096kB [ 1265.489337] 0 0 0 0 [ 1265.489354] Node 0 DMA: 2*4kB (UE) 39*8kB (U) 16*16kB (UE) 3*32kB (UE) 5*64kB (UE) 4*128kB (UE) 1*256kB (E) 2*512kB (UE) [ 1265.499328] Node 0 [ 1265.522231] 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1265.522253] Node 0 DMA32: 956*4kB (UME) 404*8kB (UME) 263*16kB (UME) 100*32kB (UME) 119*64kB (UME) 13*128kB (UM) 6*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 25792kB [ 1265.522326] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 1265.532610] DMA32 free:25716kB min:36200kB low:45248kB high:54296kB active_anon:89160kB inactive_anon:83944kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:3060kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1265.555208] = 0kB [ 1265.563192] lowmem_reserve[]: [ 1265.584885] = 0kB [ 1265.593106] 0 [ 1265.615343] Node 1 [ 1265.623312] 0 [ 1265.648353] Node 1 [ 1265.655799] 0 [ 1265.656925] Normal: [ 1265.658937] 0 [ 1265.661741] 25*4kB [ 1265.664145] 0 [ 1265.665894] (UM) [ 1265.670454] 6*8kB [ 1265.678157] Node 0 [ 1265.684318] (UME) [ 1265.686884] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1265.691989] 5*16kB (M) 62*32kB (UM) 349*64kB (UME) 27*128kB (UM) 6*256kB (UM) 1*512kB (M) 23*1024kB (U) 0*2048kB 0*4096kB = 53604kB [ 1265.692051] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1265.692058] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1265.692064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1265.692070] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1265.692074] 25393 total pagecache pages [ 1265.692084] 0 pages in swap cache [ 1265.692090] Swap cache stats: add 0, delete 0, find 0/0 [ 1265.692093] Free swap = 0kB [ 1265.692097] Total swap = 0kB [ 1265.692103] 2097051 pages RAM [ 1265.692106] 0 pages HighMem/MovableOnly [ 1265.692110] 363849 pages reserved [ 1265.692116] 0 pages cma reserved [ 1265.713882] Normal: [ 1265.806268] syz-executor.3: [ 1265.825025] 25*4kB [ 1265.829180] lowmem_reserve[]: [ 1265.838003] (UM) [ 1265.846852] page allocation failure: order:4 [ 1265.857815] 6*8kB [ 1265.858117] 0 [ 1265.861613] (UME) 5*16kB (M) 62*32kB (UM) 299*64kB (UME) 27*128kB (UM) 6*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB [ 1265.869555] 0 [ 1265.870153] = 26852kB [ 1265.870163] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1265.873231] 0 0 0 [ 1265.873245] Node 1 Normal free:26852kB min:53696kB low:67120kB high:80544kB active_anon:324kB inactive_anon:16108kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:36kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1265.873263] lowmem_reserve[]: 0 0 0 0 0 [ 1265.873286] Node 0 DMA: 2*4kB (UE) 39*8kB (U) 16*16kB (UE) 3*32kB (UE) 5*64kB (UE) 4*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1265.873352] Node 0 DMA32: 956*4kB (UME) 404*8kB (UME) 263*16kB [ 1265.880275] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1265.880469] (UME) [ 1265.883979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1265.883986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1265.883991] 25393 total pagecache pages [ 1265.884000] 0 pages in swap cache [ 1265.884006] Swap cache stats: add 0, delete 0, find 0/0 [ 1265.884009] Free swap = 0kB [ 1265.884012] Total swap = 0kB [ 1265.884019] 2097051 pages RAM [ 1265.884023] 0 pages HighMem/MovableOnly [ 1265.884026] 363849 pages reserved [ 1265.884030] 0 pages cma reserved [ 1266.052166] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1266.059800] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1266.064994] CPU: 0 PID: 31205 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1266.072878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1266.082258] Call Trace: [ 1266.084861] dump_stack+0x1b2/0x281 [ 1266.088506] warn_alloc.cold+0x96/0x1cc [ 1266.092517] ? zone_watermark_ok_safe+0x220/0x220 [ 1266.097375] __alloc_pages_nodemask+0x2127/0x2720 [ 1266.102224] ? lock_acquire+0x170/0x3f0 [ 1266.106208] ? lock_acquire+0x170/0x3f0 [ 1266.110205] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1266.115065] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1266.120790] ? __mutex_unlock_slowpath+0x75/0x770 [ 1266.126360] ? retint_kernel+0x2d/0x2d [ 1266.130434] alloc_pages_current+0x155/0x260 [ 1266.134846] ion_page_pool_alloc+0x118/0x1b0 [ 1266.139346] ion_system_heap_allocate+0x133/0x8c0 [ 1266.144215] ? _raw_spin_unlock+0x29/0x40 [ 1266.148459] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1266.153392] ? ion_system_contig_heap_create+0x130/0x130 [ 1266.158842] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1266.163869] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1266.168893] ion_alloc+0x27a/0x810 [ 1266.172433] ? ion_dma_buf_release+0x40/0x40 [ 1266.176840] ? __might_fault+0x177/0x1b0 [ 1266.180914] ion_ioctl+0xea/0x1f0 [ 1266.184365] ? ion_query_heaps+0x360/0x360 [ 1266.188610] ? ion_query_heaps+0x360/0x360 [ 1266.192852] do_vfs_ioctl+0x75a/0xff0 [ 1266.196655] ? ioctl_preallocate+0x1a0/0x1a0 [ 1266.201063] ? lock_downgrade+0x740/0x740 [ 1266.205219] ? __fget+0x225/0x360 [ 1266.208940] ? do_vfs_ioctl+0xff0/0xff0 [ 1266.212925] ? security_file_ioctl+0x83/0xb0 [ 1266.218048] SyS_ioctl+0x7f/0xb0 [ 1266.221610] ? do_vfs_ioctl+0xff0/0xff0 [ 1266.225595] do_syscall_64+0x1d5/0x640 [ 1266.229494] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1266.234781] RIP: 0033:0x4665f9 [ 1266.237969] RSP: 002b:00007f5728ef6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1266.245682] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1266.252974] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1266.260336] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1266.267612] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1266.274904] R13: 00007ffddad98d9f R14: 00007f5728ef6300 R15: 0000000000022000 [ 1266.284217] 100*32kB (UME) 23*64kB (ME) 9*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18112kB [ 1266.294505] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1266.305355] Node 1 Normal: 100*4kB (UM) 265*8kB (UME) 219*16kB (UM) 211*32kB (UM) 312*64kB (UME) 30*128kB (UM) 6*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 38632kB [ 1266.325957] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1266.335228] Mem-Info: [ 1266.337659] active_anon:22371 inactive_anon:25013 isolated_anon:0 [ 1266.337659] active_file:30 inactive_file:1759 isolated_file:0 [ 1266.337659] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1266.337659] slab_reclaimable:12523 slab_unreclaimable:117965 [ 1266.337659] mapped:54161 shmem:25359 pagetables:774 bounce:0 [ 1266.337659] free:24790 free_pcp:344 free_cma:0 [ 1266.371884] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1266.380477] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1266.389396] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1266.398089] 27187 total pagecache pages [ 1266.402143] 0 pages in swap cache [ 1266.405605] Swap cache stats: add 0, delete 0, find 0/0 [ 1266.411187] Node 0 active_anon:89160kB inactive_anon:83944kB active_file:120kB inactive_file:7032kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216644kB dirty:0kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1266.451203] Free swap = 0kB [ 1266.454250] Total swap = 0kB [ 1266.457265] 2097051 pages RAM [ 1266.460371] 0 pages HighMem/MovableOnly [ 1266.466600] 363849 pages reserved [ 1266.471603] 0 pages cma reserved [ 1266.472844] Node 1 active_anon:324kB inactive_anon:16108kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1266.477734] Out of memory (oom_kill_allocating_task): Kill process 31220 (systemd-cgroups) score 0 or sacrifice child [ 1266.502885] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1266.516494] Killed process 31220 (systemd-cgroups) total-vm:4672kB, anon-rss:44kB, file-rss:4kB, shmem-rss:0kB [ 1266.539351] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1266.555137] oom_reaper: reaped process 31220 (systemd-cgroups), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1266.565371] Node 0 DMA32 free:40244kB min:36200kB low:45248kB high:54296kB active_anon:89160kB inactive_anon:83944kB active_file:368kB inactive_file:512kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:3060kB bounce:0kB free_pcp:708kB local_pcp:0kB free_cma:0kB [ 1266.596609] lowmem_reserve[]: 0 0 0 0 0 [ 1266.600619] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1266.605807] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1266.627089] lowmem_reserve[]: 0 0 0 0 0 [ 1266.646184] Node 1 Normal free:39312kB min:53696kB low:67120kB high:80544kB active_anon:324kB inactive_anon:16108kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:36kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1266.679097] (null), order=0, oom_score_adj=0 [ 1266.683747] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1266.688527] CPU: 0 PID: 7960 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1266.695963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1266.705324] Call Trace: [ 1266.708059] dump_stack+0x1b2/0x281 [ 1266.711680] dump_header+0x178/0x82f [ 1266.715387] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1266.720489] ? ___ratelimit+0x2cd/0x530 [ 1266.724473] oom_kill_process.cold+0x10/0xa40 [ 1266.728973] out_of_memory+0xe3e/0x1190 [ 1266.732959] ? oom_killer_disable+0x1c0/0x1c0 [ 1266.737452] ? mutex_trylock+0x152/0x1a0 [ 1266.744383] __alloc_pages_nodemask+0x23e1/0x2720 [ 1266.749518] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1266.754380] alloc_pages_current+0x155/0x260 [ 1266.758813] filemap_fault+0x11a1/0x1ad0 [ 1266.762896] ext4_filemap_fault+0x84/0xb0 [ 1266.767039] __do_fault+0xfa/0x380 [ 1266.770573] __handle_mm_fault+0x2497/0x4620 [ 1266.774982] ? vm_insert_page+0x7c0/0x7c0 [ 1266.779124] ? lock_downgrade+0x740/0x740 [ 1266.783271] ? mark_held_locks+0xa6/0xf0 [ 1266.787332] handle_mm_fault+0x455/0x9c0 [ 1266.791392] __do_page_fault+0x549/0xad0 [ 1266.795453] ? spurious_fault+0x640/0x640 [ 1266.799596] ? do_page_fault+0x60/0x500 [ 1266.803564] ? page_fault+0x2f/0x50 [ 1266.807180] page_fault+0x45/0x50 [ 1266.810733] RIP: 0000:0x947a14 [ 1266.813924] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1266.814539] lowmem_reserve[]: 0 0 0 0 0 [ 1266.828915] Node 0 DMA: 18*4kB (UE) 55*8kB (U) 23*16kB (UE) 9*32kB (UE) 6*64kB (UE) 5*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11664kB [ 1266.871005] Node 0 DMA32: 2888*4kB (UME) 402*8kB (UME) 268*16kB (UME) 84*32kB (UME) 361*64kB (UME) 13*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 47536kB [ 1266.886586] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1266.897360] Node 1 Normal: 23*4kB (UM) 1170*8kB (UME) 572*16kB (UM) 471*32kB (UM) 414*64kB (UME) 34*128kB (UM) 4*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 67084kB [ 1266.913404] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1266.922300] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1266.951024] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1266.959897] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1266.973469] 25407 total pagecache pages [ 1266.977482] 0 pages in swap cache [ 1266.980992] Swap cache stats: add 0, delete 0, find 0/0 [ 1266.986350] Free swap = 0kB [ 1266.989357] Total swap = 0kB [ 1266.994887] Mem-Info: [ 1266.997377] active_anon:22371 inactive_anon:25013 isolated_anon:0 [ 1266.997377] active_file:26 inactive_file:4 isolated_file:0 [ 1266.997377] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1266.997377] slab_reclaimable:12523 slab_unreclaimable:117991 [ 1266.997377] mapped:52786 shmem:25359 pagetables:774 bounce:0 [ 1266.997377] free:25131 free_pcp:212 free_cma:0 [ 1266.999056] 2097051 pages RAM [ 1267.040380] 0 pages HighMem/MovableOnly [ 1267.044494] 363849 pages reserved [ 1267.048041] 0 pages cma reserved [ 1267.050806] Node 0 active_anon:89160kB inactive_anon:83944kB active_file:48kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211056kB dirty:0kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1267.081992] Node 1 active_anon:324kB inactive_anon:16108kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1267.109371] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1267.136223] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1267.141101] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1267.141353] Node 0 DMA32 free:36084kB min:36200kB low:45248kB high:54296kB active_anon:89132kB inactive_anon:83944kB active_file:68kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:2940kB bounce:0kB free_pcp:1312kB local_pcp:116kB free_cma:0kB [ 1267.166674] syz-executor.3 cpuset= [ 1267.190160] lowmem_reserve[]: 0 0 0 0 0 [ 1267.197887] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1267.210986] / mems_allowed=0-1 [ 1267.231547] lowmem_reserve[]: 0 [ 1267.234364] CPU: 0 PID: 31205 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1267.234373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1267.237663] 0 [ 1267.245548] Call Trace: [ 1267.245572] dump_stack+0x1b2/0x281 [ 1267.245585] warn_alloc.cold+0x96/0x1cc [ 1267.245604] ? zone_watermark_ok_safe+0x220/0x220 [ 1267.245617] ? usleep_range+0x130/0x130 [ 1267.245626] ? try_to_free_pages+0x23f/0x6e0 [ 1267.245641] ? _find_next_bit+0xdb/0x100 [ 1267.258510] 0 [ 1267.259397] ? run_timer_softirq+0x5a0/0x5a0 [ 1267.263077] 0 [ 1267.266966] __alloc_pages_nodemask+0x2127/0x2720 [ 1267.276840] 0 [ 1267.280187] ? lock_acquire+0x170/0x3f0 [ 1267.286024] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1267.290409] Node 1 [ 1267.292222] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1267.292238] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1267.292249] ? retint_kernel+0x2d/0x2d [ 1267.292263] alloc_pages_current+0x155/0x260 [ 1267.292274] ion_page_pool_alloc+0x118/0x1b0 [ 1267.292283] ion_system_heap_allocate+0x133/0x8c0 [ 1267.292294] ? _raw_spin_unlock+0x29/0x40 [ 1267.292302] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1267.292311] ? ion_system_contig_heap_create+0x130/0x130 [ 1267.292321] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1267.292339] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1267.292350] ion_alloc+0x27a/0x810 [ 1267.298703] Normal free:26784kB min:53696kB low:67120kB high:80544kB active_anon:308kB inactive_anon:16108kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1267.299170] ? ion_dma_buf_release+0x40/0x40 [ 1267.303217] lowmem_reserve[]: [ 1267.307973] ? __might_fault+0x177/0x1b0 [ 1267.310280] 0 [ 1267.314784] ion_ioctl+0xea/0x1f0 [ 1267.314795] ? ion_query_heaps+0x360/0x360 [ 1267.314805] ? ion_query_heaps+0x360/0x360 [ 1267.314815] do_vfs_ioctl+0x75a/0xff0 [ 1267.314826] ? ioctl_preallocate+0x1a0/0x1a0 [ 1267.314835] ? lock_downgrade+0x740/0x740 [ 1267.314847] ? __fget+0x225/0x360 [ 1267.314855] ? do_vfs_ioctl+0xff0/0xff0 [ 1267.314866] ? security_file_ioctl+0x83/0xb0 [ 1267.314876] SyS_ioctl+0x7f/0xb0 [ 1267.314886] ? do_vfs_ioctl+0xff0/0xff0 [ 1267.325799] 0 [ 1267.328634] do_syscall_64+0x1d5/0x640 [ 1267.333241] 0 [ 1267.338234] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1267.347732] 0 [ 1267.352922] RIP: 0033:0x4665f9 [ 1267.352928] RSP: 002b:00007f5728ef6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1267.352937] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1267.352942] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1267.352946] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1267.352951] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1267.352956] R13: 00007ffddad98d9f R14: 00007f5728ef6300 R15: 0000000000022000 [ 1267.374860] Mem-Info: [ 1267.399628] 0 [ 1267.419759] active_anon:22360 inactive_anon:25013 isolated_anon:0 [ 1267.419759] active_file:11 inactive_file:15 isolated_file:0 [ 1267.419759] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1267.419759] slab_reclaimable:12521 slab_unreclaimable:117875 [ 1267.419759] mapped:52755 shmem:25359 pagetables:743 bounce:0 [ 1267.419759] free:18456 free_pcp:87 free_cma:0 [ 1267.432642] Node 0 active_anon:89132kB inactive_anon:83944kB active_file:40kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211020kB dirty:0kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1267.442440] Node 0 [ 1267.462876] Node 1 active_anon:308kB inactive_anon:16108kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1267.469441] DMA: [ 1267.469465] Node 0 [ 1267.477239] 1*4kB (E) 1*8kB (U) 6*16kB (UE) 9*32kB (UE) 7*64kB (UE) 5*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10956kB [ 1267.477313] Node 0 [ 1267.502647] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1267.511977] DMA32: [ 1267.532245] lowmem_reserve[]: [ 1267.562696] 745*4kB [ 1267.584945] 0 [ 1267.620211] (ME) [ 1267.649028] 2717 [ 1267.669514] 1802*8kB (UME) 646*16kB (UME) 67*32kB (UME) 51*64kB (UME) 15*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36084kB [ 1267.690115] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1267.690544] 2718 [ 1267.708497] Node 1 Normal: 22*4kB (M) 3*8kB (UME) 3*16kB (UM) 2*32kB (UM) 307*64kB (UME) 34*128kB (UM) 4*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 26784kB [ 1267.713196] 2718 2718 [ 1267.734240] Node 0 DMA32 free:36084kB min:36200kB low:45248kB high:54296kB active_anon:89132kB inactive_anon:83944kB active_file:48kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:2940kB bounce:0kB free_pcp:228kB local_pcp:76kB free_cma:0kB [ 1267.734379] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1267.777175] lowmem_reserve[]: 0 0 0 0 0 [ 1267.780769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1267.786211] Node 0 [ 1267.789868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1267.789887] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1267.789892] lowmem_reserve[]: [ 1267.800332] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1267.815290] 0 [ 1267.835305] 25393 total pagecache pages [ 1267.843990] 0 0 0 0 [ 1267.846340] Node 1 Normal free:26784kB min:53696kB low:67120kB high:80544kB active_anon:308kB inactive_anon:16108kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1267.847505] 0 pages in swap cache [ 1267.883573] lowmem_reserve[]: 0 0 0 0 0 [ 1267.887707] Node 0 DMA: 1*4kB (E) 1*8kB (U) 6*16kB (UE) 9*32kB (UE) 7*64kB (UE) 5*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10956kB [ 1267.900088] Swap cache stats: add 0, delete 0, find 0/0 [ 1267.912144] Node 0 DMA32: 754*4kB (UME) 1826*8kB (UME) 646*16kB (UME) 67*32kB (UME) 51*64kB (UME) 15*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36312kB [ 1267.919670] Free swap = 0kB [ 1267.932721] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1267.944031] Total swap = 0kB [ 1267.947068] 2097051 pages RAM [ 1267.947815] Node 1 [ 1267.950184] 0 pages HighMem/MovableOnly [ 1267.950193] Normal: [ 1267.956350] 363849 pages reserved [ 1267.958928] 22*4kB (M) 2*8kB (ME) 3*16kB (UM) 2*32kB (UM) 309*64kB (UME) 34*128kB (UM) 4*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 26904kB [ 1267.977017] 0 pages cma reserved [ 1267.980517] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1267.988844] Out of memory (oom_kill_allocating_task): Kill process 7960 (syz-fuzzer) score 0 or sacrifice child [ 1267.997245] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1268.016710] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1268.025819] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1268.029870] Killed process 30613 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1268.048544] 25393 total pagecache pages [ 1268.072602] 0 pages in swap cache [ 1268.076085] Swap cache stats: add 0, delete 0, find 0/0 [ 1268.086221] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1268.111064] Free swap = 0kB [ 1268.114113] Total swap = 0kB [ 1268.117129] 2097051 pages RAM [ 1268.120227] 0 pages HighMem/MovableOnly [ 1268.138289] systemd-journal cpuset=/ mems_allowed=0-1 [ 1268.143680] 363849 pages reserved [ 1268.147139] 0 pages cma reserved [ 1268.150999] CPU: 0 PID: 31186 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1268.158981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1268.168340] Call Trace: [ 1268.170940] dump_stack+0x1b2/0x281 [ 1268.174571] dump_header+0x178/0x82f [ 1268.178299] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1268.183408] ? ___ratelimit+0x2cd/0x530 [ 1268.187486] oom_kill_process.cold+0x10/0xa40 [ 1268.192021] out_of_memory+0xe3e/0x1190 [ 1268.196003] ? oom_killer_disable+0x1c0/0x1c0 [ 1268.200533] ? mutex_trylock+0x152/0x1a0 [ 1268.204609] __alloc_pages_nodemask+0x23e1/0x2720 [ 1268.209573] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1268.214451] alloc_pages_current+0x155/0x260 [ 1268.218879] filemap_fault+0x11a1/0x1ad0 [ 1268.222965] ext4_filemap_fault+0x84/0xb0 [ 1268.227132] __do_fault+0xfa/0x380 [ 1268.230677] __handle_mm_fault+0x2497/0x4620 [ 1268.235112] ? vm_insert_page+0x7c0/0x7c0 [ 1268.239269] ? do_raw_spin_unlock+0x164/0x220 [ 1268.243799] ? check_stack_object+0x86/0xa0 [ 1268.248229] ? mark_held_locks+0xa6/0xf0 [ 1268.253521] handle_mm_fault+0x455/0x9c0 [ 1268.257592] __do_page_fault+0x549/0xad0 [ 1268.261680] ? spurious_fault+0x640/0x640 [ 1268.266023] ? do_page_fault+0x60/0x500 [ 1268.269998] ? page_fault+0x2f/0x50 [ 1268.273619] page_fault+0x45/0x50 [ 1268.277070] RIP: 35736040:0x7ffc5ad39d90 [ 1268.281123] RSP: 5ad39dd0:0000000000000042 EFLAGS: ffffffff [ 1268.287445] Mem-Info: [ 1268.302535] active_anon:22360 inactive_anon:25013 isolated_anon:0 [ 1268.302535] active_file:49 inactive_file:52 isolated_file:0 [ 1268.302535] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1268.302535] slab_reclaimable:12509 slab_unreclaimable:117869 [ 1268.302535] mapped:52780 shmem:25359 pagetables:743 bounce:0 [ 1268.302535] free:26359 free_pcp:363 free_cma:0 [ 1268.404661] Node 0 active_anon:89132kB inactive_anon:83944kB active_file:80kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211020kB dirty:0kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1268.437704] Node 1 active_anon:308kB inactive_anon:16108kB active_file:0kB inactive_file:112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1268.470993] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1268.502785] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1268.508990] Node 0 DMA32 free:42780kB min:36200kB low:45248kB high:54296kB active_anon:89132kB inactive_anon:83944kB active_file:72kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:2940kB bounce:0kB free_pcp:808kB local_pcp:64kB free_cma:0kB [ 1268.542330] lowmem_reserve[]: 0 0 0 0 0 [ 1268.546350] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1268.575579] lowmem_reserve[]: 0 0 0 0 0 [ 1268.589096] Node 1 Normal free:53532kB min:53696kB low:67120kB high:80544kB active_anon:308kB inactive_anon:16108kB active_file:48kB inactive_file:148kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1268.621244] lowmem_reserve[]: 0 0 0 0 0 [ 1268.625303] Node 0 DMA: 54*4kB (UME) 2*8kB (UM) 6*16kB (UE) 10*32kB (UME) 7*64kB (UE) 6*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11080kB [ 1268.645043] Node 0 DMA32: 2552*4kB (UME) 338*8kB (UME) 229*16kB (UME) 69*32kB (UME) 327*64kB (UME) 23*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43680kB [ 1268.666699] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1268.681892] Node 1 Normal: 51*4kB (UM) 42*8kB (UME) 156*16kB (UM) 602*32kB (UM) 535*64kB (UME) 40*128kB (UM) 4*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 64732kB [ 1268.710879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1268.721841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1268.730559] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1268.743009] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1268.763532] 25427 total pagecache pages [ 1268.767543] 0 pages in swap cache [ 1268.780015] Swap cache stats: add 0, delete 0, find 0/0 [ 1268.788072] Free swap = 0kB [ 1268.805137] Total swap = 0kB [ 1268.808278] 2097051 pages RAM [ 1268.817935] 0 pages HighMem/MovableOnly [ 1268.826255] 363849 pages reserved [ 1268.833443] 0 pages cma reserved [ 1268.836860] Out of memory (oom_kill_allocating_task): Kill process 31186 (systemd-journal) score 0 or sacrifice child [ 1268.852049] Killed process 31186 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:2124kB [ 1268.866153] oom_reaper: reaped process 31186 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2124kB [ 1268.953721] oom_reaper: reaped process 31209 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1268.979620] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1269.001002] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1269.001815] oom_reaper: reaped process 31216 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1269.013721] syz-executor.2 cpuset= [ 1269.023097] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1269.029600] / [ 1269.031828] CPU: 0 PID: 31216 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1269.032312] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1269.033554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1269.033561] Call Trace: [ 1269.046918] mems_allowed=0-1 [ 1269.051588] dump_stack+0x1b2/0x281 [ 1269.051602] warn_alloc.cold+0x96/0x1cc [ 1269.051614] ? zone_watermark_ok_safe+0x220/0x220 [ 1269.051628] ? unreserve_highatomic_pageblock+0x336/0x460 [ 1269.051639] ? wait_for_completion_io+0x10/0x10 [ 1269.051650] __alloc_pages_nodemask+0x2127/0x2720 [ 1269.051667] ? lock_acquire+0x170/0x3f0 [ 1269.065844] (null) [ 1269.066705] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1269.070311] , order=0, oom_score_adj=0 [ 1269.074291] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1269.074309] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1269.074327] alloc_pages_current+0x155/0x260 [ 1269.074339] ion_page_pool_alloc+0x118/0x1b0 [ 1269.074349] ion_system_heap_allocate+0x133/0x8c0 [ 1269.074360] ? ion_alloc+0x187/0x810 [ 1269.105986] systemd cpuset= [ 1269.109471] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1269.114106] / [ 1269.119496] ? ion_system_contig_heap_create+0x130/0x130 [ 1269.145937] mems_allowed=0-1 [ 1269.147042] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1269.160673] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1269.165549] ion_alloc+0x204/0x810 [ 1269.169152] ? ion_dma_buf_release+0x40/0x40 [ 1269.173569] ? __might_fault+0x177/0x1b0 [ 1269.177662] ion_ioctl+0xea/0x1f0 [ 1269.181123] ? ion_query_heaps+0x360/0x360 [ 1269.185651] ? ion_query_heaps+0x360/0x360 [ 1269.189953] do_vfs_ioctl+0x75a/0xff0 [ 1269.194166] ? ioctl_preallocate+0x1a0/0x1a0 [ 1269.198646] ? lock_downgrade+0x740/0x740 [ 1269.202818] ? __fget+0x225/0x360 [ 1269.206294] ? do_vfs_ioctl+0xff0/0xff0 [ 1269.210357] ? security_file_ioctl+0x83/0xb0 [ 1269.214801] SyS_ioctl+0x7f/0xb0 [ 1269.218211] ? do_vfs_ioctl+0xff0/0xff0 [ 1269.222207] do_syscall_64+0x1d5/0x640 [ 1269.226154] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1269.231453] RIP: 0033:0x4665f9 [ 1269.234660] RSP: 002b:00007f6b7165b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1269.242378] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1269.249928] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1269.258422] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1269.265785] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1269.273054] R13: 00007ffec17d0c7f R14: 00007f6b7165b300 R15: 0000000000022000 [ 1269.280357] CPU: 1 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 1269.287299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1269.290980] Mem-Info: [ 1269.296650] Call Trace: [ 1269.296674] dump_stack+0x1b2/0x281 [ 1269.296687] dump_header+0x178/0x82f [ 1269.299105] active_anon:22156 inactive_anon:25012 isolated_anon:0 [ 1269.299105] active_file:17 inactive_file:17 isolated_file:0 [ 1269.299105] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1269.299105] slab_reclaimable:12504 slab_unreclaimable:117207 [ 1269.299105] mapped:43521 shmem:25359 pagetables:649 bounce:0 [ 1269.299105] free:15669 free_pcp:390 free_cma:0 [ 1269.301666] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1269.301675] ? ___ratelimit+0x2cd/0x530 [ 1269.301685] oom_kill_process.cold+0x10/0xa40 [ 1269.301699] ? lock_downgrade+0x740/0x740 [ 1269.321021] Node 0 active_anon:88324kB inactive_anon:83940kB active_file:64kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1269.342756] out_of_memory+0x2dc/0x1190 [ 1269.342773] ? oom_killer_disable+0x1c0/0x1c0 [ 1269.342782] ? mutex_trylock+0x152/0x1a0 [ 1269.342792] __alloc_pages_nodemask+0x23e1/0x2720 [ 1269.342812] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1269.371023] Node 1 active_anon:300kB inactive_anon:16108kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1269.388769] alloc_pages_current+0x155/0x260 [ 1269.388785] filemap_fault+0x11a1/0x1ad0 [ 1269.388810] ext4_filemap_fault+0x84/0xb0 [ 1269.411005] Node 0 [ 1269.411062] __do_fault+0xfa/0x380 [ 1269.456750] __handle_mm_fault+0x2497/0x4620 [ 1269.461182] ? vm_insert_page+0x7c0/0x7c0 [ 1269.465428] ? mark_held_locks+0xa6/0xf0 [ 1269.469493] handle_mm_fault+0x455/0x9c0 [ 1269.471011] DMA free:10996kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1269.473553] __do_page_fault+0x549/0xad0 [ 1269.504541] ? spurious_fault+0x640/0x640 [ 1269.508781] ? do_page_fault+0x60/0x500 [ 1269.512839] ? page_fault+0x2f/0x50 [ 1269.516458] page_fault+0x45/0x50 [ 1269.520006] RIP: 0001:0x1 [ 1269.522754] RSP: bf8c8080:00007ffd1d54bef0 EFLAGS: 7ffd1d54bc40 [ 1269.522780] CPU: 0 PID: 31209 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1269.531404] lowmem_reserve[]: [ 1269.536734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1269.536750] Call Trace: [ 1269.539866] 0 [ 1269.549283] dump_stack+0x1b2/0x281 [ 1269.549297] warn_alloc.cold+0x96/0x1cc [ 1269.549309] ? zone_watermark_ok_safe+0x220/0x220 [ 1269.549319] ? usleep_range+0x130/0x130 [ 1269.549327] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1269.549338] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1269.549348] ? run_timer_softirq+0x5a0/0x5a0 [ 1269.549365] __alloc_pages_nodemask+0x2127/0x2720 [ 1269.549379] ? lock_acquire+0x170/0x3f0 [ 1269.549395] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1269.549405] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1269.549419] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1269.549437] alloc_pages_current+0x155/0x260 [ 1269.553010] Mem-Info: [ 1269.553827] ion_page_pool_alloc+0x118/0x1b0 [ 1269.557437] active_anon:22156 inactive_anon:25012 isolated_anon:0 [ 1269.557437] active_file:17 inactive_file:17 isolated_file:0 [ 1269.557437] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1269.557437] slab_reclaimable:12504 slab_unreclaimable:117207 [ 1269.557437] mapped:43521 shmem:25359 pagetables:649 bounce:0 [ 1269.557437] free:15669 free_pcp:390 free_cma:0 [ 1269.561395] ion_system_heap_allocate+0x133/0x8c0 [ 1269.561404] ? ion_alloc+0x187/0x810 [ 1269.561415] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1269.561423] ? ion_system_contig_heap_create+0x130/0x130 [ 1269.561432] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1269.561443] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1269.561453] ion_alloc+0x204/0x810 [ 1269.561469] ? ion_dma_buf_release+0x40/0x40 [ 1269.570106] Node 0 active_anon:88324kB inactive_anon:83940kB active_file:64kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1269.570282] ? __might_fault+0x177/0x1b0 [ 1269.576384] Node 1 active_anon:300kB inactive_anon:16108kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1269.580376] ion_ioctl+0xea/0x1f0 [ 1269.588652] 2717 [ 1269.589595] ? ion_query_heaps+0x360/0x360 [ 1269.594551] 2718 [ 1269.598371] ? retint_kernel+0x2d/0x2d [ 1269.606706] Node 0 [ 1269.608290] ? ion_query_heaps+0x360/0x360 [ 1269.613812] DMA free:10996kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1269.615199] do_vfs_ioctl+0x75a/0xff0 [ 1269.619598] lowmem_reserve[]: [ 1269.652939] ? ioctl_preallocate+0x1a0/0x1a0 [ 1269.652949] ? retint_kernel+0x2d/0x2d [ 1269.652957] ? do_vfs_ioctl+0xff0/0xff0 [ 1269.652967] ? __fdget+0x196/0x1f0 [ 1269.652976] ? __sanitizer_cov_trace_pc+0x2d/0x50 [ 1269.652986] ? security_file_ioctl+0x83/0xb0 [ 1269.652995] SyS_ioctl+0x7f/0xb0 [ 1269.653002] ? do_vfs_ioctl+0xff0/0xff0 [ 1269.653012] do_syscall_64+0x1d5/0x640 [ 1269.653026] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1269.653035] RIP: 0033:0x4665f9 [ 1269.653040] RSP: 002b:00007f397d2ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1269.653049] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1269.653054] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1269.653059] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1269.653064] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1269.653069] R13: 00007ffef3a3887f R14: 00007f397d2ee300 R15: 0000000000022000 [ 1269.741004] 2718 [ 1269.749820] 0 [ 1269.771002] 2718 [ 1269.771382] 2717 [ 1269.829046] 2718 [ 1269.853232] Node 0 [ 1269.856540] 2718 [ 1269.869179] DMA32 free:18580kB min:36200kB low:45248kB high:54296kB active_anon:88324kB inactive_anon:83940kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2564kB bounce:0kB free_pcp:796kB local_pcp:668kB free_cma:0kB [ 1269.881004] 2718 [ 1269.891043] lowmem_reserve[]: [ 1269.939683] 0 0 0 0 0 [ 1269.943680] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1269.970992] Node 0 DMA32 free:18580kB min:36200kB low:45248kB high:54296kB active_anon:88324kB inactive_anon:83940kB active_file:64kB inactive_file:68kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2564kB bounce:0kB free_pcp:796kB local_pcp:128kB free_cma:0kB [ 1269.973527] lowmem_reserve[]: 0 0 0 0 0 [ 1270.010620] Node 1 Normal free:33100kB min:53696kB low:67120kB high:80544kB active_anon:300kB inactive_anon:16108kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:764kB local_pcp:644kB free_cma:0kB [ 1270.031679] lowmem_reserve[]: 0 0 0 0 0 [ 1270.042945] lowmem_reserve[]: 0 0 0 0 0 [ 1270.047040] Node 0 DMA: 11*4kB (UE) 2*8kB (U) 6*16kB (UE) 9*32kB (UE) 7*64kB (UE) 5*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11004kB [ 1270.056822] Node 0 [ 1270.063789] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1270.067820] Node 0 DMA32: 791*4kB (UME) 365*8kB (UME) 233*16kB (UME) 65*32kB (UME) 23*64kB (UME) 13*128kB (UM) 12*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18100kB [ 1270.078730] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1270.097830] Node 0 [ 1270.119658] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1270.123160] Normal: [ 1270.127109] CPU: 1 PID: 31209 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1270.127112] 0*4kB 0*8kB [ 1270.129424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1270.129430] Call Trace: [ 1270.137395] 0*16kB [ 1270.140026] dump_stack+0x1b2/0x281 [ 1270.149401] 0*32kB [ 1270.151948] warn_alloc.cold+0x96/0x1cc [ 1270.151967] ? zone_watermark_ok_safe+0x220/0x220 [ 1270.154174] 0*64kB [ 1270.157813] __alloc_pages_nodemask+0x2127/0x2720 [ 1270.160017] 0*128kB [ 1270.164052] ? lock_acquire+0x170/0x3f0 [ 1270.164068] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1270.164088] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1270.168946] 0*256kB [ 1270.171175] ? __mutex_unlock_slowpath+0x75/0x770 [ 1270.171186] ? __list_del_entry_valid+0xb3/0xf0 [ 1270.171201] alloc_pages_current+0x155/0x260 [ 1270.176087] 0*512kB [ 1270.178410] ion_page_pool_alloc+0x118/0x1b0 [ 1270.182404] 0*1024kB [ 1270.187203] ion_system_heap_allocate+0x133/0x8c0 [ 1270.192681] 0*2048kB [ 1270.194944] ? _raw_spin_unlock+0x29/0x40 [ 1270.199756] 0*4096kB [ 1270.204438] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1270.204448] ? ion_system_contig_heap_create+0x130/0x130 [ 1270.204459] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1270.204470] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1270.204481] ion_alloc+0x27a/0x810 [ 1270.204495] ? ion_dma_buf_release+0x40/0x40 [ 1270.208903] = 0kB [ 1270.211246] ? __might_fault+0x177/0x1b0 [ 1270.211267] ion_ioctl+0xea/0x1f0 [ 1270.211277] ? ion_query_heaps+0x360/0x360 [ 1270.211311] ? retint_kernel+0x2d/0x2d [ 1270.215700] Node 1 [ 1270.218103] ? ion_query_heaps+0x360/0x360 [ 1270.222989] Normal: [ 1270.225354] do_vfs_ioctl+0x75a/0xff0 [ 1270.229477] 79*4kB [ 1270.231882] ? ioctl_preallocate+0x1a0/0x1a0 [ 1270.231891] ? retint_kernel+0x2d/0x2d [ 1270.231900] ? do_vfs_ioctl+0xff0/0xff0 [ 1270.231911] ? __fdget+0x196/0x1f0 [ 1270.231922] ? __sanitizer_cov_trace_pc+0x2d/0x50 [ 1270.236856] (UM) [ 1270.242319] ? security_file_ioctl+0x83/0xb0 [ 1270.242332] SyS_ioctl+0x7f/0xb0 [ 1270.242341] ? do_vfs_ioctl+0xff0/0xff0 [ 1270.242353] do_syscall_64+0x1d5/0x640 [ 1270.242367] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1270.247387] 60*8kB [ 1270.252218] RIP: 0033:0x4665f9 [ 1270.252223] RSP: 002b:00007f397d2ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1270.252232] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1270.252237] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1270.252241] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1270.252246] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1270.252255] R13: 00007ffef3a3887f R14: 00007f397d2ee300 R15: 0000000000022000 [ 1270.255782] (UME) [ 1270.263254] lowmem_reserve[]: [ 1270.263523] 57*16kB [ 1270.267569] 0 [ 1270.278876] (UM) [ 1270.301989] 0 [ 1270.306958] 59*32kB [ 1270.310002] 0 [ 1270.314954] (UM) [ 1270.331036] 0 [ 1270.337229] 241*64kB [ 1270.337885] 0 [ 1270.340201] (UME) [ 1270.370572] 43*128kB [ 1270.382011] Node 1 [ 1270.392588] (UM) [ 1270.411032] Normal free:26828kB min:53696kB low:67120kB high:80544kB active_anon:300kB inactive_anon:16108kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:764kB local_pcp:120kB free_cma:0kB [ 1270.416992] 5*256kB [ 1270.418776] lowmem_reserve[]: [ 1270.421091] (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26828kB [ 1270.421122] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1270.421131] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1270.431010] 0 [ 1270.457321] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1270.497827] 0 0 0 0 [ 1270.500177] Node 0 DMA: 11*4kB (UE) 2*8kB (U) 6*16kB (UE) 9*32kB (UE) 7*64kB (UE) 5*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11004kB [ 1270.520131] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1270.528790] Node 0 DMA32: 791*4kB (UME) 365*8kB (UME) 233*16kB (UME) 65*32kB (UME) 23*64kB (UME) 13*128kB (UM) 12*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18100kB [ 1270.552105] 25393 total pagecache pages [ 1270.556134] 0 pages in swap cache [ 1270.559580] Swap cache stats: add 0, delete 0, find 0/0 [ 1270.568498] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1270.580629] Free swap = 0kB [ 1270.587004] Total swap = 0kB [ 1270.590047] 2097051 pages RAM [ 1270.591976] Node 1 Normal: 79*4kB (UM) 60*8kB (UME) 57*16kB (UM) 59*32kB (UM) 241*64kB (UME) 43*128kB (UM) 5*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26828kB [ 1270.594450] 0 pages HighMem/MovableOnly [ 1270.617233] 363849 pages reserved [ 1270.620699] 0 pages cma reserved [ 1270.631935] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1270.640809] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1270.671411] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1270.680291] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1270.703141] 25763 total pagecache pages [ 1270.708043] 0 pages in swap cache [ 1270.728120] Swap cache stats: add 0, delete 0, find 0/0 [ 1270.734228] Free swap = 0kB [ 1270.760383] Total swap = 0kB [ 1270.763614] 2097051 pages RAM [ 1270.771531] 0 pages HighMem/MovableOnly [ 1270.795536] 363849 pages reserved [ 1270.821063] 0 pages cma reserved [ 1270.824582] Out of memory: Kill process 31203 (syz-executor.5) score 1004 or sacrifice child [ 1270.836086] Killed process 31206 (syz-executor.5) total-vm:93252kB, anon-rss:156kB, file-rss:34816kB, shmem-rss:0kB [ 1270.878232] oom_reaper: reaped process 31206 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1270.910652] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1270.936077] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1270.952696] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1270.957511] CPU: 0 PID: 7960 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1270.964953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1270.971093] syz-executor.2: [ 1270.974321] Call Trace: [ 1270.974331] page allocation failure: order:0 [ 1270.977341] dump_stack+0x1b2/0x281 [ 1270.979911] , mode:0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask= [ 1270.984305] dump_header+0x178/0x82f [ 1270.984316] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1270.984325] ? ___ratelimit+0x2cd/0x530 [ 1270.984334] oom_kill_process.cold+0x10/0xa40 [ 1270.984351] out_of_memory+0xe3e/0x1190 [ 1270.984362] ? oom_killer_disable+0x1c0/0x1c0 [ 1270.984369] ? mutex_trylock+0x152/0x1a0 [ 1270.984380] __alloc_pages_nodemask+0x23e1/0x2720 [ 1270.984400] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1270.988837] syz-executor.4 cpuset= [ 1270.994975] alloc_pages_current+0x155/0x260 [ 1270.994990] filemap_fault+0x11a1/0x1ad0 [ 1270.995009] ext4_filemap_fault+0x84/0xb0 [ 1270.995021] __do_fault+0xfa/0x380 [ 1270.998778] (null) [ 1271.003811] __handle_mm_fault+0x2497/0x4620 [ 1271.003822] ? vm_insert_page+0x7c0/0x7c0 [ 1271.003829] ? free_object+0xe4/0x240 [ 1271.003845] ? mark_held_locks+0xa6/0xf0 [ 1271.003852] ? sync_mm_rss+0xf2/0x160 [ 1271.003864] handle_mm_fault+0x455/0x9c0 [ 1271.003878] __do_page_fault+0x549/0xad0 [ 1271.003890] ? spurious_fault+0x640/0x640 [ 1271.003900] ? do_page_fault+0x60/0x500 [ 1271.008602] / [ 1271.012705] ? page_fault+0x2f/0x50 [ 1271.017286] syz-executor.2 cpuset= [ 1271.021160] page_fault+0x45/0x50 [ 1271.021170] RIP: 0000:0x947a14 [ 1271.021175] RSP: 4e20:000000c00003df28 EFLAGS: 0043b6a0 [ 1271.026898] syz-executor.5: [ 1271.030704] / [ 1271.040993] Mem-Info: [ 1271.044657] mems_allowed=0-1 [ 1271.047586] active_anon:22131 inactive_anon:25012 isolated_anon:0 [ 1271.047586] active_file:42 inactive_file:18 isolated_file:0 [ 1271.047586] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1271.047586] slab_reclaimable:12499 slab_unreclaimable:117230 [ 1271.047586] mapped:43504 shmem:25359 pagetables:649 bounce:0 [ 1271.047586] free:20202 free_pcp:316 free_cma:0 [ 1271.051792] CPU: 1 PID: 31216 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1271.051798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1271.051802] Call Trace: [ 1271.051825] dump_stack+0x1b2/0x281 [ 1271.051840] warn_alloc.cold+0x96/0x1cc [ 1271.051853] ? zone_watermark_ok_safe+0x220/0x220 [ 1271.051875] __alloc_pages_nodemask+0x2127/0x2720 [ 1271.059913] page allocation failure: order:0 [ 1271.062022] ? lock_acquire+0x170/0x3f0 [ 1271.062035] ? lock_acquire+0x170/0x3f0 [ 1271.062053] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1271.066184] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1271.069984] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1271.074076] Node 0 active_anon:88224kB inactive_anon:83940kB active_file:96kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1271.077980] ? __mutex_unlock_slowpath+0x75/0x770 [ 1271.082063] (null) [ 1271.086071] alloc_pages_current+0x155/0x260 [ 1271.090279] syz-executor.5 cpuset= [ 1271.094254] ion_page_pool_alloc+0x118/0x1b0 [ 1271.094264] ion_system_heap_allocate+0x133/0x8c0 [ 1271.094282] ? _raw_spin_unlock+0x29/0x40 [ 1271.096198] Node 1 active_anon:300kB inactive_anon:16108kB active_file:72kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1271.099792] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1271.103347] Node 0 [ 1271.106777] ? ion_system_contig_heap_create+0x130/0x130 [ 1271.109993] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1271.115354] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1271.115368] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1271.115379] ion_alloc+0x27a/0x810 [ 1271.115398] ? ion_dma_buf_release+0x40/0x40 [ 1271.118419] / [ 1271.120107] ? __might_fault+0x177/0x1b0 [ 1271.122538] mems_allowed=0-1 [ 1271.125616] ion_ioctl+0xea/0x1f0 [ 1271.158906] lowmem_reserve[]: [ 1271.166749] ? ion_query_heaps+0x360/0x360 [ 1271.166762] ? ion_query_heaps+0x360/0x360 [ 1271.176148] 0 [ 1271.178698] do_vfs_ioctl+0x75a/0xff0 [ 1271.182323] 2717 [ 1271.186264] ? ioctl_preallocate+0x1a0/0x1a0 [ 1271.200977] 2718 [ 1271.204281] ? lock_downgrade+0x740/0x740 [ 1271.208231] 2718 [ 1271.213064] ? __fget+0x225/0x360 [ 1271.213074] ? do_vfs_ioctl+0xff0/0xff0 [ 1271.213085] ? security_file_ioctl+0x83/0xb0 [ 1271.213098] SyS_ioctl+0x7f/0xb0 [ 1271.241020] 2718 [ 1271.253537] ? do_vfs_ioctl+0xff0/0xff0 [ 1271.253553] do_syscall_64+0x1d5/0x640 [ 1271.253568] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1271.253580] RIP: 0033:0x4665f9 [ 1271.272860] RSP: 002b:00007f6b7165b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1271.277712] Node 0 [ 1271.281843] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1271.281848] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1271.281853] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1271.281859] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1271.281864] R13: 00007ffec17d0c7f R14: 00007f6b7165b300 R15: 0000000000022000 [ 1271.283090] mems_allowed=0-1 [ 1271.314570] CPU: 0 PID: 31206 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1271.501128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1271.510570] Call Trace: [ 1271.513166] dump_stack+0x1b2/0x281 [ 1271.516808] warn_alloc.cold+0x96/0x1cc [ 1271.520799] ? zone_watermark_ok_safe+0x220/0x220 [ 1271.521026] warn_alloc_show_mem: 2 callbacks suppressed [ 1271.521030] Mem-Info: [ 1271.525650] ? usleep_range+0x130/0x130 [ 1271.538080] ? try_to_free_pages+0x23f/0x6e0 [ 1271.541619] active_anon:22131 inactive_anon:25012 isolated_anon:0 [ 1271.541619] active_file:14 inactive_file:14 isolated_file:0 [ 1271.541619] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1271.541619] slab_reclaimable:12494 slab_unreclaimable:117244 [ 1271.541619] mapped:43521 shmem:25359 pagetables:649 bounce:0 [ 1271.541619] free:20166 free_pcp:316 free_cma:0 [ 1271.542512] ? _find_next_bit+0xdb/0x100 [ 1271.580152] ? run_timer_softirq+0x5a0/0x5a0 [ 1271.584576] __alloc_pages_nodemask+0x2127/0x2720 [ 1271.589419] ? lock_acquire+0x170/0x3f0 [ 1271.593407] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1271.598245] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1271.602737] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1271.608291] alloc_pages_current+0x155/0x260 [ 1271.611367] Node 0 active_anon:88224kB inactive_anon:83940kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1271.612758] ion_page_pool_alloc+0x118/0x1b0 [ 1271.644847] ion_system_heap_allocate+0x133/0x8c0 [ 1271.649687] ? ion_alloc+0x187/0x810 [ 1271.653398] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1271.658840] ? ion_system_contig_heap_create+0x130/0x130 [ 1271.664292] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1271.669312] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1271.671941] Node 1 active_anon:300kB inactive_anon:16108kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1271.674154] ion_alloc+0x204/0x810 [ 1271.704340] ? ion_dma_buf_release+0x40/0x40 [ 1271.708794] ? __might_fault+0x177/0x1b0 [ 1271.712854] ion_ioctl+0xea/0x1f0 [ 1271.716326] ? ion_query_heaps+0x360/0x360 [ 1271.720566] ? ion_query_heaps+0x360/0x360 [ 1271.724936] do_vfs_ioctl+0x75a/0xff0 [ 1271.728740] ? ioctl_preallocate+0x1a0/0x1a0 [ 1271.731051] Node 0 [ 1271.733153] ? lock_downgrade+0x740/0x740 [ 1271.733167] ? __fget+0x225/0x360 [ 1271.735410] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1271.735417] lowmem_reserve[]: [ 1271.739567] ? do_vfs_ioctl+0xff0/0xff0 [ 1271.761361] 0 [ 1271.768501] ? security_file_ioctl+0x83/0xb0 [ 1271.781377] 2717 2718 [ 1271.781780] SyS_ioctl+0x7f/0xb0 [ 1271.781786] 2718 [ 1271.784278] ? do_vfs_ioctl+0xff0/0xff0 [ 1271.787627] 2718 [ 1271.789693] do_syscall_64+0x1d5/0x640 [ 1271.799574] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1271.804755] RIP: 0033:0x4665f9 [ 1271.804758] Node 0 DMA32 free:17524kB min:36200kB low:45248kB high:54296kB active_anon:88224kB inactive_anon:83940kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2564kB bounce:0kB free_pcp:24kB local_pcp:24kB free_cma:0kB [ 1271.807966] RSP: 002b:00007f6d3989a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1271.845701] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1271.852967] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1271.860234] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1271.867505] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1271.874870] R13: 00007ffc681b1ebf R14: 00007f6d3989a300 R15: 0000000000022000 [ 1271.881020] lowmem_reserve[]: 0 0 0 0 0 [ 1271.886132] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1271.891166] DMA32 free:17524kB min:36200kB low:45248kB high:54296kB active_anon:88224kB inactive_anon:83940kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2564kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 1271.912342] CPU: 1 PID: 31209 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1271.945176] lowmem_reserve[]: [ 1271.948240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1271.948248] Call Trace: [ 1271.951394] 0 [ 1271.960704] dump_stack+0x1b2/0x281 [ 1271.963343] 0 [ 1271.965096] warn_alloc.cold+0x96/0x1cc [ 1271.968692] 0 [ 1271.970483] ? zone_watermark_ok_safe+0x220/0x220 [ 1271.974468] 0 [ 1271.976218] ? usleep_range+0x130/0x130 [ 1271.981059] 0 [ 1271.982843] ? try_to_free_pages+0x23f/0x6e0 [ 1271.986789] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1271.986809] lowmem_reserve[]: [ 1271.988606] ? _find_next_bit+0xdb/0x100 [ 1271.993023] 0 [ 1272.018598] ? run_timer_softirq+0x5a0/0x5a0 [ 1272.018616] __alloc_pages_nodemask+0x2127/0x2720 [ 1272.018632] ? kasan_kmalloc+0xeb/0x160 [ 1272.018646] ? apparmor_file_alloc_security+0x129/0x800 [ 1272.021881] 0 [ 1272.025917] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1272.027684] 0 [ 1272.032084] ? trace_hardirqs_on+0x10/0x10 [ 1272.032093] ? ion_alloc+0x5c7/0x810 [ 1272.032099] ? ion_ioctl+0xea/0x1f0 [ 1272.032107] ? do_vfs_ioctl+0x75a/0xff0 [ 1272.032120] ? __lock_acquire+0x5fc/0x3f20 [ 1272.036947] 0 [ 1272.040923] alloc_pages_vma+0xd2/0x6d0 [ 1272.046450] 0 [ 1272.048209] __handle_mm_fault+0x25fa/0x4620 [ 1272.054908] ? vm_insert_page+0x7c0/0x7c0 [ 1272.059119] Node 1 [ 1272.062837] ? mark_held_locks+0xa6/0xf0 [ 1272.062850] handle_mm_fault+0x455/0x9c0 [ 1272.062869] __do_page_fault+0x549/0xad0 [ 1272.066491] Normal free:52164kB min:53696kB low:67120kB high:80544kB active_anon:300kB inactive_anon:16108kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:1240kB local_pcp:620kB free_cma:0kB [ 1272.070459] ? spurious_fault+0x640/0x640 [ 1272.074712] lowmem_reserve[]: [ 1272.076464] ? do_page_fault+0x60/0x500 [ 1272.080417] 0 [ 1272.082209] page_fault+0x25/0x50 [ 1272.082222] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 1272.082227] RSP: 0000:ffff8880148ffce0 EFLAGS: 00010206 [ 1272.086626] 0 [ 1272.090850] RAX: ffffed100291ffaa RBX: 0000000000000018 RCX: 0000000000000003 [ 1272.090858] RDX: 0000000000000000 RSI: ffff8880148ffd38 RDI: 0000000020000180 [ 1272.093133] 0 [ 1272.097153] RBP: ffff8880148ffd38 R08: 000000007fffffff R09: ffffed100291ffa9 [ 1272.097161] R10: ffff8880148ffd4f R11: ffff88809d0d6000 R12: 0000000020000180 [ 1272.101242] 0 [ 1272.105254] R13: 00007ffffffff000 R14: 0000000020000198 R15: ffff888051167580 [ 1272.105285] _copy_to_user+0xaa/0xd0 [ 1272.134434] 0 [ 1272.138543] ion_ioctl+0x127/0x1f0 [ 1272.145582] ? ion_query_heaps+0x360/0x360 [ 1272.147356] Node 0 [ 1272.150902] ? retint_kernel+0x2d/0x2d [ 1272.156545] DMA: [ 1272.161878] ? ion_query_heaps+0x360/0x360 [ 1272.161890] do_vfs_ioctl+0x75a/0xff0 [ 1272.161904] ? ioctl_preallocate+0x1a0/0x1a0 [ 1272.163687] 4*4kB [ 1272.170949] ? retint_kernel+0x2d/0x2d [ 1272.170960] ? do_vfs_ioctl+0xff0/0xff0 [ 1272.170971] ? __fdget+0x196/0x1f0 [ 1272.170981] ? __sanitizer_cov_trace_pc+0x2d/0x50 [ 1272.178238] (UE) [ 1272.180033] ? security_file_ioctl+0x83/0xb0 [ 1272.187847] 2*8kB [ 1272.195066] SyS_ioctl+0x7f/0xb0 [ 1272.195077] ? do_vfs_ioctl+0xff0/0xff0 [ 1272.195089] do_syscall_64+0x1d5/0x640 [ 1272.196870] (U) [ 1272.206073] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1272.206083] RIP: 0033:0x4665f9 [ 1272.206087] RSP: 002b:00007f397d2ee188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1272.209799] 6*16kB [ 1272.211581] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1272.211586] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1272.211592] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1272.211596] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1272.211601] R13: 00007ffef3a3887f R14: 00007f397d2ee300 R15: 0000000000022000 [ 1272.212877] lowmem_reserve[]: [ 1272.215165] (UE) [ 1272.219363] 0 [ 1272.230347] 9*32kB [ 1272.232277] 0 [ 1272.235784] (UE) [ 1272.240150] 0 [ 1272.247091] 7*64kB [ 1272.250381] 0 [ 1272.253822] (UE) [ 1272.259082] 0 [ 1272.260706] 5*128kB [ 1272.265177] Node 1 Normal free:52164kB min:53696kB low:67120kB high:80544kB active_anon:300kB inactive_anon:16108kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:1240kB local_pcp:620kB free_cma:0kB [ 1272.265199] lowmem_reserve[]: 0 0 0 0 0 [ 1272.265219] Node 0 DMA: 4*4kB (UE) 2*8kB (U) 6*16kB (UE) 9*32kB (UE) 7*64kB (UE) 5*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) [ 1272.272235] (UE) [ 1272.275115] 3*2048kB [ 1272.278643] 1*256kB [ 1272.280575] (UME) [ 1272.290669] (E) [ 1272.297188] 0*4096kB [ 1272.299098] 2*512kB [ 1272.306403] = 10976kB [ 1272.306409] Node 0 DMA32: 747*4kB (ME) 365*8kB (UME) 233*16kB (UME) 63*32kB (UME) 21*64kB (UME) 10*128kB (UM) 13*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18116kB [ 1272.306488] Node 0 Normal: [ 1272.318782] (UE) [ 1272.321767] 0*4kB [ 1272.328795] 2*1024kB [ 1272.337270] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1272.337313] Node 1 Normal: 179*4kB (UM) 159*8kB (UME) 160*16kB [ 1272.345175] (UE) [ 1272.347453] (UM) [ 1272.348403] 3*2048kB [ 1272.350441] 160*32kB [ 1272.354105] (UME) [ 1272.354532] (UM) [ 1272.356326] 0*4096kB [ 1272.358374] 394*64kB [ 1272.360170] = 10976kB [ 1272.362890] (UME) [ 1272.396919] Node 0 [ 1272.407774] 129*128kB [ 1272.409455] DMA32: [ 1272.412108] (UM) 1*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 52164kB [ 1272.412146] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1272.412153] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1272.412159] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1272.412166] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1272.412169] 25387 total pagecache pages [ 1272.412179] 0 pages in swap cache [ 1272.412188] Swap cache stats: add 0, delete 0, find 0/0 [ 1272.419157] 747*4kB [ 1272.421464] Free swap = 0kB [ 1272.423429] (ME) [ 1272.425839] Total swap = 0kB [ 1272.446483] 365*8kB [ 1272.446932] 2097051 pages RAM [ 1272.448685] (UME) [ 1272.451160] 0 pages HighMem/MovableOnly [ 1272.460009] 233*16kB [ 1272.466467] 363849 pages reserved [ 1272.472912] (UME) [ 1272.475737] 0 pages cma reserved [ 1272.477334] 63*32kB [ 1272.585034] warn_alloc_show_mem: 1 callbacks suppressed [ 1272.585038] Mem-Info: [ 1272.595171] active_anon:22131 inactive_anon:25012 isolated_anon:0 [ 1272.595171] active_file:14 inactive_file:14 isolated_file:0 [ 1272.595171] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1272.595171] slab_reclaimable:12489 slab_unreclaimable:117098 [ 1272.595171] mapped:43521 shmem:25359 pagetables:649 bounce:0 [ 1272.595171] free:13949 free_pcp:239 free_cma:0 [ 1272.611148] syz-executor.4: [ 1272.630048] Node 0 active_anon:88224kB inactive_anon:83940kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1272.634428] page allocation failure: order:0 [ 1272.670988] Node 1 active_anon:300kB inactive_anon:16108kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1272.672403] (UME) [ 1272.675408] Node 0 [ 1272.704331] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1272.707041] 21*64kB [ 1272.714276] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1272.714282] lowmem_reserve[]: [ 1272.716630] (UME) [ 1272.742222] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1272.742248] CPU: 0 PID: 31216 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1272.742254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1272.742258] Call Trace: [ 1272.742280] dump_stack+0x1b2/0x281 [ 1272.742293] warn_alloc.cold+0x96/0x1cc [ 1272.742305] ? jffs2_link+0x200/0x4f0 [ 1272.742316] ? zone_watermark_ok_safe+0x220/0x220 [ 1272.742325] ? usleep_range+0x130/0x130 [ 1272.742338] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1272.750829] 10*128kB [ 1272.752807] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1272.752818] ? run_timer_softirq+0x5a0/0x5a0 [ 1272.752836] __alloc_pages_nodemask+0x2127/0x2720 [ 1272.752853] ? lock_acquire+0x170/0x3f0 [ 1272.760728] (UM) [ 1272.770117] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1272.770128] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1272.770144] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1272.770158] ? __list_del_entry_valid+0xb3/0xf0 [ 1272.770170] alloc_pages_current+0x155/0x260 [ 1272.770182] ion_page_pool_alloc+0x118/0x1b0 [ 1272.770192] ion_system_heap_allocate+0x133/0x8c0 [ 1272.770204] ? _raw_spin_unlock+0x29/0x40 [ 1272.770211] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1272.770220] ? ion_system_contig_heap_create+0x130/0x130 [ 1272.770231] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1272.770242] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1272.770252] ion_alloc+0x27a/0x810 [ 1272.770264] ? ion_dma_buf_release+0x40/0x40 [ 1272.770275] ? __might_fault+0x177/0x1b0 [ 1272.770289] ion_ioctl+0xea/0x1f0 [ 1272.781896] 13*256kB [ 1272.784222] ? ion_query_heaps+0x360/0x360 [ 1272.789068] (UM) [ 1272.793036] ? ion_query_heaps+0x360/0x360 [ 1272.793048] do_vfs_ioctl+0x75a/0xff0 [ 1272.793060] ? ioctl_preallocate+0x1a0/0x1a0 [ 1272.793069] ? lock_downgrade+0x740/0x740 [ 1272.793081] ? __fget+0x225/0x360 [ 1272.793089] ? do_vfs_ioctl+0xff0/0xff0 [ 1272.793101] ? security_file_ioctl+0x83/0xb0 [ 1272.793111] SyS_ioctl+0x7f/0xb0 [ 1272.793119] ? do_vfs_ioctl+0xff0/0xff0 [ 1272.793131] do_syscall_64+0x1d5/0x640 [ 1272.793146] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1272.793155] RIP: 0033:0x4665f9 [ 1272.793160] RSP: 002b:00007f6b7165b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1272.793170] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1272.793178] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1272.802066] 1*512kB [ 1272.805723] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1272.810116] (M) [ 1272.814942] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1272.814948] R13: 00007ffec17d0c7f R14: 00007f6b7165b300 R15: 0000000000022000 [ 1272.815069] 0 [ 1272.823817] 0*1024kB [ 1272.825919] 2717 [ 1272.830403] 0*2048kB [ 1272.835898] 2718 2718 2718 [ 1272.835912] Node 0 DMA32 free:22376kB min:36200kB low:45248kB high:54296kB active_anon:88224kB inactive_anon:83940kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2564kB bounce:0kB free_pcp:1156kB local_pcp:668kB free_cma:0kB [ 1272.835938] lowmem_reserve[]: [ 1272.845683] 0*4096kB [ 1272.849506] 0 [ 1272.854553] = 18116kB [ 1272.854558] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1272.854605] Node 1 Normal: 104*4kB (UM) 84*8kB (UME) 86*16kB (UM) 81*32kB (UM) 227*64kB (UME) 142*128kB (UM) 2*256kB (UM) 8*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 42368kB [ 1272.854675] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1272.854681] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1272.854686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1272.854692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1272.854696] 25387 total pagecache pages [ 1272.854705] 0 pages in swap cache [ 1272.854709] Swap cache stats: add 0, delete 0, find 0/0 [ 1272.854713] Free swap = 0kB [ 1272.854715] Total swap = 0kB [ 1272.854721] 2097051 pages RAM [ 1272.854728] 0 pages HighMem/MovableOnly [ 1272.858933] 0 [ 1272.868791] 363849 pages reserved [ 1272.869266] 0 [ 1272.874885] 0 pages cma reserved [ 1272.891001] 0 [ 1272.896685] Out of memory (oom_kill_allocating_task): Kill process 7960 (syz-fuzzer) score 0 or sacrifice child [ 1272.897298] 0 [ 1272.916035] Killed process 28891 (syz-executor.4) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1273.180686] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1273.206740] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1273.223956] lowmem_reserve[]: 0 0 0 0 0 [ 1273.227978] Node 1 Normal free:44928kB min:53696kB low:67120kB high:80544kB active_anon:300kB inactive_anon:16108kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:1252kB local_pcp:620kB free_cma:0kB [ 1273.245600] syz-fuzzer cpuset= [ 1273.263608] lowmem_reserve[]: [ 1273.266220] / [ 1273.269285] 0 [ 1273.270617] mems_allowed=0-1 [ 1273.275677] 0 0 0 0 [ 1273.277594] CPU: 1 PID: 7962 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1273.279215] Node 0 [ 1273.286663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1273.286669] Call Trace: [ 1273.286691] dump_stack+0x1b2/0x281 [ 1273.286703] dump_header+0x178/0x82f [ 1273.286713] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1273.286722] ? ___ratelimit+0x2cd/0x530 [ 1273.286731] oom_kill_process.cold+0x10/0xa40 [ 1273.286749] out_of_memory+0xe3e/0x1190 [ 1273.286763] ? oom_killer_disable+0x1c0/0x1c0 [ 1273.289175] DMA: [ 1273.298537] ? mutex_trylock+0x152/0x1a0 [ 1273.298550] __alloc_pages_nodemask+0x23e1/0x2720 [ 1273.298571] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1273.298593] alloc_pages_current+0x155/0x260 [ 1273.301892] 4*4kB [ 1273.305511] filemap_fault+0x11a1/0x1ad0 [ 1273.309206] (UE) [ 1273.314432] ext4_filemap_fault+0x84/0xb0 [ 1273.314444] __do_fault+0xfa/0x380 [ 1273.314454] __handle_mm_fault+0x2497/0x4620 [ 1273.314464] ? vm_insert_page+0x7c0/0x7c0 [ 1273.318431] 2*8kB [ 1273.323375] ? mark_held_locks+0xa6/0xf0 [ 1273.323388] handle_mm_fault+0x455/0x9c0 [ 1273.323403] __do_page_fault+0x549/0xad0 [ 1273.323414] ? spurious_fault+0x640/0x640 [ 1273.327385] (U) [ 1273.332048] ? do_page_fault+0x60/0x500 [ 1273.332059] ? page_fault+0x2f/0x50 [ 1273.332065] page_fault+0x45/0x50 [ 1273.332074] RIP: 0f00:0xc000082240 [ 1273.332078] RSP: 030f:000000c000039e40 EFLAGS: 00000003 [ 1273.335261] Mem-Info: [ 1273.345088] 6*16kB [ 1273.348187] active_anon:22131 inactive_anon:25012 isolated_anon:0 [ 1273.348187] active_file:14 inactive_file:1289 isolated_file:0 [ 1273.348187] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1273.348187] slab_reclaimable:12470 slab_unreclaimable:117111 [ 1273.348187] mapped:44221 shmem:25359 pagetables:612 bounce:0 [ 1273.348187] free:25290 free_pcp:612 free_cma:0 [ 1273.354069] (UE) [ 1273.355457] Node 0 active_anon:88224kB inactive_anon:83940kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1273.358835] 9*32kB (UE) 7*64kB (UE) 5*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1273.358884] Node 0 DMA32: 2690*4kB (UME) 1304*8kB (UME) 233*16kB (UME) 64*32kB (UME) 31*64kB (UME) 17*128kB (UM) 13*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB [ 1273.361542] Node 1 active_anon:300kB inactive_anon:16108kB active_file:8kB inactive_file:5308kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3000kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1273.367806] 0*4096kB [ 1273.369418] Node 0 [ 1273.374941] = 34968kB [ 1273.379544] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1273.380129] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1273.380180] Node 1 Normal: 84*4kB (U) 61*8kB (UE) 87*16kB (UM) 81*32kB (U) 503*64kB (UE) 137*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 54536kB [ 1273.386734] lowmem_reserve[]: [ 1273.391038] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1273.395506] 0 [ 1273.397735] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1273.397742] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1273.397748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1273.397752] 27052 total pagecache pages [ 1273.397761] 0 pages in swap cache [ 1273.397767] Swap cache stats: add 0, delete 0, find 0/0 [ 1273.397770] Free swap = 0kB [ 1273.397773] Total swap = 0kB [ 1273.397780] 2097051 pages RAM [ 1273.397783] 0 pages HighMem/MovableOnly [ 1273.397786] 363849 pages reserved [ 1273.397789] 0 pages cma reserved [ 1273.677100] 2717 2718 2718 2718 [ 1273.681188] Node 0 DMA32 free:36500kB min:36200kB low:45248kB high:54296kB active_anon:88224kB inactive_anon:83940kB active_file:248kB inactive_file:148kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2416kB bounce:0kB free_pcp:276kB local_pcp:160kB free_cma:0kB [ 1273.711439] lowmem_reserve[]: 0 0 0 0 0 [ 1273.721659] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1273.762087] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1273.777825] lowmem_reserve[]: 0 0 0 0 0 [ 1273.783458] Node 1 Normal free:55152kB min:53696kB low:67120kB high:80544kB active_anon:300kB inactive_anon:16108kB active_file:1868kB inactive_file:1760kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:772kB local_pcp:128kB free_cma:0kB [ 1273.818814] lowmem_reserve[]: 0 0 0 0 0 [ 1273.824826] Node 0 DMA: 4*4kB (UE) 2*8kB (U) 6*16kB (UE) 9*32kB (UE) 7*64kB (UE) 5*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1273.840882] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1273.860393] Node 0 DMA32: 2821*4kB (UME) 1501*8kB (UME) 237*16kB (UME) 64*32kB (UME) 19*64kB (UME) 6*128kB (M) 6*256kB (UM) 2*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 33676kB [ 1273.882496] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1273.886570] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1273.907055] Node 1 Normal: 150*4kB (UM) 88*8kB (UME) 114*16kB (UM) 131*32kB (UM) 65*64kB (UME) 131*128kB (UM) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 28760kB [ 1273.910660] syz-executor.5 cpuset= [ 1273.924377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1273.927693] / [ 1273.927923] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1273.937007] mems_allowed=0-1 [ 1273.937023] CPU: 0 PID: 31206 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1273.937029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1273.937032] Call Trace: [ 1273.937051] dump_stack+0x1b2/0x281 [ 1273.937065] warn_alloc.cold+0x96/0x1cc [ 1273.937078] ? zone_watermark_ok_safe+0x220/0x220 [ 1273.937100] __alloc_pages_nodemask+0x2127/0x2720 [ 1273.937111] ? lock_acquire+0x170/0x3f0 [ 1273.937126] ? lock_acquire+0x170/0x3f0 [ 1273.939034] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1273.947446] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1273.947468] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1273.947480] ? __mutex_unlock_slowpath+0x75/0x770 [ 1273.947494] alloc_pages_current+0x155/0x260 [ 1273.947508] ion_page_pool_alloc+0x118/0x1b0 [ 1273.947517] ion_system_heap_allocate+0x133/0x8c0 [ 1273.947529] ? _raw_spin_unlock+0x29/0x40 [ 1273.947537] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1273.947546] ? ion_system_contig_heap_create+0x130/0x130 [ 1273.947557] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1273.947567] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1273.947576] ion_alloc+0x27a/0x810 [ 1273.947588] ? ion_dma_buf_release+0x40/0x40 [ 1273.947600] ? __might_fault+0x177/0x1b0 [ 1273.947613] ion_ioctl+0xea/0x1f0 [ 1273.952249] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1273.958624] ? ion_query_heaps+0x360/0x360 [ 1273.968058] 25412 total pagecache pages [ 1273.970591] ? ion_query_heaps+0x360/0x360 [ 1273.975176] 0 pages in swap cache [ 1273.978182] do_vfs_ioctl+0x75a/0xff0 [ 1273.983079] Swap cache stats: add 0, delete 0, find 0/0 [ 1273.987847] ? ioctl_preallocate+0x1a0/0x1a0 [ 1273.992882] Free swap = 0kB [ 1273.995898] ? lock_downgrade+0x740/0x740 [ 1274.004985] Total swap = 0kB [ 1274.009778] ? __fget+0x225/0x360 [ 1274.016240] 2097051 pages RAM [ 1274.020086] ? do_vfs_ioctl+0xff0/0xff0 [ 1274.024637] 0 pages HighMem/MovableOnly [ 1274.028929] ? security_file_ioctl+0x83/0xb0 [ 1274.034768] 363849 pages reserved [ 1274.037916] SyS_ioctl+0x7f/0xb0 [ 1274.042912] 0 pages cma reserved [ 1274.048403] ? do_vfs_ioctl+0xff0/0xff0 [ 1274.054491] Out of memory (oom_kill_allocating_task): Kill process 7962 (syz-fuzzer) score 0 or sacrifice child [ 1274.058287] do_syscall_64+0x1d5/0x640 [ 1274.061927] Killed process 31214 (syz-executor.1) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1274.066753] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1274.084024] oom_reaper: reaped process 28891 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1274.087085] RIP: 0033:0x4665f9 [ 1274.102186] oom_reaper: reaped process 31214 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1274.102490] RSP: 002b:00007f6d3989a188 EFLAGS: 00000246 [ 1274.111401] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1274.112259] ORIG_RAX: 0000000000000010 [ 1274.115256] (null), order=0, oom_score_adj=0 [ 1274.119416] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1274.119424] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1274.131044] systemd-udevd cpuset= [ 1274.132994] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1274.136960] / [ 1274.141362] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1274.145418] mems_allowed=0-1 [ 1274.148179] R13: 00007ffc681b1ebf R14: 00007f6d3989a300 R15: 0000000000022000 [ 1274.278838] warn_alloc_show_mem: 1 callbacks suppressed [ 1274.278843] Mem-Info: [ 1274.287858] active_anon:22207 inactive_anon:25012 isolated_anon:0 [ 1274.287858] active_file:15 inactive_file:90 isolated_file:0 [ 1274.287858] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1274.287858] slab_reclaimable:12465 slab_unreclaimable:117449 [ 1274.287858] mapped:43521 shmem:25359 pagetables:641 bounce:0 [ 1274.287858] free:21269 free_pcp:236 free_cma:0 [ 1274.323143] Node 0 active_anon:88340kB inactive_anon:83940kB active_file:28kB inactive_file:1828kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174784kB dirty:0kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1274.354319] Node 1 active_anon:488kB inactive_anon:16108kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1274.381354] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1274.408133] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1274.413703] CPU: 0 PID: 31225 Comm: systemd-udevd Not tainted 4.14.232-syzkaller #0 08:23:23 executing program 3: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:23:23 executing program 4: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) clock_gettime(0x4, &(0x7f00000000c0)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1274.421992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1274.431354] Call Trace: [ 1274.432319] Node 0 [ 1274.434034] dump_stack+0x1b2/0x281 [ 1274.434048] dump_header+0x178/0x82f [ 1274.437277] DMA32 free:64988kB min:36200kB low:45248kB high:54296kB active_anon:88340kB inactive_anon:83940kB active_file:28kB inactive_file:8928kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2440kB bounce:0kB free_pcp:772kB local_pcp:556kB free_cma:0kB [ 1274.439915] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1274.439926] ? ___ratelimit+0x2cd/0x530 [ 1274.439938] oom_kill_process.cold+0x10/0xa40 [ 1274.439957] out_of_memory+0xe3e/0x1190 [ 1274.439970] ? oom_killer_disable+0x1c0/0x1c0 [ 1274.439978] ? mutex_trylock+0x152/0x1a0 [ 1274.439991] __alloc_pages_nodemask+0x23e1/0x2720 [ 1274.448036] lowmem_reserve[]: [ 1274.472175] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1274.472200] alloc_pages_current+0x155/0x260 [ 1274.472212] filemap_fault+0x11a1/0x1ad0 [ 1274.472229] ext4_filemap_fault+0x84/0xb0 [ 1274.472238] __do_fault+0xfa/0x380 [ 1274.472247] __handle_mm_fault+0x2497/0x4620 [ 1274.472257] ? vm_insert_page+0x7c0/0x7c0 [ 1274.472266] ? lock_acquire+0x170/0x3f0 [ 1274.472279] ? mark_held_locks+0xa6/0xf0 [ 1274.472289] handle_mm_fault+0x455/0x9c0 [ 1274.472301] __do_page_fault+0x549/0xad0 [ 1274.472311] ? spurious_fault+0x640/0x640 [ 1274.472319] ? do_page_fault+0x60/0x500 [ 1274.472328] ? page_fault+0x2f/0x50 [ 1274.472334] page_fault+0x45/0x50 [ 1274.472341] RIP: 183e0320:0x3 [ 1274.472346] RSP: 183f28a2:0000000000000002 EFLAGS: 55bb16f22421 [ 1274.480980] Mem-Info: [ 1274.485261] 0 [ 1274.486222] active_anon:22207 inactive_anon:25012 isolated_anon:0 [ 1274.486222] active_file:15 inactive_file:2415 isolated_file:0 [ 1274.486222] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1274.486222] slab_reclaimable:12465 slab_unreclaimable:117139 [ 1274.486222] mapped:45246 shmem:25359 pagetables:641 bounce:0 [ 1274.486222] free:42984 free_pcp:315 free_cma:0 [ 1274.490565] 0 [ 1274.494970] Node 0 active_anon:88340kB inactive_anon:83940kB active_file:28kB inactive_file:9728kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181184kB dirty:0kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1274.503897] 0 [ 1274.507197] Node 1 active_anon:488kB inactive_anon:16108kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1274.513770] 0 [ 1274.516471] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1274.516490] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1274.516509] Node 0 DMA32 free:64064kB min:36200kB low:45248kB high:54296kB active_anon:88340kB inactive_anon:83940kB active_file:28kB inactive_file:9828kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:2440kB bounce:0kB free_pcp:560kB local_pcp:56kB free_cma:0kB [ 1274.516530] lowmem_reserve[]: [ 1274.526714] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1274.528381] 0 [ 1274.540793] 0 [ 1274.541256] 0 [ 1274.550706] 0 [ 1274.559061] Node 0 [ 1274.563019] 0 [ 1274.565843] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1274.581130] 0 [ 1274.588119] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1274.707253] lowmem_reserve[]: [ 1274.720027] syz-executor.3: [ 1274.754680] 0 [ 1274.783969] Node 0 [ 1274.795684] 0 0 0 0 [ 1274.808985] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1274.809014] Node 1 [ 1274.838714] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1274.847385] Normal free:53624kB min:53696kB low:67120kB high:80544kB active_anon:488kB inactive_anon:16108kB active_file:232kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:8kB free_cma:0kB [ 1274.857466] syz-executor.3 cpuset= [ 1274.882793] lowmem_reserve[]: 0 0 0 0 0 [ 1274.894263] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1274.897377] Node 0 DMA: 4*4kB (UE) 2*8kB (U) 6*16kB (UE) 9*32kB (UE) 7*64kB (UE) 5*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1274.922252] lowmem_reserve[]: 0 0 0 0 0 [ 1274.929255] Node 1 Normal free:53624kB min:53696kB low:67120kB high:80544kB active_anon:488kB inactive_anon:16108kB active_file:232kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1274.933052] Node 0 DMA32: 2852*4kB (UME) 1530*8kB (UME) 331*16kB (UME) 117*32kB (UME) 1*64kB (U) 25*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35952kB [ 1274.974170] syz-executor.4 cpuset= [ 1274.995525] / mems_allowed=0-1 [ 1274.999912] Node 0 [ 1275.006168] CPU: 0 PID: 31228 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1275.016356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1275.025726] Call Trace: [ 1275.028331] dump_stack+0x1b2/0x281 [ 1275.031979] warn_alloc.cold+0x96/0x1cc [ 1275.035970] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1275.040990] ? zone_watermark_ok_safe+0x220/0x220 [ 1275.045968] __alloc_pages_nodemask+0x2127/0x2720 [ 1275.050942] ? lock_acquire+0x170/0x3f0 [ 1275.054931] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1275.059794] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1275.065265] ? __mutex_unlock_slowpath+0x75/0x770 [ 1275.070131] alloc_pages_current+0x155/0x260 [ 1275.074546] ion_page_pool_alloc+0x118/0x1b0 [ 1275.078958] ion_system_heap_allocate+0x133/0x8c0 [ 1275.083805] ? ion_alloc+0x187/0x810 [ 1275.087576] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1275.093028] ? ion_system_contig_heap_create+0x130/0x130 [ 1275.098477] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1275.103685] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1275.108537] ion_alloc+0x204/0x810 [ 1275.112191] ? ion_dma_buf_release+0x40/0x40 [ 1275.116601] ? __might_fault+0x177/0x1b0 [ 1275.120674] ion_ioctl+0xea/0x1f0 [ 1275.124127] ? ion_query_heaps+0x360/0x360 [ 1275.128366] ? ion_query_heaps+0x360/0x360 [ 1275.132707] do_vfs_ioctl+0x75a/0xff0 [ 1275.136609] ? ioctl_preallocate+0x1a0/0x1a0 [ 1275.141117] ? lock_downgrade+0x740/0x740 [ 1275.145283] ? __fget+0x225/0x360 [ 1275.148762] ? do_vfs_ioctl+0xff0/0xff0 [ 1275.152745] ? security_file_ioctl+0x83/0xb0 [ 1275.157160] SyS_ioctl+0x7f/0xb0 [ 1275.160518] ? do_vfs_ioctl+0xff0/0xff0 [ 1275.164486] do_syscall_64+0x1d5/0x640 [ 1275.168387] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1275.173580] RIP: 0033:0x4665f9 [ 1275.176859] RSP: 002b:00007f5728ef6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1275.184570] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1275.191838] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1275.199115] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1275.206580] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1275.213854] R13: 00007ffddad98d9f R14: 00007f5728ef6300 R15: 0000000000022000 [ 1275.222078] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1275.232602] Node 1 Normal: 1335*4kB (UM) 840*8kB (UME) 583*16kB (UM) 963*32kB (UM) 8*64kB (ME) 3*128kB (UM) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 53612kB [ 1275.238673] lowmem_reserve[]: [ 1275.251126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1275.263131] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1275.275588] / mems_allowed=0-1 [ 1275.275838] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1275.287754] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1275.299813] 25384 total pagecache pages [ 1275.304037] 0 pages in swap cache [ 1275.307491] Swap cache stats: add 0, delete 0, find 0/0 [ 1275.316313] Free swap = 0kB [ 1275.319353] Total swap = 0kB [ 1275.322530] 2097051 pages RAM [ 1275.325589] CPU: 0 PID: 31229 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1275.325634] 0 pages HighMem/MovableOnly [ 1275.333511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1275.333517] Call Trace: [ 1275.333541] dump_stack+0x1b2/0x281 [ 1275.333555] warn_alloc.cold+0x96/0x1cc [ 1275.333566] ? zone_watermark_ok_safe+0x220/0x220 [ 1275.333587] __alloc_pages_nodemask+0x2127/0x2720 [ 1275.333602] ? lock_acquire+0x170/0x3f0 [ 1275.333617] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1275.333635] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1275.333648] ? __mutex_unlock_slowpath+0x75/0x770 [ 1275.333663] alloc_pages_current+0x155/0x260 [ 1275.333680] ion_page_pool_alloc+0x118/0x1b0 [ 1275.341026] 363849 pages reserved [ 1275.347024] ion_system_heap_allocate+0x133/0x8c0 [ 1275.349585] 0 pages cma reserved [ 1275.353201] ? ion_alloc+0x187/0x810 [ 1275.353211] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1275.353220] ? ion_system_contig_heap_create+0x130/0x130 [ 1275.353229] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1275.353241] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1275.353251] ion_alloc+0x204/0x810 [ 1275.353270] ? ion_dma_buf_release+0x40/0x40 [ 1275.353284] ? __might_fault+0x177/0x1b0 [ 1275.353295] ion_ioctl+0xea/0x1f0 [ 1275.353304] ? ion_query_heaps+0x360/0x360 [ 1275.353315] ? ion_query_heaps+0x360/0x360 [ 1275.353324] do_vfs_ioctl+0x75a/0xff0 [ 1275.353334] ? ioctl_preallocate+0x1a0/0x1a0 [ 1275.353343] ? lock_downgrade+0x740/0x740 [ 1275.353357] ? __fget+0x225/0x360 [ 1275.353367] ? do_vfs_ioctl+0xff0/0xff0 [ 1275.475191] ? security_file_ioctl+0x83/0xb0 [ 1275.479608] SyS_ioctl+0x7f/0xb0 [ 1275.482969] ? do_vfs_ioctl+0xff0/0xff0 [ 1275.486944] do_syscall_64+0x1d5/0x640 [ 1275.490832] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1275.496015] RIP: 0033:0x4665f9 [ 1275.499197] RSP: 002b:00007f6b7165b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1275.506938] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1275.514207] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1275.521497] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1275.528853] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1275.536132] R13: 00007ffec17d0c7f R14: 00007f6b7165b300 R15: 0000000000022000 [ 1275.549331] 0 0 0 0 0 [ 1275.553055] Node 0 DMA: 4*4kB (UE) 2*8kB (U) 6*16kB (UE) 9*32kB (UE) 7*64kB (UE) 5*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1275.569333] Node 0 DMA32: 2611*4kB (UME) 1599*8kB (UME) 589*16kB (UME) 120*32kB (UME) 1*64kB (U) 25*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 39764kB [ 1275.585525] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1275.597313] Node 1 Normal: 1363*4kB (UM) 842*8kB (UME) 591*16kB (UM) 965*32kB (UM) 8*64kB (ME) 3*128kB (UM) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 53932kB [ 1275.614784] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1275.624590] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1275.634200] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1275.645808] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1275.654924] 25524 total pagecache pages [ 1275.659763] 0 pages in swap cache [ 1275.663722] Swap cache stats: add 0, delete 0, find 0/0 [ 1275.670324] Free swap = 0kB [ 1275.674284] Total swap = 0kB [ 1275.678529] 2097051 pages RAM [ 1275.682535] 0 pages HighMem/MovableOnly [ 1275.687481] 363849 pages reserved [ 1275.691525] 0 pages cma reserved [ 1275.695679] Out of memory (oom_kill_allocating_task): Kill process 31225 (systemd-udevd) score 0 or sacrifice child [ 1275.706828] Killed process 31225 (systemd-udevd) total-vm:46004kB, anon-rss:2968kB, file-rss:0kB, shmem-rss:0kB [ 1275.719259] oom_reaper: reaped process 31225 (systemd-udevd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1275.733669] Mem-Info: [ 1275.737488] active_anon:22249 inactive_anon:25011 isolated_anon:0 [ 1275.737488] active_file:19 inactive_file:539 isolated_file:0 [ 1275.737488] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1275.737488] slab_reclaimable:12465 slab_unreclaimable:117362 [ 1275.737488] mapped:43755 shmem:25359 pagetables:692 bounce:0 [ 1275.737488] free:25833 free_pcp:132 free_cma:0 [ 1275.773433] Node 0 active_anon:88508kB inactive_anon:83936kB active_file:20kB inactive_file:3324kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175984kB dirty:0kB writeback:0kB shmem:85200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1275.803778] Node 1 active_anon:488kB inactive_anon:16108kB active_file:56kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1275.831768] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1275.858475] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1275.863616] Node 0 DMA32 free:28876kB min:36200kB low:45248kB high:54296kB active_anon:88508kB inactive_anon:83936kB active_file:308kB inactive_file:268kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:2644kB bounce:0kB free_pcp:644kB local_pcp:0kB free_cma:0kB [ 1275.893486] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1275.906627] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1275.911929] CPU: 0 PID: 7978 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1275.919741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1275.929124] Call Trace: [ 1275.931742] dump_stack+0x1b2/0x281 [ 1275.935385] dump_header+0x178/0x82f [ 1275.939102] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1275.944210] ? ___ratelimit+0x2cd/0x530 [ 1275.948191] oom_kill_process.cold+0x10/0xa40 [ 1275.951073] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1275.952711] out_of_memory+0xe3e/0x1190 [ 1275.952724] ? oom_killer_disable+0x1c0/0x1c0 [ 1275.971007] (null) [ 1275.972459] ? mutex_trylock+0x152/0x1a0 [ 1275.974611] syz-executor.5 cpuset= [ 1275.978667] __alloc_pages_nodemask+0x23e1/0x2720 [ 1275.978669] / mems_allowed=0-1 [ 1275.982228] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1275.982250] alloc_pages_current+0x155/0x260 [ 1275.982262] filemap_fault+0x11a1/0x1ad0 [ 1275.982281] ext4_filemap_fault+0x84/0xb0 [ 1275.982290] __do_fault+0xfa/0x380 [ 1275.982300] __handle_mm_fault+0x2497/0x4620 [ 1275.982310] ? vm_insert_page+0x7c0/0x7c0 [ 1275.982319] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1275.982327] ? nanosleep_copyout+0x100/0x100 [ 1275.982341] ? mark_held_locks+0xa6/0xf0 [ 1275.982351] handle_mm_fault+0x455/0x9c0 [ 1275.982365] __do_page_fault+0x549/0xad0 [ 1275.982376] ? spurious_fault+0x640/0x640 [ 1276.024854] lowmem_reserve[]: [ 1276.028581] ? do_page_fault+0x60/0x500 [ 1276.044822] 0 [ 1276.044893] ? page_fault+0x2f/0x50 [ 1276.047973] 0 [ 1276.051960] page_fault+0x45/0x50 [ 1276.051969] RIP: 1376ae:0x6 [ 1276.051973] RSP: 2018:00007ffddad9905c EFLAGS: 00000032 [ 1276.054285] Mem-Info: [ 1276.057956] CPU: 1 PID: 31206 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1276.059296] active_anon:22208 inactive_anon:25010 isolated_anon:0 [ 1276.059296] active_file:12 inactive_file:11 isolated_file:0 [ 1276.059296] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1276.059296] slab_reclaimable:12465 slab_unreclaimable:117409 [ 1276.059296] mapped:43521 shmem:25358 pagetables:625 bounce:0 [ 1276.059296] free:13844 free_pcp:3 free_cma:0 [ 1276.062720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1276.062724] Call Trace: [ 1276.062742] dump_stack+0x1b2/0x281 [ 1276.062756] warn_alloc.cold+0x96/0x1cc [ 1276.062769] ? zone_watermark_ok_safe+0x220/0x220 [ 1276.062781] ? usleep_range+0x130/0x130 [ 1276.065706] Node 0 active_anon:88396kB inactive_anon:83932kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:85196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1276.071048] ? try_to_free_pages+0x23f/0x6e0 [ 1276.071059] ? _find_next_bit+0xdb/0x100 [ 1276.071069] ? run_timer_softirq+0x5a0/0x5a0 [ 1276.071086] __alloc_pages_nodemask+0x2127/0x2720 [ 1276.073489] Node 1 active_anon:436kB inactive_anon:16108kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1276.081578] ? lock_acquire+0x170/0x3f0 [ 1276.081596] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1276.081622] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1276.114843] Node 0 [ 1276.124168] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1276.124188] alloc_pages_current+0x155/0x260 [ 1276.124201] ion_page_pool_alloc+0x118/0x1b0 [ 1276.126786] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1276.130393] ion_system_heap_allocate+0x133/0x8c0 [ 1276.134407] lowmem_reserve[]: [ 1276.139223] ? _raw_spin_unlock+0x29/0x40 [ 1276.143225] 0 [ 1276.170856] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1276.170865] ? ion_system_contig_heap_create+0x130/0x130 [ 1276.170875] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1276.170887] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1276.170898] ion_alloc+0x27a/0x810 [ 1276.175358] 2717 [ 1276.179381] ? ion_dma_buf_release+0x40/0x40 [ 1276.183815] 2718 [ 1276.188617] ? __might_fault+0x177/0x1b0 [ 1276.215377] 2718 [ 1276.219326] ion_ioctl+0xea/0x1f0 [ 1276.224457] 2718 [ 1276.228905] ? ion_query_heaps+0x360/0x360 [ 1276.236742] ? ion_query_heaps+0x360/0x360 [ 1276.241177] Node 0 [ 1276.245556] do_vfs_ioctl+0x75a/0xff0 [ 1276.271123] DMA32 free:17828kB min:36200kB low:45248kB high:54296kB active_anon:88396kB inactive_anon:83932kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2464kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1276.275906] ? ioctl_preallocate+0x1a0/0x1a0 [ 1276.278988] lowmem_reserve[]: [ 1276.283142] ? lock_downgrade+0x740/0x740 [ 1276.283156] ? __fget+0x225/0x360 [ 1276.283165] ? do_vfs_ioctl+0xff0/0xff0 [ 1276.283177] ? security_file_ioctl+0x83/0xb0 [ 1276.283190] SyS_ioctl+0x7f/0xb0 [ 1276.284978] 0 [ 1276.289896] ? do_vfs_ioctl+0xff0/0xff0 [ 1276.295417] 0 [ 1276.300414] do_syscall_64+0x1d5/0x640 [ 1276.305273] 0 [ 1276.308776] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1276.310822] 0 [ 1276.315228] RIP: 0033:0x4665f9 [ 1276.315233] RSP: 002b:00007f6d3989a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1276.315242] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1276.315247] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1276.315251] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1276.315256] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1276.315261] R13: 00007ffc681b1ebf R14: 00007f6d3989a300 R15: 0000000000022000 [ 1276.320778] 0 [ 1276.322328] 0 [ 1276.324601] 0 [ 1276.328998] 0 [ 1276.333309] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1276.333330] lowmem_reserve[]: 0 0 0 0 [ 1276.344433] 0 [ 1276.375863] Node 0 [ 1276.379434] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1276.383588] Node 1 Normal free:26572kB min:53696kB low:67120kB high:80544kB active_anon:436kB inactive_anon:16108kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:36kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1276.387026] lowmem_reserve[]: 0 [ 1276.391012] lowmem_reserve[]: 0 0 0 0 0 [ 1276.391032] Node 0 DMA: 4*4kB (UE) 2*8kB (U) 6*16kB (UE) 9*32kB (UE) 7*64kB (UE) 5*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1276.391108] Node 0 [ 1276.399615] 0 [ 1276.400654] DMA32: [ 1276.404678] 0 0 0 [ 1276.404692] Node 1 Normal free:26572kB min:53696kB low:67120kB high:80544kB active_anon:436kB inactive_anon:16108kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:36kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1276.404712] lowmem_reserve[]: 0 0 [ 1276.407274] 686*4kB [ 1276.410460] 0 0 [ 1276.412291] (UME) 273*8kB (UME) 361*16kB (UME) 121*32kB (UME) 1*64kB (U) 25*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17840kB [ 1276.412345] Node 0 Normal: 0*4kB 0*8kB [ 1276.421771] 0 [ 1276.423320] 0*16kB [ 1276.430212] Node 0 [ 1276.437560] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1276.437592] Node 1 Normal: 27*4kB (UM) 8*8kB [ 1276.450360] DMA: [ 1276.452291] (UME) 9*16kB (UM) 757*32kB (UM) 14*64kB (UME) 5*128kB (UM) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 26588kB [ 1276.452353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1276.462053] 4*4kB [ 1276.466934] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1276.468691] (UE) [ 1276.470476] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1276.478707] 2*8kB [ 1276.499630] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1276.499636] 25381 total pagecache pages [ 1276.499646] 0 pages in swap cache [ 1276.499651] Swap cache stats: add 0, delete 0, find 0/0 [ 1276.499654] Free swap = 0kB [ 1276.499657] Total swap = 0kB [ 1276.499665] 2097051 pages RAM [ 1276.499668] 0 pages HighMem/MovableOnly [ 1276.499672] 363849 pages reserved [ 1276.499675] 0 pages cma reserved [ 1276.499683] Out of memory (oom_kill_allocating_task): Kill process 7978 (syz-executor.3) score 0 or sacrifice child [ 1276.499714] Killed process 31228 (syz-executor.3) total-vm:93252kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 1276.508314] (U) [ 1276.541834] oom_reaper: reaped process 31228 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1276.566108] syz-executor.3: [ 1276.569709] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1276.588723] page allocation failure: order:0 [ 1276.590191] (null) [ 1276.592047] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1276.626326] , order=0, oom_score_adj=0 [ 1276.628302] 6*16kB [ 1276.643934] syz-fuzzer cpuset= [ 1276.644957] (UE) [ 1276.646706] / [ 1276.648928] 9*32kB [ 1276.656270] mems_allowed=0-1 [ 1276.658905] (null) [ 1276.663439] CPU: 0 PID: 7961 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1276.671000] syz-executor.3 cpuset= [ 1276.677274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1276.701013] (UE) [ 1276.707699] Call Trace: [ 1276.709843] 7*64kB [ 1276.718427] dump_stack+0x1b2/0x281 [ 1276.718440] dump_header+0x178/0x82f [ 1276.718450] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1276.718464] ? ___ratelimit+0x2cd/0x530 [ 1276.718474] oom_kill_process.cold+0x10/0xa40 [ 1276.718491] out_of_memory+0xe3e/0x1190 [ 1276.718503] ? oom_killer_disable+0x1c0/0x1c0 [ 1276.718516] ? mutex_trylock+0x152/0x1a0 [ 1276.718529] __alloc_pages_nodemask+0x23e1/0x2720 [ 1276.723125] / [ 1276.725952] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1276.751066] mems_allowed=0-1 [ 1276.752747] alloc_pages_current+0x155/0x260 [ 1276.763439] (UE) [ 1276.773924] filemap_fault+0x11a1/0x1ad0 [ 1276.773943] ext4_filemap_fault+0x84/0xb0 [ 1276.773952] __do_fault+0xfa/0x380 [ 1276.773961] __handle_mm_fault+0x2497/0x4620 [ 1276.773970] ? vm_insert_page+0x7c0/0x7c0 [ 1276.773988] ? mark_held_locks+0xa6/0xf0 [ 1276.773999] handle_mm_fault+0x455/0x9c0 [ 1276.774011] __do_page_fault+0x549/0xad0 [ 1276.774023] ? spurious_fault+0x640/0x640 [ 1276.791021] 5*128kB [ 1276.798658] ? do_page_fault+0x60/0x500 [ 1276.831039] (UE) [ 1276.832815] ? page_fault+0x2f/0x50 [ 1276.840267] 1*256kB [ 1276.843977] page_fault+0x45/0x50 [ 1276.843987] RIP: 0900:0xc0000ab920 [ 1276.843991] RSP: 032c:000000c00003fe40 EFLAGS: 00000003 [ 1276.923986] CPU: 0 PID: 31228 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1276.926421] (E) [ 1276.929418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1276.933911] 2*512kB [ 1276.937956] Call Trace: [ 1276.942199] (UE) [ 1276.946202] dump_stack+0x1b2/0x281 [ 1276.950230] 2*1024kB [ 1276.954378] warn_alloc.cold+0x96/0x1cc [ 1276.954390] ? zone_watermark_ok_safe+0x220/0x220 [ 1276.954399] ? usleep_range+0x130/0x130 [ 1276.954408] ? try_to_free_pages+0x23f/0x6e0 [ 1276.954418] ? _find_next_bit+0xdb/0x100 [ 1276.954427] ? run_timer_softirq+0x5a0/0x5a0 [ 1276.954442] __alloc_pages_nodemask+0x2127/0x2720 [ 1276.954458] ? lock_acquire+0x170/0x3f0 [ 1276.954473] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1276.956814] (UE) [ 1276.960741] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1276.962885] 3*2048kB [ 1276.966397] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1276.968701] (UME) [ 1276.972169] alloc_pages_current+0x155/0x260 [ 1276.972183] ion_page_pool_alloc+0x118/0x1b0 [ 1276.972192] ion_system_heap_allocate+0x133/0x8c0 [ 1276.972201] ? ion_alloc+0x187/0x810 [ 1276.972211] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1276.972219] ? ion_system_contig_heap_create+0x130/0x130 [ 1276.972229] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1276.972241] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1276.975762] 0*4096kB [ 1276.981131] ion_alloc+0x204/0x810 [ 1276.981145] ? ion_dma_buf_release+0x40/0x40 [ 1276.981156] ? __might_fault+0x177/0x1b0 [ 1276.981166] ion_ioctl+0xea/0x1f0 [ 1276.981178] ? ion_query_heaps+0x360/0x360 [ 1276.989046] = 10976kB [ 1276.991020] ? ion_query_heaps+0x360/0x360 [ 1276.991030] do_vfs_ioctl+0x75a/0xff0 [ 1276.991042] ? ioctl_preallocate+0x1a0/0x1a0 [ 1276.991051] ? lock_downgrade+0x740/0x740 [ 1276.991063] ? __fget+0x225/0x360 [ 1276.991072] ? do_vfs_ioctl+0xff0/0xff0 [ 1276.991083] ? security_file_ioctl+0x83/0xb0 [ 1276.991093] SyS_ioctl+0x7f/0xb0 [ 1277.000434] Node 0 [ 1277.002754] ? do_vfs_ioctl+0xff0/0xff0 [ 1277.002768] do_syscall_64+0x1d5/0x640 [ 1277.002782] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1277.002790] RIP: 0033:0x4665f9 [ 1277.002795] RSP: 002b:00007f5728ef6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1277.002804] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1277.002809] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1277.002814] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1277.002818] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1277.002823] R13: 00007ffddad98d9f R14: 00007f5728ef6300 R15: 0000000000022000 [ 1277.008592] Mem-Info: [ 1277.021076] DMA32: [ 1277.027760] active_anon:22208 inactive_anon:25010 isolated_anon:0 [ 1277.027760] active_file:7 inactive_file:16 isolated_file:0 [ 1277.027760] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1277.027760] slab_reclaimable:12465 slab_unreclaimable:117382 [ 1277.027760] mapped:43521 shmem:25358 pagetables:625 bounce:0 [ 1277.027760] free:15288 free_pcp:30 free_cma:0 [ 1277.041060] 686*4kB [ 1277.049456] Node 0 active_anon:88396kB inactive_anon:83932kB active_file:0kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:85196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1277.076169] (UME) [ 1277.079216] Node 1 active_anon:436kB inactive_anon:16108kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1277.095614] 273*8kB [ 1277.098894] Node 0 [ 1277.115610] (UME) [ 1277.119263] warn_alloc_show_mem: 2 callbacks suppressed [ 1277.119267] Mem-Info: [ 1277.135657] 363*16kB [ 1277.137771] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1277.141031] (UME) [ 1277.145417] lowmem_reserve[]: 0 [ 1277.149558] 123*32kB [ 1277.153875] active_anon:22184 inactive_anon:25010 isolated_anon:0 [ 1277.153875] active_file:11 inactive_file:12 isolated_file:0 [ 1277.153875] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1277.153875] slab_reclaimable:12463 slab_unreclaimable:117381 [ 1277.153875] mapped:43521 shmem:25358 pagetables:625 bounce:0 [ 1277.153875] free:15291 free_pcp:31 free_cma:0 [ 1277.183085] (UME) [ 1277.184062] 2717 [ 1277.202558] 2*64kB [ 1277.206456] Node 0 active_anon:88300kB inactive_anon:83932kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:85196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1277.226399] (U) [ 1277.228548] 2718 [ 1277.230352] 25*128kB [ 1277.232601] 2718 2718 [ 1277.232610] Node 0 DMA32 free:17968kB min:36200kB low:45248kB high:54296kB active_anon:88300kB inactive_anon:83932kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2464kB bounce:0kB free_pcp:124kB local_pcp:96kB free_cma:0kB [ 1277.232630] lowmem_reserve[]: 0 0 0 0 0 [ 1277.232649] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1277.232665] lowmem_reserve[]: 0 0 0 0 0 [ 1277.232684] Node 1 Normal free:32220kB min:53696kB low:67120kB high:80544kB active_anon:436kB inactive_anon:16108kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:36kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1277.232701] lowmem_reserve[]: 0 [ 1277.268420] (U) [ 1277.276584] Node 1 active_anon:436kB inactive_anon:16108kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1277.303123] 0*256kB [ 1277.327777] 0 [ 1277.334765] 0*512kB [ 1277.339387] 0 [ 1277.343154] 0*1024kB [ 1277.344924] 0 [ 1277.375085] 0*2048kB [ 1277.375373] Node 0 [ 1277.377785] 0*4096kB [ 1277.411013] 0 [ 1277.411023] Node 0 DMA: 4*4kB (UE) 2*8kB (U) 6*16kB (UE) 9*32kB (UE) 7*64kB (UE) 5*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) [ 1277.418230] = 18000kB [ 1277.445304] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1277.445316] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1277.445338] Node 0 DMA32 free:17968kB min:36200kB low:45248kB high:54296kB active_anon:88300kB inactive_anon:83932kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2464kB bounce:0kB free_pcp:124kB local_pcp:96kB free_cma:0kB [ 1277.445359] lowmem_reserve[]: 0 0 0 0 0 [ 1277.445375] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1277.445398] lowmem_reserve[]: [ 1277.452387] Node 0 [ 1277.454866] 3*2048kB [ 1277.489323] Normal: [ 1277.515039] 0 0 0 0 0 [ 1277.515059] Node 1 Normal free:32220kB min:53696kB low:67120kB high:80544kB active_anon:436kB inactive_anon:16108kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:36kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1277.515083] lowmem_reserve[]: 0 0 0 0 0 [ 1277.515104] Node 0 DMA: 4*4kB (UE) 2*8kB (U) 6*16kB (UE) 9*32kB (UE) 7*64kB (UE) 5*128kB (UE) 1*256kB (E) 2*512kB (UE) [ 1277.528459] 0*4kB [ 1277.547367] 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1277.547391] Node 0 DMA32: 686*4kB (UME) 273*8kB (UME) 363*16kB (UME) 123*32kB (UME) 2*64kB (U) 25*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18000kB [ 1277.547462] Node 0 [ 1277.555886] 0*8kB [ 1277.579639] (UME) 0*4096kB = 10976kB [ 1277.579654] Node 0 DMA32: 686*4kB (UME) 273*8kB (UME) 363*16kB (UME) 123*32kB (UME) 2*64kB (U) 25*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18000kB [ 1277.579720] Node 0 Normal: [ 1277.587354] 0*16kB [ 1277.587953] 0*4kB [ 1277.590347] 0*32kB [ 1277.592187] Normal: [ 1277.594579] 0*64kB [ 1277.596797] 0*4kB [ 1277.599189] 0*128kB [ 1277.601014] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1277.601053] Node 1 Normal: 27*4kB (UM) 8*8kB (UME) 9*16kB (UM) 757*32kB (UM) 22*64kB (UME) 5*128kB (UM) 0*256kB 1*512kB [ 1277.614625] 0*256kB [ 1277.620153] 0*8kB [ 1277.642831] 0*512kB [ 1277.651580] (M) [ 1277.676874] 0*1024kB [ 1277.685324] 0*16kB [ 1277.707982] 0*2048kB [ 1277.714695] 0*32kB [ 1277.715069] 0*4096kB [ 1277.717381] 0*64kB [ 1277.719859] = 0kB [ 1277.752753] 0*128kB [ 1277.764321] 5*1024kB [ 1277.768409] 0*256kB [ 1277.771072] (U) 0*2048kB 0*4096kB = 32220kB [ 1277.771093] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1277.771099] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1277.771108] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1277.789992] 0*512kB [ 1277.790914] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1277.793879] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1277.793895] Node 1 Normal: [ 1277.809254] 25381 total pagecache pages [ 1277.817100] 27*4kB [ 1277.818219] 0 pages in swap cache [ 1277.820458] (UM) [ 1277.823499] Swap cache stats: add 0, delete 0, find 0/0 [ 1277.824888] 8*8kB [ 1277.827207] Free swap = 0kB [ 1277.840551] Node 1 [ 1277.848083] Total swap = 0kB [ 1277.849644] (UME) [ 1277.851826] 2097051 pages RAM [ 1277.851829] 0 pages HighMem/MovableOnly [ 1277.851832] 363849 pages reserved [ 1277.851836] 0 pages cma reserved [ 1277.851843] Out of memory (oom_kill_allocating_task): Kill process 7961 (syz-fuzzer) score 0 or sacrifice child [ 1277.851902] Killed process 7969 (syz-executor.0) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1277.992425] 9*16kB (UM) 757*32kB (UM) 22*64kB (UME) 5*128kB (UM) 0*256kB 1*512kB (M) 5*1024kB (U) 0*2048kB 0*4096kB = 32220kB [ 1278.002995] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1278.011007] Normal: 26*4kB (M) 7*8kB (ME) 8*16kB (M) 754*32kB (UM) 22*64kB (UME) 5*128kB (UM) 0*256kB 1*512kB (M) 17*1024kB (U) 0*2048kB 0*4096kB = 44384kB [ 1278.022470] syz-executor.5 cpuset= [ 1278.031258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1278.035011] / [ 1278.043799] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1278.045386] mems_allowed=0-1 [ 1278.045544] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1278.058140] CPU: 1 PID: 7977 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1278.066783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1278.074335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1278.074341] Call Trace: [ 1278.074362] dump_stack+0x1b2/0x281 [ 1278.074374] dump_header+0x178/0x82f [ 1278.074384] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1278.074392] ? ___ratelimit+0x2cd/0x530 [ 1278.074401] oom_kill_process.cold+0x10/0xa40 [ 1278.074419] out_of_memory+0xe3e/0x1190 [ 1278.074432] ? oom_killer_disable+0x1c0/0x1c0 [ 1278.083316] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1278.092640] ? mutex_trylock+0x152/0x1a0 [ 1278.092654] __alloc_pages_nodemask+0x23e1/0x2720 [ 1278.092675] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1278.095289] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1278.098895] alloc_pages_current+0x155/0x260 [ 1278.102702] 25381 total pagecache pages [ 1278.107766] filemap_fault+0x11a1/0x1ad0 [ 1278.111774] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1278.116328] ext4_filemap_fault+0x84/0xb0 [ 1278.120303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1278.124798] __do_fault+0xfa/0x380 [ 1278.124808] __handle_mm_fault+0x2497/0x4620 [ 1278.124816] ? vm_insert_page+0x7c0/0x7c0 [ 1278.124826] ? lock_acquire+0x170/0x3f0 [ 1278.124841] ? mark_held_locks+0xa6/0xf0 [ 1278.133483] 0 pages in swap cache [ 1278.137485] handle_mm_fault+0x455/0x9c0 [ 1278.142379] Swap cache stats: add 0, delete 0, find 0/0 [ 1278.147168] __do_page_fault+0x549/0xad0 [ 1278.155789] 25381 total pagecache pages [ 1278.160137] ? spurious_fault+0x640/0x640 [ 1278.164127] Free swap = 0kB [ 1278.168133] ? do_page_fault+0x60/0x500 [ 1278.177015] 0 pages in swap cache [ 1278.181100] ? page_fault+0x2f/0x50 [ 1278.181108] page_fault+0x45/0x50 [ 1278.181118] RIP: 2b7686b:0x4 [ 1278.181125] RSP: 2127:00007ffc681b217c EFLAGS: 02b76810 [ 1278.189699] Swap cache stats: add 0, delete 0, find 0/0 [ 1278.199705] Mem-Info: [ 1278.202364] Total swap = 0kB [ 1278.205837] active_anon:22184 inactive_anon:25010 isolated_anon:0 [ 1278.205837] active_file:11 inactive_file:12 isolated_file:0 [ 1278.205837] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1278.205837] slab_reclaimable:12461 slab_unreclaimable:117363 [ 1278.205837] mapped:43521 shmem:25358 pagetables:599 bounce:0 [ 1278.205837] free:18348 free_pcp:97 free_cma:0 [ 1278.209877] 2097051 pages RAM [ 1278.219016] Node 0 active_anon:88300kB inactive_anon:83932kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:85196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1278.222955] Free swap = 0kB [ 1278.227004] Node 1 active_anon:436kB inactive_anon:16108kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1278.231049] 0 pages HighMem/MovableOnly [ 1278.231054] 363849 pages reserved [ 1278.231057] 0 pages cma reserved [ 1278.241019] Total swap = 0kB [ 1278.247747] Node 0 [ 1278.249516] 2097051 pages RAM [ 1278.253161] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1278.256000] 0 pages HighMem/MovableOnly [ 1278.266699] lowmem_reserve[]: [ 1278.267966] syz-executor.3: [ 1278.269244] 0 [ 1278.272314] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1278.313289] 2717 [ 1278.338644] 363849 pages reserved [ 1278.338649] 0 pages cma reserved [ 1278.411002] (null) [ 1278.420320] 2718 [ 1278.430996] syz-executor.3 cpuset= [ 1278.442051] 2718 2718 [ 1278.459760] Node 0 DMA32 free:18032kB min:36200kB low:45248kB high:54296kB active_anon:88300kB inactive_anon:83932kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2360kB bounce:0kB free_pcp:264kB local_pcp:160kB free_cma:0kB [ 1278.461007] / [ 1278.494358] lowmem_reserve[]: 0 0 0 0 0 [ 1278.500079] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1278.510993] mems_allowed=0-1 [ 1278.535485] lowmem_reserve[]: 0 0 0 0 0 [ 1278.539502] Node 1 Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:436kB inactive_anon:16108kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:36kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 1278.551021] CPU: 0 PID: 31228 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1278.574174] lowmem_reserve[]: [ 1278.576053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1278.576062] 0 [ 1278.579158] Call Trace: [ 1278.593148] dump_stack+0x1b2/0x281 [ 1278.594260] 0 0 [ 1278.596787] warn_alloc.cold+0x96/0x1cc [ 1278.596800] ? zone_watermark_ok_safe+0x220/0x220 [ 1278.598753] 0 [ 1278.602730] __alloc_pages_nodemask+0x2127/0x2720 [ 1278.602748] ? lock_acquire+0x170/0x3f0 [ 1278.602762] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1278.602780] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1278.602793] ? __mutex_unlock_slowpath+0x75/0x770 [ 1278.602801] ? retint_kernel+0x2d/0x2d [ 1278.602815] alloc_pages_current+0x155/0x260 [ 1278.602827] ion_page_pool_alloc+0x118/0x1b0 [ 1278.602837] ion_system_heap_allocate+0x133/0x8c0 [ 1278.602849] ? _raw_spin_unlock+0x29/0x40 [ 1278.602859] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1278.609583] 0 [ 1278.614331] ? ion_system_contig_heap_create+0x130/0x130 [ 1278.614343] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1278.614355] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1278.614365] ion_alloc+0x27a/0x810 [ 1278.614378] ? ion_dma_buf_release+0x40/0x40 [ 1278.614390] ? __might_fault+0x177/0x1b0 [ 1278.614401] ion_ioctl+0xea/0x1f0 [ 1278.614409] ? ion_query_heaps+0x360/0x360 [ 1278.614421] ? ion_query_heaps+0x360/0x360 [ 1278.614431] do_vfs_ioctl+0x75a/0xff0 [ 1278.614442] ? ioctl_preallocate+0x1a0/0x1a0 [ 1278.614452] ? lock_downgrade+0x740/0x740 [ 1278.614466] ? __fget+0x225/0x360 [ 1278.614475] ? do_vfs_ioctl+0xff0/0xff0 [ 1278.614487] ? security_file_ioctl+0x83/0xb0 [ 1278.614497] SyS_ioctl+0x7f/0xb0 [ 1278.623301] ? do_vfs_ioctl+0xff0/0xff0 [ 1278.628729] Node 0 [ 1278.633569] do_syscall_64+0x1d5/0x640 [ 1278.633585] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1278.633593] RIP: 0033:0x4665f9 [ 1278.633597] RSP: 002b:00007f5728ef6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1278.633607] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1278.633612] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1278.633616] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1278.633621] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1278.633626] R13: 00007ffddad98d9f R14: 00007f5728ef6300 R15: 0000000000022000 [ 1278.711007] Mem-Info: [ 1278.720625] DMA: [ 1278.731043] active_anon:22184 inactive_anon:25010 isolated_anon:0 [ 1278.731043] active_file:11 inactive_file:12 isolated_file:0 [ 1278.731043] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1278.731043] slab_reclaimable:12461 slab_unreclaimable:117363 [ 1278.731043] mapped:43521 shmem:25358 pagetables:599 bounce:0 [ 1278.731043] free:13964 free_pcp:97 free_cma:0 [ 1278.738665] 4*4kB [ 1278.739361] Node 0 active_anon:88300kB inactive_anon:83932kB active_file:16kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:85196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1278.744600] (UE) [ 1278.763518] Node 1 active_anon:436kB inactive_anon:16108kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:16236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1278.775588] 2*8kB [ 1278.777742] Node 0 [ 1278.786725] (U) [ 1278.792538] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1278.799439] 6*16kB [ 1278.830802] lowmem_reserve[]: [ 1278.837941] (UE) [ 1278.861006] 0 [ 1278.868583] 9*32kB [ 1278.890006] 2717 [ 1278.897073] (UE) [ 1278.922051] 2718 [ 1278.929442] 7*64kB [ 1278.930994] 2718 2718 [ 1278.933255] (UE) [ 1278.935326] Node 0 [ 1278.937370] 5*128kB [ 1278.939430] DMA32 free:18032kB min:36200kB low:45248kB high:54296kB active_anon:88300kB inactive_anon:83932kB active_file:16kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2360kB bounce:0kB free_pcp:264kB local_pcp:104kB free_cma:0kB [ 1278.946945] (UE) [ 1278.948578] lowmem_reserve[]: [ 1278.950783] 1*256kB [ 1278.980963] 0 [ 1278.986557] (E) [ 1278.986806] 0 [ 1278.988591] 2*512kB [ 1278.990549] 0 [ 1278.992938] (UE) [ 1278.995082] 0 [ 1278.996575] 2*1024kB [ 1278.998628] 0 [ 1279.000413] (UE) [ 1279.002867] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1279.002889] lowmem_reserve[]: 0 0 0 0 0 [ 1279.002909] Node 1 Normal free:27872kB min:53696kB low:67120kB high:80544kB active_anon:436kB inactive_anon:16108kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:36kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 1279.002931] lowmem_reserve[]: 0 0 0 0 0 [ 1279.002950] Node 0 DMA: 4*4kB (UE) 2*8kB (U) 6*16kB [ 1279.009929] 3*2048kB [ 1279.032752] (UE) [ 1279.042145] (UME) [ 1279.065270] 9*32kB [ 1279.074199] 0*4096kB [ 1279.074299] (UE) [ 1279.076665] = 10976kB [ 1279.078733] 7*64kB (UE) [ 1279.080869] Node 0 [ 1279.083133] 5*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1279.083171] Node 0 DMA32: 686*4kB (UME) 273*8kB (UME) 363*16kB (UME) 124*32kB (UME) 2*64kB (U) [ 1279.087359] DMA32: [ 1279.087650] 25*128kB [ 1279.090044] 686*4kB [ 1279.093321] (U) [ 1279.099783] (UME) [ 1279.106713] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18032kB [ 1279.106736] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1279.106782] Node 1 Normal: 26*4kB (M) [ 1279.121544] 273*8kB [ 1279.123003] 7*8kB [ 1279.124637] (UME) [ 1279.126763] (ME) 8*16kB (M) [ 1279.138907] 363*16kB [ 1279.144965] 754*32kB [ 1279.148529] (UME) [ 1279.150844] (UM) [ 1279.158300] 124*32kB [ 1279.160581] 20*64kB [ 1279.163011] (UME) 2*64kB (U) [ 1279.165562] (UME) [ 1279.167226] 25*128kB [ 1279.169631] 5*128kB (UM) [ 1279.177200] (U) [ 1279.177245] 0*256kB [ 1279.179661] 0*256kB [ 1279.182750] 1*512kB [ 1279.184423] 0*512kB [ 1279.186728] (M) [ 1279.189049] 0*1024kB [ 1279.191488] 1*1024kB (U) 0*2048kB 0*4096kB = 27872kB [ 1279.191512] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1279.191519] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1279.191526] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1279.191532] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1279.191536] 25381 total pagecache pages [ 1279.191546] 0 pages in swap cache [ 1279.191552] Swap cache stats: add 0, delete 0, find 0/0 [ 1279.191555] Free swap = 0kB [ 1279.191559] Total swap = 0kB [ 1279.191565] 2097051 pages RAM [ 1279.191568] 0 pages HighMem/MovableOnly [ 1279.191572] 363849 pages reserved [ 1279.191575] 0 pages cma reserved [ 1279.221180] syz-executor.3: [ 1279.261610] 0*2048kB [ 1279.277143] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1279.281226] 0*4096kB = 18032kB [ 1279.296870] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1279.308481] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1279.311379] CPU: 0 PID: 31228 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1279.327467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1279.328191] Node 1 [ 1279.336939] Call Trace: [ 1279.336965] dump_stack+0x1b2/0x281 [ 1279.336979] warn_alloc.cold+0x96/0x1cc [ 1279.336990] ? zone_watermark_ok_safe+0x220/0x220 [ 1279.337000] ? usleep_range+0x130/0x130 [ 1279.337008] ? try_to_free_pages+0x23f/0x6e0 [ 1279.337018] ? _find_next_bit+0xdb/0x100 [ 1279.337029] ? run_timer_softirq+0x5a0/0x5a0 [ 1279.337044] __alloc_pages_nodemask+0x2127/0x2720 [ 1279.339366] Normal: [ 1279.341953] ? lock_acquire+0x170/0x3f0 [ 1279.341970] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1279.341980] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1279.341995] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1279.342007] ? retint_kernel+0x2d/0x2d [ 1279.342021] alloc_pages_current+0x155/0x260 [ 1279.342032] ion_page_pool_alloc+0x118/0x1b0 [ 1279.342042] ion_system_heap_allocate+0x133/0x8c0 [ 1279.342053] ? _raw_spin_unlock+0x29/0x40 [ 1279.342061] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1279.342071] ? ion_system_contig_heap_create+0x130/0x130 [ 1279.342084] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1279.354344] 28*4kB [ 1279.354804] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1279.358794] (UM) [ 1279.363197] ion_alloc+0x27a/0x810 [ 1279.363213] ? ion_dma_buf_release+0x40/0x40 [ 1279.363225] ? __might_fault+0x177/0x1b0 [ 1279.363236] ion_ioctl+0xea/0x1f0 [ 1279.363244] ? ion_query_heaps+0x360/0x360 [ 1279.363255] ? ion_query_heaps+0x360/0x360 [ 1279.363265] do_vfs_ioctl+0x75a/0xff0 [ 1279.363276] ? ioctl_preallocate+0x1a0/0x1a0 [ 1279.363285] ? lock_downgrade+0x740/0x740 [ 1279.363299] ? __fget+0x225/0x360 [ 1279.375740] 9*8kB [ 1279.376588] ? do_vfs_ioctl+0xff0/0xff0 [ 1279.378889] (UME) [ 1279.382870] ? security_file_ioctl+0x83/0xb0 [ 1279.382881] SyS_ioctl+0x7f/0xb0 [ 1279.382890] ? do_vfs_ioctl+0xff0/0xff0 [ 1279.382900] do_syscall_64+0x1d5/0x640 [ 1279.382914] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1279.382922] RIP: 0033:0x4665f9 [ 1279.382927] RSP: 002b:00007f5728ef6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1279.382937] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1279.382942] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1279.382946] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1279.382952] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1279.382957] R13: 00007ffddad98d9f R14: 00007f5728ef6300 R15: 0000000000022000 [ 1279.595738] 10*16kB (UM) 725*32kB (UM) 20*64kB (UME) 5*128kB (UM) 0*256kB 1*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 27000kB [ 1279.608627] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1279.624284] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1279.645340] systemd[1]: Stopped Journal Service. [ 1279.655049] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1279.689578] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1279.709523] systemd[1]: Starting Journal Service... [ 1279.716419] 27453 total pagecache pages [ 1279.720933] 0 pages in swap cache 08:23:29 executing program 2: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1279.738231] Swap cache stats: add 0, delete 0, find 0/0 [ 1279.749231] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1279.756466] Free swap = 0kB [ 1279.759862] Total swap = 0kB [ 1279.766452] 2097051 pages RAM [ 1279.775779] 0 pages HighMem/MovableOnly [ 1279.787515] 363849 pages reserved [ 1279.800994] 0 pages cma reserved [ 1279.805034] Out of memory (oom_kill_allocating_task): Kill process 7977 (syz-executor.5) score 0 or sacrifice child [ 1279.817507] Killed process 7977 (syz-executor.5) total-vm:93120kB, anon-rss:112kB, file-rss:34140kB, shmem-rss:0kB 08:23:29 executing program 3: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) clock_gettime(0x4, &(0x7f00000000c0)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1279.874757] oom_reaper: reaped process 7969 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 08:23:29 executing program 0: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1280.054170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1280.060909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1280.096835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1280.113690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1280.127183] device bridge_slave_1 left promiscuous mode [ 1280.141036] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.179489] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1280.192514] device bridge_slave_0 left promiscuous mode [ 1280.198099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.210362] device veth1_macvtap left promiscuous mode [ 1280.216788] device veth0_macvtap left promiscuous mode [ 1280.222757] device veth1_vlan left promiscuous mode [ 1280.228373] device veth0_vlan left promiscuous mode [ 1280.361110] systemd-journald[31243]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1280.465794] device hsr_slave_1 left promiscuous mode [ 1280.482284] device hsr_slave_0 left promiscuous mode [ 1280.549482] team0 (unregistering): Port device team_slave_1 removed [ 1280.598947] team0 (unregistering): Port device team_slave_0 removed [ 1280.628549] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1280.640335] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1280.730047] bond0 (unregistering): Released all slaves [ 1280.789508] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1280.811019] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1280.819454] CPU: 1 PID: 31246 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1280.827353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1280.836702] Call Trace: [ 1280.839314] dump_stack+0x1b2/0x281 [ 1280.842945] warn_alloc.cold+0x96/0x1cc [ 1280.846917] ? zone_watermark_ok_safe+0x220/0x220 [ 1280.851777] __alloc_pages_nodemask+0x2127/0x2720 [ 1280.856617] ? _raw_spin_unlock_irq+0x24/0x80 [ 1280.861202] ? lock_acquire+0x170/0x3f0 [ 1280.865179] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1280.870032] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1280.875601] ? __mutex_unlock_slowpath+0x75/0x770 [ 1280.880454] alloc_pages_current+0x155/0x260 [ 1280.884867] ion_page_pool_alloc+0x118/0x1b0 [ 1280.889454] ion_system_heap_allocate+0x133/0x8c0 [ 1280.894299] ? ion_alloc+0x187/0x810 [ 1280.898015] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1280.903478] ? ion_system_contig_heap_create+0x130/0x130 [ 1280.908955] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1280.914073] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1280.918924] ion_alloc+0x204/0x810 [ 1280.922484] ? ion_dma_buf_release+0x40/0x40 [ 1280.926907] ? __might_fault+0x177/0x1b0 [ 1280.930998] ion_ioctl+0xea/0x1f0 [ 1280.934451] ? ion_query_heaps+0x360/0x360 [ 1280.938683] ? ion_query_heaps+0x360/0x360 [ 1280.942917] do_vfs_ioctl+0x75a/0xff0 [ 1280.946720] ? ioctl_preallocate+0x1a0/0x1a0 [ 1280.951139] ? lock_downgrade+0x740/0x740 [ 1280.955282] ? __fget+0x225/0x360 [ 1280.958750] ? do_vfs_ioctl+0xff0/0xff0 [ 1280.962719] ? security_file_ioctl+0x83/0xb0 [ 1280.968138] SyS_ioctl+0x7f/0xb0 [ 1280.971505] ? do_vfs_ioctl+0xff0/0xff0 [ 1280.975473] do_syscall_64+0x1d5/0x640 [ 1280.979371] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1280.984551] RIP: 0033:0x4665f9 [ 1280.987746] RSP: 002b:00007f5728ef6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1280.995450] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1281.002710] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1281.009980] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1281.017252] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1281.024523] R13: 00007ffddad98d9f R14: 00007f5728ef6300 R15: 0000000000022000 [ 1281.036176] warn_alloc_show_mem: 1 callbacks suppressed [ 1281.036180] Mem-Info: [ 1281.045909] active_anon:22242 inactive_anon:27038 isolated_anon:0 [ 1281.045909] active_file:53 inactive_file:144 isolated_file:0 [ 1281.045909] unevictable:0 dirty:2 writeback:0 unstable:0 [ 1281.045909] slab_reclaimable:12460 slab_unreclaimable:115641 [ 1281.045909] mapped:26488 shmem:27397 pagetables:533 bounce:0 [ 1281.045909] free:28747 free_pcp:296 free_cma:0 [ 1281.094695] Node 0 active_anon:88136kB inactive_anon:83996kB active_file:108kB inactive_file:320kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104564kB dirty:8kB writeback:0kB shmem:85304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1281.123728] Node 1 active_anon:832kB inactive_anon:24156kB active_file:64kB inactive_file:328kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1368kB dirty:0kB writeback:0kB shmem:24284kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1281.157310] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1281.187044] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1281.192993] Node 0 DMA32 free:37396kB min:36200kB low:45248kB high:54296kB active_anon:88084kB inactive_anon:83996kB active_file:104kB inactive_file:128kB unevictable:0kB writepending:8kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2048kB bounce:0kB free_pcp:904kB local_pcp:332kB free_cma:0kB [ 1281.224336] lowmem_reserve[]: 0 0 0 0 0 [ 1281.229358] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1281.258079] lowmem_reserve[]: 0 0 0 0 0 [ 1281.262478] Node 1 Normal free:53508kB min:53696kB low:67120kB high:80544kB active_anon:832kB inactive_anon:24156kB active_file:992kB inactive_file:1284kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:84kB bounce:0kB free_pcp:728kB local_pcp:0kB free_cma:0kB [ 1281.291353] lowmem_reserve[]: 0 0 0 0 0 [ 1281.295498] Node 0 DMA: 2*4kB (UE) 3*8kB (U) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 3*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11088kB [ 1281.310644] Node 0 DMA32: 805*4kB (ME) 320*8kB (UME) 209*16kB (UME) 48*32kB (ME) 35*64kB (ME) 104*128kB (UM) 37*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36196kB [ 1281.327120] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1281.338500] Node 1 Normal: 24*4kB (M) 40*8kB (ME) 20*16kB (ME) 5*32kB (UME) 4*64kB (ME) 1*128kB (U) 10*256kB (UE) 1*512kB (M) 36*1024kB (UM) 6*2048kB (U) 0*4096kB = 53504kB [ 1281.354359] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1281.363323] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1281.372062] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1281.387290] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1281.397582] 27590 total pagecache pages [ 1281.408390] 0 pages in swap cache [ 1281.412812] Swap cache stats: add 0, delete 0, find 0/0 [ 1281.419430] Free swap = 0kB [ 1281.433792] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1281.437219] Total swap = 0kB [ 1281.461149] 2097051 pages RAM [ 1281.464253] 0 pages HighMem/MovableOnly [ 1281.468221] 363849 pages reserved [ 1281.470995] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1281.476811] CPU: 0 PID: 7978 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1281.484603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1281.485774] 0 pages cma reserved [ 1281.493959] Call Trace: [ 1281.493987] dump_stack+0x1b2/0x281 [ 1281.493999] dump_header+0x178/0x82f [ 1281.494010] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1281.494018] ? ___ratelimit+0x2cd/0x530 [ 1281.494028] oom_kill_process.cold+0x10/0xa40 [ 1281.494046] out_of_memory+0xe3e/0x1190 [ 1281.494059] ? oom_killer_disable+0x1c0/0x1c0 [ 1281.494066] ? mutex_trylock+0x152/0x1a0 [ 1281.494076] __alloc_pages_nodemask+0x23e1/0x2720 [ 1281.494096] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1281.543300] alloc_pages_current+0x155/0x260 [ 1281.547827] filemap_fault+0x11a1/0x1ad0 [ 1281.552106] ext4_filemap_fault+0x84/0xb0 [ 1281.556352] __do_fault+0xfa/0x380 [ 1281.559909] __handle_mm_fault+0x2497/0x4620 [ 1281.564521] ? vm_insert_page+0x7c0/0x7c0 [ 1281.568678] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1281.573127] ? nanosleep_copyout+0x100/0x100 [ 1281.577551] ? mark_held_locks+0xa6/0xf0 [ 1281.581732] handle_mm_fault+0x455/0x9c0 [ 1281.585799] __do_page_fault+0x549/0xad0 [ 1281.589873] ? spurious_fault+0x640/0x640 [ 1281.594031] ? do_page_fault+0x60/0x500 [ 1281.598010] ? page_fault+0x2f/0x50 [ 1281.601639] page_fault+0x45/0x50 [ 1281.605280] RIP: 138ce6:0x7 [ 1281.608222] RSP: 201a:00007ffddad9905c EFLAGS: 00000032 [ 1281.615353] Mem-Info: [ 1281.638087] active_anon:22229 inactive_anon:27038 isolated_anon:0 [ 1281.638087] active_file:211 inactive_file:208 isolated_file:0 [ 1281.638087] unevictable:0 dirty:2 writeback:0 unstable:0 [ 1281.638087] slab_reclaimable:12449 slab_unreclaimable:115453 [ 1281.638087] mapped:26863 shmem:27397 pagetables:533 bounce:0 [ 1281.638087] free:25715 free_pcp:345 free_cma:0 [ 1281.723199] Node 0 active_anon:88084kB inactive_anon:83996kB active_file:76kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104484kB dirty:8kB writeback:0kB shmem:85304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1281.782902] Node 1 active_anon:1032kB inactive_anon:24156kB active_file:56kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1468kB dirty:0kB writeback:0kB shmem:24284kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1281.830460] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1281.874083] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1281.879155] Node 0 DMA32 free:36200kB min:36200kB low:45248kB high:54296kB active_anon:88084kB inactive_anon:83996kB active_file:20kB inactive_file:12kB unevictable:0kB writepending:8kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2048kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1281.908487] lowmem_reserve[]: 0 0 0 0 0 [ 1281.913658] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1281.944413] lowmem_reserve[]: 0 0 0 0 0 [ 1281.953610] Node 1 Normal free:54148kB min:53696kB low:67120kB high:80544kB active_anon:832kB inactive_anon:24156kB active_file:740kB inactive_file:384kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:84kB bounce:0kB free_pcp:640kB local_pcp:16kB free_cma:0kB [ 1281.984124] lowmem_reserve[]: 0 0 0 0 0 [ 1281.988522] Node 0 DMA: 4*4kB (UE) 3*8kB (U) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 3*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11096kB [ 1282.004229] Node 0 DMA32: 863*4kB (UME) 321*8kB (UME) 208*16kB (ME) 49*32kB (UME) 35*64kB (ME) 106*128kB (UM) 37*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 36708kB [ 1282.019948] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1282.030766] Node 1 Normal: 95*4kB (M) 24*8kB (ME) 25*16kB (ME) 10*32kB (UME) 19*64kB (UME) 8*128kB (M) 10*256kB (UME) 4*512kB (U) 35*1024kB (U) 5*2048kB (U) 0*4096kB = 54220kB [ 1282.046766] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1282.055852] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1282.064514] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1282.073410] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1282.082041] 27436 total pagecache pages [ 1282.086046] 0 pages in swap cache [ 1282.089494] Swap cache stats: add 0, delete 0, find 0/0 [ 1282.094892] Free swap = 0kB [ 1282.097900] Total swap = 0kB [ 1282.100907] 2097051 pages RAM [ 1282.107987] 0 pages HighMem/MovableOnly [ 1282.113678] 363849 pages reserved [ 1282.120604] 0 pages cma reserved [ 1282.127478] Out of memory (oom_kill_allocating_task): Kill process 7978 (syz-executor.3) score 0 or sacrifice child [ 1282.158423] Killed process 31246 (syz-executor.3) total-vm:93252kB, anon-rss:160kB, file-rss:34816kB, shmem-rss:0kB [ 1282.196834] oom_reaper: reaped process 31246 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1282.235602] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1282.259662] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1282.264568] CPU: 1 PID: 7960 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1282.272021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1282.281404] Call Trace: [ 1282.284003] dump_stack+0x1b2/0x281 [ 1282.287635] dump_header+0x178/0x82f [ 1282.291373] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1282.296493] ? ___ratelimit+0x2cd/0x530 [ 1282.300469] oom_kill_process.cold+0x10/0xa40 [ 1282.304995] out_of_memory+0xe3e/0x1190 [ 1282.308984] ? oom_killer_disable+0x1c0/0x1c0 [ 1282.313486] ? mutex_trylock+0x152/0x1a0 [ 1282.317573] __alloc_pages_nodemask+0x23e1/0x2720 [ 1282.322449] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1282.327320] alloc_pages_current+0x155/0x260 [ 1282.331997] filemap_fault+0x11a1/0x1ad0 [ 1282.336104] ext4_filemap_fault+0x84/0xb0 [ 1282.340252] __do_fault+0xfa/0x380 [ 1282.343823] __handle_mm_fault+0x2497/0x4620 [ 1282.348255] ? vm_insert_page+0x7c0/0x7c0 [ 1282.352534] ? free_object+0xe4/0x240 [ 1282.356413] ? mark_held_locks+0xa6/0xf0 [ 1282.360481] handle_mm_fault+0x455/0x9c0 [ 1282.364551] __do_page_fault+0x549/0xad0 [ 1282.368614] ? spurious_fault+0x640/0x640 [ 1282.372762] ? do_page_fault+0x60/0x500 [ 1282.376751] ? page_fault+0x2f/0x50 [ 1282.380480] page_fault+0x45/0x50 [ 1282.383932] RIP: 0000:0x947a14 [ 1282.387135] RSP: 0040:000000c00003dfa0 EFLAGS: 0043b6a0 [ 1282.389280] Mem-Info: [ 1282.397282] active_anon:22293 inactive_anon:27038 isolated_anon:0 [ 1282.397282] active_file:35 inactive_file:0 isolated_file:0 [ 1282.397282] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1282.397282] slab_reclaimable:12449 slab_unreclaimable:115514 [ 1282.397282] mapped:26481 shmem:27397 pagetables:533 bounce:0 [ 1282.397282] free:13830 free_pcp:60 free_cma:0 [ 1282.431799] Node 0 active_anon:88084kB inactive_anon:83996kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104456kB dirty:0kB writeback:0kB shmem:85304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1282.434274] syz-executor.3: [ 1282.464300] Node 1 active_anon:1088kB inactive_anon:24156kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1468kB dirty:0kB writeback:0kB shmem:24284kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1282.473023] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1282.499113] Node 0 [ 1282.509008] (null) [ 1282.509094] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1282.530997] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1282.544107] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1282.549191] Node 0 DMA32 free:18064kB min:36200kB low:45248kB high:54296kB active_anon:88084kB inactive_anon:83996kB active_file:0kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2048kB bounce:0kB free_pcp:144kB local_pcp:0kB free_cma:0kB [ 1282.551003] CPU: 0 PID: 31246 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1282.582467] lowmem_reserve[]: [ 1282.585735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1282.585745] 0 [ 1282.588855] Call Trace: [ 1282.602617] dump_stack+0x1b2/0x281 [ 1282.603005] 0 0 [ 1282.606260] warn_alloc.cold+0x96/0x1cc [ 1282.606273] ? perf_trace_dwc3_log_request+0x6a0/0x6e0 [ 1282.608930] 0 [ 1282.613524] ? zone_watermark_ok_safe+0x220/0x220 [ 1282.613535] ? usleep_range+0x130/0x130 [ 1282.613543] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1282.613554] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1282.613563] ? run_timer_softirq+0x5a0/0x5a0 [ 1282.613579] __alloc_pages_nodemask+0x2127/0x2720 [ 1282.613595] ? lock_acquire+0x170/0x3f0 [ 1282.613610] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1282.613619] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1282.613633] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1282.613646] ? __alloc_pages_nodemask+0x9/0x2720 [ 1282.613659] alloc_pages_current+0x155/0x260 [ 1282.613671] ion_page_pool_alloc+0x118/0x1b0 [ 1282.622252] 0 [ 1282.625691] ion_system_heap_allocate+0x133/0x8c0 [ 1282.629640] Node 0 [ 1282.634744] ? ion_alloc+0x187/0x810 [ 1282.634756] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1282.634764] ? ion_system_contig_heap_create+0x130/0x130 [ 1282.634774] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1282.634785] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1282.634795] ion_alloc+0x204/0x810 [ 1282.634806] ? ion_dma_buf_release+0x40/0x40 [ 1282.634817] ? __might_fault+0x177/0x1b0 [ 1282.634829] ion_ioctl+0xea/0x1f0 [ 1282.634837] ? ion_query_heaps+0x360/0x360 [ 1282.634848] ? ion_query_heaps+0x360/0x360 [ 1282.634860] do_vfs_ioctl+0x75a/0xff0 [ 1282.643782] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1282.644300] ? ioctl_preallocate+0x1a0/0x1a0 [ 1282.649134] lowmem_reserve[]: [ 1282.653118] ? lock_downgrade+0x740/0x740 [ 1282.653133] ? __fget+0x225/0x360 [ 1282.653142] ? do_vfs_ioctl+0xff0/0xff0 [ 1282.653154] ? security_file_ioctl+0x83/0xb0 [ 1282.653163] SyS_ioctl+0x7f/0xb0 [ 1282.653171] ? do_vfs_ioctl+0xff0/0xff0 [ 1282.653182] do_syscall_64+0x1d5/0x640 [ 1282.653196] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1282.653204] RIP: 0033:0x4665f9 [ 1282.653209] RSP: 002b:00007f5728ef6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1282.653221] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1282.659347] 0 [ 1282.662553] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1282.662558] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1282.662563] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1282.662568] R13: 00007ffddad98d9f R14: 00007f5728ef6300 R15: 0000000000022000 [ 1282.669445] Mem-Info: [ 1282.677766] 0 [ 1282.682353] active_anon:22293 inactive_anon:27038 isolated_anon:0 [ 1282.682353] active_file:5 inactive_file:0 isolated_file:0 [ 1282.682353] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1282.682353] slab_reclaimable:12449 slab_unreclaimable:115514 [ 1282.682353] mapped:26481 shmem:27397 pagetables:533 bounce:0 [ 1282.682353] free:13830 free_pcp:66 free_cma:0 [ 1282.683633] 0 [ 1282.688707] Node 0 active_anon:88084kB inactive_anon:83996kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104456kB dirty:0kB writeback:0kB shmem:85304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1282.690722] 0 [ 1282.694695] Node 1 active_anon:1088kB inactive_anon:24156kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1468kB dirty:0kB writeback:0kB shmem:24284kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1282.702200] 0 [ 1282.706131] Node 0 [ 1282.715791] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1282.726413] Node 1 [ 1282.731074] lowmem_reserve[]: [ 1282.732062] Normal free:26280kB min:53696kB low:67120kB high:80544kB active_anon:1088kB inactive_anon:24156kB active_file:56kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:84kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1282.735674] 0 [ 1282.739914] lowmem_reserve[]: [ 1282.760996] 2717 [ 1282.773300] 0 0 0 0 0 [ 1282.773323] Node 0 [ 1282.790995] 2718 [ 1282.796952] DMA: [ 1282.799870] 2718 [ 1282.804387] 2*4kB [ 1282.809520] 2718 [ 1282.816794] (UE) [ 1282.827260] 1*8kB (U) 1*16kB [ 1282.851419] Node 0 [ 1282.863776] (E) [ 1282.899513] DMA32 free:18064kB min:36200kB low:45248kB high:54296kB active_anon:88084kB inactive_anon:83996kB active_file:0kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2048kB bounce:0kB free_pcp:144kB local_pcp:144kB free_cma:0kB [ 1282.929893] 2*32kB [ 1282.955759] lowmem_reserve[]: [ 1282.961647] (UE) [ 1283.022169] 0 [ 1283.032693] 2*64kB [ 1283.078608] 0 0 0 0 [ 1283.078624] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1283.082064] (UE) [ 1283.084932] lowmem_reserve[]: [ 1283.089221] 2*128kB [ 1283.090074] 0 [ 1283.093087] (UE) [ 1283.118860] 0 [ 1283.124272] 1*256kB [ 1283.126250] 0 [ 1283.127688] (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1283.141935] 0 0 [ 1283.145604] Node 1 Normal free:26532kB min:53696kB low:67120kB high:80544kB active_anon:1088kB inactive_anon:24156kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:84kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1283.147113] Node 0 DMA32: 857*4kB (ME) 322*8kB (UME) 205*16kB (UME) 49*32kB (ME) 37*64kB (ME) 24*128kB (UM) 6*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18340kB [ 1283.196412] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1283.207369] lowmem_reserve[]: 0 0 0 0 0 [ 1283.207957] Node 1 [ 1283.211567] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1283.229077] Node 0 DMA32: 857*4kB (ME) 322*8kB (UME) 205*16kB (UME) 49*32kB (ME) 37*64kB (ME) 24*128kB (UM) 6*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18340kB [ 1283.230390] Normal: [ 1283.248007] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1283.261486] 77*4kB (UM) 40*8kB (UME) 41*16kB (ME) 23*32kB (UME) 19*64kB (UME) 8*128kB (UM) 9*256kB (UME) 1*512kB (M) 9*1024kB (U) 5*2048kB (U) 0*4096kB = 26532kB [ 1283.265508] Node 1 Normal: 77*4kB (UM) 40*8kB (UME) 41*16kB (ME) 23*32kB (UME) 19*64kB (UME) 8*128kB (UM) 9*256kB (UME) 1*512kB (M) 9*1024kB (U) 5*2048kB (U) 0*4096kB = 26532kB [ 1283.291635] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1283.296947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1283.310611] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1283.310764] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1283.323634] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1283.328688] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1283.341086] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1283.346495] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1283.358573] 27429 total pagecache pages [ 1283.364265] 27429 total pagecache pages [ 1283.366976] 0 pages in swap cache [ 1283.371021] 0 pages in swap cache [ 1283.371027] Swap cache stats: add 0, delete 0, find 0/0 [ 1283.371031] Free swap = 0kB [ 1283.371034] Total swap = 0kB [ 1283.371042] 2097051 pages RAM [ 1283.371045] 0 pages HighMem/MovableOnly [ 1283.371049] 363849 pages reserved [ 1283.371052] 0 pages cma reserved [ 1283.371061] Out of memory (oom_kill_allocating_task): Kill process 7960 (syz-fuzzer) score 0 or sacrifice child [ 1283.371114] Killed process 7970 (syz-executor.5) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1283.424926] Swap cache stats: add 0, delete 0, find 0/0 [ 1283.430338] Free swap = 0kB [ 1283.433442] Total swap = 0kB [ 1283.436474] 2097051 pages RAM [ 1283.439573] 0 pages HighMem/MovableOnly [ 1283.439721] oom_reaper: reaped process 7970 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1283.444030] 363849 pages reserved [ 1283.457120] 0 pages cma reserved [ 1283.461334] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1283.491004] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1283.495815] CPU: 0 PID: 10008 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1283.503374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1283.512768] Call Trace: [ 1283.515380] dump_stack+0x1b2/0x281 [ 1283.519122] dump_header+0x178/0x82f [ 1283.522982] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1283.528096] ? ___ratelimit+0x2cd/0x530 [ 1283.532150] oom_kill_process.cold+0x10/0xa40 [ 1283.536660] out_of_memory+0xe3e/0x1190 [ 1283.540649] ? oom_killer_disable+0x1c0/0x1c0 [ 1283.545151] ? mutex_trylock+0x152/0x1a0 [ 1283.549227] __alloc_pages_nodemask+0x23e1/0x2720 [ 1283.554095] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1283.559078] alloc_pages_current+0x155/0x260 [ 1283.563495] filemap_fault+0x11a1/0x1ad0 [ 1283.567569] ext4_filemap_fault+0x84/0xb0 [ 1283.571723] __do_fault+0xfa/0x380 [ 1283.575265] __handle_mm_fault+0x2497/0x4620 [ 1283.579702] ? vm_insert_page+0x7c0/0x7c0 [ 1283.583865] ? __might_fault+0x177/0x1b0 [ 1283.587965] ? mark_held_locks+0xa6/0xf0 [ 1283.592027] handle_mm_fault+0x455/0x9c0 [ 1283.596107] __do_page_fault+0x549/0xad0 [ 1283.600163] ? spurious_fault+0x640/0x640 [ 1283.604309] ? do_page_fault+0x60/0x500 [ 1283.608279] ? page_fault+0x2f/0x50 [ 1283.611896] page_fault+0x45/0x50 [ 1283.615343] RIP: 0000:0xb7de00 [ 1283.618547] RSP: 0000:000000c00678fd50 EFLAGS: 00000000 [ 1283.638223] Mem-Info: [ 1283.646099] active_anon:22269 inactive_anon:27038 isolated_anon:0 [ 1283.646099] active_file:129 inactive_file:63 isolated_file:0 [ 1283.646099] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1283.646099] slab_reclaimable:12447 slab_unreclaimable:115292 [ 1283.646099] mapped:17931 shmem:27397 pagetables:533 bounce:0 [ 1283.646099] free:14058 free_pcp:185 free_cma:0 [ 1283.679967] Node 0 active_anon:87988kB inactive_anon:83996kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69656kB dirty:0kB writeback:0kB shmem:85304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1283.708209] Node 1 active_anon:1088kB inactive_anon:24156kB active_file:500kB inactive_file:236kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2068kB dirty:0kB writeback:0kB shmem:24284kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1283.735629] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1283.764054] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1283.768529] syz-executor.3: page allocation failure: order:4 [ 1283.769131] Node 0 [ 1283.769139] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1283.774985] DMA32 free:18120kB min:36200kB low:45248kB high:54296kB active_anon:87988kB inactive_anon:83996kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2048kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1283.774991] lowmem_reserve[]: [ 1283.777259] syz-executor.3 cpuset= [ 1283.790985] 0 [ 1283.818184] / [ 1283.819944] 0 [ 1283.821790] mems_allowed=0-1 [ 1283.823489] 0 [ 1283.825299] CPU: 1 PID: 31246 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1283.828378] 0 [ 1283.830170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1283.838176] 0 [ 1283.839930] Call Trace: [ 1283.851093] dump_stack+0x1b2/0x281 [ 1283.851108] warn_alloc.cold+0x96/0x1cc [ 1283.853696] Node 0 [ 1283.857405] ? zone_watermark_ok_safe+0x220/0x220 [ 1283.861408] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1283.863593] __alloc_pages_nodemask+0x2127/0x2720 [ 1283.868420] lowmem_reserve[]: [ 1283.893337] ? io_schedule_timeout+0x140/0x140 [ 1283.893355] ? lock_acquire+0x170/0x3f0 [ 1283.893371] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1283.893386] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1283.898238] 0 [ 1283.901360] ? __mutex_unlock_slowpath+0x75/0x770 [ 1283.901375] alloc_pages_current+0x155/0x260 [ 1283.901389] ion_page_pool_alloc+0x118/0x1b0 [ 1283.901399] ion_system_heap_allocate+0x133/0x8c0 [ 1283.905983] 0 [ 1283.909955] ? _raw_spin_unlock+0x29/0x40 [ 1283.915113] 0 [ 1283.920566] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1283.922386] 0 [ 1283.927198] ? ion_system_contig_heap_create+0x130/0x130 [ 1283.932239] 0 [ 1283.936607] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1283.943231] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1283.947353] Node 1 [ 1283.949417] ion_alloc+0x27a/0x810 [ 1283.954493] Normal free:36664kB min:53696kB low:67120kB high:80544kB active_anon:1088kB inactive_anon:24156kB active_file:252kB inactive_file:388kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:84kB bounce:0kB free_pcp:660kB local_pcp:656kB free_cma:0kB [ 1283.956234] ? ion_dma_buf_release+0x40/0x40 [ 1283.961722] lowmem_reserve[]: [ 1283.963485] ? __might_fault+0x177/0x1b0 [ 1283.968475] 0 [ 1283.973666] ion_ioctl+0xea/0x1f0 [ 1283.973677] ? ion_query_heaps+0x360/0x360 [ 1283.973687] ? ion_query_heaps+0x360/0x360 [ 1283.973698] do_vfs_ioctl+0x75a/0xff0 [ 1283.973709] ? ioctl_preallocate+0x1a0/0x1a0 [ 1283.975959] 0 [ 1283.979496] ? lock_downgrade+0x740/0x740 [ 1284.007753] 0 [ 1284.012117] ? __fget+0x225/0x360 [ 1284.012128] ? do_vfs_ioctl+0xff0/0xff0 [ 1284.012142] ? security_file_ioctl+0x83/0xb0 [ 1284.015255] 0 [ 1284.019318] SyS_ioctl+0x7f/0xb0 [ 1284.021139] 0 [ 1284.024556] ? do_vfs_ioctl+0xff0/0xff0 [ 1284.032997] do_syscall_64+0x1d5/0x640 [ 1284.033012] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1284.033020] RIP: 0033:0x4665f9 [ 1284.033025] RSP: 002b:00007f5728ef6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1284.036850] Node 0 [ 1284.041254] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1284.041260] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1284.041264] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1284.041268] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1284.041273] R13: 00007ffddad98d9f R14: 00007f5728ef6300 R15: 0000000000022000 [ 1284.049774] Mem-Info: [ 1284.053434] DMA: [ 1284.056790] active_anon:22252 inactive_anon:27038 isolated_anon:0 [ 1284.056790] active_file:16 inactive_file:16 isolated_file:0 [ 1284.056790] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1284.056790] slab_reclaimable:12429 slab_unreclaimable:115312 [ 1284.056790] mapped:17765 shmem:27397 pagetables:533 bounce:0 [ 1284.056790] free:16708 free_pcp:1 free_cma:0 [ 1284.061209] 2*4kB (UE) 1*8kB (U) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB [ 1284.067384] Node 0 active_anon:87920kB inactive_anon:83996kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:69640kB dirty:0kB writeback:0kB shmem:85304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1284.068215] (UE) [ 1284.072654] Node 1 active_anon:1088kB inactive_anon:24156kB active_file:48kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1420kB dirty:0kB writeback:0kB shmem:24284kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1284.076129] 3*1024kB [ 1284.085783] Node 0 [ 1284.092354] (UE) [ 1284.095027] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1284.101874] 3*2048kB (UME) 0*4096kB = 10976kB [ 1284.101890] Node 0 DMA32: 959*4kB (UME) 586*8kB (UME) 213*16kB (UME) 53*32kB (UME) 29*64kB (UME) 15*128kB (UM) 3*256kB (UM) 0*512kB 0*1024kB 0*2048kB [ 1284.113905] lowmem_reserve[]: [ 1284.116675] 0*4096kB [ 1284.125142] 0 [ 1284.131235] = 18172kB [ 1284.131240] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB [ 1284.138598] 2717 [ 1284.168921] = 0kB [ 1284.168927] Node 1 Normal: 169*4kB (UM) 132*8kB (UME) 135*16kB (UME) 181*32kB (UME) 344*64kB (UME) 15*128kB (UM) 10*256kB (UME) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 37716kB [ 1284.169003] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1284.169008] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1284.169018] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1284.183795] 2718 [ 1284.206221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1284.206228] 27429 total pagecache pages [ 1284.206238] 0 pages in swap cache [ 1284.206243] Swap cache stats: add 0, delete 0, find 0/0 [ 1284.206247] Free swap = 0kB [ 1284.206250] Total swap = 0kB [ 1284.206257] 2097051 pages RAM [ 1284.206261] 0 pages HighMem/MovableOnly [ 1284.206264] 363849 pages reserved [ 1284.206267] 0 pages cma reserved [ 1284.206275] Out of memory (oom_kill_allocating_task): Kill process 10008 (syz-fuzzer) score 0 or sacrifice child [ 1284.206327] Killed process 7971 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1284.213171] 2718 2718 [ 1284.428957] Node 0 DMA32 free:45136kB min:36200kB low:45248kB high:54296kB active_anon:87920kB inactive_anon:83996kB active_file:16kB inactive_file:3916kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:1752kB bounce:0kB free_pcp:236kB local_pcp:0kB free_cma:0kB [ 1284.461593] lowmem_reserve[]: 0 0 0 0 0 [ 1284.465779] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1284.495593] lowmem_reserve[]: 0 0 0 0 0 [ 1284.499813] Node 1 Normal free:55572kB min:53696kB low:67120kB high:80544kB active_anon:1088kB inactive_anon:24156kB active_file:48kB inactive_file:2748kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:84kB bounce:0kB free_pcp:92kB local_pcp:0kB free_cma:0kB [ 1284.549026] lowmem_reserve[]: 0 0 0 0 0 [ 1284.554093] Node 0 DMA: 14*4kB (UE) 2*8kB (U) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11032kB [ 1284.573011] Node 0 DMA32: 459*4kB (UME) 5739*8kB (UME) 876*16kB (UME) 41*32kB (ME) 174*64kB (UME) 49*128kB (UM) 23*256kB (UM) 5*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 90980kB [ 1284.590766] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1284.605140] Node 1 Normal: 91*4kB (UM) 49*8kB (ME) 52*16kB (UME) 27*32kB (UME) 555*64kB (UME) 37*128kB (UM) 20*256kB (UME) 4*512kB (UM) 5*1024kB (U) 0*2048kB 0*4096kB = 54996kB [ 1284.624963] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1284.634216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1284.650132] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1284.659190] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1284.671469] 28293 total pagecache pages [ 1284.675717] 0 pages in swap cache [ 1284.679976] Swap cache stats: add 0, delete 0, find 0/0 [ 1284.689217] Free swap = 0kB [ 1284.693303] Total swap = 0kB [ 1284.696538] 2097051 pages RAM [ 1284.699789] 0 pages HighMem/MovableOnly [ 1284.707168] 363849 pages reserved 08:23:34 executing program 5: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1284.710811] 0 pages cma reserved [ 1285.711436] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1285.731010] systemd-journal cpuset=/ mems_allowed=0-1 [ 1285.736426] CPU: 0 PID: 31243 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1285.744595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1285.753956] Call Trace: [ 1285.756557] dump_stack+0x1b2/0x281 [ 1285.760198] dump_header+0x178/0x82f [ 1285.764112] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1285.769230] ? ___ratelimit+0x2cd/0x530 [ 1285.773211] oom_kill_process.cold+0x10/0xa40 [ 1285.777724] out_of_memory+0xe3e/0x1190 [ 1285.781705] ? oom_killer_disable+0x1c0/0x1c0 [ 1285.786215] ? mutex_trylock+0x152/0x1a0 [ 1285.790296] __alloc_pages_nodemask+0x23e1/0x2720 [ 1285.795257] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1285.800131] alloc_pages_current+0x155/0x260 [ 1285.804543] filemap_fault+0x11a1/0x1ad0 [ 1285.808613] ext4_filemap_fault+0x84/0xb0 [ 1285.812760] __do_fault+0xfa/0x380 [ 1285.816295] __handle_mm_fault+0x2497/0x4620 [ 1285.820723] ? vm_insert_page+0x7c0/0x7c0 [ 1285.824881] ? __free_pages_ok+0x4a8/0xeb0 [ 1285.829130] ? mark_held_locks+0xa6/0xf0 [ 1285.833194] handle_mm_fault+0x455/0x9c0 [ 1285.837349] __do_page_fault+0x549/0xad0 [ 1285.841411] ? spurious_fault+0x640/0x640 [ 1285.845569] ? do_page_fault+0x60/0x500 [ 1285.849553] ? page_fault+0x2f/0x50 [ 1285.853208] page_fault+0x45/0x50 [ 1285.856702] RIP: 0009:0x7fff5bc66630 [ 1285.860403] RSP: 5bc66630:000055adb8c4df20 EFLAGS: 00000000 [ 1285.870024] Mem-Info: [ 1285.878238] active_anon:22003 inactive_anon:27038 isolated_anon:0 [ 1285.878238] active_file:63 inactive_file:0 isolated_file:0 [ 1285.878238] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1285.878238] slab_reclaimable:12399 slab_unreclaimable:116867 [ 1285.878238] mapped:434 shmem:27397 pagetables:431 bounce:0 [ 1285.878238] free:17560 free_pcp:401 free_cma:0 [ 1285.912104] Node 0 active_anon:87280kB inactive_anon:83996kB active_file:92kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124kB dirty:0kB writeback:0kB shmem:85304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1285.940640] Node 1 active_anon:732kB inactive_anon:24156kB active_file:160kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1612kB dirty:0kB writeback:0kB shmem:24284kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1285.961116] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1285.968504] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1285.983501] syz-executor.3 cpuset= [ 1286.006633] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1286.010994] / mems_allowed=0-1 [ 1286.015278] Node 0 DMA32 free:35088kB min:36200kB low:45248kB high:54296kB active_anon:87224kB inactive_anon:83996kB active_file:36kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:1640kB bounce:0kB free_pcp:840kB local_pcp:120kB free_cma:0kB [ 1286.018454] CPU: 1 PID: 31246 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1286.018462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1286.047323] lowmem_reserve[]: [ 1286.055336] Call Trace: [ 1286.055368] dump_stack+0x1b2/0x281 [ 1286.055384] warn_alloc.cold+0x96/0x1cc [ 1286.055400] ? perf_trace_dwc3_log_request+0x6a0/0x6e0 [ 1286.065564] 0 [ 1286.068640] ? zone_watermark_ok_safe+0x220/0x220 [ 1286.071243] 0 [ 1286.074837] ? usleep_range+0x130/0x130 [ 1286.078785] 0 [ 1286.084056] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1286.084071] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1286.084080] ? run_timer_softirq+0x5a0/0x5a0 [ 1286.084098] __alloc_pages_nodemask+0x2127/0x2720 [ 1286.085876] 0 [ 1286.090716] ? lock_acquire+0x170/0x3f0 [ 1286.092523] 0 [ 1286.096477] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1286.103336] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1286.103353] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1286.103369] ? retint_kernel+0x2d/0x2d [ 1286.108369] Node 0 [ 1286.112777] alloc_pages_current+0x155/0x260 [ 1286.112793] ion_page_pool_alloc+0x118/0x1b0 [ 1286.112803] ion_system_heap_allocate+0x133/0x8c0 [ 1286.117644] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1286.119447] ? _raw_spin_unlock+0x29/0x40 [ 1286.123447] lowmem_reserve[]: [ 1286.125194] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1286.130010] 0 [ 1286.134503] ? ion_system_contig_heap_create+0x130/0x130 [ 1286.134514] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1286.134526] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1286.134540] ion_alloc+0x27a/0x810 [ 1286.139973] 0 [ 1286.143870] ? ion_dma_buf_release+0x40/0x40 [ 1286.143883] ? __might_fault+0x177/0x1b0 [ 1286.143898] ion_ioctl+0xea/0x1f0 [ 1286.146126] 0 [ 1286.150533] ? ion_query_heaps+0x360/0x360 [ 1286.154981] 0 [ 1286.159768] ? ion_query_heaps+0x360/0x360 [ 1286.184676] 0 [ 1286.188805] do_vfs_ioctl+0x75a/0xff0 [ 1286.196814] ? ioctl_preallocate+0x1a0/0x1a0 [ 1286.198586] Node 1 [ 1286.204065] ? lock_downgrade+0x740/0x740 [ 1286.204079] ? __fget+0x225/0x360 [ 1286.204088] ? do_vfs_ioctl+0xff0/0xff0 [ 1286.204100] ? security_file_ioctl+0x83/0xb0 [ 1286.204110] SyS_ioctl+0x7f/0xb0 [ 1286.209121] Normal free:27128kB min:53696kB low:67120kB high:80544kB active_anon:732kB inactive_anon:24156kB active_file:32kB inactive_file:112kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:84kB bounce:0kB free_pcp:736kB local_pcp:116kB free_cma:0kB [ 1286.213961] ? do_vfs_ioctl+0xff0/0xff0 [ 1286.213975] do_syscall_64+0x1d5/0x640 [ 1286.213990] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1286.213999] RIP: 0033:0x4665f9 [ 1286.217540] lowmem_reserve[]: [ 1286.219330] RSP: 002b:00007f5728ef6188 EFLAGS: 00000246 [ 1286.223813] 0 [ 1286.227834] ORIG_RAX: 0000000000000010 [ 1286.231321] 0 [ 1286.233085] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1286.237310] 0 [ 1286.239105] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1286.243451] 0 [ 1286.245200] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1286.249003] 0 [ 1286.253396] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1286.253402] R13: 00007ffddad98d9f R14: 00007f5728ef6300 R15: 0000000000022000 [ 1286.261002] Mem-Info: [ 1286.267491] active_anon:21976 inactive_anon:27038 isolated_anon:0 [ 1286.267491] active_file:17 inactive_file:17 isolated_file:0 [ 1286.267491] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1286.267491] slab_reclaimable:12368 slab_unreclaimable:116857 [ 1286.267491] mapped:387 shmem:27397 pagetables:427 bounce:0 [ 1286.267491] free:18932 free_pcp:463 free_cma:0 [ 1286.272824] Node 0 [ 1286.279381] Node 0 active_anon:87216kB inactive_anon:83996kB active_file:44kB inactive_file:244kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:85304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1286.304131] DMA: [ 1286.312911] Node 1 active_anon:688kB inactive_anon:24156kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1540kB dirty:0kB writeback:0kB shmem:24284kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1286.317448] 25*4kB [ 1286.330611] Node 0 [ 1286.335289] (U) [ 1286.339139] DMA free:11048kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1286.344366] 1*8kB [ 1286.349890] lowmem_reserve[]: [ 1286.353646] (E) [ 1286.374472] 0 [ 1286.379762] 1*16kB [ 1286.400253] 2717 [ 1286.415875] (E) [ 1286.421243] 2718 [ 1286.445771] 2*32kB [ 1286.451599] 2718 [ 1286.475409] (UE) [ 1286.481495] 2718 [ 1286.507749] 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11068kB [ 1286.543558] Node 0 DMA32: 573*4kB (UME) 517*8kB (UME) 203*16kB (UME) 53*32kB (UME) 298*64kB (UME) 26*128kB (UM) 9*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36588kB [ 1286.544245] Node 0 DMA32 free:36436kB min:36200kB low:45248kB high:54296kB active_anon:87216kB inactive_anon:83996kB active_file:444kB inactive_file:888kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:1640kB bounce:0kB free_pcp:692kB local_pcp:692kB free_cma:0kB [ 1286.564929] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1286.596250] lowmem_reserve[]: [ 1286.602878] Node 1 Normal: 98*4kB (UME) 58*8kB (UME) 58*16kB (UME) 34*32kB (UME) 28*64kB (UME) 20*128kB (UM) 24*256kB (UME) 7*512kB (UM) 9*1024kB (UM) 1*2048kB (M) 0*4096kB = 28216kB [ 1286.602958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1286.602967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1286.606394] 0 [ 1286.622579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1286.622586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1286.622590] 27528 total pagecache pages [ 1286.622598] 0 pages in swap cache [ 1286.622603] Swap cache stats: add 0, delete 0, find 0/0 [ 1286.622606] Free swap = 0kB [ 1286.622610] Total swap = 0kB [ 1286.622616] 2097051 pages RAM [ 1286.622619] 0 pages HighMem/MovableOnly [ 1286.622622] 363849 pages reserved [ 1286.622625] 0 pages cma reserved [ 1286.622632] Out of memory (oom_kill_allocating_task): Kill process 31243 (systemd-journal) score 0 or sacrifice child [ 1286.622659] Killed process 31243 (systemd-journal) total-vm:46096kB, anon-rss:456kB, file-rss:0kB, shmem-rss:1548kB [ 1286.623566] oom_reaper: reaped process 31243 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1548kB [ 1286.635725] 0 0 0 0 [ 1286.746777] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1286.779304] lowmem_reserve[]: 0 0 0 0 0 [ 1286.784581] Node 1 Normal free:122300kB min:53696kB low:67120kB high:80544kB active_anon:588kB inactive_anon:24156kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:68kB bounce:0kB free_pcp:628kB local_pcp:0kB free_cma:0kB [ 1286.820816] lowmem_reserve[]: 0 0 0 0 0 [ 1286.825957] Node 0 DMA: 29*4kB (U) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11084kB [ 1286.846336] Node 0 DMA32: 7168*4kB (UE) 1555*8kB (UME) 3476*16kB (UE) 488*32kB (UE) 388*64kB (UME) 44*128kB (UM) 12*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 146392kB [ 1286.868668] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1286.917219] Node 1 Normal: 5625*4kB (UME) 1440*8kB (UME) 1644*16kB (UME) 1585*32kB (UME) 1297*64kB (UME) 57*128kB (UM) 31*256kB (UME) 11*512kB (UM) 11*1024kB (UM) 1*2048kB (M) 0*4096kB = 228228kB [ 1286.936168] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1286.974978] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1287.004326] systemd[1]: Failed to start Journal Service. [ 1287.010380] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1287.024609] systemd[1]: Dependency failed for Flush Journal to Persistent Storage. [ 1287.098221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1287.116001] systemd[1]: systemd-journal-flush.service: Job systemd-journal-flush.service/start failed with result 'dependency'. [ 1287.131605] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1287.166489] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1287.171055] 30732 total pagecache pages [ 1287.177793] 0 pages in swap cache [ 1287.184794] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1287.201011] Swap cache stats: add 0, delete 0, find 0/0 [ 1287.206526] Free swap = 0kB [ 1287.209563] Total swap = 0kB [ 1287.218980] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1287.221423] 2097051 pages RAM [ 1287.240437] 0 pages HighMem/MovableOnly [ 1287.244508] 363849 pages reserved [ 1287.247963] 0 pages cma reserved [ 1287.255476] systemd[1]: Stopped Journal Service. [ 1287.282182] systemd[1]: Starting Journal Service... [ 1287.308222] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1287.488159] systemd-journald[31279]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1287.833489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1287.840218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1287.852776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1287.859515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1287.871604] device bridge_slave_1 left promiscuous mode [ 1287.877135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.888030] device bridge_slave_0 left promiscuous mode [ 1287.894062] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.907860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1287.914740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1287.926359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1287.933419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1287.945742] device bridge_slave_1 left promiscuous mode [ 1287.951340] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.958695] device bridge_slave_0 left promiscuous mode [ 1287.967655] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.978410] device veth1_macvtap left promiscuous mode [ 1287.990880] device veth0_macvtap left promiscuous mode [ 1287.996422] device veth1_vlan left promiscuous mode [ 1288.005171] device veth0_vlan left promiscuous mode [ 1288.010662] device veth1_macvtap left promiscuous mode [ 1288.016270] device veth0_macvtap left promiscuous mode [ 1288.026191] device veth1_vlan left promiscuous mode [ 1288.031973] device veth0_vlan left promiscuous mode [ 1288.271185] device hsr_slave_1 left promiscuous mode [ 1288.297246] device hsr_slave_0 left promiscuous mode [ 1288.343252] team0 (unregistering): Port device team_slave_1 removed [ 1288.358709] team0 (unregistering): Port device team_slave_0 removed [ 1288.369085] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1288.402082] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1288.473417] bond0 (unregistering): Released all slaves [ 1288.531370] device hsr_slave_1 left promiscuous mode [ 1288.539811] device hsr_slave_0 left promiscuous mode [ 1288.560659] team0 (unregistering): Port device team_slave_1 removed [ 1288.575757] team0 (unregistering): Port device team_slave_0 removed [ 1288.589260] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1288.607166] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1288.647863] bond0 (unregistering): Released all slaves [ 1289.596914] IPVS: ftp: loaded support on port[0] = 21 [ 1289.660502] IPVS: ftp: loaded support on port[0] = 21 [ 1289.806170] IPVS: ftp: loaded support on port[0] = 21 [ 1289.819833] chnl_net:caif_netlink_parms(): no params data found [ 1289.957052] chnl_net:caif_netlink_parms(): no params data found [ 1290.008202] IPVS: ftp: loaded support on port[0] = 21 [ 1290.196334] chnl_net:caif_netlink_parms(): no params data found [ 1290.291303] Bluetooth: hci0 command 0x0409 tx timeout [ 1290.320572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.327473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.345524] device bridge_slave_0 entered promiscuous mode [ 1290.371135] Bluetooth: hci3 command 0x0409 tx timeout [ 1290.376039] Bluetooth: hci2 command 0x0409 tx timeout [ 1290.382455] Bluetooth: hci1 command 0x0409 tx timeout [ 1290.417758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.427263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.439903] device bridge_slave_1 entered promiscuous mode [ 1290.446591] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.458576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.466329] device bridge_slave_0 entered promiscuous mode [ 1290.500260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.517227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.527626] device bridge_slave_1 entered promiscuous mode [ 1290.535370] chnl_net:caif_netlink_parms(): no params data found [ 1290.576665] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1290.608137] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1290.650196] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1290.688288] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.696123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.703781] device bridge_slave_0 entered promiscuous mode [ 1290.711725] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1290.728590] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1290.736798] team0: Port device team_slave_0 added [ 1290.750199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.756886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.764551] device bridge_slave_1 entered promiscuous mode [ 1290.779755] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1290.792223] team0: Port device team_slave_1 added [ 1290.840157] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1290.852914] team0: Port device team_slave_0 added [ 1290.871514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1290.877789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1290.905379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1290.920030] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1290.931746] team0: Port device team_slave_1 added [ 1290.938325] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1290.952164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1290.958429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1290.984565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1291.005889] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1291.023398] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1291.049644] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1291.058009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1291.064419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1291.090208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1291.102450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1291.108705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1291.135580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1291.146593] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1291.154746] team0: Port device team_slave_0 added [ 1291.168995] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1291.182542] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1291.189713] team0: Port device team_slave_1 added [ 1291.210181] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1291.233309] device hsr_slave_0 entered promiscuous mode [ 1291.241712] device hsr_slave_1 entered promiscuous mode [ 1291.271058] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1291.283893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.290286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.298016] device bridge_slave_0 entered promiscuous mode [ 1291.305942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1291.312526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1291.338210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1291.348835] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1291.375629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.382125] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.389125] device bridge_slave_1 entered promiscuous mode [ 1291.397099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1291.403463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1291.429368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1291.444151] device hsr_slave_0 entered promiscuous mode [ 1291.450395] device hsr_slave_1 entered promiscuous mode [ 1291.457513] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1291.471244] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1291.494402] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1291.506492] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1291.515256] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1291.524685] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1291.604254] device hsr_slave_0 entered promiscuous mode [ 1291.609900] device hsr_slave_1 entered promiscuous mode [ 1291.616583] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1291.627513] team0: Port device team_slave_0 added [ 1291.637635] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1291.647410] team0: Port device team_slave_1 added [ 1291.665178] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1291.691882] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1291.708056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1291.715336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1291.741224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1291.776794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1291.785719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1291.814696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1291.852395] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1291.873296] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1291.942613] device hsr_slave_0 entered promiscuous mode [ 1291.948251] device hsr_slave_1 entered promiscuous mode [ 1291.955319] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1291.976007] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1292.044474] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1292.105301] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1292.177972] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1292.221676] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1292.243613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.263732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.270785] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1292.286905] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1292.307136] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1292.322663] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1292.333020] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1292.339114] 8021q: adding VLAN 0 to HW filter on device team0 [ 1292.346658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1292.354476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1292.361623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1292.368527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1292.371165] Bluetooth: hci0 command 0x041b tx timeout [ 1292.378919] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1292.387063] 8021q: adding VLAN 0 to HW filter on device team0 [ 1292.400804] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1292.414923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.424320] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1292.436788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1292.445229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1292.451489] Bluetooth: hci2 command 0x041b tx timeout [ 1292.454490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.463398] Bluetooth: hci1 command 0x041b tx timeout [ 1292.464201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1292.469409] Bluetooth: hci3 command 0x041b tx timeout [ 1292.478529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1292.488991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1292.496724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.503129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1292.510437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1292.517739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1292.527705] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1292.539759] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1292.549912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1292.558559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1292.568206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.574648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1292.582689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1292.590589] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1292.598365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.604848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1292.615067] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1292.623409] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1292.633255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.646233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1292.655171] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1292.665080] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1292.675177] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1292.685534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1292.693641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1292.702972] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1292.709214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1292.716699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1292.729403] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1292.737991] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1292.747010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1292.755696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1292.763787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1292.773327] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1292.780657] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1292.787950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1292.795116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1292.803833] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1292.809921] 8021q: adding VLAN 0 to HW filter on device team0 [ 1292.817971] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1292.830079] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1292.837470] 8021q: adding VLAN 0 to HW filter on device team0 [ 1292.845878] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1292.853761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1292.861538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1292.868245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1292.876181] device bridge_slave_1 left promiscuous mode [ 1292.881897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.889013] device bridge_slave_0 left promiscuous mode [ 1292.894821] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.905073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1292.912013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1292.919495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1292.926377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1292.934469] device bridge_slave_1 left promiscuous mode [ 1292.939978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.948453] device bridge_slave_0 left promiscuous mode [ 1292.954268] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.964395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1292.971311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1292.978769] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1292.985658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1292.994109] device bridge_slave_1 left promiscuous mode [ 1292.999683] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.007582] device bridge_slave_0 left promiscuous mode [ 1293.013552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.023552] device veth1_macvtap left promiscuous mode [ 1293.028975] device veth0_macvtap left promiscuous mode [ 1293.034562] device veth1_vlan left promiscuous mode [ 1293.039611] device veth0_vlan left promiscuous mode [ 1293.045156] device veth1_macvtap left promiscuous mode [ 1293.050460] device veth0_macvtap left promiscuous mode [ 1293.056587] device veth1_vlan left promiscuous mode [ 1293.061782] device veth0_vlan left promiscuous mode [ 1293.067064] device veth1_macvtap left promiscuous mode [ 1293.072449] device veth0_macvtap left promiscuous mode [ 1293.077795] device veth1_vlan left promiscuous mode [ 1293.083114] device veth0_vlan left promiscuous mode [ 1293.240350] device hsr_slave_1 left promiscuous mode [ 1293.249761] device hsr_slave_0 left promiscuous mode [ 1293.264397] team0 (unregistering): Port device team_slave_1 removed [ 1293.274188] team0 (unregistering): Port device team_slave_0 removed [ 1293.286214] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1293.297121] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1293.321659] bond0 (unregistering): Released all slaves [ 1293.353941] device hsr_slave_1 left promiscuous mode [ 1293.361507] device hsr_slave_0 left promiscuous mode [ 1293.374972] team0 (unregistering): Port device team_slave_1 removed [ 1293.384265] team0 (unregistering): Port device team_slave_0 removed [ 1293.397163] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1293.408680] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1293.443319] bond0 (unregistering): Released all slaves [ 1293.474957] device hsr_slave_1 left promiscuous mode [ 1293.486306] device hsr_slave_0 left promiscuous mode [ 1293.500382] team0 (unregistering): Port device team_slave_1 removed [ 1293.509533] team0 (unregistering): Port device team_slave_0 removed [ 1293.518551] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1293.529965] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1293.555607] bond0 (unregistering): Released all slaves [ 1293.569020] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1293.577056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1293.586008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1293.594680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1293.602922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1293.610553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.616976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.624061] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1293.631310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1293.639259] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1293.653161] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1293.664907] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1293.674731] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1293.683172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1293.690888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1293.699477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1293.707743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1293.715662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1293.723649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1293.731907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.738286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.745306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1293.753309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1293.761319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.767669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1293.778175] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1293.788263] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1293.796192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1293.803988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1293.811893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1293.819333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1293.827333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1293.836649] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1293.846060] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1293.855640] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1293.863631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1293.872580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1293.879799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1293.890488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1293.898152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1293.906155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1293.913897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.920332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1293.927423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1293.937225] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1293.947026] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1293.961765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1293.969343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1293.978531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1293.987990] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1293.994758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1294.009651] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1294.018994] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1294.034099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1294.043597] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1294.050851] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1294.062411] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1294.073967] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1294.080293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1294.087557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1294.094452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1294.102468] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1294.110098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1294.120840] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1294.131276] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1294.140738] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1294.153449] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1294.160902] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1294.168295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1294.176121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1294.184212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1294.192865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1294.201615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1294.209351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1294.217235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1294.224815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1294.234285] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1294.243321] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1294.251533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1294.258454] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1294.265767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1294.273494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1294.281628] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1294.288333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1294.298476] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1294.310392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1294.318365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1294.328470] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1294.337103] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1294.343781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1294.354055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1294.360800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1294.368754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1294.379705] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1294.387734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1294.424158] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1294.439075] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1294.448483] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1294.456222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1294.461583] Bluetooth: hci0 command 0x040f tx timeout [ 1294.464680] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1294.478038] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1294.489663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1294.497005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1294.504634] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1294.523628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1294.542231] Bluetooth: hci3 command 0x040f tx timeout [ 1294.548039] Bluetooth: hci1 command 0x040f tx timeout [ 1294.549625] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1294.558611] Bluetooth: hci2 command 0x040f tx timeout [ 1294.576645] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1294.604665] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1294.612755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1294.620698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1294.635851] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1294.649355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1294.662041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1294.749588] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1294.773601] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1294.780444] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1294.799879] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1294.815741] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1294.826265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1294.835848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1294.855420] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1294.864888] device veth0_vlan entered promiscuous mode [ 1294.885818] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1294.894692] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1294.905607] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1294.912376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1294.919865] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1294.929957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1294.944568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1294.959025] device veth1_vlan entered promiscuous mode [ 1294.966669] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1294.976637] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1294.988070] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1295.002238] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1295.018522] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1295.028242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1295.038804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1295.048847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1295.062891] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1295.076111] device veth0_vlan entered promiscuous mode [ 1295.096913] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1295.109307] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1295.120502] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1295.136463] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1295.144158] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1295.156593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1295.164579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1295.175798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1295.195775] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1295.207016] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1295.218868] device veth1_vlan entered promiscuous mode [ 1295.234421] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1295.242439] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1295.250409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1295.270487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1295.278540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1295.290157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1295.301597] device veth0_macvtap entered promiscuous mode [ 1295.307930] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1295.324217] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1295.335190] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1295.348331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1295.358972] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1295.366435] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1295.376968] device veth0_vlan entered promiscuous mode [ 1295.388172] device veth1_macvtap entered promiscuous mode [ 1295.395730] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1295.404189] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1295.413010] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1295.419926] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1295.427558] device veth1_vlan entered promiscuous mode [ 1295.435475] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1295.446167] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1295.459223] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1295.477849] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1295.488780] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1295.499772] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1295.508824] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1295.516365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1295.524304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1295.533703] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1295.540172] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1295.547463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1295.554698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1295.565259] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1295.574327] device veth0_vlan entered promiscuous mode [ 1295.585281] device veth1_vlan entered promiscuous mode [ 1295.591435] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1295.598500] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1295.606146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1295.614011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1295.625264] device veth0_macvtap entered promiscuous mode [ 1295.632415] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1295.640920] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1295.648404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1295.666954] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1295.674341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1295.682970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1295.695394] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1295.703357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1295.722191] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1295.729763] device veth1_macvtap entered promiscuous mode [ 1295.740664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1295.749344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1295.765456] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1295.786291] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1295.799943] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1295.808115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1295.821952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1295.835220] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1295.845418] device veth0_macvtap entered promiscuous mode [ 1295.858671] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1295.876755] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1295.885313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1295.897055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1295.905046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1295.918084] device veth0_macvtap entered promiscuous mode [ 1295.925127] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1295.936034] device veth1_macvtap entered promiscuous mode [ 1295.943049] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1295.958496] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1295.968715] device veth1_macvtap entered promiscuous mode [ 1295.976066] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1295.986573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1295.997045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.007768] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1296.015077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1296.024934] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1296.037801] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1296.046040] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1296.055494] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1296.069063] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1296.077084] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1296.086138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1296.096454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1296.106627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.117250] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1296.124201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1296.164802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1296.174709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.184539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1296.194559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.205166] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1296.213083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1296.221900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1296.231664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.240880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1296.251536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.265450] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1296.272648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1296.279915] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1296.289021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1296.297893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1296.307289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1296.315663] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1296.324015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1296.332855] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1296.358101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1296.373308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.385471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1296.395997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.405363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1296.415305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.425680] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1296.433831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1296.444801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1296.457695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1296.476173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1296.486604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.496135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1296.506413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.516044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1296.526158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1296.536942] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1296.542595] Bluetooth: hci0 command 0x0419 tx timeout [ 1296.544511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1296.558772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1296.567922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1296.612800] Bluetooth: hci2 command 0x0419 tx timeout [ 1296.618128] Bluetooth: hci1 command 0x0419 tx timeout [ 1296.628937] Bluetooth: hci3 command 0x0419 tx timeout [ 1298.847648] syz-executor.5: page allocation failure: order:4 [ 1298.847665] syz-executor.2: page allocation failure: order:4 [ 1298.858553] syz-executor.1: [ 1298.863149] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1298.869750] page allocation failure: order:4 [ 1298.879532] syz-executor.2 cpuset= [ 1298.880453] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1298.885191] / [ 1298.893498] (null) [ 1298.898011] mems_allowed=0-1 [ 1298.901411] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1298.902509] CPU: 0 PID: 32244 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1298.905654] syz-executor.5 cpuset= [ 1298.912978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1298.912984] Call Trace: [ 1298.913006] dump_stack+0x1b2/0x281 [ 1298.913019] warn_alloc.cold+0x96/0x1cc [ 1298.913031] ? zone_watermark_ok_safe+0x220/0x220 [ 1298.913052] __alloc_pages_nodemask+0x2127/0x2720 [ 1298.913064] ? _raw_spin_unlock_irq+0x24/0x80 [ 1298.913079] ? lock_acquire+0x170/0x3f0 [ 1298.913093] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1298.913108] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1298.913119] ? __mutex_unlock_slowpath+0x75/0x770 [ 1298.913134] alloc_pages_current+0x155/0x260 [ 1298.913148] ion_page_pool_alloc+0x118/0x1b0 [ 1298.913158] ion_system_heap_allocate+0x133/0x8c0 [ 1298.913168] ? ion_alloc+0x187/0x810 [ 1298.913179] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1298.913188] ? ion_system_contig_heap_create+0x130/0x130 [ 1298.913198] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1298.913209] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1298.913219] ion_alloc+0x204/0x810 [ 1298.924544] (null) [ 1298.925879] ? ion_dma_buf_release+0x40/0x40 [ 1298.925892] ? __might_fault+0x177/0x1b0 [ 1298.947218] syz-executor.1 cpuset= [ 1298.948303] ion_ioctl+0xea/0x1f0 [ 1298.948314] ? ion_query_heaps+0x360/0x360 [ 1298.948325] ? ion_query_heaps+0x360/0x360 [ 1298.953963] / [ 1298.958829] do_vfs_ioctl+0x75a/0xff0 [ 1298.966201] / [ 1298.967656] ? ioctl_preallocate+0x1a0/0x1a0 [ 1298.972998] mems_allowed=0-1 [ 1298.978579] ? lock_downgrade+0x740/0x740 [ 1298.978595] ? __fget+0x225/0x360 [ 1298.978606] ? do_vfs_ioctl+0xff0/0xff0 [ 1298.978620] ? security_file_ioctl+0x83/0xb0 [ 1298.983775] mems_allowed=0-1 [ 1298.989396] SyS_ioctl+0x7f/0xb0 [ 1298.989406] ? do_vfs_ioctl+0xff0/0xff0 [ 1298.989419] do_syscall_64+0x1d5/0x640 [ 1298.989434] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1299.111911] RIP: 0033:0x4665f9 [ 1299.115743] RSP: 002b:00007fbe228cf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1299.124138] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1299.131781] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1299.139563] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1299.146938] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1299.155564] R13: 00007ffd8c3f05df R14: 00007fbe228cf300 R15: 0000000000022000 [ 1299.163407] CPU: 1 PID: 32234 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1299.172420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1299.179406] Mem-Info: [ 1299.182442] Call Trace: [ 1299.182466] dump_stack+0x1b2/0x281 [ 1299.182479] warn_alloc.cold+0x96/0x1cc [ 1299.182490] ? zone_watermark_ok_safe+0x220/0x220 [ 1299.182512] __alloc_pages_nodemask+0x2127/0x2720 [ 1299.182524] ? _raw_spin_unlock_irq+0x24/0x80 [ 1299.182539] ? lock_acquire+0x170/0x3f0 [ 1299.188292] active_anon:22342 inactive_anon:29073 isolated_anon:0 [ 1299.188292] active_file:1712 inactive_file:2391 isolated_file:0 [ 1299.188292] unevictable:0 dirty:44 writeback:0 unstable:0 [ 1299.188292] slab_reclaimable:11738 slab_unreclaimable:111734 [ 1299.188292] mapped:38191 shmem:29449 pagetables:656 bounce:0 [ 1299.188292] free:194841 free_pcp:92 free_cma:0 [ 1299.191518] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1299.191536] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1299.191547] ? __mutex_unlock_slowpath+0x75/0x770 [ 1299.191562] alloc_pages_current+0x155/0x260 [ 1299.191579] ion_page_pool_alloc+0x118/0x1b0 [ 1299.199002] Node 0 active_anon:88772kB inactive_anon:92196kB active_file:6752kB inactive_file:9100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150328kB dirty:140kB writeback:0kB shmem:93504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1299.200853] ion_system_heap_allocate+0x133/0x8c0 [ 1299.200864] ? ion_alloc+0x187/0x810 [ 1299.200879] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1299.213909] Node 1 active_anon:596kB inactive_anon:24096kB active_file:96kB inactive_file:464kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2436kB dirty:36kB writeback:0kB shmem:24292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1299.215047] ? ion_system_contig_heap_create+0x130/0x130 [ 1299.215075] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1299.291051] Node 0 [ 1299.308563] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1299.308576] ion_alloc+0x204/0x810 [ 1299.308591] ? ion_dma_buf_release+0x40/0x40 [ 1299.308601] ? __might_fault+0x177/0x1b0 [ 1299.308611] ion_ioctl+0xea/0x1f0 [ 1299.308619] ? ion_query_heaps+0x360/0x360 [ 1299.308630] ? ion_query_heaps+0x360/0x360 [ 1299.308644] do_vfs_ioctl+0x75a/0xff0 [ 1299.338381] DMA free:11092kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1299.353943] ? ioctl_preallocate+0x1a0/0x1a0 [ 1299.353954] ? lock_downgrade+0x740/0x740 [ 1299.353966] ? __fget+0x225/0x360 [ 1299.353975] ? do_vfs_ioctl+0xff0/0xff0 [ 1299.353986] ? security_file_ioctl+0x83/0xb0 [ 1299.353995] SyS_ioctl+0x7f/0xb0 [ 1299.354002] ? do_vfs_ioctl+0xff0/0xff0 [ 1299.354012] do_syscall_64+0x1d5/0x640 [ 1299.354027] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1299.354036] RIP: 0033:0x4665f9 [ 1299.354040] RSP: 002b:00007fcb72e01188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1299.354050] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1299.354061] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1299.375659] lowmem_reserve[]: [ 1299.376892] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1299.376899] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1299.376904] R13: 00007fff942e1a5f R14: 00007fcb72e01300 R15: 0000000000022000 [ 1299.451592] CPU: 1 PID: 32238 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1299.535720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1299.536654] 0 [ 1299.546439] Call Trace: [ 1299.546463] dump_stack+0x1b2/0x281 [ 1299.546477] warn_alloc.cold+0x96/0x1cc [ 1299.546489] ? zone_watermark_ok_safe+0x220/0x220 [ 1299.546509] __alloc_pages_nodemask+0x2127/0x2720 [ 1299.546527] ? lock_acquire+0x170/0x3f0 [ 1299.558457] 2717 [ 1299.559999] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1299.560017] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1299.575042] 2718 [ 1299.576100] ? __mutex_unlock_slowpath+0x75/0x770 [ 1299.581827] 2718 [ 1299.584689] alloc_pages_current+0x155/0x260 [ 1299.584704] ion_page_pool_alloc+0x118/0x1b0 [ 1299.601088] 2718 [ 1299.605363] ion_system_heap_allocate+0x133/0x8c0 [ 1299.605374] ? ion_alloc+0x187/0x810 [ 1299.605388] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1299.612302] ? ion_system_contig_heap_create+0x130/0x130 [ 1299.612314] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1299.612326] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1299.612336] ion_alloc+0x204/0x810 [ 1299.612350] ? ion_dma_buf_release+0x40/0x40 [ 1299.612361] ? __might_fault+0x177/0x1b0 [ 1299.612371] ion_ioctl+0xea/0x1f0 [ 1299.612384] ? ion_query_heaps+0x360/0x360 [ 1299.617675] Node 0 [ 1299.621583] ? ion_query_heaps+0x360/0x360 [ 1299.621595] do_vfs_ioctl+0x75a/0xff0 [ 1299.621606] ? ioctl_preallocate+0x1a0/0x1a0 [ 1299.621615] ? lock_downgrade+0x740/0x740 [ 1299.621627] ? __fget+0x225/0x360 [ 1299.621635] ? do_vfs_ioctl+0xff0/0xff0 [ 1299.621647] ? security_file_ioctl+0x83/0xb0 [ 1299.621657] SyS_ioctl+0x7f/0xb0 [ 1299.641043] DMA32 free:563660kB min:36200kB low:45248kB high:54296kB active_anon:88772kB inactive_anon:92196kB active_file:6752kB inactive_file:9100kB unevictable:0kB writepending:140kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2296kB bounce:0kB free_pcp:388kB local_pcp:188kB free_cma:0kB [ 1299.643717] ? do_vfs_ioctl+0xff0/0xff0 [ 1299.647594] lowmem_reserve[]: [ 1299.652355] do_syscall_64+0x1d5/0x640 [ 1299.652370] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1299.652378] RIP: 0033:0x4665f9 [ 1299.652382] RSP: 002b:00007fe2e24b3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1299.652391] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1299.652396] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1299.652401] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1299.652405] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1299.652410] R13: 00007ffd5b4f3c9f R14: 00007fe2e24b3300 R15: 0000000000022000 [ 1299.802324] 0 0 0 0 0 [ 1299.804890] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1299.832106] lowmem_reserve[]: 0 0 0 0 0 [ 1299.836573] Node 1 Normal free:53796kB min:53696kB low:67120kB high:80544kB active_anon:596kB inactive_anon:24096kB active_file:96kB inactive_file:464kB unevictable:0kB writepending:36kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:328kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1299.868203] lowmem_reserve[]: 0 0 0 0 0 [ 1299.872425] Node 0 DMA: 11*4kB (UE) 20*8kB (UE) 25*16kB (UE) 14*32kB (UE) 11*64kB (UE) 3*128kB (UE) 1*256kB (E) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11100kB [ 1299.889762] Node 0 DMA32: 624*4kB (MEH) 223*8kB (UMEH) 6760*16kB (UMEH) 8149*32kB (UMEH) 77*64kB (UH) 5*128kB (UH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 378776kB [ 1299.907461] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1299.919336] Node 1 Normal: 781*4kB (UM) 1104*8kB (UM) 986*16kB (U) 767*32kB (UME) 25*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53876kB [ 1299.935075] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1299.945315] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1299.954394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1299.963678] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1299.976382] 33552 total pagecache pages [ 1299.980388] 0 pages in swap cache [ 1299.984178] Swap cache stats: add 0, delete 0, find 0/0 [ 1299.991270] Free swap = 0kB [ 1299.994544] Total swap = 0kB [ 1299.997754] 2097051 pages RAM [ 1300.004056] 0 pages HighMem/MovableOnly [ 1300.008069] 363849 pages reserved [ 1300.013086] 0 pages cma reserved [ 1300.324341] oom_reaper: reaped process 32244 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1300.351752] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1300.385228] systemd-journal cpuset=/ mems_allowed=0-1 [ 1300.392132] CPU: 0 PID: 31279 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1300.400879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1300.401096] syz-executor.2: [ 1300.411289] Call Trace: [ 1300.411311] dump_stack+0x1b2/0x281 [ 1300.411323] dump_header+0x178/0x82f [ 1300.411333] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1300.411341] ? ___ratelimit+0x2cd/0x530 [ 1300.411353] oom_kill_process.cold+0x10/0xa40 [ 1300.417320] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1300.421457] out_of_memory+0xe3e/0x1190 [ 1300.421470] ? oom_killer_disable+0x1c0/0x1c0 [ 1300.421478] ? mutex_trylock+0x152/0x1a0 [ 1300.421488] __alloc_pages_nodemask+0x23e1/0x2720 [ 1300.421507] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1300.425650] (null) [ 1300.431069] alloc_pages_current+0x155/0x260 [ 1300.431082] filemap_fault+0x11a1/0x1ad0 [ 1300.431102] ext4_filemap_fault+0x84/0xb0 [ 1300.441009] syz-executor.2 cpuset= [ 1300.450458] __do_fault+0xfa/0x380 [ 1300.454853] / [ 1300.459710] __handle_mm_fault+0x2497/0x4620 [ 1300.464352] mems_allowed=0-1 [ 1300.469401] ? vm_insert_page+0x7c0/0x7c0 [ 1300.512089] ? mark_held_locks+0xa6/0xf0 [ 1300.516244] handle_mm_fault+0x455/0x9c0 [ 1300.520436] __do_page_fault+0x549/0xad0 [ 1300.524819] ? spurious_fault+0x640/0x640 [ 1300.529946] ? do_page_fault+0x60/0x500 [ 1300.534510] ? page_fault+0x2f/0x50 [ 1300.538587] page_fault+0x45/0x50 [ 1300.542142] RIP: 0001:0xffffffffffffffff [ 1300.546368] RSP: d517c1e0:00007ffeadda9360 EFLAGS: 7ffeadda9180 [ 1300.546623] CPU: 1 PID: 32244 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1300.547871] Mem-Info: [ 1300.553382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1300.553387] Call Trace: [ 1300.553418] dump_stack+0x1b2/0x281 [ 1300.553432] warn_alloc.cold+0x96/0x1cc [ 1300.553444] ? zone_watermark_ok_safe+0x220/0x220 [ 1300.553453] ? usleep_range+0x130/0x130 [ 1300.553462] ? try_to_free_pages+0x23f/0x6e0 [ 1300.553471] ? _find_next_bit+0xdb/0x100 [ 1300.553481] ? run_timer_softirq+0x5a0/0x5a0 [ 1300.553498] __alloc_pages_nodemask+0x2127/0x2720 [ 1300.561892] active_anon:22342 inactive_anon:29073 isolated_anon:0 [ 1300.561892] active_file:55 inactive_file:15 isolated_file:0 [ 1300.561892] unevictable:0 dirty:19 writeback:0 unstable:0 [ 1300.561892] slab_reclaimable:11724 slab_unreclaimable:111849 [ 1300.561892] mapped:35527 shmem:29449 pagetables:656 bounce:0 [ 1300.561892] free:13819 free_pcp:81 free_cma:0 [ 1300.564618] ? lock_acquire+0x170/0x3f0 [ 1300.574638] Node 0 active_anon:88772kB inactive_anon:92196kB active_file:124kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139672kB dirty:40kB writeback:0kB shmem:93504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1300.577318] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1300.581165] Node 1 active_anon:596kB inactive_anon:24096kB active_file:96kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2436kB dirty:36kB writeback:0kB shmem:24292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1300.585680] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1300.590898] Node 0 [ 1300.595121] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1300.595140] alloc_pages_current+0x155/0x260 [ 1300.595154] ion_page_pool_alloc+0x118/0x1b0 [ 1300.595163] ion_system_heap_allocate+0x133/0x8c0 [ 1300.595173] ? ion_alloc+0x187/0x810 [ 1300.600177] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1300.604760] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1300.604771] ? ion_system_contig_heap_create+0x130/0x130 [ 1300.604781] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1300.604792] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1300.604802] ion_alloc+0x204/0x810 [ 1300.604815] ? ion_dma_buf_release+0x40/0x40 [ 1300.604827] ? __might_fault+0x177/0x1b0 [ 1300.604838] ion_ioctl+0xea/0x1f0 [ 1300.609331] lowmem_reserve[]: [ 1300.614186] ? ion_query_heaps+0x360/0x360 [ 1300.614198] ? ion_query_heaps+0x360/0x360 [ 1300.614208] do_vfs_ioctl+0x75a/0xff0 [ 1300.614219] ? ioctl_preallocate+0x1a0/0x1a0 [ 1300.614228] ? lock_downgrade+0x740/0x740 [ 1300.614240] ? __fget+0x225/0x360 [ 1300.614248] ? do_vfs_ioctl+0xff0/0xff0 [ 1300.614259] ? security_file_ioctl+0x83/0xb0 [ 1300.614269] SyS_ioctl+0x7f/0xb0 [ 1300.614277] ? do_vfs_ioctl+0xff0/0xff0 [ 1300.614288] do_syscall_64+0x1d5/0x640 [ 1300.614302] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1300.614311] RIP: 0033:0x4665f9 [ 1300.614315] RSP: 002b:00007fbe228cf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1300.614324] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1300.614328] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1300.614334] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1300.614340] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1300.614345] R13: 00007ffd8c3f05df R14: 00007fbe228cf300 R15: 0000000000022000 [ 1300.635617] warn_alloc_show_mem: 2 callbacks suppressed [ 1300.635622] Mem-Info: [ 1300.648783] 0 [ 1300.657827] active_anon:22342 inactive_anon:29073 isolated_anon:0 [ 1300.657827] active_file:55 inactive_file:15 isolated_file:0 [ 1300.657827] unevictable:0 dirty:19 writeback:0 unstable:0 [ 1300.657827] slab_reclaimable:11724 slab_unreclaimable:111849 [ 1300.657827] mapped:35527 shmem:29449 pagetables:656 bounce:0 [ 1300.657827] free:13894 free_pcp:0 free_cma:0 [ 1300.695424] 2717 [ 1300.725902] Node 0 active_anon:88772kB inactive_anon:92196kB active_file:124kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139672kB dirty:40kB writeback:0kB shmem:93504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1300.728049] 2718 [ 1300.740117] Node 1 active_anon:596kB inactive_anon:24096kB active_file:96kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2436kB dirty:36kB writeback:0kB shmem:24292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1300.743414] 2718 [ 1300.751765] Node 0 [ 1300.776559] 2718 [ 1300.790579] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1300.791962] Node 0 DMA32 free:18028kB min:36200kB low:45248kB high:54296kB active_anon:88772kB inactive_anon:92196kB active_file:88kB inactive_file:464kB unevictable:0kB writepending:140kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2296kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1300.791982] lowmem_reserve[]: 0 0 0 0 0 [ 1300.792001] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1300.792018] lowmem_reserve[]: 0 0 0 [ 1300.802054] lowmem_reserve[]: [ 1300.805457] 0 [ 1300.809667] 0 [ 1300.815493] 0 [ 1300.821391] 2717 [ 1300.829988] 2718 [ 1300.836766] Node 1 [ 1300.845651] 2718 [ 1300.847383] Normal free:26596kB min:53696kB low:67120kB high:80544kB active_anon:596kB inactive_anon:24096kB active_file:96kB inactive_file:0kB unevictable:0kB writepending:36kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:328kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1300.858213] 2718 [ 1300.861181] lowmem_reserve[]: [ 1300.869928] 0 [ 1300.879184] Node 0 [ 1300.882654] 0 [ 1300.892715] DMA32 free:18028kB min:36200kB low:45248kB high:54296kB active_anon:88772kB inactive_anon:92196kB active_file:88kB inactive_file:24kB unevictable:0kB writepending:140kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2296kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1300.897427] 0 [ 1300.914329] lowmem_reserve[]: [ 1300.922970] 0 [ 1300.934692] 0 [ 1300.970492] 0 [ 1300.980455] 0 [ 1301.010610] 0 [ 1301.040109] Node 0 [ 1301.068424] 0 [ 1301.107987] DMA: [ 1301.130838] 0 [ 1301.137535] 2*4kB [ 1301.144406] (UE) [ 1301.146616] Node 0 [ 1301.148884] 6*8kB [ 1301.155445] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1301.186715] (UE) [ 1301.193500] lowmem_reserve[]: [ 1301.194102] 25*16kB [ 1301.233031] 0 [ 1301.240124] (UE) [ 1301.245632] 0 [ 1301.247544] 14*32kB [ 1301.249608] 0 [ 1301.257465] (UE) [ 1301.260247] 0 [ 1301.260363] 11*64kB [ 1301.293450] 0 [ 1301.299486] (UE) [ 1301.303602] 3*128kB [ 1301.309464] Node 1 [ 1301.316535] (UE) [ 1301.320186] Normal free:26468kB min:53696kB low:67120kB high:80544kB active_anon:560kB inactive_anon:24100kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:328kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1301.320838] 1*256kB [ 1301.327145] lowmem_reserve[]: [ 1301.358517] (E) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10952kB [ 1301.362180] 0 [ 1301.369077] Node 0 [ 1301.369087] 0 [ 1301.376202] DMA32: [ 1301.377834] 0 [ 1301.379704] 1205*4kB (UMEH) 526*8kB (UMEH) 272*16kB (UMEH) 72*32kB (MEH) 23*64kB (MH) 7*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18052kB [ 1301.384592] 0 [ 1301.406048] Node 0 [ 1301.407475] 0 [ 1301.408373] Normal: [ 1301.413915] 0*4kB [ 1301.415442] Node 0 [ 1301.415444] 0*8kB 0*16kB [ 1301.417885] DMA: [ 1301.420352] 0*32kB [ 1301.430186] 2*4kB [ 1301.430505] 0*64kB [ 1301.433073] (UE) 6*8kB (UE) 25*16kB (UE) 14*32kB (UE) 11*64kB (UE) 3*128kB (UE) [ 1301.435593] 0*128kB [ 1301.438032] 1*256kB [ 1301.451086] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1301.455352] (E) [ 1301.460624] Node 1 [ 1301.460628] 1*512kB (E) [ 1301.465510] Normal: [ 1301.465909] 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10952kB [ 1301.465927] Node 0 DMA32: 1205*4kB (UMEH) 526*8kB (UMEH) 272*16kB (UMEH) 72*32kB (MEH) 23*64kB (MH) 7*128kB (UMH) 0*256kB 0*512kB 0*1024kB 0*2048kB [ 1301.469259] 59*4kB [ 1301.477784] 0*4096kB [ 1301.479274] (UM) [ 1301.499111] = 18052kB [ 1301.502526] 23*8kB [ 1301.504075] Node 0 [ 1301.504084] (UM) [ 1301.506432] Normal: [ 1301.508688] 16*16kB [ 1301.510852] 0*4kB [ 1301.515745] (UM) 756*32kB (UME) 25*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26468kB [ 1301.522063] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1301.533391] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1301.543960] Node 1 Normal: 59*4kB (UM) 23*8kB (UM) 16*16kB (UM) 756*32kB (UME) 25*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26468kB [ 1301.551836] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1301.573992] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1301.581359] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1301.593794] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1301.598194] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1301.612291] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1301.618552] 29469 total pagecache pages [ 1301.627644] 0 pages in swap cache [ 1301.629994] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1301.635180] Swap cache stats: add 0, delete 0, find 0/0 [ 1301.640208] 29469 total pagecache pages [ 1301.645966] Free swap = 0kB [ 1301.645970] Total swap = 0kB [ 1301.645978] 2097051 pages RAM [ 1301.645981] 0 pages HighMem/MovableOnly [ 1301.645984] 363849 pages reserved [ 1301.645987] 0 pages cma reserved [ 1301.645995] Out of memory (oom_kill_allocating_task): Kill process 31279 (systemd-journal) score 0 or sacrifice child [ 1301.646023] Killed process 31279 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:4kB, shmem-rss:2592kB [ 1301.657433] 0 pages in swap cache [ 1301.682975] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1301.707129] Swap cache stats: add 0, delete 0, find 0/0 [ 1301.712682] (null) [ 1301.719445] Free swap = 0kB [ 1301.735671] Total swap = 0kB [ 1301.739078] 2097051 pages RAM [ 1301.744931] 0 pages HighMem/MovableOnly [ 1301.746476] , order=0, oom_score_adj=0 [ 1301.749488] 363849 pages reserved [ 1301.760498] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1301.761357] 0 pages cma reserved [ 1301.765954] CPU: 0 PID: 10008 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1301.778441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1301.788534] Call Trace: [ 1301.791267] dump_stack+0x1b2/0x281 [ 1301.795500] dump_header+0x178/0x82f [ 1301.799329] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1301.804774] ? ___ratelimit+0x2cd/0x530 [ 1301.808764] oom_kill_process.cold+0x10/0xa40 [ 1301.813714] out_of_memory+0xe3e/0x1190 [ 1301.818175] ? oom_killer_disable+0x1c0/0x1c0 [ 1301.823036] ? mutex_trylock+0x152/0x1a0 [ 1301.827473] __alloc_pages_nodemask+0x23e1/0x2720 [ 1301.832615] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1301.837600] alloc_pages_current+0x155/0x260 [ 1301.842430] filemap_fault+0x11a1/0x1ad0 [ 1301.847000] ext4_filemap_fault+0x84/0xb0 [ 1301.852056] __do_fault+0xfa/0x380 [ 1301.856323] __handle_mm_fault+0x2497/0x4620 [ 1301.860902] ? vm_insert_page+0x7c0/0x7c0 [ 1301.866044] ? mark_held_locks+0xa6/0xf0 [ 1301.870550] handle_mm_fault+0x455/0x9c0 [ 1301.874790] __do_page_fault+0x549/0xad0 [ 1301.881340] ? spurious_fault+0x640/0x640 [ 1301.886723] ? do_page_fault+0x60/0x500 [ 1301.891106] ? page_fault+0x2f/0x50 [ 1301.895084] page_fault+0x45/0x50 [ 1301.898554] RIP: 363980:0x1399391f282 [ 1301.902620] RSP: 02f2:000000c00678fe40 EFLAGS: 00000003 [ 1301.903846] systemd-journal: page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 1301.943588] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1301.951099] systemd-journal cpuset=/ mems_allowed=0-1 [ 1301.965075] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1301.971351] CPU: 0 PID: 31279 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1301.980095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1301.990061] Call Trace: [ 1301.992861] dump_stack+0x1b2/0x281 [ 1301.997159] warn_alloc.cold+0x96/0x1cc [ 1302.001164] ? zone_watermark_ok_safe+0x220/0x220 [ 1302.006027] ? usleep_range+0x130/0x130 [ 1302.010319] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1302.015653] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1302.021094] ? run_timer_softirq+0x5a0/0x5a0 [ 1302.025696] __alloc_pages_nodemask+0x2127/0x2720 [ 1302.030617] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1302.035977] alloc_pages_current+0x155/0x260 [ 1302.040625] filemap_fault+0x11a1/0x1ad0 [ 1302.045016] ext4_filemap_fault+0x84/0xb0 [ 1302.049437] __do_fault+0xfa/0x380 [ 1302.053261] __handle_mm_fault+0x2497/0x4620 [ 1302.057985] ? vm_insert_page+0x7c0/0x7c0 [ 1302.062166] ? mark_held_locks+0xa6/0xf0 [ 1302.066247] handle_mm_fault+0x455/0x9c0 [ 1302.070671] __do_page_fault+0x549/0xad0 [ 1302.075042] ? spurious_fault+0x640/0x640 [ 1302.079373] ? do_page_fault+0x60/0x500 [ 1302.083898] ? page_fault+0x2f/0x50 [ 1302.087541] page_fault+0x45/0x50 [ 1302.091123] RIP: 0001:0xffffffffffffffff [ 1302.096237] RSP: d517c1e0:00007ffeadda9360 EFLAGS: 7ffeadda9180 [ 1302.096265] CPU: 1 PID: 32244 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1302.112092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1302.122145] Call Trace: [ 1302.124778] dump_stack+0x1b2/0x281 [ 1302.128641] warn_alloc.cold+0x96/0x1cc [ 1302.132999] ? zone_watermark_ok_safe+0x220/0x220 [ 1302.134558] Mem-Info: [ 1302.138438] __alloc_pages_nodemask+0x2127/0x2720 [ 1302.140853] active_anon:22321 inactive_anon:29074 isolated_anon:0 [ 1302.140853] active_file:100 inactive_file:274 isolated_file:0 [ 1302.140853] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1302.140853] slab_reclaimable:11720 slab_unreclaimable:111589 [ 1302.140853] mapped:35691 shmem:29449 pagetables:656 bounce:0 [ 1302.140853] free:14035 free_pcp:58 free_cma:0 [ 1302.145962] ? lock_acquire+0x170/0x3f0 [ 1302.145978] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1302.145994] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1302.146005] ? __mutex_unlock_slowpath+0x75/0x770 [ 1302.146020] alloc_pages_current+0x155/0x260 [ 1302.146047] ion_page_pool_alloc+0x118/0x1b0 [ 1302.181621] Node 0 active_anon:88724kB inactive_anon:92196kB active_file:416kB inactive_file:1052kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140376kB dirty:0kB writeback:0kB shmem:93504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1302.185455] ion_system_heap_allocate+0x133/0x8c0 [ 1302.190460] Node 1 active_anon:560kB inactive_anon:24100kB active_file:0kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2388kB dirty:0kB writeback:0kB shmem:24292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1302.196071] ? _raw_spin_unlock+0x29/0x40 [ 1302.196082] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1302.196091] ? ion_system_contig_heap_create+0x130/0x130 [ 1302.196101] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1302.196112] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1302.196122] ion_alloc+0x27a/0x810 [ 1302.196134] ? ion_dma_buf_release+0x40/0x40 [ 1302.201418] Node 0 [ 1302.206325] ? __might_fault+0x177/0x1b0 [ 1302.211475] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1302.240625] ion_ioctl+0xea/0x1f0 [ 1302.240636] ? ion_query_heaps+0x360/0x360 [ 1302.240646] ? ion_query_heaps+0x360/0x360 [ 1302.240656] do_vfs_ioctl+0x75a/0xff0 [ 1302.240667] ? ioctl_preallocate+0x1a0/0x1a0 [ 1302.240677] ? lock_downgrade+0x740/0x740 [ 1302.240689] ? __fget+0x225/0x360 [ 1302.240697] ? do_vfs_ioctl+0xff0/0xff0 [ 1302.240708] ? security_file_ioctl+0x83/0xb0 [ 1302.240718] SyS_ioctl+0x7f/0xb0 [ 1302.240724] ? do_vfs_ioctl+0xff0/0xff0 [ 1302.240737] do_syscall_64+0x1d5/0x640 [ 1302.240751] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1302.240759] RIP: 0033:0x4665f9 [ 1302.240763] RSP: 002b:00007fbe228cf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1302.245886] lowmem_reserve[]: [ 1302.276087] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1302.276093] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1302.276098] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1302.276103] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1302.276107] R13: 00007ffd8c3f05df R14: 00007fbe228cf300 R15: 0000000000022000 [ 1302.355845] syz-executor.5: [ 1302.358903] 0 [ 1302.363084] syz-executor.2: [ 1302.367568] 2717 [ 1302.377195] page allocation failure: order:0 [ 1302.379779] 2718 [ 1302.387203] page allocation failure: order:0 [ 1302.388026] 2718 [ 1302.396869] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1302.401677] 2718 [ 1302.405466] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1302.412970] Node 0 DMA32 free:17856kB min:36200kB low:45248kB high:54296kB active_anon:88724kB inactive_anon:92196kB active_file:424kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2296kB bounce:0kB free_pcp:828kB local_pcp:0kB free_cma:0kB [ 1302.412990] lowmem_reserve[]: 0 0 0 0 0 [ 1302.413009] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1302.413024] lowmem_reserve[]: 0 0 [ 1302.421782] (null) [ 1302.425543] 0 [ 1302.438028] (null) [ 1302.441131] 0 [ 1302.449028] syz-executor.5 cpuset= [ 1302.457166] Mem-Info: [ 1302.464930] syz-executor.2 cpuset= [ 1302.467186] active_anon:22321 inactive_anon:29074 isolated_anon:0 [ 1302.467186] active_file:16 inactive_file:0 isolated_file:0 [ 1302.467186] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1302.467186] slab_reclaimable:11707 slab_unreclaimable:111579 [ 1302.467186] mapped:35514 shmem:29449 pagetables:656 bounce:0 [ 1302.467186] free:13897 free_pcp:237 free_cma:0 [ 1302.469738] / mems_allowed=0-1 [ 1302.474556] Node 0 active_anon:88724kB inactive_anon:92196kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139668kB dirty:0kB writeback:0kB shmem:93504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1302.474573] Node 1 active_anon:560kB inactive_anon:24100kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2388kB dirty:0kB writeback:0kB shmem:24292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1302.474579] Node 0 [ 1302.478533] CPU: 1 PID: 32244 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1302.482708] 0 [ 1302.484648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1302.492850] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1302.495301] Call Trace: [ 1302.537019] dump_stack+0x1b2/0x281 [ 1302.537034] warn_alloc.cold+0x96/0x1cc [ 1302.537045] ? zone_watermark_ok_safe+0x220/0x220 [ 1302.537054] ? usleep_range+0x130/0x130 [ 1302.537063] ? try_to_free_pages+0x23f/0x6e0 [ 1302.537072] ? _find_next_bit+0xdb/0x100 [ 1302.537081] ? run_timer_softirq+0x5a0/0x5a0 [ 1302.537096] __alloc_pages_nodemask+0x2127/0x2720 [ 1302.537111] ? lock_acquire+0x170/0x3f0 [ 1302.537125] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1302.541270] lowmem_reserve[]: [ 1302.569719] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1302.569736] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1302.569754] alloc_pages_current+0x155/0x260 [ 1302.569766] ion_page_pool_alloc+0x118/0x1b0 [ 1302.569775] ion_system_heap_allocate+0x133/0x8c0 [ 1302.569785] ? _raw_spin_unlock+0x29/0x40 [ 1302.569793] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1302.569801] ? ion_system_contig_heap_create+0x130/0x130 [ 1302.569811] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1302.569827] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1302.573618] 0 [ 1302.576175] ion_alloc+0x27a/0x810 [ 1302.578122] 2717 [ 1302.580280] ? ion_dma_buf_release+0x40/0x40 [ 1302.582160] Node 1 [ 1302.585962] ? __might_fault+0x177/0x1b0 [ 1302.588638] Normal free:26780kB min:53696kB low:67120kB high:80544kB active_anon:560kB inactive_anon:24100kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:328kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1302.592169] ion_ioctl+0xea/0x1f0 [ 1302.592179] ? ion_query_heaps+0x360/0x360 [ 1302.592190] ? ion_query_heaps+0x360/0x360 [ 1302.592200] do_vfs_ioctl+0x75a/0xff0 [ 1302.592211] ? ioctl_preallocate+0x1a0/0x1a0 [ 1302.592220] ? lock_downgrade+0x740/0x740 [ 1302.592239] ? __fget+0x225/0x360 [ 1302.592262] ? do_vfs_ioctl+0xff0/0xff0 [ 1302.628610] 2718 [ 1302.632028] ? security_file_ioctl+0x83/0xb0 [ 1302.632041] SyS_ioctl+0x7f/0xb0 [ 1302.632049] ? do_vfs_ioctl+0xff0/0xff0 [ 1302.632060] do_syscall_64+0x1d5/0x640 [ 1302.632075] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1302.663432] 2718 [ 1302.691490] RIP: 0033:0x4665f9 [ 1302.691496] RSP: 002b:00007fbe228cf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1302.691505] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1302.691509] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1302.691514] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1302.691518] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1302.691523] R13: 00007ffd8c3f05df R14: 00007fbe228cf300 R15: 0000000000022000 [ 1302.701702] / [ 1302.702791] lowmem_reserve[]: [ 1302.704733] mems_allowed=0-1 [ 1302.714924] 0 0 0 0 0 [ 1302.714944] Node 0 DMA: 2*4kB (UE) 6*8kB (UE) 25*16kB (UE) 14*32kB (UE) 11*64kB (UE) 3*128kB (UE) 1*256kB (E) 1*512kB [ 1302.751011] CPU: 1 PID: 32234 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1302.753119] 2718 [ 1302.758211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1302.766897] Call Trace: [ 1302.771423] (E) [ 1302.776177] dump_stack+0x1b2/0x281 [ 1302.781227] Node 0 [ 1302.785690] warn_alloc.cold+0x96/0x1cc [ 1302.790711] DMA32 free:17856kB min:36200kB low:45248kB high:54296kB active_anon:88724kB inactive_anon:92196kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2296kB bounce:0kB free_pcp:828kB local_pcp:0kB free_cma:0kB [ 1302.794059] ? zone_watermark_ok_safe+0x220/0x220 [ 1302.794070] ? usleep_range+0x130/0x130 [ 1302.794079] ? queue_work_on+0x10d/0x1d0 [ 1302.794089] ? _find_next_bit+0xdb/0x100 [ 1302.794099] ? run_timer_softirq+0x5a0/0x5a0 [ 1302.794114] __alloc_pages_nodemask+0x2127/0x2720 [ 1302.794129] ? lock_acquire+0x170/0x3f0 [ 1302.794143] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1302.798827] 2*1024kB [ 1302.804542] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1302.804558] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1302.804577] alloc_pages_current+0x155/0x260 [ 1302.804588] ion_page_pool_alloc+0x118/0x1b0 [ 1302.804596] ion_system_heap_allocate+0x133/0x8c0 [ 1302.804606] ? ion_alloc+0x187/0x810 [ 1302.804619] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1302.809352] (UE) [ 1302.813992] ? ion_system_contig_heap_create+0x130/0x130 [ 1302.814003] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1302.814014] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1302.814024] ion_alloc+0x204/0x810 [ 1302.814036] ? ion_dma_buf_release+0x40/0x40 [ 1302.814047] ? __might_fault+0x177/0x1b0 [ 1302.814057] ion_ioctl+0xea/0x1f0 [ 1302.814065] ? ion_query_heaps+0x360/0x360 [ 1302.814080] ? ion_query_heaps+0x360/0x360 [ 1302.819061] lowmem_reserve[]: [ 1302.823394] do_vfs_ioctl+0x75a/0xff0 [ 1302.823406] ? ioctl_preallocate+0x1a0/0x1a0 [ 1302.823415] ? lock_downgrade+0x740/0x740 [ 1302.823427] ? __fget+0x225/0x360 [ 1302.823435] ? do_vfs_ioctl+0xff0/0xff0 [ 1302.823446] ? security_file_ioctl+0x83/0xb0 [ 1302.823456] SyS_ioctl+0x7f/0xb0 [ 1302.823465] ? do_vfs_ioctl+0xff0/0xff0 [ 1302.828484] 0 [ 1302.833941] do_syscall_64+0x1d5/0x640 [ 1302.833957] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1302.833965] RIP: 0033:0x4665f9 [ 1302.833971] RSP: 002b:00007fcb72e01188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1302.833980] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1302.833985] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1302.833989] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1302.833994] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1302.833999] R13: 00007fff942e1a5f R14: 00007fcb72e01300 R15: 0000000000022000 [ 1303.243595] 3*2048kB [ 1303.248231] 0 [ 1303.261014] (UME) [ 1303.262112] 0 [ 1303.282983] 0*4096kB [ 1303.283660] 0 [ 1303.315271] = 10952kB [ 1303.364395] 0 [ 1303.366351] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1303.371036] Node 0 [ 1303.421041] lowmem_reserve[]: 0 0 0 0 0 [ 1303.428585] Node 1 Normal free:192428kB min:53696kB low:67120kB high:80544kB active_anon:560kB inactive_anon:24100kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:328kB bounce:0kB free_pcp:124kB local_pcp:28kB free_cma:0kB [ 1303.431022] DMA32: 951*4kB (ME) 443*8kB (ME) 217*16kB (ME) 38*32kB (UME) 296*64kB (U) 38*128kB (U) 6*256kB (U) 13*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 45060kB [ 1303.513438] lowmem_reserve[]: 0 0 0 0 0 [ 1303.517559] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 15*16kB (UE) 14*32kB (UE) 6*64kB (UE) 4*128kB (UE) 3*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11072kB [ 1303.521018] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1303.568939] Node 0 DMA32: 1182*4kB (ME) 453*8kB (UME) 220*16kB (UME) 39*32kB (UME) 2*64kB (U) 1*128kB (U) 1*256kB (U) 9*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 19264kB [ 1303.574044] syz-executor.5: [ 1303.588851] Node 1 Normal: 72*4kB (ME) 23*8kB (UM) 16*16kB (UM) 7*32kB (UME) 35*64kB (U) 180*128kB (U) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27256kB [ 1303.592816] Node 0 [ 1303.606899] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1303.606918] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1303.606941] CPU: 1 PID: 32234 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1303.615828] Normal: [ 1303.619888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1303.626920] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1303.634189] Call Trace: [ 1303.634213] dump_stack+0x1b2/0x281 [ 1303.634226] warn_alloc.cold+0x96/0x1cc [ 1303.634237] ? zone_watermark_ok_safe+0x220/0x220 [ 1303.634258] __alloc_pages_nodemask+0x2127/0x2720 [ 1303.634267] ? retint_kernel+0x2d/0x2d [ 1303.634288] ? lock_acquire+0x170/0x3f0 [ 1303.634304] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1303.634319] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1303.643519] 0*4kB [ 1303.646807] ? __mutex_unlock_slowpath+0x75/0x770 [ 1303.658906] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1303.659396] alloc_pages_current+0x155/0x260 [ 1303.667212] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1303.667768] ion_page_pool_alloc+0x118/0x1b0 [ 1303.675714] 0*8kB [ 1303.678397] ion_system_heap_allocate+0x133/0x8c0 [ 1303.686550] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1303.687066] ? _raw_spin_unlock+0x29/0x40 [ 1303.695469] 0*16kB [ 1303.698477] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1303.700878] 0*32kB [ 1303.705972] ? ion_system_contig_heap_create+0x130/0x130 [ 1303.705983] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1303.705995] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1303.706004] ion_alloc+0x27a/0x810 [ 1303.706019] ? ion_dma_buf_release+0x40/0x40 [ 1303.706030] ? __might_fault+0x177/0x1b0 [ 1303.706040] ion_ioctl+0xea/0x1f0 [ 1303.706049] ? ion_query_heaps+0x360/0x360 [ 1303.706061] ? ion_query_heaps+0x360/0x360 [ 1303.706071] do_vfs_ioctl+0x75a/0xff0 [ 1303.706082] ? ioctl_preallocate+0x1a0/0x1a0 [ 1303.706092] ? lock_downgrade+0x740/0x740 [ 1303.706105] ? __fget+0x225/0x360 [ 1303.721980] 29500 total pagecache pages [ 1303.729148] ? do_vfs_ioctl+0xff0/0xff0 [ 1303.738478] 0 pages in swap cache [ 1303.741115] ? security_file_ioctl+0x83/0xb0 [ 1303.741128] SyS_ioctl+0x7f/0xb0 [ 1303.741136] ? do_vfs_ioctl+0xff0/0xff0 [ 1303.741148] do_syscall_64+0x1d5/0x640 [ 1303.741162] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1303.741170] RIP: 0033:0x4665f9 [ 1303.741174] RSP: 002b:00007fcb72e01188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1303.741183] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1303.741188] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1303.741194] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1303.741199] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1303.741208] R13: 00007fff942e1a5f R14: 00007fcb72e01300 R15: 0000000000022000 [ 1303.755555] Swap cache stats: add 0, delete 0, find 0/0 [ 1303.759010] warn_alloc_show_mem: 3 callbacks suppressed [ 1303.759014] Mem-Info: [ 1303.764165] 0*64kB [ 1303.765784] active_anon:22321 inactive_anon:29074 isolated_anon:0 [ 1303.765784] active_file:33 inactive_file:5 isolated_file:0 [ 1303.765784] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1303.765784] slab_reclaimable:11657 slab_unreclaimable:111404 [ 1303.765784] mapped:35514 shmem:29449 pagetables:656 bounce:0 [ 1303.765784] free:13880 free_pcp:0 free_cma:0 [ 1303.776166] Free swap = 0kB [ 1303.778951] Node 0 active_anon:88724kB inactive_anon:92196kB active_file:56kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139668kB dirty:0kB writeback:0kB shmem:93504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1303.782391] 0*128kB [ 1303.785949] Node 1 active_anon:560kB inactive_anon:24100kB active_file:76kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2388kB dirty:0kB writeback:0kB shmem:24292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1303.790348] 0*256kB [ 1303.796791] Node 0 [ 1303.802981] Total swap = 0kB [ 1303.806844] DMA free:11008kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1303.812387] 0*512kB [ 1303.817304] lowmem_reserve[]: [ 1303.820023] 0*1024kB [ 1303.826155] 0 [ 1303.828869] 2097051 pages RAM [ 1303.831611] 2717 2718 2718 2718 [ 1303.836394] 0*2048kB [ 1303.839731] Node 0 [ 1303.843444] 0 pages HighMem/MovableOnly [ 1303.851708] DMA32 free:17712kB min:36200kB low:45248kB high:54296kB active_anon:88724kB inactive_anon:92196kB active_file:28kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2296kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1303.860097] 0*4096kB [ 1303.863961] lowmem_reserve[]: [ 1303.869721] = 0kB [ 1303.877719] 0 0 0 0 0 [ 1303.877740] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1303.877766] lowmem_reserve[]: [ 1303.888908] 363849 pages reserved [ 1303.898910] 0 [ 1303.908148] 0 pages cma reserved [ 1303.909206] 0 [ 1303.919935] Node 1 [ 1303.921975] 0 0 0 [ 1303.921989] Node 1 Normal free:26800kB min:53696kB low:67120kB high:80544kB active_anon:560kB inactive_anon:24100kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:328kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1303.922012] lowmem_reserve[]: 0 [ 1303.927243] Normal: [ 1303.927881] 0 [ 1303.973206] 72*4kB [ 1303.981792] 0 [ 1304.008859] (ME) [ 1304.014557] 0 [ 1304.041645] 23*8kB [ 1304.047439] 0 [ 1304.047541] (UM) [ 1304.083174] 16*16kB [ 1304.083832] Node 0 [ 1304.085988] (UM) 7*32kB [ 1304.089330] DMA: [ 1304.093483] (UME) 35*64kB (U) 180*128kB (U) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27256kB [ 1304.093534] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1304.093545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1304.100716] 2*4kB [ 1304.104668] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1304.137691] (UE) [ 1304.139258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1304.140066] 1*8kB [ 1304.143427] 29469 total pagecache pages [ 1304.181646] (E) [ 1304.184295] 0 pages in swap cache [ 1304.184338] 15*16kB [ 1304.186569] Swap cache stats: add 0, delete 0, find 0/0 [ 1304.221294] (UE) [ 1304.223677] Free swap = 0kB [ 1304.225727] 14*32kB (UE) [ 1304.227527] Total swap = 0kB [ 1304.229568] 5*64kB [ 1304.231701] 2097051 pages RAM [ 1304.231705] 0 pages HighMem/MovableOnly [ 1304.231709] 363849 pages reserved [ 1304.231712] 0 pages cma reserved [ 1304.231720] Out of memory (oom_kill_allocating_task): Kill process 10008 (syz-fuzzer) score 0 or sacrifice child [ 1304.231776] Killed process 31265 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1304.367378] (UE) 4*128kB (UE) 3*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11008kB [ 1304.377006] Node 0 DMA32: 1183*4kB (UME) 451*8kB (ME) 219*16kB (UME) 38*32kB (UME) 1*64kB (U) 1*128kB (U) 1*256kB (U) 6*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 17604kB [ 1304.396830] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1304.410483] Node 1 Normal: 72*4kB (ME) 23*8kB (UM) 16*16kB (UM) 7*32kB (UME) 35*64kB (U) 180*128kB (U) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27256kB [ 1304.429938] oom_reaper: reaped process 32234 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1304.432324] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1304.447135] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1304.461997] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1304.464066] syz-executor.2 cpuset= [ 1304.470587] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1304.470596] / [ 1304.480689] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1304.485007] mems_allowed=0-1 [ 1304.497325] CPU: 1 PID: 31278 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1304.499910] 29469 total pagecache pages [ 1304.505201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1304.505205] Call Trace: [ 1304.505225] dump_stack+0x1b2/0x281 [ 1304.505237] dump_header+0x178/0x82f [ 1304.505247] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1304.505256] ? ___ratelimit+0x2cd/0x530 [ 1304.505265] oom_kill_process.cold+0x10/0xa40 [ 1304.505282] out_of_memory+0xe3e/0x1190 [ 1304.505294] ? oom_killer_disable+0x1c0/0x1c0 [ 1304.505301] ? mutex_trylock+0x152/0x1a0 [ 1304.505311] __alloc_pages_nodemask+0x23e1/0x2720 [ 1304.505332] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1304.505354] alloc_pages_current+0x155/0x260 [ 1304.509315] 0 pages in swap cache [ 1304.518670] filemap_fault+0x11a1/0x1ad0 [ 1304.518688] ext4_filemap_fault+0x84/0xb0 [ 1304.518698] __do_fault+0xfa/0x380 [ 1304.518707] __handle_mm_fault+0x2497/0x4620 [ 1304.518716] ? vm_insert_page+0x7c0/0x7c0 [ 1304.518724] ? lock_acquire+0x170/0x3f0 [ 1304.518739] ? mark_held_locks+0xa6/0xf0 [ 1304.518749] handle_mm_fault+0x455/0x9c0 [ 1304.518762] __do_page_fault+0x549/0xad0 [ 1304.518774] ? spurious_fault+0x640/0x640 [ 1304.518781] ? do_page_fault+0x60/0x500 [ 1304.518796] ? page_fault+0x2f/0x50 [ 1304.518807] page_fault+0x45/0x50 [ 1304.527932] Swap cache stats: add 0, delete 0, find 0/0 [ 1304.528710] RIP: 18c386b:0x5 [ 1304.533968] Free swap = 0kB [ 1304.537791] RSP: 0003:00007ffd8c3f089c EFLAGS: 018c3810 [ 1304.548922] Total swap = 0kB [ 1304.552862] Mem-Info: [ 1304.555171] 2097051 pages RAM [ 1304.559960] active_anon:22321 inactive_anon:29074 isolated_anon:0 [ 1304.559960] active_file:11 inactive_file:9 isolated_file:0 [ 1304.559960] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1304.559960] slab_reclaimable:11646 slab_unreclaimable:111363 [ 1304.559960] mapped:35491 shmem:29449 pagetables:619 bounce:0 [ 1304.559960] free:13967 free_pcp:83 free_cma:0 [ 1304.571408] 0 pages HighMem/MovableOnly [ 1304.574723] Node 0 active_anon:88724kB inactive_anon:92196kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139576kB dirty:0kB writeback:0kB shmem:93504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1304.576761] 363849 pages reserved [ 1304.580919] Node 1 active_anon:560kB inactive_anon:24100kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2388kB dirty:0kB writeback:0kB shmem:24292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1304.590637] 0 pages cma reserved [ 1304.595108] Node 0 [ 1304.611051] syz-executor.5: [ 1304.615511] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1304.617605] page allocation failure: order:0 [ 1304.621822] lowmem_reserve[]: [ 1304.646320] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1304.648948] 0 [ 1304.650164] (null) [ 1304.685307] 2717 [ 1304.693939] syz-executor.5 cpuset= [ 1304.717229] 2718 [ 1304.725142] / [ 1304.745739] 2718 [ 1304.755727] mems_allowed=0-1 [ 1304.783421] 2718 [ 1304.791855] CPU: 0 PID: 32234 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1304.799115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1304.801191] Node 0 [ 1304.804691] Call Trace: [ 1304.806759] DMA32 free:17604kB min:36200kB low:45248kB high:54296kB active_anon:88724kB inactive_anon:92196kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2296kB bounce:0kB free_pcp:192kB local_pcp:84kB free_cma:0kB [ 1304.808459] dump_stack+0x1b2/0x281 [ 1304.810486] lowmem_reserve[]: [ 1304.813603] warn_alloc.cold+0x96/0x1cc [ 1304.813616] ? zone_watermark_ok_safe+0x220/0x220 [ 1304.813626] ? usleep_range+0x130/0x130 [ 1304.813636] ? try_to_free_pages+0x23f/0x6e0 [ 1304.813647] ? _find_next_bit+0xdb/0x100 [ 1304.815685] 0 [ 1304.823573] ? run_timer_softirq+0x5a0/0x5a0 [ 1304.823591] __alloc_pages_nodemask+0x2127/0x2720 [ 1304.823610] ? lock_acquire+0x170/0x3f0 [ 1304.832980] 0 [ 1304.835186] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1304.837734] 0 [ 1304.866105] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1304.866122] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1304.866141] alloc_pages_current+0x155/0x260 [ 1304.866153] ion_page_pool_alloc+0x118/0x1b0 [ 1304.869768] 0 [ 1304.872869] ion_system_heap_allocate+0x133/0x8c0 [ 1304.872883] ? _raw_spin_unlock+0x29/0x40 [ 1304.872893] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1304.876848] 0 [ 1304.881706] ? ion_system_contig_heap_create+0x130/0x130 [ 1304.881717] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1304.881730] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1304.881740] ion_alloc+0x27a/0x810 [ 1304.890114] ? ion_dma_buf_release+0x40/0x40 [ 1304.894208] Node 0 [ 1304.895975] ? __might_fault+0x177/0x1b0 [ 1304.900384] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1304.905217] ion_ioctl+0xea/0x1f0 [ 1304.905227] ? ion_query_heaps+0x360/0x360 [ 1304.905242] ? ion_query_heaps+0x360/0x360 [ 1304.909193] lowmem_reserve[]: [ 1304.910987] do_vfs_ioctl+0x75a/0xff0 [ 1304.911001] ? ioctl_preallocate+0x1a0/0x1a0 [ 1304.911011] ? lock_downgrade+0x740/0x740 [ 1304.911024] ? __fget+0x225/0x360 [ 1304.915851] 0 [ 1304.917647] ? do_vfs_ioctl+0xff0/0xff0 [ 1304.922154] 0 [ 1304.927568] ? security_file_ioctl+0x83/0xb0 [ 1304.932071] 0 [ 1304.936435] SyS_ioctl+0x7f/0xb0 [ 1304.938205] 0 [ 1304.943036] ? do_vfs_ioctl+0xff0/0xff0 [ 1304.943049] do_syscall_64+0x1d5/0x640 [ 1304.943064] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1304.943073] RIP: 0033:0x4665f9 [ 1304.947201] 0 [ 1304.952111] RSP: 002b:00007fcb72e01188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1304.952121] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1304.952125] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1304.952130] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1304.952135] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1304.952140] R13: 00007fff942e1a5f R14: 00007fcb72e01300 R15: 0000000000022000 [ 1304.963062] Mem-Info: [ 1304.969270] active_anon:22321 inactive_anon:29074 isolated_anon:0 [ 1304.969270] active_file:11 inactive_file:9 isolated_file:0 [ 1304.969270] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1304.969270] slab_reclaimable:11646 slab_unreclaimable:111363 [ 1304.969270] mapped:35491 shmem:29449 pagetables:619 bounce:0 [ 1304.969270] free:13833 free_pcp:110 free_cma:0 [ 1304.972958] Node 1 [ 1304.987050] Node 0 active_anon:88724kB inactive_anon:92196kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:139576kB dirty:0kB writeback:0kB shmem:93504kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1305.020452] Normal free:26792kB min:53696kB low:67120kB high:80544kB active_anon:560kB inactive_anon:24100kB active_file:0kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:224kB bounce:0kB free_pcp:252kB local_pcp:132kB free_cma:0kB [ 1305.031205] Node 1 active_anon:560kB inactive_anon:24100kB active_file:0kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2388kB dirty:0kB writeback:0kB shmem:24292kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1305.034775] lowmem_reserve[]: [ 1305.036562] Node 0 [ 1305.041089] 0 0 0 0 0 [ 1305.041108] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 12*16kB (UE) 14*32kB [ 1305.049852] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1305.050523] (UE) [ 1305.056636] lowmem_reserve[]: [ 1305.061024] 5*64kB [ 1305.067159] 0 [ 1305.067705] (UE) [ 1305.073867] 2717 [ 1305.077561] 4*128kB [ 1305.080825] 2718 [ 1305.084059] (UE) 3*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 1305.084095] Node 0 DMA32: 1183*4kB [ 1305.090425] 2718 [ 1305.096152] (UME) [ 1305.109873] 2718 [ 1305.117558] 453*8kB [ 1305.130323] (UME) [ 1305.132780] Node 0 DMA32 free:17604kB min:36200kB low:45248kB high:54296kB active_anon:88636kB inactive_anon:92196kB active_file:32kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2296kB bounce:0kB free_pcp:236kB local_pcp:108kB free_cma:0kB [ 1305.168038] 219*16kB [ 1305.175188] lowmem_reserve[]: [ 1305.198510] (UME) [ 1305.227089] 0 [ 1305.258509] 38*32kB [ 1305.261006] 0 [ 1305.268462] (UME) [ 1305.296557] 0 [ 1305.302656] 1*64kB [ 1305.303784] 0 [ 1305.305843] (U) [ 1305.307886] 0 [ 1305.310191] 1*128kB [ 1305.324929] (U) [ 1305.326570] Node 0 [ 1305.328706] 1*256kB [ 1305.330760] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1305.340876] (U) [ 1305.367207] lowmem_reserve[]: [ 1305.374900] 6*512kB [ 1305.376522] 0 [ 1305.378313] (U) [ 1305.380467] 0 [ 1305.384318] 1*1024kB [ 1305.387299] 0 [ 1305.388954] (U) [ 1305.390747] 0 [ 1305.397046] 0*2048kB [ 1305.397280] 0 [ 1305.399587] 0*4096kB [ 1305.436727] = 17620kB [ 1305.436778] Node 1 [ 1305.438572] Node 0 [ 1305.443646] Normal free:26792kB min:53696kB low:67120kB high:80544kB active_anon:560kB inactive_anon:24100kB active_file:20kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:224kB bounce:0kB free_pcp:252kB local_pcp:120kB free_cma:0kB [ 1305.446842] Normal: [ 1305.448975] lowmem_reserve[]: [ 1305.450760] 0*4kB [ 1305.453211] 0 0 0 0 [ 1305.459677] 0*8kB [ 1305.460082] 0 [ 1305.494114] 0*16kB [ 1305.500418] 0*32kB [ 1305.502274] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 12*16kB (UE) 14*32kB (UE) 5*64kB (UE) 4*128kB (UE) 3*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 1305.508472] 0*64kB [ 1305.524967] Node 0 DMA32: 1183*4kB (UME) 453*8kB (UME) 219*16kB (UME) 38*32kB (UME) 1*64kB (U) 1*128kB (U) 1*256kB (U) 6*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 17620kB [ 1305.528616] 0*128kB [ 1305.545650] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1305.548778] 0*256kB [ 1305.558761] Node 1 Normal: 72*4kB (ME) [ 1305.565309] 0*512kB [ 1305.565913] 23*8kB [ 1305.569317] 0*1024kB [ 1305.571737] (UM) 15*16kB (M) 3*32kB (ME) 30*64kB (U) 180*128kB (U) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26792kB [ 1305.571795] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1305.571802] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1305.571809] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1305.571814] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1305.571818] 29469 total pagecache pages [ 1305.571828] 0 pages in swap cache [ 1305.571834] Swap cache stats: add 0, delete 0, find 0/0 [ 1305.571838] Free swap = 0kB [ 1305.571841] Total swap = 0kB [ 1305.571848] 2097051 pages RAM [ 1305.571854] 0 pages HighMem/MovableOnly [ 1305.574086] 0*2048kB [ 1305.576478] 363849 pages reserved [ 1305.591886] 0*4096kB [ 1305.601577] 0 pages cma reserved [ 1305.609301] = 0kB [ 1305.721022] Node 1 Normal: 7*4kB (E) 0*8kB 2*16kB (UM) 4*32kB (UME) 676*64kB (UM) 92*128kB (U) 3*256kB (U) 1*512kB (M) 160*1024kB (U) 1*2048kB (U) 0*4096kB = 222396kB [ 1305.751007] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1305.759966] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1305.768727] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1305.777644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1305.786276] 29802 total pagecache pages [ 1305.790280] 0 pages in swap cache [ 1305.793764] Swap cache stats: add 0, delete 0, find 0/0 [ 1305.799248] Free swap = 0kB [ 1305.802918] Total swap = 0kB [ 1305.805934] 2097051 pages RAM [ 1305.809029] 0 pages HighMem/MovableOnly [ 1305.813069] 363849 pages reserved [ 1305.816514] 0 pages cma reserved [ 1305.819875] Out of memory (oom_kill_allocating_task): Kill process 31278 (syz-executor.2) score 0 or sacrifice child [ 1305.851029] Killed process 31278 (syz-executor.2) total-vm:93120kB, anon-rss:76kB, file-rss:34016kB, shmem-rss:0kB [ 1305.887228] oom_reaper: reaped process 31265 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1305.913479] oom_reaper: reaped process 31278 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1306.125012] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1306.141561] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1306.153799] systemd[1]: Stopped Journal Service. [ 1306.176537] systemd[1]: Starting Journal Service... [ 1306.609822] systemd-journald[32246]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1307.248247] systemd[1]: Started Journal Service. 08:23:56 executing program 4: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) clock_gettime(0x4, &(0x7f00000000c0)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:23:56 executing program 1: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) clock_gettime(0x4, &(0x7f00000000c0)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:23:56 executing program 0: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:23:56 executing program 3: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) clock_gettime(0x4, &(0x7f00000000c0)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:23:56 executing program 2: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:23:56 executing program 5: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1307.843985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1307.850754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1307.870901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1307.886596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1307.903612] device bridge_slave_1 left promiscuous mode [ 1307.916182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.932367] device bridge_slave_0 left promiscuous mode [ 1307.945342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.965272] device veth1_macvtap left promiscuous mode [ 1307.978971] device veth0_macvtap left promiscuous mode [ 1307.990134] device veth1_vlan left promiscuous mode [ 1308.001926] device veth0_vlan left promiscuous mode [ 1308.207635] device hsr_slave_1 left promiscuous mode [ 1308.218033] device hsr_slave_0 left promiscuous mode [ 1308.236708] team0 (unregistering): Port device team_slave_1 removed [ 1308.247943] team0 (unregistering): Port device team_slave_0 removed [ 1308.267243] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1308.296037] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1308.376163] bond0 (unregistering): Released all slaves [ 1308.455135] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1308.469369] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1308.485420] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1308.491614] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1308.497680] CPU: 1 PID: 32269 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1308.505575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1308.515193] Call Trace: [ 1308.517786] dump_stack+0x1b2/0x281 [ 1308.521420] warn_alloc.cold+0x96/0x1cc [ 1308.525571] ? zone_watermark_ok_safe+0x220/0x220 [ 1308.530439] __alloc_pages_nodemask+0x2127/0x2720 [ 1308.535303] ? _raw_spin_unlock_irq+0x24/0x80 [ 1308.539823] ? lock_acquire+0x170/0x3f0 [ 1308.543804] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1308.548659] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1308.554143] ? __mutex_unlock_slowpath+0x75/0x770 [ 1308.558988] alloc_pages_current+0x155/0x260 [ 1308.563506] ion_page_pool_alloc+0x118/0x1b0 [ 1308.567909] ion_system_heap_allocate+0x133/0x8c0 [ 1308.572753] ? ion_alloc+0x187/0x810 [ 1308.576467] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1308.581924] ? ion_system_contig_heap_create+0x130/0x130 [ 1308.587378] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1308.592399] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1308.597249] ion_alloc+0x204/0x810 [ 1308.600819] ? ion_dma_buf_release+0x40/0x40 [ 1308.605230] ? __might_fault+0x177/0x1b0 [ 1308.609293] ion_ioctl+0xea/0x1f0 [ 1308.612747] ? ion_query_heaps+0x360/0x360 [ 1308.617000] ? ion_query_heaps+0x360/0x360 [ 1308.621250] do_vfs_ioctl+0x75a/0xff0 [ 1308.625055] ? ioctl_preallocate+0x1a0/0x1a0 [ 1308.629458] ? lock_downgrade+0x740/0x740 [ 1308.633873] ? __fget+0x225/0x360 [ 1308.637336] ? do_vfs_ioctl+0xff0/0xff0 [ 1308.641312] ? security_file_ioctl+0x83/0xb0 [ 1308.645746] SyS_ioctl+0x7f/0xb0 [ 1308.649123] ? do_vfs_ioctl+0xff0/0xff0 [ 1308.653119] do_syscall_64+0x1d5/0x640 [ 1308.657096] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1308.662287] RIP: 0033:0x4665f9 [ 1308.665469] RSP: 002b:00007fe2e24b3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1308.673169] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1308.680438] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1308.687707] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1308.694994] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1308.702276] R13: 00007ffd5b4f3c9f R14: 00007fe2e24b3300 R15: 0000000000022000 [ 1308.715811] CPU: 1 PID: 32268 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1308.723730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1308.733111] Call Trace: [ 1308.735711] dump_stack+0x1b2/0x281 [ 1308.739372] warn_alloc.cold+0x96/0x1cc [ 1308.743373] ? zone_watermark_ok_safe+0x220/0x220 [ 1308.748317] __alloc_pages_nodemask+0x2127/0x2720 [ 1308.753186] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1308.758226] ? lock_acquire+0x170/0x3f0 [ 1308.762222] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1308.767081] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1308.772752] ? __mutex_unlock_slowpath+0x75/0x770 [ 1308.777609] alloc_pages_current+0x155/0x260 [ 1308.782061] ion_page_pool_alloc+0x118/0x1b0 [ 1308.782892] Mem-Info: [ 1308.786481] ion_system_heap_allocate+0x133/0x8c0 [ 1308.786492] ? ion_alloc+0x187/0x810 [ 1308.786506] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1308.789007] active_anon:22719 inactive_anon:31102 isolated_anon:0 [ 1308.789007] active_file:1672 inactive_file:4965 isolated_file:12 [ 1308.789007] unevictable:0 dirty:24 writeback:0 unstable:0 [ 1308.789007] slab_reclaimable:11656 slab_unreclaimable:108116 [ 1308.789007] mapped:22129 shmem:31490 pagetables:559 bounce:0 [ 1308.789007] free:197181 free_pcp:234 free_cma:0 [ 1308.793782] ? ion_system_contig_heap_create+0x130/0x130 [ 1308.793794] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1308.793806] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1308.793816] ion_alloc+0x204/0x810 [ 1308.793829] ? ion_dma_buf_release+0x40/0x40 [ 1308.793841] ? __might_fault+0x177/0x1b0 [ 1308.793851] ion_ioctl+0xea/0x1f0 [ 1308.793864] ? ion_query_heaps+0x360/0x360 [ 1308.793876] ? ion_query_heaps+0x360/0x360 [ 1308.793885] do_vfs_ioctl+0x75a/0xff0 [ 1308.793896] ? ioctl_preallocate+0x1a0/0x1a0 [ 1308.793906] ? lock_downgrade+0x740/0x740 [ 1308.793918] ? __fget+0x225/0x360 [ 1308.793929] ? do_vfs_ioctl+0xff0/0xff0 [ 1308.807359] Node 0 active_anon:90500kB inactive_anon:100312kB active_file:6676kB inactive_file:19840kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:88508kB dirty:76kB writeback:0kB shmem:101672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1308.836969] ? security_file_ioctl+0x83/0xb0 [ 1308.836981] SyS_ioctl+0x7f/0xb0 [ 1308.836989] ? do_vfs_ioctl+0xff0/0xff0 [ 1308.837000] do_syscall_64+0x1d5/0x640 [ 1308.837014] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1308.837023] RIP: 0033:0x4665f9 [ 1308.837027] RSP: 002b:00007feafbab4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1308.837036] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1308.837041] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1308.837046] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1308.837051] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1308.837056] R13: 00007ffcb6e8eadf R14: 00007feafbab4300 R15: 0000000000022000 [ 1309.259300] Node 1 active_anon:376kB inactive_anon:24096kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:24288kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1309.331025] Node 0 DMA free:11100kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1309.381003] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1309.386092] Node 0 DMA32 free:345860kB min:36200kB low:45248kB high:54296kB active_anon:88864kB inactive_anon:100312kB active_file:6848kB inactive_file:21084kB unevictable:0kB writepending:108kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2896kB bounce:0kB free_pcp:316kB local_pcp:160kB free_cma:0kB [ 1309.452000] lowmem_reserve[]: 0 0 0 0 0 [ 1309.460502] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1309.518714] lowmem_reserve[]: 0 0 0 0 0 [ 1309.527263] Node 1 Normal free:54052kB min:53696kB low:67120kB high:80544kB active_anon:376kB inactive_anon:24096kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:32kB bounce:0kB free_pcp:524kB local_pcp:0kB free_cma:0kB [ 1309.559053] lowmem_reserve[]: 0 0 0 0 0 [ 1309.563816] Node 0 DMA: 11*4kB (UE) 20*8kB (UE) 25*16kB (UE) 14*32kB (UE) 5*64kB (UE) 12*128kB (UE) 4*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (UE) 0*4096kB = 11100kB [ 1309.583133] Node 0 DMA32: 513*4kB (UE) 117*8kB (ME) 148*16kB (ME) 7221*32kB (UME) 94*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 242444kB [ 1309.597600] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1309.611660] Node 1 Normal: 303*4kB (UME) 613*8kB (UME) 492*16kB (UME) 268*32kB (UME) 158*64kB (UME) 7*128kB (UM) 4*256kB (UME) 38*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 54052kB [ 1309.629998] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1309.648993] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1309.668194] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1309.689327] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1309.709303] 38253 total pagecache pages [ 1309.719890] 0 pages in swap cache [ 1309.727926] Swap cache stats: add 0, delete 0, find 0/0 [ 1309.751009] Free swap = 0kB [ 1309.754058] Total swap = 0kB [ 1309.757073] 2097051 pages RAM [ 1309.760174] 0 pages HighMem/MovableOnly [ 1309.771018] 363849 pages reserved [ 1309.774492] 0 pages cma reserved 08:23:59 executing program 0: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(0x0, 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1310.883596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1310.890349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1310.909694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1310.924234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1310.940219] device bridge_slave_1 left promiscuous mode [ 1310.952539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.973928] device bridge_slave_0 left promiscuous mode [ 1310.980801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.989360] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1311.004395] device veth1_macvtap left promiscuous mode [ 1311.009832] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1311.015328] device veth0_macvtap left promiscuous mode [ 1311.023602] CPU: 0 PID: 32280 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1311.031495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1311.041983] Call Trace: [ 1311.044601] dump_stack+0x1b2/0x281 [ 1311.048419] warn_alloc.cold+0x96/0x1cc [ 1311.052926] ? zone_watermark_ok_safe+0x220/0x220 [ 1311.057881] __alloc_pages_nodemask+0x2127/0x2720 [ 1311.062893] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1311.069498] ? finish_task_switch+0x178/0x610 [ 1311.075416] ? finish_task_switch+0x14d/0x610 [ 1311.079927] ? lock_acquire+0x170/0x3f0 [ 1311.084200] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1311.089060] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1311.094524] ? __mutex_unlock_slowpath+0x75/0x770 [ 1311.099438] ? alloc_pages_current+0x84/0x260 [ 1311.103944] alloc_pages_current+0x155/0x260 [ 1311.108385] ion_page_pool_alloc+0x118/0x1b0 [ 1311.112806] ion_system_heap_allocate+0x133/0x8c0 [ 1311.117663] ? ion_alloc+0x187/0x810 [ 1311.121383] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1311.126846] ? ion_system_contig_heap_create+0x130/0x130 [ 1311.132490] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1311.137531] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1311.142402] ion_alloc+0x204/0x810 [ 1311.145963] ? ion_dma_buf_release+0x40/0x40 [ 1311.150378] ? __might_fault+0x177/0x1b0 [ 1311.154445] ion_ioctl+0xea/0x1f0 [ 1311.157899] ? ion_query_heaps+0x360/0x360 [ 1311.162142] ? ion_query_heaps+0x360/0x360 [ 1311.166385] do_vfs_ioctl+0x75a/0xff0 [ 1311.170191] ? ioctl_preallocate+0x1a0/0x1a0 [ 1311.174616] ? lock_downgrade+0x740/0x740 [ 1311.178774] ? __fget+0x225/0x360 [ 1311.182257] ? do_vfs_ioctl+0xff0/0xff0 [ 1311.186236] ? security_file_ioctl+0x83/0xb0 [ 1311.190655] SyS_ioctl+0x7f/0xb0 [ 1311.194047] ? do_vfs_ioctl+0xff0/0xff0 [ 1311.198033] do_syscall_64+0x1d5/0x640 [ 1311.201930] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1311.207131] RIP: 0033:0x4665f9 [ 1311.210319] RSP: 002b:00007feafbab4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1311.218824] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1311.226367] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1311.233839] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1311.241564] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1311.248842] R13: 00007ffcb6e8eadf R14: 00007feafbab4300 R15: 0000000000022000 [ 1311.257679] device veth1_vlan left promiscuous mode [ 1311.263071] device veth0_vlan left promiscuous mode [ 1311.340128] warn_alloc_show_mem: 1 callbacks suppressed [ 1311.340132] Mem-Info: [ 1311.360454] active_anon:22987 inactive_anon:31113 isolated_anon:0 [ 1311.360454] active_file:654 inactive_file:610 isolated_file:0 [ 1311.360454] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1311.360454] slab_reclaimable:11693 slab_unreclaimable:107638 [ 1311.360454] mapped:53797 shmem:31506 pagetables:735 bounce:0 [ 1311.360454] free:55807 free_pcp:208 free_cma:0 [ 1311.411342] Node 0 active_anon:91140kB inactive_anon:100312kB active_file:2372kB inactive_file:2376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:215092kB dirty:12kB writeback:0kB shmem:101672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1311.444198] device hsr_slave_1 left promiscuous mode [ 1311.452913] device hsr_slave_0 left promiscuous mode 08:24:00 executing program 1: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1311.467330] team0 (unregistering): Port device team_slave_1 removed [ 1311.477884] team0 (unregistering): Port device team_slave_0 removed [ 1311.484468] Node 1 active_anon:808kB inactive_anon:24140kB active_file:244kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:0kB writeback:0kB shmem:24352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1311.518643] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1311.529554] Node 0 DMA free:13116kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:608kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1311.529616] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1311.563315] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1311.568532] Node 0 DMA32 free:269388kB min:36200kB low:45248kB high:54296kB active_anon:89092kB inactive_anon:100312kB active_file:2372kB inactive_file:3784kB unevictable:0kB writepending:12kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2804kB bounce:0kB free_pcp:1360kB local_pcp:652kB free_cma:0kB [ 1311.607498] lowmem_reserve[]: 0 0 0 0 0 [ 1311.616105] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1311.665191] bond0 (unregistering): Released all slaves [ 1311.680048] lowmem_reserve[]: 0 0 0 0 0 [ 1311.685346] Node 1 Normal free:76808kB min:53696kB low:67120kB high:80544kB active_anon:808kB inactive_anon:24140kB active_file:244kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:136kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1311.714286] lowmem_reserve[]: 0 0 0 0 0 [ 1311.718681] Node 0 DMA: 7*4kB (ME) 2*8kB (ME) 5*16kB (UE) 16*32kB (UME) 2*64kB (ME) 7*128kB (UE) 5*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11132kB [ 1311.743138] Node 0 DMA32: 469*4kB (UE) 445*8kB (UE) 4857*16kB (UE) 7242*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 314892kB [ 1311.757164] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1311.768108] Node 1 Normal: 224*4kB (UME) 55*8kB (UME) 47*16kB (UME) 23*32kB (UME) 12*64kB (ME) 3*128kB (M) 3*256kB (UME) 0*512kB 40*1024kB (U) 12*2048kB (U) 6*4096kB (U) = 94856kB [ 1311.795502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1311.816816] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1311.835786] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1311.854847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1311.872518] 33658 total pagecache pages [ 1311.881087] 0 pages in swap cache [ 1311.889073] Swap cache stats: add 0, delete 0, find 0/0 [ 1311.900167] Free swap = 0kB [ 1311.906670] Total swap = 0kB [ 1311.913119] 2097051 pages RAM [ 1311.919674] 0 pages HighMem/MovableOnly [ 1311.928262] 363849 pages reserved [ 1311.935229] 0 pages cma reserved [ 1312.211029] Bluetooth: hci1 command 0x0409 tx timeout [ 1312.291116] Bluetooth: hci2 command 0x0409 tx timeout [ 1312.301698] Bluetooth: hci4 command 0x0409 tx timeout [ 1312.311721] Bluetooth: hci5 command 0x0409 tx timeout [ 1312.931783] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1312.951013] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1312.956173] CPU: 0 PID: 32307 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1312.964080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1312.973464] Call Trace: [ 1312.976064] dump_stack+0x1b2/0x281 [ 1312.979697] warn_alloc.cold+0x96/0x1cc [ 1312.983675] ? zone_watermark_ok_safe+0x220/0x220 [ 1312.988683] __alloc_pages_nodemask+0x2127/0x2720 [ 1312.993714] ? _raw_spin_unlock_irq+0x24/0x80 [ 1312.998569] ? lock_acquire+0x170/0x3f0 [ 1313.002575] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1313.007435] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1313.012899] ? __mutex_unlock_slowpath+0x75/0x770 [ 1313.017767] alloc_pages_current+0x155/0x260 [ 1313.022181] ion_page_pool_alloc+0x118/0x1b0 [ 1313.026591] ion_system_heap_allocate+0x133/0x8c0 [ 1313.031436] ? ion_alloc+0x187/0x810 [ 1313.035154] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1313.040627] ? ion_system_contig_heap_create+0x130/0x130 [ 1313.046112] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1313.051146] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1313.055996] ion_alloc+0x204/0x810 [ 1313.059540] ? ion_dma_buf_release+0x40/0x40 [ 1313.063970] ? __might_fault+0x177/0x1b0 [ 1313.068035] ion_ioctl+0xea/0x1f0 [ 1313.071486] ? ion_query_heaps+0x360/0x360 [ 1313.075720] ? ion_query_heaps+0x360/0x360 [ 1313.079961] do_vfs_ioctl+0x75a/0xff0 [ 1313.083765] ? ioctl_preallocate+0x1a0/0x1a0 [ 1313.088170] ? lock_downgrade+0x740/0x740 [ 1313.092319] ? __fget+0x225/0x360 [ 1313.095768] ? do_vfs_ioctl+0xff0/0xff0 [ 1313.099743] ? security_file_ioctl+0x83/0xb0 [ 1313.104154] SyS_ioctl+0x7f/0xb0 [ 1313.107606] ? do_vfs_ioctl+0xff0/0xff0 [ 1313.111585] do_syscall_64+0x1d5/0x640 [ 1313.115479] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1313.120665] RIP: 0033:0x4665f9 [ 1313.123862] RSP: 002b:00007fe2e24b3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1313.131577] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1313.138859] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1313.146366] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1313.153903] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1313.161184] R13: 00007ffd5b4f3c9f R14: 00007fe2e24b3300 R15: 0000000000022000 [ 1313.172868] Mem-Info: [ 1313.175401] active_anon:22477 inactive_anon:31113 isolated_anon:0 [ 1313.175401] active_file:28 inactive_file:861 isolated_file:0 [ 1313.175401] unevictable:0 dirty:16 writeback:0 unstable:0 [ 1313.175401] slab_reclaimable:11704 slab_unreclaimable:106638 [ 1313.175401] mapped:53322 shmem:31506 pagetables:735 bounce:0 [ 1313.175401] free:79150 free_pcp:558 free_cma:0 [ 1313.209156] Node 0 active_anon:89176kB inactive_anon:100312kB active_file:116kB inactive_file:3488kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213196kB dirty:0kB writeback:0kB shmem:101672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1313.237447] Node 1 active_anon:736kB inactive_anon:24140kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1313.264498] Node 0 DMA free:11084kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1313.290780] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1313.296053] Node 0 DMA32 free:152952kB min:36200kB low:45248kB high:54296kB active_anon:89176kB inactive_anon:100312kB active_file:116kB inactive_file:3488kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2804kB bounce:0kB free_pcp:920kB local_pcp:720kB free_cma:0kB [ 1313.325546] lowmem_reserve[]: 0 0 0 0 0 [ 1313.329568] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1313.355329] lowmem_reserve[]: 0 0 0 0 0 [ 1313.359345] Node 1 Normal free:60956kB min:53696kB low:67120kB high:80544kB active_anon:736kB inactive_anon:24140kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:136kB bounce:0kB free_pcp:748kB local_pcp:16kB free_cma:0kB [ 1313.388136] lowmem_reserve[]: 0 0 0 0 0 [ 1313.392204] Node 0 DMA: 1*4kB (E) 3*8kB (UE) 1*16kB (E) 3*32kB (UE) 1*64kB (E) 5*128kB (UE) 4*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11084kB [ 1313.407778] Node 0 DMA32: 557*4kB (UE) 262*8kB (ME) 3423*16kB (UME) 445*32kB (UME) 281*64kB (UM) 44*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 96948kB [ 1313.441011] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1313.451970] Node 1 Normal: 97*4kB (ME) 55*8kB (UME) 46*16kB (ME) 20*32kB (ME) 36*64kB (UME) 17*128kB (UM) 6*256kB (UME) 7*512kB (U) 0*1024kB 0*2048kB 12*4096kB (U) = 60956kB [ 1313.491023] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1313.499924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1313.526404] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1313.553784] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1313.563550] 32111 total pagecache pages [ 1313.568293] 0 pages in swap cache [ 1313.576613] Swap cache stats: add 0, delete 0, find 0/0 [ 1313.584190] Free swap = 0kB [ 1313.587984] Total swap = 0kB [ 1313.594956] 2097051 pages RAM [ 1313.598160] 0 pages HighMem/MovableOnly [ 1313.602628] 363849 pages reserved [ 1313.606880] 0 pages cma reserved [ 1313.662161] IPVS: ftp: loaded support on port[0] = 21 [ 1313.750656] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1313.807378] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1313.831692] CPU: 0 PID: 31276 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1313.839813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1313.849179] Call Trace: [ 1313.851781] dump_stack+0x1b2/0x281 [ 1313.855437] dump_header+0x178/0x82f [ 1313.859183] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1313.864335] ? ___ratelimit+0x2cd/0x530 [ 1313.868329] oom_kill_process.cold+0x10/0xa40 [ 1313.872840] out_of_memory+0xe3e/0x1190 [ 1313.876823] ? oom_killer_disable+0x1c0/0x1c0 [ 1313.881344] ? mutex_trylock+0x152/0x1a0 [ 1313.885402] __alloc_pages_nodemask+0x23e1/0x2720 [ 1313.890271] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1313.895222] alloc_pages_current+0x155/0x260 [ 1313.899639] filemap_fault+0x11a1/0x1ad0 [ 1313.903712] ext4_filemap_fault+0x84/0xb0 [ 1313.907873] __do_fault+0xfa/0x380 [ 1313.911403] __handle_mm_fault+0x2497/0x4620 [ 1313.915807] ? vm_insert_page+0x7c0/0x7c0 [ 1313.919962] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1313.924373] ? nanosleep_copyout+0x100/0x100 [ 1313.928779] ? mark_held_locks+0xa6/0xf0 [ 1313.932839] handle_mm_fault+0x455/0x9c0 [ 1313.936897] __do_page_fault+0x549/0xad0 [ 1313.940971] ? spurious_fault+0x640/0x640 [ 1313.945117] ? do_page_fault+0x60/0x500 [ 1313.949084] ? page_fault+0x2f/0x50 [ 1313.952710] page_fault+0x45/0x50 [ 1313.956165] RIP: 1406bb:0x6 [ 1313.959079] RSP: 0007:00007ffd5b4f3f5c EFLAGS: 00000032 [ 1314.297193] Mem-Info: [ 1314.305117] Bluetooth: hci1 command 0x041b tx timeout [ 1314.331045] active_anon:22486 inactive_anon:31113 isolated_anon:0 [ 1314.331045] active_file:38 inactive_file:0 isolated_file:0 [ 1314.331045] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1314.331045] slab_reclaimable:11717 slab_unreclaimable:106098 [ 1314.331045] mapped:52669 shmem:31506 pagetables:735 bounce:0 [ 1314.331045] free:25152 free_pcp:0 free_cma:0 [ 1314.371097] Bluetooth: hci5 command 0x041b tx timeout [ 1314.381030] Bluetooth: hci4 command 0x041b tx timeout [ 1314.411027] Bluetooth: hci2 command 0x041b tx timeout [ 1314.437939] Node 0 active_anon:89208kB inactive_anon:100312kB active_file:20kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210676kB dirty:0kB writeback:0kB shmem:101672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1314.482842] Node 1 active_anon:736kB inactive_anon:24140kB active_file:128kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1314.593638] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1314.654037] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1314.659140] Node 0 DMA32 free:35876kB min:36200kB low:45248kB high:54296kB active_anon:89208kB inactive_anon:100312kB active_file:28kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2804kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1314.786505] lowmem_reserve[]: 0 0 0 0 0 [ 1314.790550] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1314.879833] lowmem_reserve[]: 0 0 0 0 0 [ 1314.883977] Node 1 Normal free:53676kB min:53696kB low:67120kB high:80544kB active_anon:736kB inactive_anon:24140kB active_file:128kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:136kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1314.913777] lowmem_reserve[]: 0 0 0 0 0 [ 1314.931935] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 2*16kB (UE) 2*32kB (UE) 1*64kB (E) 5*128kB (UE) 4*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11056kB [ 1314.994450] Node 0 DMA32: 1238*4kB (UME) 408*8kB (ME) 218*16kB (ME) 30*32kB (ME) 271*64kB (UM) 44*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35640kB [ 1315.052197] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1315.076082] Node 1 Normal: 97*4kB (UME) 55*8kB (UME) 47*16kB (UME) 20*32kB (ME) 12*64kB (ME) 4*128kB (UM) 4*256kB (UME) 0*512kB 0*1024kB 0*2048kB 12*4096kB (U) = 53676kB [ 1315.111574] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1315.120473] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1315.160122] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1315.189392] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1315.203634] 31539 total pagecache pages [ 1315.207832] 0 pages in swap cache [ 1315.211793] Swap cache stats: add 0, delete 0, find 0/0 [ 1315.217290] Free swap = 0kB [ 1315.220316] Total swap = 0kB [ 1315.241027] 2097051 pages RAM [ 1315.244168] 0 pages HighMem/MovableOnly [ 1315.248262] 363849 pages reserved [ 1315.261532] 0 pages cma reserved [ 1315.265033] Out of memory (oom_kill_allocating_task): Kill process 31276 (syz-executor.1) score 0 or sacrifice child [ 1315.292494] Killed process 32307 (syz-executor.1) total-vm:93252kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 1315.347664] oom_reaper: reaped process 32307 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1315.399910] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1315.428054] systemd-journal cpuset=/ mems_allowed=0-1 [ 1315.434722] CPU: 0 PID: 32246 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1315.442695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1315.452399] Call Trace: [ 1315.454996] dump_stack+0x1b2/0x281 [ 1315.458624] dump_header+0x178/0x82f [ 1315.462345] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1315.467444] ? ___ratelimit+0x2cd/0x530 [ 1315.471423] oom_kill_process.cold+0x10/0xa40 [ 1315.475930] out_of_memory+0xe3e/0x1190 [ 1315.479915] ? oom_killer_disable+0x1c0/0x1c0 [ 1315.484440] ? mutex_trylock+0x152/0x1a0 [ 1315.488522] __alloc_pages_nodemask+0x23e1/0x2720 [ 1315.493465] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1315.498328] alloc_pages_current+0x155/0x260 [ 1315.502749] filemap_fault+0x11a1/0x1ad0 [ 1315.506821] ext4_filemap_fault+0x84/0xb0 [ 1315.510974] __do_fault+0xfa/0x380 [ 1315.514517] __handle_mm_fault+0x2497/0x4620 [ 1315.516910] syz-executor.1: page allocation failure: order:0 [ 1315.518924] ? vm_insert_page+0x7c0/0x7c0 [ 1315.518937] ? __fsnotify_inode_delete+0x20/0x20 [ 1315.526129] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1315.528899] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1315.533675] (null) [ 1315.540744] ? mark_held_locks+0xa6/0xf0 [ 1315.547439] syz-executor.1 cpuset= [ 1315.549540] handle_mm_fault+0x455/0x9c0 [ 1315.553621] / [ 1315.557111] __do_page_fault+0x549/0xad0 [ 1315.561181] mems_allowed=0-1 [ 1315.562850] ? spurious_fault+0x640/0x640 [ 1315.574143] ? do_page_fault+0x60/0x500 [ 1315.578124] ? page_fault+0x2f/0x50 [ 1315.581741] page_fault+0x45/0x50 [ 1315.585186] RIP: 6bca5700: (null) [ 1315.589436] RSP: 0000:00007f850dc9c6c0 EFLAGS: 7ffe6bca5700 [ 1315.589465] CPU: 1 PID: 32307 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1315.603580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1315.604438] Mem-Info: [ 1315.612940] Call Trace: [ 1315.612966] dump_stack+0x1b2/0x281 [ 1315.612979] warn_alloc.cold+0x96/0x1cc [ 1315.612991] ? zone_watermark_ok_safe+0x220/0x220 [ 1315.613001] ? usleep_range+0x130/0x130 [ 1315.613009] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1315.613021] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1315.613031] ? run_timer_softirq+0x5a0/0x5a0 [ 1315.613048] __alloc_pages_nodemask+0x2127/0x2720 [ 1315.613063] ? lock_acquire+0x170/0x3f0 [ 1315.613077] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1315.629256] active_anon:22486 inactive_anon:31113 isolated_anon:0 [ 1315.629256] active_file:0 inactive_file:38 isolated_file:0 [ 1315.629256] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1315.629256] slab_reclaimable:11720 slab_unreclaimable:106099 [ 1315.629256] mapped:52669 shmem:31506 pagetables:735 bounce:0 [ 1315.629256] free:13946 free_pcp:86 free_cma:0 [ 1315.630456] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1315.636627] Node 0 active_anon:89208kB inactive_anon:100312kB active_file:0kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210676kB dirty:0kB writeback:0kB shmem:101672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1315.639527] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1315.658434] Node 1 active_anon:736kB inactive_anon:24140kB active_file:0kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1315.662542] alloc_pages_current+0x155/0x260 [ 1315.662557] ion_page_pool_alloc+0x118/0x1b0 [ 1315.662566] ion_system_heap_allocate+0x133/0x8c0 [ 1315.662575] ? ion_alloc+0x187/0x810 [ 1315.662585] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1315.662594] ? ion_system_contig_heap_create+0x130/0x130 [ 1315.662604] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1315.662615] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1315.662625] ion_alloc+0x204/0x810 [ 1315.662648] ? ion_dma_buf_release+0x40/0x40 [ 1315.709524] Node 0 [ 1315.728004] ? __might_fault+0x177/0x1b0 [ 1315.728019] ion_ioctl+0xea/0x1f0 [ 1315.728029] ? ion_query_heaps+0x360/0x360 [ 1315.728039] ? ion_query_heaps+0x360/0x360 [ 1315.728049] do_vfs_ioctl+0x75a/0xff0 [ 1315.728059] ? ioctl_preallocate+0x1a0/0x1a0 [ 1315.728069] ? lock_downgrade+0x740/0x740 [ 1315.728082] ? __fget+0x225/0x360 [ 1315.728090] ? do_vfs_ioctl+0xff0/0xff0 [ 1315.728102] ? security_file_ioctl+0x83/0xb0 [ 1315.728112] SyS_ioctl+0x7f/0xb0 [ 1315.728119] ? do_vfs_ioctl+0xff0/0xff0 [ 1315.728131] do_syscall_64+0x1d5/0x640 [ 1315.728146] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1315.728155] RIP: 0033:0x4665f9 [ 1315.728160] RSP: 002b:00007fe2e24b3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1315.728169] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1315.728174] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1315.728184] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1315.747653] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1315.760263] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1315.760271] R13: 00007ffd5b4f3c9f R14: 00007fe2e24b3300 R15: 0000000000022000 [ 1315.765408] Mem-Info: [ 1315.778907] lowmem_reserve[]: [ 1315.787724] active_anon:22486 inactive_anon:31113 isolated_anon:0 [ 1315.787724] active_file:0 inactive_file:38 isolated_file:0 [ 1315.787724] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1315.787724] slab_reclaimable:11720 slab_unreclaimable:106099 [ 1315.787724] mapped:52669 shmem:31506 pagetables:735 bounce:0 [ 1315.787724] free:13946 free_pcp:86 free_cma:0 [ 1315.790124] 0 [ 1315.794036] Node 0 active_anon:89208kB inactive_anon:100312kB active_file:0kB inactive_file:92kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210676kB dirty:0kB writeback:0kB shmem:101672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1315.794053] Node 1 active_anon:736kB inactive_anon:24140kB active_file:0kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1315.794057] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1315.794081] lowmem_reserve[]: [ 1315.807771] 2717 [ 1315.812623] 0 [ 1315.813315] 2718 [ 1315.816798] 2717 [ 1315.829924] 2718 [ 1315.837194] 2718 [ 1315.838328] 2718 [ 1315.841817] 2718 2718 [ 1315.841827] Node 0 DMA32 free:18040kB min:36200kB low:45248kB high:54296kB active_anon:89208kB inactive_anon:100312kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2804kB bounce:0kB free_pcp:224kB local_pcp:120kB free_cma:0kB [ 1315.841850] lowmem_reserve[]: 0 0 0 0 0 [ 1315.841870] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1315.841892] lowmem_reserve[]: [ 1315.862107] 0 [ 1315.869580] Node 0 [ 1315.870162] 0 [ 1315.886385] DMA32 free:18040kB min:36200kB low:45248kB high:54296kB active_anon:89208kB inactive_anon:100312kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2804kB bounce:0kB free_pcp:224kB local_pcp:104kB free_cma:0kB [ 1315.897562] 0 [ 1315.908387] lowmem_reserve[]: [ 1315.929971] 0 [ 1315.941757] 0 [ 1315.947212] 0 [ 1315.988931] 0 [ 1316.045626] 0 [ 1316.067274] Node 1 [ 1316.077145] 0 [ 1316.077755] Normal free:26768kB min:53696kB low:67120kB high:80544kB active_anon:736kB inactive_anon:24140kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:136kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1316.079793] 0 [ 1316.086874] lowmem_reserve[]: [ 1316.149676] 0 [ 1316.155098] Node 0 [ 1316.187364] 0 [ 1316.193714] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1316.199602] 0 [ 1316.228372] lowmem_reserve[]: [ 1316.239543] 0 [ 1316.264369] 0 0 0 0 0 [ 1316.270141] Node 1 Normal free:26768kB min:53696kB low:67120kB high:80544kB active_anon:736kB inactive_anon:24140kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:136kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1316.276607] 0 [ 1316.303821] lowmem_reserve[]: 0 0 0 0 0 [ 1316.309642] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 4*128kB (UE) 4*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10976kB [ 1316.328453] Node 0 DMA32: 1238*4kB (UME) 408*8kB (ME) 219*16kB (UME) 30*32kB (ME) 4*64kB (UM) 40*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18056kB [ 1316.336176] Node 0 [ 1316.346799] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1316.353894] DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 4*128kB (UE) 4*256kB (UE) 2*512kB (UE) 2*1024kB [ 1316.359859] Node 1 Normal: 96*4kB (ME) 54*8kB (ME) 46*16kB (ME) 20*32kB (ME) 12*64kB (ME) 4*128kB (UM) 3*256kB (ME) 0*512kB 0*1024kB 1*2048kB (U) 5*4096kB (U) = 26768kB [ 1316.381841] Bluetooth: hci1 command 0x040f tx timeout [ 1316.390078] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1316.405763] (UE) 3*2048kB (UM) 0*4096kB = 10976kB [ 1316.407596] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1316.410697] Node 0 [ 1316.419441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1316.419449] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1316.419453] 31539 total pagecache pages [ 1316.419464] 0 pages in swap cache [ 1316.419469] Swap cache stats: add 0, delete 0, find 0/0 [ 1316.419473] Free swap = 0kB [ 1316.419476] Total swap = 0kB [ 1316.419484] 2097051 pages RAM [ 1316.419487] 0 pages HighMem/MovableOnly [ 1316.419490] 363849 pages reserved [ 1316.419493] 0 pages cma reserved [ 1316.419500] Out of memory (oom_kill_allocating_task): Kill process 32246 (systemd-journal) score 0 or sacrifice child [ 1316.419532] Killed process 32246 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1772kB [ 1316.425024] oom_reaper: reaped process 32246 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1772kB [ 1316.441427] DMA32: [ 1316.484514] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1316.501904] Bluetooth: hci2 command 0x040f tx timeout [ 1316.513673] (null), order=0, oom_score_adj=0 [ 1316.527158] Bluetooth: hci4 command 0x040f tx timeout [ 1316.527805] syz-executor.1 cpuset= [ 1316.533084] systemd-journal: page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 1316.537387] Bluetooth: hci5 command 0x040f tx timeout [ 1316.549649] / mems_allowed=0-1 [ 1316.556834] CPU: 0 PID: 31276 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1316.564647] 1238*4kB [ 1316.564815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1316.564823] (UME) [ 1316.567216] Call Trace: [ 1316.576620] 408*8kB [ 1316.578813] dump_stack+0x1b2/0x281 [ 1316.581388] (ME) [ 1316.583682] dump_header+0x178/0x82f [ 1316.587281] 219*16kB [ 1316.589338] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1316.593056] (UME) [ 1316.595418] ? ___ratelimit+0x2cd/0x530 [ 1316.600513] 30*32kB [ 1316.602653] oom_kill_process.cold+0x10/0xa40 [ 1316.602673] out_of_memory+0xe3e/0x1190 [ 1316.602686] ? oom_killer_disable+0x1c0/0x1c0 [ 1316.606637] (ME) [ 1316.608953] ? mutex_trylock+0x152/0x1a0 [ 1316.613472] 4*64kB [ 1316.617401] __alloc_pages_nodemask+0x23e1/0x2720 [ 1316.621900] (UM) [ 1316.623956] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1316.627972] 40*128kB [ 1316.630209] alloc_pages_current+0x155/0x260 [ 1316.635042] (U) [ 1316.637060] filemap_fault+0x11a1/0x1ad0 [ 1316.641918] 0*256kB [ 1316.644329] ext4_filemap_fault+0x84/0xb0 [ 1316.648719] 0*512kB [ 1316.650684] __do_fault+0xfa/0x380 [ 1316.654767] 0*1024kB [ 1316.657045] __handle_mm_fault+0x2497/0x4620 [ 1316.661194] 0*2048kB [ 1316.663481] ? vm_insert_page+0x7c0/0x7c0 [ 1316.666998] 0*4096kB [ 1316.669402] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1316.673845] = 18056kB [ 1316.676196] ? nanosleep_copyout+0x100/0x100 [ 1316.680321] Node 0 [ 1316.682731] ? mark_held_locks+0xa6/0xf0 [ 1316.682743] handle_mm_fault+0x455/0x9c0 [ 1316.682757] __do_page_fault+0x549/0xad0 [ 1316.682768] ? spurious_fault+0x640/0x640 [ 1316.687158] Normal: [ 1316.689563] ? do_page_fault+0x60/0x500 [ 1316.693994] 0*4kB [ 1316.696169] ? page_fault+0x2f/0x50 [ 1316.700201] 0*8kB [ 1316.704256] page_fault+0x45/0x50 [ 1316.704267] RIP: 1406bb:0x6 [ 1316.704270] RSP: 0007:00007ffd5b4f3f5c EFLAGS: 00000032 [ 1316.706610] systemd-journal cpuset= [ 1316.708340] 0*16kB [ 1316.712725] / mems_allowed=0-1 [ 1316.712808] CPU: 0 PID: 32246 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1316.712814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1316.712817] Call Trace: [ 1316.712841] dump_stack+0x1b2/0x281 [ 1316.712855] warn_alloc.cold+0x96/0x1cc [ 1316.712869] ? zone_watermark_ok_safe+0x220/0x220 [ 1316.726525] 0*32kB [ 1316.727151] ? usleep_range+0x130/0x130 [ 1316.730611] 0*64kB [ 1316.733531] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1316.733544] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1316.733552] ? run_timer_softirq+0x5a0/0x5a0 [ 1316.733566] __alloc_pages_nodemask+0x2127/0x2720 [ 1316.733588] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1316.739050] 0*128kB [ 1316.742682] alloc_pages_current+0x155/0x260 [ 1316.742696] filemap_fault+0x11a1/0x1ad0 [ 1316.742715] ext4_filemap_fault+0x84/0xb0 [ 1316.744935] 0*256kB [ 1316.748120] __do_fault+0xfa/0x380 [ 1316.756128] 0*512kB [ 1316.765440] __handle_mm_fault+0x2497/0x4620 [ 1316.765450] ? vm_insert_page+0x7c0/0x7c0 [ 1316.765461] ? __fsnotify_inode_delete+0x20/0x20 [ 1316.765473] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1316.768050] 0*1024kB [ 1316.771697] ? mark_held_locks+0xa6/0xf0 [ 1316.771709] handle_mm_fault+0x455/0x9c0 [ 1316.771723] __do_page_fault+0x549/0xad0 [ 1316.771734] ? spurious_fault+0x640/0x640 [ 1316.775693] 0*2048kB [ 1316.780540] ? do_page_fault+0x60/0x500 [ 1316.782913] 0*4096kB [ 1316.786814] ? page_fault+0x2f/0x50 [ 1316.789027] = 0kB [ 1316.794128] page_fault+0x45/0x50 [ 1316.794135] RIP: 6bca5700: (null) [ 1316.794139] RSP: 0000:00007f850dc9c6c0 EFLAGS: 7ffe6bca5700 [ 1316.795556] Mem-Info: [ 1316.799175] Node 1 [ 1316.803775] active_anon:22363 inactive_anon:31113 isolated_anon:0 [ 1316.803775] active_file:16 inactive_file:17 isolated_file:0 [ 1316.803775] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1316.803775] slab_reclaimable:11720 slab_unreclaimable:106093 [ 1316.803775] mapped:52669 shmem:31506 pagetables:735 bounce:0 [ 1316.803775] free:13950 free_pcp:203 free_cma:0 [ 1316.819324] Normal: [ 1316.821015] Node 0 active_anon:88716kB inactive_anon:100312kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210676kB dirty:0kB writeback:0kB shmem:101672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1316.826874] 96*4kB [ 1316.828665] Node 1 active_anon:736kB inactive_anon:24140kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1316.833557] (ME) [ 1316.840228] Node 0 [ 1316.846477] 54*8kB [ 1316.850705] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1316.859622] (ME) [ 1316.865455] lowmem_reserve[]: [ 1316.872406] 46*16kB [ 1316.877043] 0 [ 1316.878820] (ME) [ 1316.887872] 2717 [ 1316.892367] 20*32kB [ 1316.895141] 2718 [ 1316.898725] (ME) [ 1316.912582] 2718 [ 1316.944987] Mem-Info: [ 1316.953724] 2718 [ 1316.975734] active_anon:22363 inactive_anon:31113 isolated_anon:0 [ 1316.975734] active_file:16 inactive_file:17 isolated_file:0 [ 1316.975734] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1316.975734] slab_reclaimable:11720 slab_unreclaimable:106093 [ 1316.975734] mapped:52669 shmem:31506 pagetables:735 bounce:0 [ 1316.975734] free:13950 free_pcp:203 free_cma:0 [ 1317.039040] 12*64kB [ 1317.051407] Node 0 [ 1317.054691] (ME) [ 1317.056721] DMA32 free:18056kB min:36200kB low:45248kB high:54296kB active_anon:88716kB inactive_anon:100312kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2804kB bounce:0kB free_pcp:716kB local_pcp:572kB free_cma:0kB [ 1317.058763] 4*128kB [ 1317.068891] lowmem_reserve[]: [ 1317.098960] (UM) [ 1317.109167] 0 [ 1317.133984] Node 0 active_anon:88648kB inactive_anon:100312kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):28kB mapped:210676kB dirty:0kB writeback:0kB shmem:101672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1317.140871] 0 [ 1317.141334] Node 1 active_anon:736kB inactive_anon:24140kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1317.170738] 0 [ 1317.171331] 3*256kB [ 1317.199836] 0 [ 1317.200113] Node 0 [ 1317.202423] 0 [ 1317.204222] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1317.206428] Node 0 [ 1317.208222] lowmem_reserve[]: [ 1317.235473] (ME) [ 1317.236367] 0 [ 1317.239458] 0*512kB [ 1317.241551] 2717 [ 1317.243378] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1317.245653] 2718 [ 1317.247697] lowmem_reserve[]: [ 1317.273783] 2718 [ 1317.277197] 0*1024kB [ 1317.278071] 2718 [ 1317.280057] 1*2048kB [ 1317.284529] (U) [ 1317.286920] Node 0 [ 1317.286923] 5*4096kB (U) [ 1317.288896] DMA32 free:18772kB min:36200kB low:45248kB high:54296kB active_anon:88648kB inactive_anon:100312kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2804kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1317.307891] = 26768kB [ 1317.322264] lowmem_reserve[]: 0 0 0 0 0 [ 1317.322294] Node 0 [ 1317.326422] 0 [ 1317.328692] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1317.330895] 0 0 [ 1317.332935] lowmem_reserve[]: [ 1317.360208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1317.360240] 0 [ 1317.363400] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1317.363407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1317.363413] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1317.363417] 31539 total pagecache pages [ 1317.363426] 0 pages in swap cache [ 1317.363434] Swap cache stats: add 0, delete 0, find 0/0 [ 1317.372393] 0 [ 1317.375527] Free swap = 0kB [ 1317.382905] 0 0 [ 1317.393912] Total swap = 0kB [ 1317.400816] 0 [ 1317.404549] 2097051 pages RAM [ 1317.408654] 0 [ 1317.415165] 0 pages HighMem/MovableOnly [ 1317.418279] 363849 pages reserved [ 1317.418285] 0 pages cma reserved [ 1317.420247] Node 1 [ 1317.432823] 0 [ 1317.441028] Normal free:26868kB min:53696kB low:67120kB high:80544kB active_anon:736kB inactive_anon:24140kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:136kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1317.494329] Node 1 Normal free:145288kB min:53696kB low:67120kB high:80544kB active_anon:736kB inactive_anon:24140kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:136kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1317.501031] lowmem_reserve[]: [ 1317.552364] lowmem_reserve[]: 0 0 0 0 0 [ 1317.559515] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 7*64kB (UE) 9*128kB (UE) 4*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11936kB [ 1317.571052] 0 0 0 0 0 [ 1317.578354] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 7*64kB (UE) 9*128kB (UE) 4*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11936kB [ 1317.641019] Node 0 DMA32: 1269*4kB (UME) 440*8kB (UME) 227*16kB (UME) 32*32kB (ME) 707*64kB (UM) 49*128kB (U) 5*256kB (U) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 67588kB [ 1317.681020] Node 0 DMA32: 1269*4kB (UME) 440*8kB (UME) 227*16kB (UME) 32*32kB (ME) 4249*64kB (UM) 211*128kB (U) 5*256kB (U) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 315012kB [ 1317.721017] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1317.741017] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1317.771012] Node 1 Normal: 96*4kB (ME) 55*8kB (UME) 47*16kB (UME) 21*32kB (UME) 622*64kB (UME) 202*128kB (UM) 110*256kB (UME) 113*512kB (U) 293*1024kB (U) 13*2048kB (U) 7*4096kB (U) = 509256kB [ 1317.792463] Node 1 Normal: 96*4kB (ME) 55*8kB (UME) 47*16kB (UME) 21*32kB (UME) 635*64kB (UME) 214*128kB (UM) 123*256kB (UME) 147*512kB (U) 350*1024kB (U) 17*2048kB (U) 7*4096kB (U) = 598920kB [ 1317.831025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1317.839914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1317.861054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1317.870035] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1317.879859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1317.901008] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1317.909906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1317.932089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1317.940743] 31539 total pagecache pages [ 1317.961026] 31539 total pagecache pages [ 1317.962626] 0 pages in swap cache [ 1317.965046] 0 pages in swap cache [ 1317.968526] Swap cache stats: add 0, delete 0, find 0/0 [ 1317.982044] Free swap = 0kB [ 1317.985276] Total swap = 0kB [ 1317.988395] 2097051 pages RAM [ 1318.001064] Swap cache stats: add 0, delete 0, find 0/0 [ 1318.011024] Free swap = 0kB [ 1318.011048] 0 pages HighMem/MovableOnly [ 1318.014059] Total swap = 0kB [ 1318.018033] 363849 pages reserved [ 1318.030303] 0 pages cma reserved [ 1318.033794] Out of memory (oom_kill_allocating_task): Kill process 31276 (syz-executor.1) score 0 or sacrifice child [ 1318.045521] 2097051 pages RAM [ 1318.045953] Killed process 31276 (syz-executor.1) total-vm:93120kB, anon-rss:104kB, file-rss:34012kB, shmem-rss:0kB [ 1318.048675] 0 pages HighMem/MovableOnly [ 1318.066026] oom_reaper: reaped process 31276 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1318.079454] 363849 pages reserved [ 1318.082998] 0 pages cma reserved [ 1318.086405] systemd-journal invoked oom-killer: gfp_mask=0x0(), nodemask=(null), order=0, oom_score_adj=0 [ 1318.121046] systemd-journal cpuset=/ mems_allowed=0-1 [ 1318.126332] CPU: 0 PID: 32246 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1318.134319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1318.143696] Call Trace: [ 1318.146334] dump_stack+0x1b2/0x281 [ 1318.149989] dump_header+0x178/0x82f [ 1318.153739] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1318.158886] ? ___ratelimit+0x2cd/0x530 [ 1318.162896] oom_kill_process.cold+0x10/0xa40 [ 1318.167438] out_of_memory+0xe3e/0x1190 [ 1318.171444] ? pagefault_out_of_memory+0xaa/0xd0 [ 1318.176233] ? oom_killer_disable+0x1c0/0x1c0 [ 1318.180799] ? mutex_trylock+0x152/0x1a0 [ 1318.184906] ? pagefault_out_of_memory+0xaa/0xd0 [ 1318.189710] pagefault_out_of_memory+0xbb/0xd0 [ 1318.194324] ? out_of_memory+0x1190/0x1190 [ 1318.198588] ? lock_downgrade+0x740/0x740 [ 1318.202775] mm_fault_error+0xad/0x2c0 [ 1318.206696] __do_page_fault+0x93c/0xad0 [ 1318.210789] ? spurious_fault+0x640/0x640 [ 1318.215273] ? do_page_fault+0x60/0x500 [ 1318.219322] ? page_fault+0x2f/0x50 [ 1318.223013] page_fault+0x45/0x50 [ 1318.226502] RIP: 6bca5700: (null) [ 1318.230762] RSP: 0000:00007f850dc9c6c0 EFLAGS: 7ffe6bca5700 [ 1318.242855] Mem-Info: [ 1318.253136] active_anon:22346 inactive_anon:31113 isolated_anon:0 [ 1318.253136] active_file:17 inactive_file:641 isolated_file:0 [ 1318.253136] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1318.253136] slab_reclaimable:11717 slab_unreclaimable:106078 [ 1318.253136] mapped:53069 shmem:31506 pagetables:735 bounce:0 [ 1318.253136] free:149433 free_pcp:387 free_cma:0 [ 1318.290650] Node 0 active_anon:88648kB inactive_anon:100312kB active_file:28kB inactive_file:4328kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213476kB dirty:0kB writeback:0kB shmem:101672kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1318.322330] Node 1 active_anon:736kB inactive_anon:24140kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1318.333051] IPVS: ftp: loaded support on port[0] = 21 [ 1318.353278] Node 0 DMA free:11440kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1318.423543] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1318.430807] Node 0 DMA32 free:151360kB min:36200kB low:45248kB high:54296kB active_anon:88648kB inactive_anon:100312kB active_file:28kB inactive_file:6828kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2804kB bounce:0kB free_pcp:360kB local_pcp:136kB free_cma:0kB [ 1318.461682] Bluetooth: hci1 command 0x0419 tx timeout [ 1318.531282] Bluetooth: hci2 command 0x0419 tx timeout [ 1318.548936] lowmem_reserve[]: 0 0 0 0 0 [ 1318.574363] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1318.611914] Bluetooth: hci5 command 0x0419 tx timeout [ 1318.617381] Bluetooth: hci4 command 0x0419 tx timeout [ 1318.670713] IPVS: ftp: loaded support on port[0] = 21 [ 1318.680590] chnl_net:caif_netlink_parms(): no params data found [ 1318.713429] lowmem_reserve[]: 0 0 0 0 0 [ 1318.717469] Node 1 Normal free:38112kB min:53696kB low:67120kB high:80544kB active_anon:736kB inactive_anon:24140kB active_file:1044kB inactive_file:856kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:136kB bounce:0kB free_pcp:628kB local_pcp:0kB free_cma:0kB [ 1318.801137] lowmem_reserve[]: 0 0 0 0 0 [ 1318.805179] Node 0 DMA: 1*4kB (M) 5*8kB (UME) 4*16kB (UME) 3*32kB (UME) 3*64kB (UME) 13*128kB (UME) 5*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 2*2048kB (UM) 0*4096kB = 11020kB [ 1318.823366] Node 0 DMA32: 1205*4kB (UME) 577*8kB (UME) 219*16kB (UME) 42*32kB (UME) 2*64kB (ME) 1*128kB (U) 0*256kB 7*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18124kB [ 1318.850282] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1318.882436] Node 1 Normal: 1*4kB (U) 1*8kB (E) 2*16kB (ME) 7*32kB (UME) 1*64kB (E) 1*128kB (M) 4*256kB (UME) 43*512kB (U) 344*1024kB (U) 3*2048kB (U) 0*4096kB = 381900kB [ 1318.929780] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1318.978279] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1319.023647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1319.045633] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1319.070477] 33459 total pagecache pages [ 1319.083465] 0 pages in swap cache [ 1319.087142] Swap cache stats: add 0, delete 0, find 0/0 [ 1319.131276] Free swap = 0kB [ 1319.134355] Total swap = 0kB [ 1319.137370] 2097051 pages RAM [ 1319.140465] 0 pages HighMem/MovableOnly [ 1319.162475] 363849 pages reserved [ 1319.165976] 0 pages cma reserved [ 1319.169341] Out of memory (oom_kill_allocating_task): Kill process 32246 (systemd-journal) score 0 or sacrifice child [ 1319.216349] chnl_net:caif_netlink_parms(): no params data found [ 1319.225393] Killed process 32246 (systemd-journal) total-vm:46096kB, anon-rss:0kB, file-rss:0kB, shmem-rss:1772kB [ 1319.249447] IPVS: ftp: loaded support on port[0] = 21 [ 1319.296739] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1319.344716] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1319.370586] systemd[1]: Stopped Journal Service. [ 1319.424915] systemd[1]: Starting Journal Service... [ 1319.439610] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.448940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.467739] device bridge_slave_0 entered promiscuous mode [ 1319.542887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.549274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.566039] device bridge_slave_1 entered promiscuous mode [ 1319.585460] chnl_net:caif_netlink_parms(): no params data found [ 1319.670337] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1319.689296] systemd-journald[32602]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1319.726037] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1319.760786] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.767405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.792134] device bridge_slave_0 entered promiscuous mode [ 1319.816235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.831142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.838504] device bridge_slave_1 entered promiscuous mode [ 1320.002395] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1320.009730] team0: Port device team_slave_0 added [ 1320.076964] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1320.085190] team0: Port device team_slave_1 added [ 1320.099077] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1320.124543] chnl_net:caif_netlink_parms(): no params data found [ 1320.173211] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1320.204494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1320.210777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.271071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1320.308848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1320.321464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.395592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1320.436097] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1320.453768] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1320.471727] team0: Port device team_slave_0 added [ 1320.489117] systemd[1]: Started Journal Service. 08:24:09 executing program 0: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(0x0, 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1320.521585] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1320.538542] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1320.559597] team0: Port device team_slave_1 added [ 1320.577744] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 08:24:10 executing program 1: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(0x0, 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1320.654787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.666337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.681629] device bridge_slave_0 entered promiscuous mode [ 1320.721964] device hsr_slave_0 entered promiscuous mode [ 1320.737720] device hsr_slave_1 entered promiscuous mode [ 1320.757178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.764969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.774325] device bridge_slave_1 entered promiscuous mode [ 1320.781384] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1320.791859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1320.798121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.832148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1320.864459] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1320.873782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1320.880566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.911492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1320.948257] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1320.959051] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1320.968985] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1320.999037] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1321.156038] device hsr_slave_0 entered promiscuous mode [ 1321.177612] device hsr_slave_1 entered promiscuous mode [ 1321.201328] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1321.217941] team0: Port device team_slave_0 added [ 1321.249850] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1321.264438] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1321.279054] team0: Port device team_slave_1 added [ 1321.285351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.296540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.305836] device bridge_slave_0 entered promiscuous mode [ 1321.324278] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1321.360772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.368101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.376910] device bridge_slave_1 entered promiscuous mode [ 1321.439493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1321.450567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1321.488411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1321.567839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1321.577710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1321.641030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1321.662120] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1321.670752] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1321.701755] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1321.716530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1321.726680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1321.750507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1321.767726] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1321.802963] device bridge_slave_1 left promiscuous mode [ 1321.808516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.816957] device bridge_slave_0 left promiscuous mode [ 1321.832406] bridge0: port 1(bridge_slave_0) entered disabled state 08:24:11 executing program 0: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(0x0, 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1321.863267] device veth1_macvtap left promiscuous mode [ 1321.868603] device veth0_macvtap left promiscuous mode [ 1321.881178] device veth1_vlan left promiscuous mode [ 1321.886257] device veth0_vlan left promiscuous mode [ 1322.058991] device hsr_slave_1 left promiscuous mode [ 1322.069486] device hsr_slave_0 left promiscuous mode [ 1322.086175] team0 (unregistering): Port device team_slave_1 removed [ 1322.098288] team0 (unregistering): Port device team_slave_0 removed [ 1322.110377] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1322.122988] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1322.157395] bond0 (unregistering): Released all slaves [ 1322.173363] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1322.190213] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1322.306041] device hsr_slave_0 entered promiscuous mode [ 1322.317839] device hsr_slave_1 entered promiscuous mode [ 1322.335457] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1322.397012] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1322.432746] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1322.440000] team0: Port device team_slave_0 added [ 1322.471632] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1322.489682] team0: Port device team_slave_1 added [ 1322.504846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1322.590654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1322.605668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1322.662636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1322.685644] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1322.715323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1322.731771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1322.779489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1322.814071] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1322.833087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1322.840162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1322.858631] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1322.872148] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1322.882253] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1322.888343] 8021q: adding VLAN 0 to HW filter on device team0 [ 1322.931463] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1322.952717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1322.971339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1322.979219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1323.001840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.008232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1323.031625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 08:24:12 executing program 0: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1323.077319] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1323.107451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1323.118893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1323.151639] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1323.159475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.165936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1323.206724] device hsr_slave_0 entered promiscuous mode [ 1323.222323] device hsr_slave_1 entered promiscuous mode [ 1323.237041] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1323.253053] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1323.276479] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1323.283704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1323.315013] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1323.327924] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1323.330205] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1323.334098] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1323.336494] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1323.336501] 8021q: adding VLAN 0 to HW filter on device team0 [ 1323.339199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1323.339780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1323.340275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1323.340763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1323.341183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1323.343188] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1323.346961] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1323.348557] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1323.350014] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1323.367325] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1323.396847] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1323.399156] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1323.401800] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1323.401888] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1323.401895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1323.402621] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1323.436786] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1323.439096] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1323.441826] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1323.445573] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1323.447706] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1323.463716] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1323.477831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1323.477840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1323.478651] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1323.496817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1323.504363] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1323.514401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1323.536085] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1323.539007] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1323.586015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1323.587217] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1323.773638] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1323.783566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1323.809207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1323.836958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1323.861385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1323.885912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1323.904414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1323.921779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1323.938953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1323.955803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.962364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1323.969477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1323.979476] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1323.995479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.002002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1324.040222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1324.065103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1324.082338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1324.102245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1324.122779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1324.148454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1324.169711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1324.189888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1324.209901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1324.228499] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1324.246564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1324.266133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1324.282222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1324.297258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1324.304205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1324.312516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1324.333022] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1324.339134] 8021q: adding VLAN 0 to HW filter on device team0 [ 1324.348294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1324.357436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1324.369121] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1324.393722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1324.422943] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1324.437933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1324.448598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1324.463573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.470340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1324.485177] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1324.501734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1324.512290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1324.532724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1324.549822] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.556296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1324.570917] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1324.581943] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1324.591414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1324.603464] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1324.643593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1324.663667] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1324.688895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1324.704496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1324.739823] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1324.751813] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1324.760168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1324.797546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1324.847282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1324.859268] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1324.873466] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1324.891198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1324.899383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1324.926916] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1324.936406] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1324.961925] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1324.969358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1324.995289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1325.008974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1325.028248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1325.039101] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready 08:24:14 executing program 0: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1325.063401] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1325.069489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1325.099130] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1325.107617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1325.121590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1325.140680] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1325.147135] 8021q: adding VLAN 0 to HW filter on device team0 [ 1325.168245] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1325.180864] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1325.196465] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1325.209875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1325.213904] IPVS: ftp: loaded support on port[0] = 21 [ 1325.222519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1325.239648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1325.258491] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1325.269136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.275609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1325.290485] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1325.312929] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1325.326340] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1325.334363] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1325.343688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1325.355489] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1325.363616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1325.380407] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1325.394939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1325.417551] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1325.435384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1325.449358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1325.468189] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.474702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1325.489128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1325.498881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1325.513437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1325.531816] device veth0_vlan entered promiscuous mode [ 1325.547943] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1325.555729] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1325.573028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1325.602790] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1325.611920] device veth1_vlan entered promiscuous mode [ 1325.632302] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1325.648210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1325.661472] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1325.674190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1325.701796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1325.709824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1325.731788] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1325.746174] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1325.762801] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1325.783186] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1325.807444] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1325.845717] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1325.862648] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1325.877253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1325.903300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1325.950303] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1325.973448] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1326.007156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1326.018572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1326.040043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1326.061192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1326.071655] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1326.080125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1326.093659] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1326.099869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1326.114706] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1326.127275] device veth0_vlan entered promiscuous mode [ 1326.135836] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1326.144320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1326.152148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1326.160122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1326.180626] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1326.196271] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1326.205843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1326.211053] Bluetooth: hci3 command 0x0409 tx timeout [ 1326.215403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1326.248805] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1326.257821] device veth0_macvtap entered promiscuous mode [ 1326.269693] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1326.280120] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1326.357807] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1326.369679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1326.379550] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1326.391455] device veth1_vlan entered promiscuous mode [ 1326.402031] device veth1_macvtap entered promiscuous mode [ 1326.415903] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1326.425558] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1326.500611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1326.509508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1326.525077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1326.553775] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1326.569599] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1326.600153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1326.612052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.629482] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1326.641423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1326.650682] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1326.662632] chnl_net:caif_netlink_parms(): no params data found [ 1326.683970] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1326.695906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1326.713644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1326.728955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1326.740957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1326.756595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.768077] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1326.779698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1326.793463] device veth0_macvtap entered promiscuous mode [ 1326.799841] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1326.819138] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1326.828733] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1326.842712] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1326.849295] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1326.870820] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1326.885969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1326.915274] device veth1_macvtap entered promiscuous mode [ 1326.927781] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1326.940623] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1326.965396] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1326.978725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1326.990443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1327.004705] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1327.016648] device veth0_vlan entered promiscuous mode [ 1327.035162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1327.042771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1327.059293] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1327.077891] device veth1_vlan entered promiscuous mode [ 1327.085473] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1327.097713] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1327.110309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1327.121909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.131762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1327.141536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.184983] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1327.192080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1327.206381] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1327.214233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1327.228456] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1327.236644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1327.244722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1327.257211] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1327.272707] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1327.280242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1327.289364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1327.304776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1327.315122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.325289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1327.335709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.345914] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1327.353224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1327.363935] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1327.371934] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1327.379731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1327.389012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1327.403629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1327.434088] device veth0_macvtap entered promiscuous mode [ 1327.440432] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1327.476072] device veth1_macvtap entered promiscuous mode [ 1327.487649] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1327.497275] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.504440] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.512904] device bridge_slave_0 entered promiscuous mode [ 1327.520679] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1327.529553] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1327.536594] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1327.547141] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1327.555425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.563156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.570497] device bridge_slave_1 entered promiscuous mode [ 1327.580759] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1327.589766] device veth0_vlan entered promiscuous mode [ 1327.595617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1327.604181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1327.611924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1327.649178] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1327.660612] device veth1_vlan entered promiscuous mode [ 1327.666988] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1327.674161] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1327.681275] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1327.688349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1327.698312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1327.708109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.717462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1327.728302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.737684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1327.747510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.757849] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1327.764963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1327.780852] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1327.797443] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1327.804828] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1327.822483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1327.830438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1327.840207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1327.854786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.864416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1327.878089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.887393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1327.904117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.917211] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1327.925955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1327.956281] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1327.969379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1327.980071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1328.017276] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1328.028063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1328.040008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1328.050632] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1328.063820] team0: Port device team_slave_0 added [ 1328.069989] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1328.090013] team0: Port device team_slave_1 added [ 1328.112043] device veth0_macvtap entered promiscuous mode [ 1328.118422] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1328.167410] device veth1_macvtap entered promiscuous mode [ 1328.175063] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1328.191684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.198175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.224870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.239101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1328.249813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.276315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1328.289190] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1328.297212] Bluetooth: hci3 command 0x041b tx timeout [ 1328.307177] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1328.320109] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1328.334949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1328.345278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.355606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1328.366082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.376279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1328.389902] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.399694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1328.413475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.424715] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1328.435828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1328.445428] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1328.478692] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1328.489692] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1328.509596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1328.521789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1328.532267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1328.545742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.557104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1328.569810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.580582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1328.593787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.603448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1328.618418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.629362] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1328.639911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1328.656795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1328.667463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1328.687565] device hsr_slave_0 entered promiscuous mode [ 1328.703161] device hsr_slave_1 entered promiscuous mode [ 1328.730919] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1328.748688] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1328.940871] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1329.063080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.089295] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1329.119076] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1329.133848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1329.143224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1329.162804] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1329.168912] 8021q: adding VLAN 0 to HW filter on device team0 [ 1329.205719] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1329.227658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1329.238570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1329.256956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.263499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1329.291699] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1329.315216] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1329.325324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1329.334543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1329.351396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1329.362764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.369283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1329.387035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1329.407045] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1329.419615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1329.438244] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1329.446587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1329.460154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1329.477657] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1329.485685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1329.498315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1329.509403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1329.530391] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1329.544712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1329.558597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1329.574760] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1329.587196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1329.605429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1329.616121] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1329.627846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1329.679821] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1329.693376] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1329.699826] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1329.713723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1329.723241] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1329.736303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1329.741939] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1329.747595] CPU: 0 PID: 972 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1329.755305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1329.764660] Call Trace: [ 1329.767257] dump_stack+0x1b2/0x281 [ 1329.770892] warn_alloc.cold+0x96/0x1cc [ 1329.774866] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1329.779887] ? zone_watermark_ok_safe+0x220/0x220 [ 1329.784769] __alloc_pages_nodemask+0x2127/0x2720 [ 1329.789627] ? __schedule+0x893/0x1de0 [ 1329.793533] ? lock_acquire+0x170/0x3f0 [ 1329.797523] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1329.802399] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1329.807859] ? __mutex_unlock_slowpath+0x75/0x770 [ 1329.812715] ? retint_kernel+0x2d/0x2d [ 1329.816695] alloc_pages_current+0x155/0x260 [ 1329.821116] ion_page_pool_alloc+0x118/0x1b0 [ 1329.825534] ion_system_heap_allocate+0x133/0x8c0 [ 1329.830397] ? ion_alloc+0x187/0x810 [ 1329.834200] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1329.840190] ? ion_system_contig_heap_create+0x130/0x130 [ 1329.845681] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1329.850711] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1329.855557] ion_alloc+0x204/0x810 [ 1329.859113] ? ion_dma_buf_release+0x40/0x40 [ 1329.863528] ? __might_fault+0x177/0x1b0 [ 1329.867599] ion_ioctl+0xea/0x1f0 [ 1329.871086] ? ion_query_heaps+0x360/0x360 [ 1329.875334] ? ion_query_heaps+0x360/0x360 [ 1329.879579] do_vfs_ioctl+0x75a/0xff0 [ 1329.883386] ? ioctl_preallocate+0x1a0/0x1a0 [ 1329.887796] ? lock_downgrade+0x740/0x740 [ 1329.891967] ? __fget+0x225/0x360 [ 1329.895420] ? do_vfs_ioctl+0xff0/0xff0 [ 1329.899579] ? security_file_ioctl+0x83/0xb0 [ 1329.904870] SyS_ioctl+0x7f/0xb0 [ 1329.908246] ? do_vfs_ioctl+0xff0/0xff0 [ 1329.912247] do_syscall_64+0x1d5/0x640 [ 1329.916143] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1329.921343] RIP: 0033:0x4665f9 [ 1329.924541] RSP: 002b:00007ff6cdf47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1329.932280] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1329.939643] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1329.946922] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1329.954202] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1329.961498] R13: 00007ffe714d338f R14: 00007ff6cdf47300 R15: 0000000000022000 [ 1329.991177] Mem-Info: [ 1329.993769] active_anon:22933 inactive_anon:33146 isolated_anon:0 [ 1329.993769] active_file:1369 inactive_file:5456 isolated_file:12 [ 1329.993769] unevictable:0 dirty:8 writeback:0 unstable:0 [ 1329.993769] slab_reclaimable:11945 slab_unreclaimable:113722 [ 1329.993769] mapped:56998 shmem:33555 pagetables:701 bounce:0 [ 1329.993769] free:396070 free_pcp:0 free_cma:0 [ 1330.034106] Node 0 active_anon:91256kB inactive_anon:108444kB active_file:5440kB inactive_file:21816kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:228064kB dirty:28kB writeback:0kB shmem:109868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1330.068858] Node 1 active_anon:476kB inactive_anon:24140kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:24352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1330.102933] Node 0 DMA free:11112kB min:204kB low:252kB high:300kB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1330.136840] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1330.147388] Node 0 DMA32 free:528012kB min:36200kB low:45248kB high:54296kB active_anon:89088kB inactive_anon:108444kB active_file:5576kB inactive_file:21772kB unevictable:0kB writepending:12kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2836kB bounce:0kB free_pcp:308kB local_pcp:308kB free_cma:0kB [ 1330.178688] lowmem_reserve[]: 0 0 0 0 0 [ 1330.183666] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1330.215392] lowmem_reserve[]: 0 0 0 0 0 [ 1330.222424] Node 1 Normal free:1174000kB min:53696kB low:67120kB high:80544kB active_anon:468kB inactive_anon:24136kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:32kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1330.260144] lowmem_reserve[]: 0 0 0 0 0 [ 1330.265566] Node 0 DMA: 10*4kB (U) 16*8kB (UE) 22*16kB (UE) 11*32kB (UE) 2*64kB (UE) 5*128kB (UE) 5*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 2*2048kB (UM) 0*4096kB = 11112kB [ 1330.286111] Node 0 DMA32: 60*4kB (U) 358*8kB (UEH) 14137*16kB (UEH) 9254*32kB (UEH) 3*64kB (H) 3*128kB (H) 4*256kB (H) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 527024kB [ 1330.306690] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1330.319929] Node 1 Normal: 346*4kB (UME) 645*8kB (UME) 522*16kB (UME) 298*32kB (UME) 20*64kB (UME) 5*128kB (UM) 3*256kB (ME) 0*512kB 259*1024kB (U) 380*2048kB (U) 38*4096kB (U) = 1226224kB [ 1330.346896] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1330.359649] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1330.369656] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1330.381905] Bluetooth: hci3 command 0x040f tx timeout [ 1330.390452] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1330.399492] 40336 total pagecache pages [ 1330.407496] 0 pages in swap cache [ 1330.414488] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1330.425903] Swap cache stats: add 0, delete 0, find 0/0 [ 1330.431499] Free swap = 0kB [ 1330.434561] Total swap = 0kB [ 1330.437594] 2097051 pages RAM [ 1330.440699] 0 pages HighMem/MovableOnly [ 1330.452320] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1330.459582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1330.472233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1330.480279] 363849 pages reserved [ 1330.495131] 0 pages cma reserved [ 1330.599088] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1330.625839] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1330.652909] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1330.676196] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1330.689808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1330.702771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1330.720247] device veth0_vlan entered promiscuous mode [ 1330.732747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1330.743457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1330.761649] device veth1_vlan entered promiscuous mode [ 1330.768454] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1330.784519] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1330.799809] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1330.812401] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1330.819377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1330.829190] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1330.838876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1330.849927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1330.866398] device veth0_macvtap entered promiscuous mode [ 1330.873814] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1330.884602] device veth1_macvtap entered promiscuous mode [ 1330.892101] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1330.904541] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1330.915385] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1330.926044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1330.938563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.948721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1330.959143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.968935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1330.979660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1330.989631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1331.000017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.010375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1331.033974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.055709] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1331.070634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1331.086872] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1331.096001] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1331.105536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1331.114163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1331.125230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1331.136519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.146764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1331.158392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.168775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1331.179696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.189406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1331.199713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.210108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1331.231080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1331.255722] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1331.273054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1331.295427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1331.305928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1332.451276] Bluetooth: hci3 command 0x0419 tx timeout [ 1332.948711] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1332.965387] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1332.970622] CPU: 1 PID: 1035 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1332.978432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1332.987814] Call Trace: [ 1332.990431] dump_stack+0x1b2/0x281 [ 1332.994058] warn_alloc.cold+0x96/0x1cc [ 1332.998027] ? zone_watermark_ok_safe+0x220/0x220 [ 1333.002897] __alloc_pages_nodemask+0x2127/0x2720 [ 1333.007744] ? lock_acquire+0x170/0x3f0 [ 1333.011722] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1333.016578] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1333.022067] ? __mutex_unlock_slowpath+0x75/0x770 [ 1333.026919] alloc_pages_current+0x155/0x260 [ 1333.031341] ion_page_pool_alloc+0x118/0x1b0 [ 1333.035745] ion_system_heap_allocate+0x133/0x8c0 [ 1333.040587] ? ion_alloc+0x187/0x810 [ 1333.044313] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1333.049783] ? ion_system_contig_heap_create+0x130/0x130 [ 1333.055236] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1333.060254] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1333.065112] ion_alloc+0x204/0x810 [ 1333.068678] ? ion_dma_buf_release+0x40/0x40 [ 1333.073085] ? __might_fault+0x177/0x1b0 [ 1333.077146] ion_ioctl+0xea/0x1f0 [ 1333.080607] ? ion_query_heaps+0x360/0x360 [ 1333.084837] ? ion_query_heaps+0x360/0x360 [ 1333.089089] do_vfs_ioctl+0x75a/0xff0 [ 1333.092911] ? ioctl_preallocate+0x1a0/0x1a0 [ 1333.097314] ? lock_downgrade+0x740/0x740 [ 1333.101465] ? __fget+0x225/0x360 [ 1333.104930] ? do_vfs_ioctl+0xff0/0xff0 [ 1333.108919] ? security_file_ioctl+0x83/0xb0 [ 1333.113324] SyS_ioctl+0x7f/0xb0 [ 1333.116689] ? do_vfs_ioctl+0xff0/0xff0 [ 1333.120673] do_syscall_64+0x1d5/0x640 [ 1333.124563] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1333.129747] RIP: 0033:0x4665f9 [ 1333.132927] RSP: 002b:00007efdf923c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1333.141094] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1333.148365] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1333.155651] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1333.162935] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1333.170208] R13: 00007fff68d20daf R14: 00007efdf923c300 R15: 0000000000022000 [ 1333.192137] Mem-Info: [ 1333.195788] active_anon:22433 inactive_anon:33145 isolated_anon:0 [ 1333.195788] active_file:685 inactive_file:684 isolated_file:1 [ 1333.195788] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1333.195788] slab_reclaimable:11943 slab_unreclaimable:113092 [ 1333.195788] mapped:53968 shmem:33554 pagetables:718 bounce:0 [ 1333.195788] free:25792 free_pcp:72 free_cma:0 [ 1333.235119] Node 0 active_anon:89068kB inactive_anon:108444kB active_file:2728kB inactive_file:2824kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:215972kB dirty:0kB writeback:0kB shmem:109868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1333.274037] Node 1 active_anon:664kB inactive_anon:24136kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1333.306358] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1333.347491] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1333.360894] Node 0 DMA32 free:58060kB min:36200kB low:45248kB high:54296kB active_anon:89068kB inactive_anon:108444kB active_file:3132kB inactive_file:3632kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2732kB bounce:0kB free_pcp:452kB local_pcp:264kB free_cma:0kB [ 1333.404358] lowmem_reserve[]: 0 0 0 0 0 [ 1333.408524] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1333.442514] lowmem_reserve[]: 0 0 0 0 0 [ 1333.446703] Node 1 Normal free:166880kB min:53696kB low:67120kB high:80544kB active_anon:664kB inactive_anon:24136kB active_file:112kB inactive_file:312kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:140kB bounce:0kB free_pcp:232kB local_pcp:0kB free_cma:0kB [ 1333.482370] lowmem_reserve[]: 0 0 0 0 0 [ 1333.486690] Node 0 DMA: 1*4kB (U) 1*8kB (E) 2*16kB (UE) 2*32kB (UE) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11052kB 08:24:22 executing program 2: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:24:22 executing program 3: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:24:22 executing program 0: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:24:23 executing program 4: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:24:23 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1333.509729] Node 0 DMA32: 496*4kB (E) 61*8kB (EH) 246*16kB (UMEH) 80*32kB (UMEH) 3120*64kB (UMEH) 1874*128kB (UMH) 375*256kB (UMH) 17*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 555272kB [ 1333.532639] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1333.547494] Node 1 Normal: 2*4kB (E) 3*8kB (ME) 24*16kB (ME) 17*32kB (ME) 200*64kB (UME) 147*128kB (UM) 107*256kB (UME) 76*512kB (U) 81*1024kB (U) 17*2048kB (U) 16*4096kB (U) = 282176kB [ 1333.573684] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1333.587707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1333.598904] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1333.638675] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1333.682287] 36502 total pagecache pages [ 1333.692883] 0 pages in swap cache [ 1333.719812] Swap cache stats: add 0, delete 0, find 0/0 [ 1333.751949] Free swap = 0kB [ 1333.768082] Total swap = 0kB [ 1333.778015] 2097051 pages RAM [ 1333.793566] 0 pages HighMem/MovableOnly [ 1333.807656] 363849 pages reserved [ 1333.827012] 0 pages cma reserved [ 1333.915458] syz-executor.4: [ 1333.915463] syz-executor.2: page allocation failure: order:4 [ 1333.918903] syz-executor.0: [ 1333.918906] syz-executor.3: page allocation failure: order:4 [ 1333.927926] syz-executor.5: [ 1333.932394] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1333.942893] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1333.951049] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1333.958359] page allocation failure: order:4 [ 1333.967201] (null) [ 1333.967327] page allocation failure: order:4 [ 1333.977207] (null) [ 1333.978050] syz-executor.4 cpuset= [ 1333.984268] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1333.988981] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1333.993321] syz-executor.3 cpuset= [ 1333.998405] syz-executor.2 cpuset= [ 1334.007463] (null) [ 1334.009245] / [ 1334.015562] syz-executor.5 cpuset= [ 1334.018462] (null) [ 1334.024427] / mems_allowed=0-1 [ 1334.025508] mems_allowed=0-1 [ 1334.027692] / mems_allowed=0-1 [ 1334.036899] CPU: 0 PID: 1040 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1334.038483] syz-executor.0 cpuset= [ 1334.044737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1334.044742] Call Trace: [ 1334.044765] dump_stack+0x1b2/0x281 [ 1334.044779] warn_alloc.cold+0x96/0x1cc [ 1334.044790] ? zone_watermark_ok_safe+0x220/0x220 [ 1334.044813] __alloc_pages_nodemask+0x2127/0x2720 [ 1334.044828] ? _raw_spin_unlock_irq+0x24/0x80 [ 1334.064827] / [ 1334.067856] ? lock_acquire+0x170/0x3f0 [ 1334.087816] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1334.092675] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1334.097948] mems_allowed=0-1 [ 1334.098160] ? __mutex_unlock_slowpath+0x75/0x770 [ 1334.106099] alloc_pages_current+0x155/0x260 [ 1334.110518] ion_page_pool_alloc+0x118/0x1b0 [ 1334.114955] ion_system_heap_allocate+0x133/0x8c0 [ 1334.119823] ? ion_alloc+0x187/0x810 [ 1334.123549] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1334.129006] ? ion_system_contig_heap_create+0x130/0x130 [ 1334.134455] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1334.139472] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1334.144311] ion_alloc+0x204/0x810 [ 1334.147876] ? ion_dma_buf_release+0x40/0x40 [ 1334.152410] ? __might_fault+0x177/0x1b0 [ 1334.156470] ion_ioctl+0xea/0x1f0 [ 1334.159917] ? ion_query_heaps+0x360/0x360 [ 1334.164149] ? ion_query_heaps+0x360/0x360 [ 1334.168385] do_vfs_ioctl+0x75a/0xff0 [ 1334.172208] ? ioctl_preallocate+0x1a0/0x1a0 [ 1334.176648] ? lock_downgrade+0x740/0x740 [ 1334.180827] ? __fget+0x225/0x360 [ 1334.184284] ? do_vfs_ioctl+0xff0/0xff0 [ 1334.188260] ? security_file_ioctl+0x83/0xb0 [ 1334.192666] SyS_ioctl+0x7f/0xb0 [ 1334.196050] ? do_vfs_ioctl+0xff0/0xff0 [ 1334.200026] do_syscall_64+0x1d5/0x640 [ 1334.203917] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1334.209101] RIP: 0033:0x4665f9 [ 1334.212301] RSP: 002b:00007ff6cdf47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1334.220011] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1334.227287] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1334.234561] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1334.241850] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1334.249129] R13: 00007ffe714d338f R14: 00007ff6cdf47300 R15: 0000000000022000 [ 1334.256506] CPU: 1 PID: 1044 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1334.264312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1334.273672] Call Trace: [ 1334.274196] / [ 1334.276265] dump_stack+0x1b2/0x281 [ 1334.281623] warn_alloc.cold+0x96/0x1cc [ 1334.283371] mems_allowed=0-1 [ 1334.285622] ? zone_watermark_ok_safe+0x220/0x220 [ 1334.285649] __alloc_pages_nodemask+0x2127/0x2720 [ 1334.285667] ? lock_acquire+0x170/0x3f0 [ 1334.285683] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1334.285700] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1334.312783] ? __mutex_unlock_slowpath+0x75/0x770 [ 1334.317760] alloc_pages_current+0x155/0x260 [ 1334.322178] ion_page_pool_alloc+0x118/0x1b0 [ 1334.326602] ion_system_heap_allocate+0x133/0x8c0 [ 1334.331456] ? ion_alloc+0x187/0x810 [ 1334.335175] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1334.340637] ? ion_system_contig_heap_create+0x130/0x130 [ 1334.346100] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1334.351128] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1334.355985] ion_alloc+0x204/0x810 [ 1334.359648] ? ion_dma_buf_release+0x40/0x40 [ 1334.364072] ? __might_fault+0x177/0x1b0 [ 1334.368165] ion_ioctl+0xea/0x1f0 [ 1334.371621] ? ion_query_heaps+0x360/0x360 [ 1334.375864] ? ion_query_heaps+0x360/0x360 [ 1334.380103] do_vfs_ioctl+0x75a/0xff0 [ 1334.383922] ? ioctl_preallocate+0x1a0/0x1a0 [ 1334.388335] ? lock_downgrade+0x740/0x740 [ 1334.392512] ? __fget+0x225/0x360 [ 1334.395998] ? do_vfs_ioctl+0xff0/0xff0 [ 1334.400507] ? security_file_ioctl+0x83/0xb0 [ 1334.404918] SyS_ioctl+0x7f/0xb0 [ 1334.408286] ? do_vfs_ioctl+0xff0/0xff0 [ 1334.412295] do_syscall_64+0x1d5/0x640 [ 1334.416226] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1334.421442] RIP: 0033:0x4665f9 [ 1334.424650] RSP: 002b:00007f56be175188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1334.432360] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1334.439986] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1334.447270] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1334.454554] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1334.461839] R13: 00007fffaba42f8f R14: 00007f56be175300 R15: 0000000000022000 [ 1334.477832] CPU: 0 PID: 1045 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1334.485748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1334.495220] Call Trace: [ 1334.497814] dump_stack+0x1b2/0x281 [ 1334.501464] warn_alloc.cold+0x96/0x1cc [ 1334.505465] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1334.510490] ? zone_watermark_ok_safe+0x220/0x220 [ 1334.515363] __alloc_pages_nodemask+0x2127/0x2720 [ 1334.520318] ? _raw_spin_unlock_irq+0x24/0x80 [ 1334.524837] ? lock_acquire+0x170/0x3f0 [ 1334.528813] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1334.533667] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1334.539133] ? __mutex_unlock_slowpath+0x75/0x770 [ 1334.543985] alloc_pages_current+0x155/0x260 [ 1334.548396] ion_page_pool_alloc+0x118/0x1b0 [ 1334.552828] ion_system_heap_allocate+0x133/0x8c0 [ 1334.557691] ? ion_alloc+0x187/0x810 [ 1334.561403] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1334.566853] ? ion_system_contig_heap_create+0x130/0x130 [ 1334.572327] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1334.577371] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1334.582231] ion_alloc+0x204/0x810 [ 1334.585792] ? ion_dma_buf_release+0x40/0x40 [ 1334.590205] ? __might_fault+0x177/0x1b0 [ 1334.594277] ion_ioctl+0xea/0x1f0 [ 1334.597734] ? ion_query_heaps+0x360/0x360 [ 1334.601984] ? ion_query_heaps+0x360/0x360 [ 1334.606213] do_vfs_ioctl+0x75a/0xff0 [ 1334.610037] ? ioctl_preallocate+0x1a0/0x1a0 [ 1334.614445] ? lock_downgrade+0x740/0x740 [ 1334.618615] ? __fget+0x225/0x360 [ 1334.622068] ? do_vfs_ioctl+0xff0/0xff0 [ 1334.626045] ? security_file_ioctl+0x83/0xb0 [ 1334.630466] SyS_ioctl+0x7f/0xb0 [ 1334.633831] ? do_vfs_ioctl+0xff0/0xff0 [ 1334.637808] do_syscall_64+0x1d5/0x640 [ 1334.641702] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1334.646888] RIP: 0033:0x4665f9 [ 1334.650117] RSP: 002b:00007f84085c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1334.658786] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1334.666078] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1334.673348] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1334.680625] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1334.687896] R13: 00007ffcbe3a947f R14: 00007f84085c7300 R15: 0000000000022000 [ 1334.699648] CPU: 1 PID: 1047 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1334.707473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1334.716831] Call Trace: [ 1334.719431] dump_stack+0x1b2/0x281 [ 1334.723067] warn_alloc.cold+0x96/0x1cc [ 1334.727051] ? zone_watermark_ok_safe+0x220/0x220 [ 1334.731921] __alloc_pages_nodemask+0x2127/0x2720 [ 1334.736781] ? _raw_spin_unlock_irq+0x24/0x80 [ 1334.741287] ? lock_acquire+0x170/0x3f0 [ 1334.745272] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1334.750130] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1334.755639] ? __mutex_unlock_slowpath+0x75/0x770 [ 1334.760497] alloc_pages_current+0x155/0x260 [ 1334.764915] ion_page_pool_alloc+0x118/0x1b0 [ 1334.769418] ion_system_heap_allocate+0x133/0x8c0 [ 1334.774286] ? ion_alloc+0x187/0x810 [ 1334.778004] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1334.783631] ? ion_system_contig_heap_create+0x130/0x130 [ 1334.789084] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1334.794129] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1334.798975] ion_alloc+0x204/0x810 [ 1334.802518] ? ion_dma_buf_release+0x40/0x40 [ 1334.806928] ? __might_fault+0x177/0x1b0 [ 1334.810992] ion_ioctl+0xea/0x1f0 [ 1334.814455] ? ion_query_heaps+0x360/0x360 [ 1334.819387] ? ion_query_heaps+0x360/0x360 [ 1334.823619] do_vfs_ioctl+0x75a/0xff0 [ 1334.827422] ? ioctl_preallocate+0x1a0/0x1a0 [ 1334.831828] ? lock_downgrade+0x740/0x740 [ 1334.835997] ? __fget+0x225/0x360 [ 1334.839448] ? do_vfs_ioctl+0xff0/0xff0 [ 1334.843559] ? security_file_ioctl+0x83/0xb0 [ 1334.848053] SyS_ioctl+0x7f/0xb0 [ 1334.851412] ? do_vfs_ioctl+0xff0/0xff0 [ 1334.855558] do_syscall_64+0x1d5/0x640 [ 1334.859456] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1334.864643] RIP: 0033:0x4665f9 [ 1334.867835] RSP: 002b:00007f1bb23e0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1334.875545] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1334.882907] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1334.890722] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1334.898012] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1334.905287] R13: 00007ffeb0190c0f R14: 00007f1bb23e0300 R15: 0000000000022000 [ 1334.921013] CPU: 0 PID: 1046 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1334.928933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1334.938301] Call Trace: [ 1334.940909] dump_stack+0x1b2/0x281 [ 1334.944543] warn_alloc.cold+0x96/0x1cc [ 1334.948527] ? zone_watermark_ok_safe+0x220/0x220 [ 1334.953398] __alloc_pages_nodemask+0x2127/0x2720 [ 1334.958251] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1334.962762] ? finish_task_switch+0x178/0x610 [ 1334.967265] ? finish_task_switch+0x14d/0x610 [ 1334.971782] ? lock_acquire+0x170/0x3f0 [ 1334.975773] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1334.980636] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1334.986129] ? __mutex_unlock_slowpath+0x75/0x770 [ 1334.991006] alloc_pages_current+0x155/0x260 [ 1334.995429] ion_page_pool_alloc+0x118/0x1b0 [ 1334.999850] ion_system_heap_allocate+0x133/0x8c0 [ 1335.004700] ? ion_alloc+0x187/0x810 [ 1335.008419] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1335.013880] ? ion_system_contig_heap_create+0x130/0x130 [ 1335.019340] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1335.024374] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1335.029226] ion_alloc+0x204/0x810 [ 1335.032817] ? ion_dma_buf_release+0x40/0x40 [ 1335.037232] ? __might_fault+0x177/0x1b0 [ 1335.041307] ion_ioctl+0xea/0x1f0 [ 1335.044760] ? ion_query_heaps+0x360/0x360 [ 1335.049014] ? ion_query_heaps+0x360/0x360 [ 1335.053257] do_vfs_ioctl+0x75a/0xff0 [ 1335.057066] ? ioctl_preallocate+0x1a0/0x1a0 [ 1335.061478] ? lock_downgrade+0x740/0x740 [ 1335.065633] ? __fget+0x225/0x360 [ 1335.069092] ? do_vfs_ioctl+0xff0/0xff0 [ 1335.073072] ? security_file_ioctl+0x83/0xb0 [ 1335.077483] SyS_ioctl+0x7f/0xb0 [ 1335.080854] ? do_vfs_ioctl+0xff0/0xff0 [ 1335.084833] do_syscall_64+0x1d5/0x640 [ 1335.085182] Mem-Info: [ 1335.088726] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1335.088735] RIP: 0033:0x4665f9 [ 1335.088740] RSP: 002b:00007feafbab4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1335.088751] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1335.088756] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1335.088765] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1335.097973] active_anon:22527 inactive_anon:33145 isolated_anon:0 [ 1335.097973] active_file:1299 inactive_file:1684 isolated_file:0 [ 1335.097973] unevictable:0 dirty:42 writeback:0 unstable:0 [ 1335.097973] slab_reclaimable:11943 slab_unreclaimable:113695 [ 1335.097973] mapped:55034 shmem:33554 pagetables:822 bounce:0 [ 1335.097973] free:64570 free_pcp:349 free_cma:0 [ 1335.099560] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1335.099565] R13: 00007ffcb6e8eadf R14: 00007feafbab4300 R15: 0000000000022000 [ 1335.338939] Node 0 active_anon:89516kB inactive_anon:108444kB active_file:5016kB inactive_file:6380kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:219788kB dirty:164kB writeback:0kB shmem:109868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1335.411621] Node 1 active_anon:592kB inactive_anon:24136kB active_file:180kB inactive_file:356kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:348kB dirty:4kB writeback:0kB shmem:24348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1335.547871] Node 0 DMA free:11088kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1335.631186] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1335.636419] Node 0 DMA32 free:54612kB min:36200kB low:45248kB high:54296kB active_anon:89516kB inactive_anon:108444kB active_file:5016kB inactive_file:6380kB unevictable:0kB writepending:164kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7872kB pagetables:3148kB bounce:0kB free_pcp:176kB local_pcp:88kB free_cma:0kB [ 1335.726144] lowmem_reserve[]: 0 0 0 0 0 [ 1335.774951] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1335.816584] lowmem_reserve[]: 0 0 0 0 0 [ 1335.851018] Node 1 Normal free:177764kB min:53696kB low:67120kB high:80544kB active_anon:592kB inactive_anon:24136kB active_file:180kB inactive_file:356kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:140kB bounce:0kB free_pcp:624kB local_pcp:4kB free_cma:0kB [ 1335.910744] lowmem_reserve[]: 0 0 0 0 0 [ 1335.918440] Node 0 DMA: 0*4kB 2*8kB (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11088kB [ 1335.977736] Node 0 DMA32: 482*4kB (ME) 66*8kB (UMEH) 157*16kB (UMEH) 23*32kB (MEH) 151*64kB (UMH) 129*128kB (UH) 50*256kB (UH) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44680kB [ 1336.023306] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1336.043321] Node 1 Normal: 22*4kB (UME) 3*8kB (UE) 31*16kB (ME) 17*32kB (ME) 20*64kB (UME) 5*128kB (UM) 4*256kB (UME) 1*512kB (U) 1*1024kB (U) 0*2048kB 15*4096kB (U) = 67072kB [ 1336.133158] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1336.151635] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1336.160253] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1336.204102] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1336.242583] 34687 total pagecache pages [ 1336.281020] 0 pages in swap cache [ 1336.284507] Swap cache stats: add 0, delete 0, find 0/0 [ 1336.289865] Free swap = 0kB [ 1336.332453] Total swap = 0kB [ 1336.335681] 2097051 pages RAM [ 1336.338781] 0 pages HighMem/MovableOnly [ 1336.362928] 363849 pages reserved [ 1336.390027] 0 pages cma reserved [ 1336.583654] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1336.723093] systemd-journal cpuset=/ mems_allowed=0-1 [ 1336.728341] CPU: 1 PID: 32602 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1336.736304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1336.745676] Call Trace: [ 1336.748271] dump_stack+0x1b2/0x281 [ 1336.751897] dump_header+0x178/0x82f [ 1336.755613] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1336.760711] ? ___ratelimit+0x2cd/0x530 [ 1336.764693] oom_kill_process.cold+0x10/0xa40 [ 1336.769217] out_of_memory+0xe3e/0x1190 [ 1336.773205] ? oom_killer_disable+0x1c0/0x1c0 [ 1336.777697] ? mutex_trylock+0x152/0x1a0 [ 1336.781787] __alloc_pages_nodemask+0x23e1/0x2720 [ 1336.786645] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1336.791516] alloc_pages_current+0x155/0x260 [ 1336.795931] filemap_fault+0x11a1/0x1ad0 [ 1336.800000] ext4_filemap_fault+0x84/0xb0 [ 1336.804146] __do_fault+0xfa/0x380 [ 1336.807686] __handle_mm_fault+0x2497/0x4620 [ 1336.812095] ? retint_kernel+0x2d/0x2d [ 1336.815977] ? vm_insert_page+0x7c0/0x7c0 [ 1336.821353] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1336.826369] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1336.831133] ? mark_held_locks+0xa6/0xf0 [ 1336.835196] handle_mm_fault+0x455/0x9c0 [ 1336.839258] __do_page_fault+0x549/0xad0 [ 1336.843319] ? spurious_fault+0x640/0x640 [ 1336.847469] ? do_page_fault+0x60/0x500 [ 1336.851438] ? page_fault+0x2f/0x50 [ 1336.855059] page_fault+0x45/0x50 [ 1336.858537] RIP: 86c0a2e8:0x5613c3d7c958 [ 1336.862588] RSP: 86c0a1f0:00007fff86c0a1e8 EFLAGS: 5613c55dc2b0 [ 1337.117307] Mem-Info: [ 1337.164722] active_anon:22528 inactive_anon:33145 isolated_anon:0 [ 1337.164722] active_file:0 inactive_file:22 isolated_file:0 [ 1337.164722] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1337.164722] slab_reclaimable:11940 slab_unreclaimable:112714 [ 1337.164722] mapped:52707 shmem:33554 pagetables:822 bounce:0 [ 1337.164722] free:25101 free_pcp:0 free_cma:0 [ 1337.425848] Node 0 active_anon:89520kB inactive_anon:108444kB active_file:120kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210828kB dirty:0kB writeback:0kB shmem:109868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1337.628128] Node 1 active_anon:592kB inactive_anon:24136kB active_file:60kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1337.839601] Node 0 DMA free:11032kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1338.033167] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1338.038264] Node 0 DMA32 free:35756kB min:36200kB low:45248kB high:54296kB active_anon:89520kB inactive_anon:108444kB active_file:52kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7776kB pagetables:3148kB bounce:0kB free_pcp:232kB local_pcp:116kB free_cma:0kB [ 1338.082706] lowmem_reserve[]: 0 0 0 0 0 [ 1338.086743] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1338.128522] lowmem_reserve[]: 0 0 0 0 0 [ 1338.139404] Node 1 Normal free:53652kB min:53696kB low:67120kB high:80544kB active_anon:592kB inactive_anon:24136kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:140kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1338.185920] lowmem_reserve[]: 0 0 0 0 0 [ 1338.200131] Node 0 DMA: 0*4kB 1*8kB (E) 1*16kB (E) 2*32kB (UE) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11032kB [ 1338.224223] Node 0 DMA32: 1071*4kB (ME) 256*8kB (UME) 233*16kB (UME) 67*32kB (UME) 26*64kB (UM) 53*128kB (UM) 59*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35756kB [ 1338.248491] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1338.259474] Node 1 Normal: 51*4kB (ME) 41*8kB (ME) 36*16kB (ME) 18*32kB (UME) 20*64kB (UME) 4*128kB (M) 4*256kB (UME) 0*512kB 2*1024kB (U) 1*2048kB (U) 11*4096kB (U) = 53652kB [ 1338.285435] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1338.307608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1338.329462] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1338.354614] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1338.376907] 33588 total pagecache pages [ 1338.380937] 0 pages in swap cache [ 1338.397753] Swap cache stats: add 0, delete 0, find 0/0 [ 1338.407686] Free swap = 0kB [ 1338.410728] Total swap = 0kB [ 1338.422683] 2097051 pages RAM [ 1338.425832] 0 pages HighMem/MovableOnly [ 1338.429822] 363849 pages reserved [ 1338.439965] 0 pages cma reserved [ 1338.445648] Out of memory (oom_kill_allocating_task): Kill process 32602 (systemd-journal) score 0 or sacrifice child [ 1338.465424] Killed process 32602 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1880kB [ 1338.481498] oom_reaper: reaped process 32602 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1932kB [ 1338.632212] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1338.763295] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1338.768488] CPU: 0 PID: 31275 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1338.776807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1338.786166] Call Trace: [ 1338.788786] dump_stack+0x1b2/0x281 [ 1338.792424] dump_header+0x178/0x82f [ 1338.796148] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1338.801286] ? ___ratelimit+0x2cd/0x530 [ 1338.805268] oom_kill_process.cold+0x10/0xa40 [ 1338.810040] out_of_memory+0xe3e/0x1190 [ 1338.814023] ? oom_killer_disable+0x1c0/0x1c0 [ 1338.818519] ? mutex_trylock+0x152/0x1a0 [ 1338.822584] __alloc_pages_nodemask+0x23e1/0x2720 [ 1338.827443] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1338.832303] alloc_pages_current+0x155/0x260 [ 1338.836807] filemap_fault+0x11a1/0x1ad0 [ 1338.840886] ext4_filemap_fault+0x84/0xb0 [ 1338.845063] __do_fault+0xfa/0x380 [ 1338.848618] __handle_mm_fault+0x2497/0x4620 [ 1338.853048] ? vm_insert_page+0x7c0/0x7c0 [ 1338.857186] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1338.861605] ? nanosleep_copyout+0x100/0x100 [ 1338.866017] ? mark_held_locks+0xa6/0xf0 [ 1338.870075] handle_mm_fault+0x455/0x9c0 [ 1338.874136] __do_page_fault+0x549/0xad0 [ 1338.878200] ? spurious_fault+0x640/0x640 [ 1338.882347] ? do_page_fault+0x60/0x500 [ 1338.886318] ? page_fault+0x2f/0x50 [ 1338.889937] page_fault+0x45/0x50 [ 1338.893400] RIP: 145dba:0x6 [ 1338.896424] RSP: 0011:00007ffcb6e8ed9c EFLAGS: 00000032 [ 1338.995527] Mem-Info: [ 1339.003494] active_anon:22428 inactive_anon:33145 isolated_anon:0 [ 1339.003494] active_file:49 inactive_file:4 isolated_file:3 [ 1339.003494] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1339.003494] slab_reclaimable:11940 slab_unreclaimable:112699 [ 1339.003494] mapped:52232 shmem:33554 pagetables:822 bounce:0 [ 1339.003494] free:25141 free_pcp:86 free_cma:0 [ 1339.038118] Node 0 active_anon:89120kB inactive_anon:108444kB active_file:192kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:208928kB dirty:0kB writeback:0kB shmem:109868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1339.066172] Node 1 active_anon:592kB inactive_anon:24136kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:24348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1339.094004] Node 0 DMA free:11032kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1339.129434] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1339.152073] Node 0 DMA32 free:35708kB min:36200kB low:45248kB high:54296kB active_anon:89052kB inactive_anon:108440kB active_file:60kB inactive_file:64kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:3052kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 1339.273528] lowmem_reserve[]: 0 0 0 0 0 [ 1339.277570] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1339.311126] lowmem_reserve[]: 0 0 0 0 0 [ 1339.315155] Node 1 Normal free:53624kB min:53696kB low:67120kB high:80544kB active_anon:592kB inactive_anon:24136kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:140kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1339.471693] lowmem_reserve[]: 0 0 0 0 0 [ 1339.475752] Node 0 DMA: 0*4kB 1*8kB (E) 1*16kB (E) 2*32kB (UE) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11032kB [ 1339.629051] Node 0 DMA32: 1155*4kB (ME) 264*8kB (ME) 239*16kB (ME) 66*32kB (UME) 24*64kB (M) 47*128kB (UM) 59*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 35836kB [ 1339.743458] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1339.809681] Node 1 Normal: 52*4kB (UME) 43*8kB (UME) 36*16kB (ME) 17*32kB (ME) 20*64kB (UME) 5*128kB (UM) 4*256kB (UME) 0*512kB 2*1024kB (U) 1*2048kB (U) 11*4096kB (U) = 53768kB [ 1339.954273] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1340.016657] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1340.061044] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1340.069916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1340.088823] 33588 total pagecache pages [ 1340.092907] 0 pages in swap cache [ 1340.096355] Swap cache stats: add 0, delete 0, find 0/0 [ 1340.114313] Free swap = 0kB [ 1340.117377] Total swap = 0kB [ 1340.120388] 2097051 pages RAM [ 1340.165594] 0 pages HighMem/MovableOnly [ 1340.169632] 363849 pages reserved [ 1340.197720] 0 pages cma reserved [ 1340.208433] Out of memory (oom_kill_allocating_task): Kill process 31275 (syz-executor.0) score 0 or sacrifice child [ 1340.224289] Killed process 1046 (syz-executor.0) total-vm:93252kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 1340.244740] oom_reaper: reaped process 1046 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1340.322256] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1340.350885] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1340.360351] CPU: 1 PID: 7962 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1340.367904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.377276] Call Trace: [ 1340.379880] dump_stack+0x1b2/0x281 [ 1340.383509] dump_header+0x178/0x82f [ 1340.387225] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1340.392336] ? ___ratelimit+0x2cd/0x530 [ 1340.396316] oom_kill_process.cold+0x10/0xa40 [ 1340.400835] out_of_memory+0xe3e/0x1190 [ 1340.404832] ? oom_killer_disable+0x1c0/0x1c0 [ 1340.409517] ? mutex_trylock+0x152/0x1a0 [ 1340.413574] __alloc_pages_nodemask+0x23e1/0x2720 [ 1340.418423] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1340.423274] alloc_pages_current+0x155/0x260 [ 1340.427790] filemap_fault+0x11a1/0x1ad0 [ 1340.431886] ext4_filemap_fault+0x84/0xb0 [ 1340.436024] __do_fault+0xfa/0x380 [ 1340.439558] __handle_mm_fault+0x2497/0x4620 [ 1340.443963] ? vm_insert_page+0x7c0/0x7c0 [ 1340.448108] ? mark_held_locks+0xa6/0xf0 [ 1340.452164] handle_mm_fault+0x455/0x9c0 [ 1340.456222] __do_page_fault+0x549/0xad0 [ 1340.460287] ? spurious_fault+0x640/0x640 [ 1340.464425] ? do_page_fault+0x60/0x500 [ 1340.468388] ? page_fault+0x2f/0x50 [ 1340.472001] page_fault+0x45/0x50 [ 1340.475442] RIP: 0f00:0x141b11c96cd [ 1340.479055] RSP: 03e7:000000c000039e40 EFLAGS: 00000003 [ 1340.482634] Mem-Info: [ 1340.490589] active_anon:22388 inactive_anon:33144 isolated_anon:0 [ 1340.490589] active_file:38 inactive_file:0 isolated_file:0 [ 1340.490589] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1340.490589] slab_reclaimable:11919 slab_unreclaimable:112190 [ 1340.490589] mapped:52225 shmem:33554 pagetables:798 bounce:0 [ 1340.490589] free:25095 free_pcp:30 free_cma:0 [ 1340.526059] Node 0 active_anon:88960kB inactive_anon:108440kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:109868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1340.556434] Node 1 active_anon:592kB inactive_anon:24136kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1340.585311] Node 0 DMA free:11032kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1340.633281] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1340.638371] Node 0 DMA32 free:17976kB min:36200kB low:45248kB high:54296kB active_anon:88960kB inactive_anon:108440kB active_file:148kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:3052kB bounce:0kB free_pcp:216kB local_pcp:100kB free_cma:0kB [ 1340.736109] lowmem_reserve[]: 0 0 0 0 0 [ 1340.740144] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1340.809700] lowmem_reserve[]: 0 0 0 0 0 [ 1340.816155] Node 1 Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:592kB inactive_anon:24136kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:140kB bounce:0kB free_pcp:148kB local_pcp:120kB free_cma:0kB [ 1340.844811] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1340.861913] lowmem_reserve[]: 0 0 0 0 0 [ 1340.865931] Node 0 DMA: 1*4kB (U) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10972kB [ 1340.885489] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1340.890811] CPU: 1 PID: 1046 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1340.898601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.907985] Call Trace: [ 1340.910589] dump_stack+0x1b2/0x281 [ 1340.914218] warn_alloc.cold+0x96/0x1cc [ 1340.918206] ? zone_watermark_ok_safe+0x220/0x220 [ 1340.923053] ? usleep_range+0x130/0x130 [ 1340.927020] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1340.932120] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1340.937231] ? run_timer_softirq+0x5a0/0x5a0 [ 1340.941641] __alloc_pages_nodemask+0x2127/0x2720 [ 1340.946492] ? lock_acquire+0x170/0x3f0 [ 1340.950464] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1340.955313] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1340.959824] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1340.965303] alloc_pages_current+0x155/0x260 [ 1340.969720] ion_page_pool_alloc+0x118/0x1b0 [ 1340.974122] ion_system_heap_allocate+0x133/0x8c0 [ 1340.978959] ? ion_alloc+0x187/0x810 [ 1340.982668] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1340.988111] ? ion_system_contig_heap_create+0x130/0x130 [ 1340.993552] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1340.998559] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1341.003391] ion_alloc+0x204/0x810 [ 1341.006928] ? ion_dma_buf_release+0x40/0x40 [ 1341.011328] ? __might_fault+0x177/0x1b0 [ 1341.015383] ion_ioctl+0xea/0x1f0 [ 1341.018829] ? ion_query_heaps+0x360/0x360 [ 1341.023058] ? ion_query_heaps+0x360/0x360 [ 1341.027293] do_vfs_ioctl+0x75a/0xff0 [ 1341.031090] ? ioctl_preallocate+0x1a0/0x1a0 [ 1341.035513] ? lock_downgrade+0x740/0x740 [ 1341.039668] ? __fget+0x225/0x360 [ 1341.043118] ? do_vfs_ioctl+0xff0/0xff0 [ 1341.047098] ? security_file_ioctl+0x83/0xb0 [ 1341.051523] SyS_ioctl+0x7f/0xb0 [ 1341.054885] ? do_vfs_ioctl+0xff0/0xff0 [ 1341.058856] do_syscall_64+0x1d5/0x640 [ 1341.062763] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1341.067948] RIP: 0033:0x4665f9 [ 1341.071123] RSP: 002b:00007feafbab4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1341.078867] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1341.086136] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1341.093411] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1341.100672] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1341.107950] R13: 00007ffcb6e8eadf R14: 00007feafbab4300 R15: 0000000000022000 [ 1341.121311] Node 0 DMA32: 1156*4kB (UME) 265*8kB (ME) 241*16kB (UME) 66*32kB (ME) 24*64kB (M) 5*128kB (UM) 10*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17960kB [ 1341.139124] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1341.154360] Node 1 Normal: 52*4kB (UME) 42*8kB (UME) 36*16kB (ME) 18*32kB (UME) 19*64kB (ME) 5*128kB (UM) 3*256kB (ME) 0*512kB 0*1024kB 1*2048kB (U) 5*4096kB (U) = 26848kB [ 1341.170148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.170997] warn_alloc_show_mem: 4 callbacks suppressed [ 1341.171001] Mem-Info: [ 1341.181629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1341.193274] active_anon:22388 inactive_anon:33144 isolated_anon:0 [ 1341.193274] active_file:8 inactive_file:10 isolated_file:16 [ 1341.193274] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1341.193274] slab_reclaimable:11919 slab_unreclaimable:112205 [ 1341.193274] mapped:52225 shmem:33554 pagetables:798 bounce:0 [ 1341.193274] free:13945 free_pcp:89 free_cma:0 [ 1341.195380] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.232502] Node 0 active_anon:88960kB inactive_anon:108440kB active_file:20kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:208900kB dirty:0kB writeback:0kB shmem:109868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1341.237486] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1341.266361] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1341.266971] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1341.271753] Node 1 active_anon:592kB inactive_anon:24136kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1341.277480] 33588 total pagecache pages [ 1341.288483] Node 0 [ 1341.289435] 0 pages in swap cache [ 1341.326821] Swap cache stats: add 0, delete 0, find 0/0 [ 1341.332716] Free swap = 0kB [ 1341.335732] Total swap = 0kB [ 1341.338742] 2097051 pages RAM [ 1341.343328] 0 pages HighMem/MovableOnly [ 1341.346806] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1341.347304] 363849 pages reserved [ 1341.376359] 0 pages cma reserved [ 1341.376800] lowmem_reserve[]: [ 1341.379750] Out of memory (oom_kill_allocating_task): Kill process 7962 (syz-fuzzer) score 0 or sacrifice child [ 1341.379757] 0 [ 1341.382951] Killed process 32273 (syz-executor.3) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1341.405577] 2717 2718 2718 2718 [ 1341.408972] Node 0 DMA32 free:18060kB min:36200kB low:45248kB high:54296kB active_anon:88960kB inactive_anon:108440kB active_file:20kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:3052kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1341.458305] oom_reaper: reaped process 32273 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1341.474225] lowmem_reserve[]: 0 0 0 0 0 [ 1341.478297] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1341.506454] lowmem_reserve[]: 0 0 0 0 0 [ 1341.510488] Node 1 Normal free:26948kB min:53696kB low:67120kB high:80544kB active_anon:592kB inactive_anon:24136kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:140kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1341.539249] lowmem_reserve[]: 0 0 0 0 0 [ 1341.543359] Node 0 DMA: 1*4kB (U) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10972kB [ 1341.558365] Node 0 DMA32: 1163*4kB (UME) 270*8kB (UME) 241*16kB (UME) 70*32kB (UME) 25*64kB (UM) 5*128kB (UM) 10*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18220kB [ 1341.585201] oom_reaper: reaped process 32276 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1341.595794] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1341.607917] Node 1 Normal: 53*4kB (UME) 42*8kB (UME) 37*16kB (UME) 18*32kB (UME) 19*64kB (ME) 4*128kB (M) 4*256kB (UME) 0*512kB 0*1024kB 1*2048kB (U) 5*4096kB (U) = 26996kB [ 1341.626434] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.635616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1341.649029] oom_reaper: reaped process 1044 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1341.660327] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 1341.665010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.672606] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1341.687546] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1341.696376] ion_system_heap cpuset= [ 1341.702063] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1341.708696] 33588 total pagecache pages [ 1341.710821] CPU: 0 PID: 1044 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1341.714886] 0 pages in swap cache [ 1341.722594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1341.722599] Call Trace: [ 1341.722624] dump_stack+0x1b2/0x281 [ 1341.722638] warn_alloc.cold+0x96/0x1cc [ 1341.722650] ? zone_watermark_ok_safe+0x220/0x220 [ 1341.722659] ? usleep_range+0x130/0x130 [ 1341.722668] ? try_to_free_pages+0x23f/0x6e0 [ 1341.722678] ? _find_next_bit+0xdb/0x100 [ 1341.722689] ? run_timer_softirq+0x5a0/0x5a0 [ 1341.722706] __alloc_pages_nodemask+0x2127/0x2720 [ 1341.722730] ? lock_acquire+0x170/0x3f0 [ 1341.722745] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1341.734577] Swap cache stats: add 0, delete 0, find 0/0 [ 1341.735552] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1341.738140] Free swap = 0kB [ 1341.741764] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1341.741783] alloc_pages_current+0x155/0x260 [ 1341.741798] ion_page_pool_alloc+0x118/0x1b0 [ 1341.741808] ion_system_heap_allocate+0x133/0x8c0 [ 1341.741817] ? ion_alloc+0x187/0x810 [ 1341.741827] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1341.741836] ? ion_system_contig_heap_create+0x130/0x130 [ 1341.741846] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1341.741858] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1341.741868] ion_alloc+0x204/0x810 [ 1341.741881] ? ion_dma_buf_release+0x40/0x40 [ 1341.741893] ? __might_fault+0x177/0x1b0 [ 1341.749341] Total swap = 0kB [ 1341.750717] ion_ioctl+0xea/0x1f0 [ 1341.765096] 2097051 pages RAM [ 1341.767674] ? ion_query_heaps+0x360/0x360 [ 1341.784821] 0 pages HighMem/MovableOnly [ 1341.786644] ? ion_query_heaps+0x360/0x360 [ 1341.797368] 363849 pages reserved [ 1341.799609] do_vfs_ioctl+0x75a/0xff0 [ 1341.808035] 0 pages cma reserved [ 1341.808401] ? ioctl_preallocate+0x1a0/0x1a0 [ 1341.886582] ? lock_downgrade+0x740/0x740 [ 1341.890747] ? __fget+0x225/0x360 [ 1341.894205] ? do_vfs_ioctl+0xff0/0xff0 [ 1341.898178] ? security_file_ioctl+0x83/0xb0 [ 1341.902606] SyS_ioctl+0x7f/0xb0 [ 1341.905979] ? do_vfs_ioctl+0xff0/0xff0 [ 1341.909966] do_syscall_64+0x1d5/0x640 [ 1341.913880] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1341.919076] RIP: 0033:0x4665f9 [ 1341.922262] RSP: 002b:00007f56be175188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1341.929985] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1341.937281] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1341.944562] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1341.951879] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1341.959162] R13: 00007fffaba42f8f R14: 00007f56be175300 R15: 0000000000022000 [ 1342.018827] / mems_allowed=0-1 [ 1342.034431] CPU: 0 PID: 4245 Comm: ion_system_heap Not tainted 4.14.232-syzkaller #0 [ 1342.042340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1342.051813] Call Trace: [ 1342.054404] dump_stack+0x1b2/0x281 [ 1342.058039] dump_header+0x178/0x82f [ 1342.061761] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1342.066875] ? ___ratelimit+0x2cd/0x530 [ 1342.070865] oom_kill_process.cold+0x10/0xa40 [ 1342.075364] ? lock_downgrade+0x740/0x740 [ 1342.079525] out_of_memory+0x2dc/0x1190 [ 1342.083511] ? oom_killer_disable+0x1c0/0x1c0 [ 1342.088018] ? mutex_trylock+0x152/0x1a0 [ 1342.092087] __alloc_pages_nodemask+0x23e1/0x2720 [ 1342.096946] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1342.101835] ? ion_heap_clear_pages+0x4c/0x70 [ 1342.106330] ? lock_acquire+0x170/0x3f0 [ 1342.110312] ? cache_grow_begin+0x3f/0x700 [ 1342.114550] cache_grow_begin+0x91/0x700 [ 1342.118615] fallback_alloc+0x207/0x2c0 [ 1342.122592] kmem_cache_alloc_node_trace+0xed/0x400 [ 1342.127614] __get_vm_area_node+0xed/0x340 [ 1342.131885] vmap+0xd5/0x290 [ 1342.134924] ? ion_heap_clear_pages+0x23/0x70 [ 1342.139432] ? vunmap+0x50/0x50 [ 1342.142710] ? __vunmap+0x21c/0x300 [ 1342.146410] ion_heap_clear_pages+0x23/0x70 [ 1342.150743] ion_heap_sglist_zero+0x165/0x220 [ 1342.155269] ? ion_heap_clear_pages+0x70/0x70 [ 1342.159780] ? finish_task_switch+0x178/0x610 [ 1342.164293] ? pagerange_is_ram_callback+0x100/0x100 [ 1342.169403] ? ion_heap_deferred_free+0x222/0x470 [ 1342.174250] ion_system_heap_free+0x1d0/0x240 [ 1342.178775] ion_buffer_destroy+0x132/0x190 [ 1342.183117] ion_heap_deferred_free+0x22a/0x470 [ 1342.187804] ? __schedule+0x807/0x1de0 [ 1342.191701] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1342.196373] ? wait_woken+0x230/0x230 [ 1342.200229] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1342.205338] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1342.210019] kthread+0x30d/0x420 [ 1342.213402] ? kthread_create_on_node+0xd0/0xd0 [ 1342.218070] ret_from_fork+0x24/0x30 [ 1342.293507] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1342.296616] Mem-Info: [ 1342.307933] active_anon:22340 inactive_anon:33144 isolated_anon:0 [ 1342.307933] active_file:39 inactive_file:30 isolated_file:1 [ 1342.307933] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1342.307933] slab_reclaimable:11917 slab_unreclaimable:111853 [ 1342.307933] mapped:52260 shmem:33554 pagetables:753 bounce:0 [ 1342.307933] free:13916 free_pcp:0 free_cma:0 [ 1342.317760] syz-executor.0 cpuset= [ 1342.341250] Node 0 active_anon:88768kB inactive_anon:108440kB active_file:180kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:208996kB dirty:0kB writeback:0kB shmem:109868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1342.354265] / mems_allowed=0-1 [ 1342.383109] CPU: 1 PID: 1046 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1342.389072] Node 1 active_anon:592kB inactive_anon:24136kB active_file:0kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:24348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1342.390909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1342.390918] Call Trace: [ 1342.417788] Node 0 [ 1342.427109] dump_stack+0x1b2/0x281 [ 1342.427128] warn_alloc.cold+0x96/0x1cc [ 1342.429707] DMA free:11012kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1342.431922] ? zone_watermark_ok_safe+0x220/0x220 [ 1342.431948] __alloc_pages_nodemask+0x2127/0x2720 [ 1342.435549] lowmem_reserve[]: 0 [ 1342.439527] ? io_schedule_timeout+0x140/0x140 [ 1342.465052] 2717 [ 1342.469895] ? lock_acquire+0x170/0x3f0 [ 1342.474737] 2718 [ 1342.477985] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1342.482577] 2718 [ 1342.484632] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1342.488571] 2718 [ 1342.490632] ? __mutex_unlock_slowpath+0x75/0x770 [ 1342.497610] alloc_pages_current+0x155/0x260 [ 1342.503234] Node 0 [ 1342.505267] ion_page_pool_alloc+0x118/0x1b0 [ 1342.510088] DMA32 free:18020kB min:36200kB low:45248kB high:54296kB active_anon:88768kB inactive_anon:108440kB active_file:840kB inactive_file:108kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2872kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1342.514474] ion_system_heap_allocate+0x133/0x8c0 [ 1342.514488] ? _raw_spin_unlock+0x29/0x40 [ 1342.514496] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1342.514506] ? ion_system_contig_heap_create+0x130/0x130 [ 1342.516723] lowmem_reserve[]: [ 1342.521152] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1342.521165] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1342.521177] ion_alloc+0x27a/0x810 [ 1342.549417] 0 [ 1342.554232] ? ion_dma_buf_release+0x40/0x40 [ 1342.554245] ? __might_fault+0x177/0x1b0 [ 1342.554256] ion_ioctl+0xea/0x1f0 [ 1342.554264] ? ion_query_heaps+0x360/0x360 [ 1342.554276] ? ion_query_heaps+0x360/0x360 [ 1342.559901] 0 [ 1342.563358] do_vfs_ioctl+0x75a/0xff0 [ 1342.563372] ? ioctl_preallocate+0x1a0/0x1a0 [ 1342.563382] ? lock_downgrade+0x740/0x740 [ 1342.563395] ? __fget+0x225/0x360 [ 1342.568839] 0 0 [ 1342.571953] ? do_vfs_ioctl+0xff0/0xff0 [ 1342.571965] ? security_file_ioctl+0x83/0xb0 [ 1342.571975] SyS_ioctl+0x7f/0xb0 [ 1342.571984] ? do_vfs_ioctl+0xff0/0xff0 [ 1342.576982] 0 [ 1342.581836] do_syscall_64+0x1d5/0x640 [ 1342.581851] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1342.581860] RIP: 0033:0x4665f9 [ 1342.581867] RSP: 002b:00007feafbab4188 EFLAGS: 00000246 [ 1342.587272] ORIG_RAX: 0000000000000010 [ 1342.587280] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1342.591748] Node 0 [ 1342.595760] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1342.599211] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1342.603435] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1342.603441] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1342.603445] R13: 00007ffcb6e8eadf R14: 00007feafbab4300 R15: 0000000000022000 [ 1342.612841] warn_alloc_show_mem: 1 callbacks suppressed [ 1342.612845] Mem-Info: [ 1342.616530] lowmem_reserve[]: [ 1342.624273] active_anon:22340 inactive_anon:33144 isolated_anon:0 [ 1342.624273] active_file:39 inactive_file:30 isolated_file:1 [ 1342.624273] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1342.624273] slab_reclaimable:11917 slab_unreclaimable:111853 [ 1342.624273] mapped:52260 shmem:33554 pagetables:753 bounce:0 [ 1342.624273] free:13963 free_pcp:0 free_cma:0 [ 1342.625332] 0 0 [ 1342.627322] Node 0 active_anon:88768kB inactive_anon:108440kB active_file:180kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:208996kB dirty:0kB writeback:0kB shmem:109868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1342.634204] 0 [ 1342.651702] Node 1 active_anon:592kB inactive_anon:24136kB active_file:0kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:24348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1342.654158] 0 [ 1342.657281] Node 0 [ 1342.662666] 0 [ 1342.662674] Node 1 Normal free:26632kB min:53696kB low:67120kB high:80544kB active_anon:592kB inactive_anon:24136kB active_file:428kB inactive_file:520kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:140kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1342.662694] lowmem_reserve[]: 0 0 0 0 0 [ 1342.662710] Node 0 DMA: 1*4kB (U) 1*8kB (E) [ 1342.672832] DMA free:11012kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1342.674007] 1*16kB [ 1342.676200] lowmem_reserve[]: [ 1342.683700] (E) 1*32kB (E) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UM) 0*4096kB [ 1342.712581] 0 [ 1342.716029] = 11004kB [ 1342.725590] 2717 [ 1342.730637] Node 0 [ 1342.738471] 2718 [ 1342.739347] DMA32: [ 1342.744212] 2718 [ 1342.781985] 1340*4kB [ 1342.820865] 2718 [ 1342.841997] (UME) [ 1342.880458] 296*8kB [ 1342.904833] Node 0 [ 1342.910623] (UME) [ 1342.920217] DMA32 free:18208kB min:36200kB low:45248kB high:54296kB active_anon:88768kB inactive_anon:108440kB active_file:840kB inactive_file:108kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2872kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1342.927365] 261*16kB [ 1342.931039] lowmem_reserve[]: [ 1342.933102] (UME) [ 1342.935078] 0 [ 1342.937475] 74*32kB [ 1342.939518] 0 [ 1342.957873] (UME) [ 1342.976726] 0 0 0 [ 1342.976740] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1342.976762] lowmem_reserve[]: 0 0 0 0 0 [ 1342.976781] Node 1 Normal free:26632kB min:53696kB low:67120kB high:80544kB active_anon:592kB inactive_anon:24136kB active_file:0kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:140kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1342.976807] lowmem_reserve[]: [ 1342.983587] 32*64kB [ 1342.984794] 0 [ 1342.986324] (UMEH) [ 1342.988630] 0 [ 1342.990414] 4*128kB [ 1342.992608] 0 0 0 [ 1342.992621] Node 0 DMA: 1*4kB (U) 1*8kB (E) 1*16kB (E) 1*32kB (E) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11004kB [ 1342.992703] Node 0 [ 1343.015775] (UM) [ 1343.020910] DMA32: [ 1343.044278] 5*256kB [ 1343.053204] 1339*4kB [ 1343.070799] (UM) [ 1343.083220] (UME) 296*8kB (UME) 261*16kB (UME) 74*32kB (UME) 32*64kB (UMEH) 4*128kB (UM) 5*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18108kB [ 1343.083283] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1343.126113] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18112kB [ 1343.126269] syz-executor.2: [ 1343.134472] Node 1 Normal: 1342*4kB (UME) 218*8kB (UME) 233*16kB (UME) 207*32kB (UME) 20*64kB (UME) 5*128kB (UM) 3*256kB (ME) 1*512kB (U) 0*1024kB 1*2048kB (U) 1*4096kB (U) = 26808kB [ 1343.140025] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1343.161078] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1343.173145] Node 1 Normal: 1342*4kB (UME) 218*8kB (UME) 233*16kB (UME) 207*32kB (UME) 20*64kB (UME) 5*128kB (UM) 3*256kB (ME) 1*512kB (U) 0*1024kB 1*2048kB (U) 1*4096kB (U) = 26808kB [ 1343.201610] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1343.209365] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1343.216823] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1343.218211] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1343.241490] CPU: 1 PID: 1044 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1343.249300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1343.251805] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1343.258756] Call Trace: [ 1343.267663] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1343.270207] dump_stack+0x1b2/0x281 [ 1343.278796] 33587 total pagecache pages [ 1343.282377] warn_alloc.cold+0x96/0x1cc [ 1343.282390] ? zone_watermark_ok_safe+0x220/0x220 [ 1343.282414] __alloc_pages_nodemask+0x2127/0x2720 [ 1343.286356] 0 pages in swap cache [ 1343.290322] ? lock_acquire+0x170/0x3f0 [ 1343.295168] Swap cache stats: add 0, delete 0, find 0/0 [ 1343.299990] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1343.303444] Free swap = 0kB [ 1343.307378] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1343.312751] Total swap = 0kB [ 1343.317555] ? __mutex_unlock_slowpath+0x75/0x770 [ 1343.320549] 2097051 pages RAM [ 1343.325991] alloc_pages_current+0x155/0x260 [ 1343.326005] ion_page_pool_alloc+0x118/0x1b0 [ 1343.326014] ion_system_heap_allocate+0x133/0x8c0 [ 1343.326030] ? _raw_spin_unlock+0x29/0x40 [ 1343.329024] 0 pages HighMem/MovableOnly [ 1343.333853] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1343.333866] ? ion_system_contig_heap_create+0x130/0x130 [ 1343.333876] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1343.333888] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1343.333898] ion_alloc+0x27a/0x810 [ 1343.336983] 363849 pages reserved [ 1343.341389] ? ion_dma_buf_release+0x40/0x40 [ 1343.341401] ? __might_fault+0x177/0x1b0 [ 1343.341412] ion_ioctl+0xea/0x1f0 [ 1343.341422] ? ion_query_heaps+0x360/0x360 [ 1343.345812] 0 pages cma reserved [ 1343.350662] ? ion_query_heaps+0x360/0x360 [ 1343.354838] Out of memory: Kill process 1038 (syz-executor.4) score 1004 or sacrifice child [ 1343.358758] do_vfs_ioctl+0x75a/0xff0 [ 1343.363748] Killed process 1040 (syz-executor.4) total-vm:93252kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 1343.369226] ? ioctl_preallocate+0x1a0/0x1a0 [ 1343.374477] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1343.379056] ? lock_downgrade+0x740/0x740 [ 1343.382621] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1343.386009] ? __fget+0x225/0x360 [ 1343.390505] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1343.394559] ? do_vfs_ioctl+0xff0/0xff0 [ 1343.394571] ? security_file_ioctl+0x83/0xb0 [ 1343.394580] SyS_ioctl+0x7f/0xb0 [ 1343.394589] ? do_vfs_ioctl+0xff0/0xff0 [ 1343.394604] do_syscall_64+0x1d5/0x640 [ 1343.398034] 33587 total pagecache pages [ 1343.402272] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1343.402281] RIP: 0033:0x4665f9 [ 1343.402286] RSP: 002b:00007f56be175188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1343.405656] 0 pages in swap cache [ 1343.409873] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1343.418393] Swap cache stats: add 0, delete 0, find 0/0 [ 1343.423612] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1343.423617] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1343.423622] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1343.423628] R13: 00007fffaba42f8f R14: 00007f56be175300 R15: 0000000000022000 [ 1343.565872] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1343.580166] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1343.597212] oom_reaper: reaped process 1040 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1343.600166] syz-executor.4 cpuset= [ 1343.607188] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1343.618151] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1343.636783] / mems_allowed=0-1 [ 1343.640021] CPU: 1 PID: 1040 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1343.647813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1343.654035] oom_reaper: reaped process 1035 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1343.657170] Call Trace: [ 1343.667127] Free swap = 0kB [ 1343.669662] dump_stack+0x1b2/0x281 [ 1343.672663] Total swap = 0kB [ 1343.676259] warn_alloc.cold+0x96/0x1cc [ 1343.679246] 2097051 pages RAM [ 1343.683204] ? zone_watermark_ok_safe+0x220/0x220 [ 1343.683214] ? usleep_range+0x130/0x130 [ 1343.683224] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1343.683236] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1343.686320] 0 pages HighMem/MovableOnly [ 1343.691144] ? run_timer_softirq+0x5a0/0x5a0 [ 1343.691162] __alloc_pages_nodemask+0x2127/0x2720 [ 1343.691179] ? lock_acquire+0x170/0x3f0 [ 1343.695125] 363849 pages reserved [ 1343.700222] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1343.705243] 0 pages cma reserved [ 1343.709172] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1343.716011] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1343.718393] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1343.722376] (null) [ 1343.725816] alloc_pages_current+0x155/0x260 [ 1343.730626] , order=0, oom_score_adj=1000 [ 1343.734069] ion_page_pool_alloc+0x118/0x1b0 [ 1343.734079] ion_system_heap_allocate+0x133/0x8c0 [ 1343.734089] ? ion_alloc+0x187/0x810 [ 1343.734102] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1343.738576] syz-executor.0 cpuset= [ 1343.748885] ? ion_system_contig_heap_create+0x130/0x130 [ 1343.748898] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1343.748911] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1343.748921] ion_alloc+0x204/0x810 [ 1343.754392] / [ 1343.756509] ? ion_dma_buf_release+0x40/0x40 [ 1343.760885] mems_allowed=0-1 [ 1343.765117] ? __might_fault+0x177/0x1b0 [ 1343.765131] ion_ioctl+0xea/0x1f0 [ 1343.765141] ? ion_query_heaps+0x360/0x360 [ 1343.765157] ? ion_query_heaps+0x360/0x360 [ 1343.830939] do_vfs_ioctl+0x75a/0xff0 [ 1343.834739] ? ioctl_preallocate+0x1a0/0x1a0 [ 1343.839138] ? lock_downgrade+0x740/0x740 [ 1343.843283] ? __fget+0x225/0x360 [ 1343.846726] ? do_vfs_ioctl+0xff0/0xff0 [ 1343.850690] ? security_file_ioctl+0x83/0xb0 [ 1343.855094] SyS_ioctl+0x7f/0xb0 [ 1343.858446] ? do_vfs_ioctl+0xff0/0xff0 [ 1343.862424] do_syscall_64+0x1d5/0x640 [ 1343.866320] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1343.871503] RIP: 0033:0x4665f9 [ 1343.874768] RSP: 002b:00007ff6cdf47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1343.882468] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1343.889733] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1343.897007] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1343.904276] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1343.911543] R13: 00007ffe714d338f R14: 00007ff6cdf47300 R15: 0000000000022000 [ 1343.918841] CPU: 0 PID: 1046 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1343.926648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1343.927507] syz-executor.1 cpuset= [ 1343.936000] Call Trace: [ 1343.936024] dump_stack+0x1b2/0x281 [ 1343.936037] dump_header+0x178/0x82f [ 1343.936049] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1343.936059] ? ___ratelimit+0x2cd/0x530 [ 1343.936071] oom_kill_process.cold+0x10/0xa40 [ 1343.936091] out_of_memory+0xe3e/0x1190 [ 1343.936105] ? oom_killer_disable+0x1c0/0x1c0 [ 1343.967422] / [ 1343.971682] ? mutex_trylock+0x152/0x1a0 [ 1343.977450] __alloc_pages_nodemask+0x23e1/0x2720 [ 1343.982326] ? lock_acquire+0x170/0x3f0 [ 1343.986312] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1343.987404] mems_allowed=0-1 [ 1343.991157] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1343.991174] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1343.991193] alloc_pages_current+0x155/0x260 [ 1343.991205] ion_page_pool_alloc+0x118/0x1b0 [ 1343.991215] ion_system_heap_allocate+0x133/0x8c0 [ 1343.991229] ? _raw_spin_unlock+0x29/0x40 [ 1344.022070] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1344.027001] ? ion_system_contig_heap_create+0x130/0x130 [ 1344.032448] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1344.037497] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1344.042511] ion_alloc+0x27a/0x810 [ 1344.046075] ? ion_dma_buf_release+0x40/0x40 [ 1344.050485] ? __might_fault+0x177/0x1b0 [ 1344.054543] ion_ioctl+0xea/0x1f0 [ 1344.057984] ? ion_query_heaps+0x360/0x360 [ 1344.062220] ? ion_query_heaps+0x360/0x360 [ 1344.066455] do_vfs_ioctl+0x75a/0xff0 [ 1344.070257] ? ioctl_preallocate+0x1a0/0x1a0 [ 1344.074663] ? lock_downgrade+0x740/0x740 [ 1344.078936] ? __fget+0x225/0x360 [ 1344.082385] ? do_vfs_ioctl+0xff0/0xff0 [ 1344.086380] ? security_file_ioctl+0x83/0xb0 [ 1344.090799] SyS_ioctl+0x7f/0xb0 [ 1344.094159] ? do_vfs_ioctl+0xff0/0xff0 [ 1344.098124] do_syscall_64+0x1d5/0x640 [ 1344.102013] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1344.107212] RIP: 0033:0x4665f9 [ 1344.110393] RSP: 002b:00007feafbab4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1344.118110] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1344.125392] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1344.132793] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1344.140142] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1344.147406] R13: 00007ffcb6e8eadf R14: 00007feafbab4300 R15: 0000000000022000 [ 1344.154781] CPU: 1 PID: 1035 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1344.162585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1344.171942] Call Trace: [ 1344.174537] dump_stack+0x1b2/0x281 [ 1344.178178] warn_alloc.cold+0x96/0x1cc [ 1344.182163] ? zone_watermark_ok_safe+0x220/0x220 [ 1344.187008] ? usleep_range+0x130/0x130 [ 1344.190975] ? try_to_free_pages+0x23f/0x6e0 [ 1344.195400] ? _find_next_bit+0xdb/0x100 [ 1344.199465] ? run_timer_softirq+0x5a0/0x5a0 [ 1344.203876] __alloc_pages_nodemask+0x2127/0x2720 [ 1344.208722] ? lock_acquire+0x170/0x3f0 [ 1344.212696] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1344.217531] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1344.222027] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1344.227483] alloc_pages_current+0x155/0x260 [ 1344.231899] ion_page_pool_alloc+0x118/0x1b0 [ 1344.236314] ion_system_heap_allocate+0x133/0x8c0 [ 1344.241157] ? ion_alloc+0x187/0x810 [ 1344.244866] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1344.250330] ? ion_system_contig_heap_create+0x130/0x130 [ 1344.255816] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1344.260838] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1344.265697] ion_alloc+0x204/0x810 [ 1344.269238] ? ion_dma_buf_release+0x40/0x40 [ 1344.273662] ? __might_fault+0x177/0x1b0 [ 1344.277731] ion_ioctl+0xea/0x1f0 [ 1344.281012] Mem-Info: [ 1344.281180] ? ion_query_heaps+0x360/0x360 [ 1344.283605] active_anon:22293 inactive_anon:33144 isolated_anon:0 [ 1344.283605] active_file:16 inactive_file:17 isolated_file:0 [ 1344.283605] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1344.283605] slab_reclaimable:11911 slab_unreclaimable:111784 [ 1344.283605] mapped:52225 shmem:33554 pagetables:753 bounce:0 [ 1344.283605] free:13936 free_pcp:104 free_cma:0 [ 1344.287846] ? ion_query_heaps+0x360/0x360 [ 1344.325334] do_vfs_ioctl+0x75a/0xff0 [ 1344.329133] ? ioctl_preallocate+0x1a0/0x1a0 [ 1344.333552] ? lock_downgrade+0x740/0x740 [ 1344.337701] ? __fget+0x225/0x360 [ 1344.341153] ? do_vfs_ioctl+0xff0/0xff0 [ 1344.345126] ? security_file_ioctl+0x83/0xb0 [ 1344.349551] SyS_ioctl+0x7f/0xb0 [ 1344.352917] ? do_vfs_ioctl+0xff0/0xff0 [ 1344.356885] do_syscall_64+0x1d5/0x640 [ 1344.360772] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1344.365983] RIP: 0033:0x4665f9 [ 1344.369167] RSP: 002b:00007efdf923c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1344.371046] Node 0 active_anon:88656kB inactive_anon:108440kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:109868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1344.376870] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1344.376879] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1344.419371] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1344.426656] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1344.431028] Node 1 active_anon:516kB inactive_anon:24136kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1344.433921] R13: 00007fff68d20daf R14: 00007efdf923c300 R15: 0000000000022000 [ 1344.441665] warn_alloc_show_mem: 1 callbacks suppressed [ 1344.441669] Mem-Info: [ 1344.476119] CPU: 0 PID: 1044 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1344.485136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1344.485383] active_anon:22293 inactive_anon:33144 isolated_anon:0 [ 1344.485383] active_file:16 inactive_file:17 isolated_file:0 [ 1344.485383] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1344.485383] slab_reclaimable:11911 slab_unreclaimable:111784 [ 1344.485383] mapped:52225 shmem:33554 pagetables:753 bounce:0 [ 1344.485383] free:13936 free_pcp:102 free_cma:0 [ 1344.494494] Call Trace: [ 1344.494517] dump_stack+0x1b2/0x281 [ 1344.494530] warn_alloc.cold+0x96/0x1cc [ 1344.494542] ? zone_watermark_ok_safe+0x220/0x220 [ 1344.494551] ? usleep_range+0x130/0x130 [ 1344.494560] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1344.494571] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1344.494581] ? run_timer_softirq+0x5a0/0x5a0 [ 1344.494607] __alloc_pages_nodemask+0x2127/0x2720 [ 1344.534437] Node 0 active_anon:88656kB inactive_anon:108440kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:0kB writeback:0kB shmem:109868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1344.538137] ? lock_acquire+0x170/0x3f0 [ 1344.563126] Node 1 active_anon:516kB inactive_anon:24136kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1344.566627] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1344.566639] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1344.566654] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1344.566672] alloc_pages_current+0x155/0x260 [ 1344.566682] ion_page_pool_alloc+0x118/0x1b0 [ 1344.566691] ion_system_heap_allocate+0x133/0x8c0 [ 1344.566702] ? _raw_spin_unlock+0x29/0x40 [ 1344.566715] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1344.662784] ? ion_system_contig_heap_create+0x130/0x130 [ 1344.668247] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1344.671092] Node 0 [ 1344.673266] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1344.673285] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1344.673290] lowmem_reserve[]: [ 1344.675520] ion_alloc+0x27a/0x810 [ 1344.680351] 0 [ 1344.705875] ? ion_dma_buf_release+0x40/0x40 [ 1344.705888] ? __might_fault+0x177/0x1b0 [ 1344.705898] ion_ioctl+0xea/0x1f0 [ 1344.705907] ? ion_query_heaps+0x360/0x360 [ 1344.705917] ? ion_query_heaps+0x360/0x360 [ 1344.705927] do_vfs_ioctl+0x75a/0xff0 [ 1344.705938] ? ioctl_preallocate+0x1a0/0x1a0 [ 1344.705948] ? lock_downgrade+0x740/0x740 [ 1344.705970] ? __fget+0x225/0x360 [ 1344.705978] ? do_vfs_ioctl+0xff0/0xff0 [ 1344.705989] ? security_file_ioctl+0x83/0xb0 [ 1344.705998] SyS_ioctl+0x7f/0xb0 [ 1344.706010] ? do_vfs_ioctl+0xff0/0xff0 [ 1344.766244] do_syscall_64+0x1d5/0x640 [ 1344.770155] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1344.775348] RIP: 0033:0x4665f9 [ 1344.775583] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1344.778553] RSP: 002b:00007f56be175188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1344.791011] 2717 [ 1344.793613] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1344.793621] 2718 [ 1344.795664] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1344.795672] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1344.819523] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1344.826800] R13: 00007fffaba42f8f R14: 00007f56be175300 R15: 0000000000022000 [ 1344.827754] 2718 [ 1344.834445] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1344.841711] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1344.871052] 2718 [ 1344.874180] Node 0 DMA32 free:120228kB min:36200kB low:45248kB high:54296kB active_anon:88656kB inactive_anon:108440kB active_file:60kB inactive_file:3160kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2872kB bounce:0kB free_pcp:304kB local_pcp:108kB free_cma:0kB [ 1344.915133] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1344.921842] Node 0 DMA32 free:120052kB min:36200kB low:45248kB high:54296kB active_anon:88656kB inactive_anon:108440kB active_file:160kB inactive_file:3660kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2872kB bounce:0kB free_pcp:376kB local_pcp:316kB free_cma:0kB [ 1344.922589] systemd[1]: Stopped Journal Service. [ 1344.990510] lowmem_reserve[]: 0 0 0 0 0 [ 1345.002223] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1345.021052] lowmem_reserve[]: 0 0 0 0 0 [ 1345.054611] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1345.078016] lowmem_reserve[]: [ 1345.081935] systemd[1]: Starting Journal Service... [ 1345.089210] 0 0 0 0 0 [ 1345.109653] Node 1 Normal free:394596kB min:53696kB low:67120kB high:80544kB active_anon:512kB inactive_anon:24136kB active_file:4kB inactive_file:1268kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:140kB bounce:0kB free_pcp:188kB local_pcp:76kB free_cma:0kB [ 1345.131055] lowmem_reserve[]: 0 0 0 0 0 [ 1345.155180] Node 1 Normal free:363876kB min:53696kB low:67120kB high:80544kB active_anon:512kB inactive_anon:24136kB active_file:4kB inactive_file:1268kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:140kB bounce:0kB free_pcp:188kB local_pcp:112kB free_cma:0kB [ 1345.221037] lowmem_reserve[]: 0 0 0 0 0 [ 1345.225075] Node 0 DMA: 0*4kB 2*8kB (UE) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10976kB [ 1345.245684] lowmem_reserve[]: 0 0 0 0 0 [ 1345.249926] Node 0 DMA: 0*4kB 2*8kB (UE) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10976kB [ 1345.261024] Node 0 DMA32: 499*4kB (UME) 64*8kB (E) 147*16kB (E) 17*32kB (ME) 865*64kB (UME) 617*128kB (UM) 77*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 159452kB [ 1345.297440] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1345.312226] Node 1 Normal: 1293*4kB (UME) 180*8kB (UME) 201*16kB (UME) 196*32kB (UME) 896*64kB (UME) 775*128kB (UM) 606*256kB (UME) 141*512kB (U) 6*1024kB (U) 2*2048kB (U) 0*4096kB = 410212kB [ 1345.324497] Node 0 DMA32: 498*4kB (ME) 65*8kB (ME) 147*16kB (E) 11*32kB (E) 31*64kB (ME) 495*128kB (UM) 77*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 90272kB [ 1345.333384] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1345.359535] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1345.368631] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1345.381406] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1345.390103] 35588 total pagecache pages [ 1345.396814] 0 pages in swap cache [ 1345.400297] Swap cache stats: add 0, delete 0, find 0/0 [ 1345.406522] Free swap = 0kB [ 1345.409540] Total swap = 0kB [ 1345.411019] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1345.434829] 2097051 pages RAM [ 1345.439038] 0 pages HighMem/MovableOnly [ 1345.443382] 363849 pages reserved [ 1345.446850] 0 pages cma reserved [ 1345.450248] Out of memory (oom_kill_allocating_task): Kill process 1046 (syz-executor.0) score 0 or sacrifice child [ 1345.461038] Node 1 Normal: 3*4kB (UME) 4*8kB (UME) 4*16kB (ME) 6*32kB (ME) 20*64kB (UME) 133*128kB (UM) 606*256kB (UME) 141*512kB (U) 6*1024kB (U) 2*2048kB (U) 0*4096kB = 256172kB [ 1345.485186] Killed process 1046 (syz-executor.0) total-vm:93252kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1345.501024] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1345.509899] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1345.511118] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1345.541051] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1345.546790] CPU: 0 PID: 1046 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1345.554608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1345.561055] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1345.563975] Call Trace: [ 1345.575494] dump_stack+0x1b2/0x281 [ 1345.579177] warn_alloc.cold+0x96/0x1cc [ 1345.583198] ? zone_watermark_ok_safe+0x220/0x220 [ 1345.588057] ? wait_for_completion_io+0x10/0x10 [ 1345.592741] __alloc_pages_nodemask+0x2127/0x2720 [ 1345.597621] ? lock_acquire+0x170/0x3f0 [ 1345.601608] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1345.606555] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1345.607754] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1345.611060] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1345.611080] alloc_pages_current+0x155/0x260 [ 1345.611091] ion_page_pool_alloc+0x118/0x1b0 [ 1345.611101] ion_system_heap_allocate+0x133/0x8c0 [ 1345.611113] ? _raw_spin_unlock+0x29/0x40 [ 1345.611121] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1345.611130] ? ion_system_contig_heap_create+0x130/0x130 [ 1345.611140] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1345.611152] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1345.611163] ion_alloc+0x27a/0x810 [ 1345.611175] ? ion_dma_buf_release+0x40/0x40 [ 1345.611187] ? __might_fault+0x177/0x1b0 [ 1345.611198] ion_ioctl+0xea/0x1f0 [ 1345.611208] ? ion_query_heaps+0x360/0x360 [ 1345.658970] 34960 total pagecache pages [ 1345.660336] ? ion_query_heaps+0x360/0x360 [ 1345.693101] do_vfs_ioctl+0x75a/0xff0 [ 1345.696912] ? ioctl_preallocate+0x1a0/0x1a0 [ 1345.701333] ? lock_downgrade+0x740/0x740 [ 1345.705485] ? __fget+0x225/0x360 [ 1345.708932] ? do_vfs_ioctl+0xff0/0xff0 [ 1345.713085] ? security_file_ioctl+0x83/0xb0 [ 1345.717486] SyS_ioctl+0x7f/0xb0 [ 1345.720845] ? do_vfs_ioctl+0xff0/0xff0 [ 1345.724818] do_syscall_64+0x1d5/0x640 [ 1345.728707] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1345.733892] RIP: 0033:0x4665f9 [ 1345.737089] RSP: 002b:00007feafbab4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1345.744791] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1345.752056] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1345.759513] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1345.766780] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1345.774043] R13: 00007ffcb6e8eadf R14: 00007feafbab4300 R15: 0000000000022000 [ 1345.791044] 0 pages in swap cache [ 1345.794541] Swap cache stats: add 0, delete 0, find 0/0 [ 1345.799897] Free swap = 0kB [ 1345.823905] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1345.841013] Total swap = 0kB [ 1345.844131] 2097051 pages RAM [ 1345.845271] oom_reaper: reaped process 1047 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1345.847225] 0 pages HighMem/MovableOnly [ 1345.858104] warn_alloc_show_mem: 1 callbacks suppressed [ 1345.858108] Mem-Info: [ 1345.871301] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1345.876445] CPU: 1 PID: 1035 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1345.880407] active_anon:22378 inactive_anon:33144 isolated_anon:0 [ 1345.880407] active_file:15 inactive_file:29 isolated_file:11 [ 1345.880407] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1345.880407] slab_reclaimable:11911 slab_unreclaimable:111280 [ 1345.880407] mapped:52276 shmem:33554 pagetables:758 bounce:0 [ 1345.880407] free:13808 free_pcp:205 free_cma:0 [ 1345.884250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1345.884255] Call Trace: [ 1345.884283] dump_stack+0x1b2/0x281 [ 1345.884299] warn_alloc.cold+0x96/0x1cc [ 1345.884313] ? zone_watermark_ok_safe+0x220/0x220 [ 1345.884332] __alloc_pages_nodemask+0x2127/0x2720 [ 1345.884372] ? lock_acquire+0x170/0x3f0 [ 1345.930250] oom_reaper: reaped process 1045 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1345.933415] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1345.933433] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1345.933448] ? __mutex_unlock_slowpath+0x75/0x770 [ 1345.937465] Node 0 active_anon:88600kB inactive_anon:108440kB active_file:60kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):44kB mapped:174144kB dirty:0kB writeback:0kB shmem:109868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1345.942271] alloc_pages_current+0x155/0x260 [ 1345.942286] ion_page_pool_alloc+0x118/0x1b0 [ 1345.942295] ion_system_heap_allocate+0x133/0x8c0 [ 1345.942309] ? _raw_spin_unlock+0x29/0x40 [ 1345.947153] Node 1 active_anon:712kB inactive_anon:24136kB active_file:0kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160kB dirty:0kB writeback:0kB shmem:24348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1345.951113] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1345.951123] ? ion_system_contig_heap_create+0x130/0x130 [ 1345.951133] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1345.951145] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1345.951155] ion_alloc+0x27a/0x810 [ 1345.961048] Node 0 [ 1345.965861] ? ion_dma_buf_release+0x40/0x40 [ 1345.971359] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1345.976145] ? __might_fault+0x177/0x1b0 [ 1346.004196] lowmem_reserve[]: [ 1346.008562] ion_ioctl+0xea/0x1f0 [ 1346.012971] 0 [ 1346.017869] ? ion_query_heaps+0x360/0x360 [ 1346.022050] 2717 [ 1346.049171] ? ion_query_heaps+0x360/0x360 [ 1346.049183] do_vfs_ioctl+0x75a/0xff0 [ 1346.049196] ? ioctl_preallocate+0x1a0/0x1a0 [ 1346.049210] ? lock_downgrade+0x740/0x740 [ 1346.054153] 2718 [ 1346.059579] ? __fget+0x225/0x360 [ 1346.064847] 2718 [ 1346.069425] ? do_vfs_ioctl+0xff0/0xff0 [ 1346.073158] 2718 [ 1346.075350] ? security_file_ioctl+0x83/0xb0 [ 1346.105317] SyS_ioctl+0x7f/0xb0 [ 1346.105327] ? do_vfs_ioctl+0xff0/0xff0 [ 1346.105344] do_syscall_64+0x1d5/0x640 [ 1346.105360] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1346.109414] Node 0 [ 1346.112512] RIP: 0033:0x4665f9 [ 1346.112517] RSP: 002b:00007efdf923c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1346.112526] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1346.112531] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1346.112536] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1346.112544] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1346.218493] R13: 00007fff68d20daf R14: 00007efdf923c300 R15: 0000000000022000 [ 1346.225850] DMA32 free:17988kB min:36200kB low:45248kB high:54296kB active_anon:88900kB inactive_anon:108440kB active_file:504kB inactive_file:624kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7776kB pagetables:2892kB bounce:0kB free_pcp:976kB local_pcp:276kB free_cma:0kB [ 1346.271342] 363849 pages reserved [ 1346.274840] 0 pages cma reserved [ 1346.307693] lowmem_reserve[]: 0 0 0 0 0 [ 1346.341028] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1346.431032] lowmem_reserve[]: 0 0 0 0 0 [ 1346.435244] Node 1 Normal free:286856kB min:53696kB low:67120kB high:80544kB active_anon:720kB inactive_anon:24136kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:180kB bounce:0kB free_pcp:1392kB local_pcp:712kB free_cma:0kB [ 1346.531065] lowmem_reserve[]: 0 0 0 0 0 [ 1346.535547] Node 0 DMA: 4*4kB (U) 2*8kB (UE) 1*16kB (E) 3*32kB (UE) 8*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11408kB [ 1346.572318] Node 0 DMA32: 861*4kB (UME) 252*8kB (UME) 205*16kB (ME) 1685*32kB (UME) 2893*64kB (UME) 922*128kB (UM) 203*256kB (UM) 24*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 430084kB [ 1346.604252] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1346.640095] Node 1 Normal: 4065*4kB (UME) 842*8kB (UME) 523*16kB (UME) 483*32kB (UME) 1069*64kB (UME) 294*128kB (UM) 85*256kB (UME) 27*512kB (U) 20*1024kB (U) 15*2048kB (U) 2*4096kB (U) = 247844kB [ 1346.678723] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1346.711046] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1346.740035] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 08:24:36 executing program 0: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1346.761177] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1346.784937] 35490 total pagecache pages [ 1346.789139] 0 pages in swap cache [ 1346.821035] Swap cache stats: add 0, delete 0, find 0/0 [ 1346.826451] Free swap = 0kB [ 1346.829503] Total swap = 0kB [ 1346.861060] 2097051 pages RAM [ 1346.864227] 0 pages HighMem/MovableOnly [ 1346.868201] 363849 pages reserved [ 1346.891004] 0 pages cma reserved [ 1346.971952] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1347.023072] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1347.042673] systemd-journal cpuset=/ mems_allowed=0-1 [ 1347.046548] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1347.054691] CPU: 1 PID: 1040 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1347.062617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1347.071971] Call Trace: [ 1347.074574] dump_stack+0x1b2/0x281 [ 1347.078209] warn_alloc.cold+0x96/0x1cc [ 1347.082204] ? zone_watermark_ok_safe+0x220/0x220 [ 1347.087055] __alloc_pages_nodemask+0x2127/0x2720 [ 1347.092162] ? lock_acquire+0x170/0x3f0 [ 1347.096163] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1347.101119] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1347.106592] ? __mutex_unlock_slowpath+0x75/0x770 [ 1347.111460] alloc_pages_current+0x155/0x260 [ 1347.115881] ion_page_pool_alloc+0x118/0x1b0 [ 1347.120289] ion_system_heap_allocate+0x133/0x8c0 [ 1347.125130] ? _raw_spin_unlock+0x29/0x40 [ 1347.129286] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1347.134249] ? ion_system_contig_heap_create+0x130/0x130 [ 1347.139701] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1347.144717] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1347.149556] ion_alloc+0x27a/0x810 [ 1347.153101] ? ion_dma_buf_release+0x40/0x40 [ 1347.157514] ? __might_fault+0x177/0x1b0 [ 1347.161581] ion_ioctl+0xea/0x1f0 [ 1347.165071] ? ion_query_heaps+0x360/0x360 [ 1347.169304] ? ion_query_heaps+0x360/0x360 [ 1347.173539] do_vfs_ioctl+0x75a/0xff0 [ 1347.177361] ? ioctl_preallocate+0x1a0/0x1a0 [ 1347.181771] ? lock_downgrade+0x740/0x740 [ 1347.187060] ? __fget+0x225/0x360 [ 1347.190514] ? do_vfs_ioctl+0xff0/0xff0 [ 1347.194578] ? security_file_ioctl+0x83/0xb0 [ 1347.199000] SyS_ioctl+0x7f/0xb0 [ 1347.202361] ? do_vfs_ioctl+0xff0/0xff0 [ 1347.206330] do_syscall_64+0x1d5/0x640 [ 1347.210221] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1347.215407] RIP: 0033:0x4665f9 [ 1347.218602] RSP: 002b:00007ff6cdf47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1347.226434] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1347.233703] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1347.241073] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1347.248339] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1347.255621] R13: 00007ffe714d338f R14: 00007ff6cdf47300 R15: 0000000000022000 [ 1347.262906] CPU: 0 PID: 1049 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1347.270803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1347.277084] syz-executor.0: [ 1347.280339] Call Trace: [ 1347.285956] dump_stack+0x1b2/0x281 [ 1347.289630] dump_header+0x178/0x82f [ 1347.293347] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1347.298541] ? ___ratelimit+0x2cd/0x530 [ 1347.298691] page allocation failure: order:4 [ 1347.302522] oom_kill_process.cold+0x10/0xa40 [ 1347.302542] out_of_memory+0xe3e/0x1190 [ 1347.302554] ? oom_killer_disable+0x1c0/0x1c0 [ 1347.302563] ? mutex_trylock+0x152/0x1a0 [ 1347.302573] __alloc_pages_nodemask+0x23e1/0x2720 [ 1347.302591] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1347.306993] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1347.311482] ? sha256_avx2_final+0x3b/0x70 [ 1347.311499] ? mark_held_locks+0xa6/0xf0 [ 1347.311509] ? cache_grow_begin+0x3f/0x700 [ 1347.311518] cache_grow_begin+0x91/0x700 [ 1347.311530] fallback_alloc+0x207/0x2c0 [ 1347.311541] kmem_cache_alloc+0x1e5/0x3c0 [ 1347.311552] ima_d_path+0x4d/0x1e0 [ 1347.311562] process_measurement+0x905/0xb20 [ 1347.311574] ? ima_rdwr_violation_check+0x3a0/0x3a0 [ 1347.311582] ? generic_file_open+0x68/0x90 [ 1347.311596] ? ext4_release_file+0x2d0/0x2d0 [ 1347.311607] ? apparmor_file_alloc_security+0x800/0x800 [ 1347.311615] ? lock_downgrade+0x740/0x740 [ 1347.311627] ? file_ra_state_init+0xc4/0x1e0 [ 1347.311635] ? do_dentry_open+0x698/0xec0 [ 1347.311646] ? ext4_release_file+0x2d0/0x2d0 [ 1347.338142] (null) [ 1347.340906] ? __inode_permission+0xcd/0x2f0 [ 1347.358396] syz-executor.0 cpuset= [ 1347.361529] ? vfs_open+0x10d/0x220 [ 1347.361541] path_openat+0x10ad/0x2970 [ 1347.361556] ? path_lookupat+0x780/0x780 [ 1347.361566] ? trace_hardirqs_on+0x10/0x10 [ 1347.361579] do_filp_open+0x179/0x3c0 [ 1347.361588] ? may_open_dev+0xe0/0xe0 [ 1347.361602] ? lock_downgrade+0x740/0x740 [ 1347.361611] ? do_raw_spin_unlock+0x164/0x220 [ 1347.361622] ? _raw_spin_unlock+0x29/0x40 [ 1347.361633] ? __alloc_fd+0x1be/0x490 [ 1347.375036] / [ 1347.379451] do_sys_open+0x296/0x410 [ 1347.398779] mems_allowed=0-1 [ 1347.401991] ? filp_open+0x60/0x60 [ 1347.402003] ? do_syscall_64+0x4c/0x640 [ 1347.402009] ? do_sys_open+0x410/0x410 [ 1347.402017] do_syscall_64+0x1d5/0x640 [ 1347.402030] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1347.402038] RIP: 0033:0x7f6bae3c26f0 [ 1347.402043] RSP: 002b:00007ffcf6486fa8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1347.402051] RAX: ffffffffffffffda RBX: 000055f0f97041d0 RCX: 00007f6bae3c26f0 [ 1347.402056] RDX: 00000000000001b6 RSI: 0000000000080000 RDI: 000055f0f95e3370 [ 1347.402060] RBP: 0000000000000008 R08: 0000000000000008 R09: 0000000000000001 [ 1347.402065] R10: 0000000000080000 R11: 0000000000000246 R12: 00007f6baee0a7b4 [ 1347.402069] R13: 0000000000000001 R14: 000055f0f95dc4a0 R15: 0000000000000000 [ 1347.471034] syz-executor.3: [ 1347.484867] CPU: 1 PID: 1051 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1347.484873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1347.484876] Call Trace: [ 1347.484897] dump_stack+0x1b2/0x281 [ 1347.484913] warn_alloc.cold+0x96/0x1cc [ 1347.484924] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1347.484935] ? zone_watermark_ok_safe+0x220/0x220 [ 1347.484960] __alloc_pages_nodemask+0x2127/0x2720 [ 1347.484969] ? __schedule+0x893/0x1de0 [ 1347.484985] ? lock_acquire+0x170/0x3f0 [ 1347.485002] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1347.512200] page allocation failure: order:0 [ 1347.516154] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1347.540770] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1347.540932] ? __mutex_unlock_slowpath+0x75/0x770 [ 1347.548747] (null) [ 1347.558066] alloc_pages_current+0x155/0x260 [ 1347.558082] ion_page_pool_alloc+0x118/0x1b0 [ 1347.558095] ion_system_heap_allocate+0x133/0x8c0 [ 1347.560668] syz-executor.3 cpuset= [ 1347.564276] ? ion_alloc+0x187/0x810 [ 1347.564294] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1347.564305] ? ion_system_contig_heap_create+0x130/0x130 [ 1347.568259] / [ 1347.573265] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1347.578214] mems_allowed=0-1 [ 1347.583005] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1347.583018] ion_alloc+0x204/0x810 [ 1347.583032] ? ion_dma_buf_release+0x40/0x40 [ 1347.641015] Mem-Info: [ 1347.645948] ? __might_fault+0x177/0x1b0 [ 1347.671017] active_anon:22361 inactive_anon:33144 isolated_anon:0 [ 1347.671017] active_file:20 inactive_file:17 isolated_file:0 [ 1347.671017] unevictable:0 dirty:0 writeback:1 unstable:0 [ 1347.671017] slab_reclaimable:11931 slab_unreclaimable:110950 [ 1347.671017] mapped:43568 shmem:33554 pagetables:763 bounce:0 [ 1347.671017] free:13972 free_pcp:59 free_cma:0 [ 1347.673947] ion_ioctl+0xea/0x1f0 [ 1347.676344] Node 0 active_anon:88720kB inactive_anon:108440kB active_file:60kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174204kB dirty:0kB writeback:12kB shmem:109868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1347.680394] ? ion_query_heaps+0x360/0x360 [ 1347.749210] ? ion_query_heaps+0x360/0x360 [ 1347.751022] Node 1 active_anon:724kB inactive_anon:24136kB active_file:20kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68kB dirty:8kB writeback:0kB shmem:24348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1347.753454] do_vfs_ioctl+0x75a/0xff0 [ 1347.784050] ? ioctl_preallocate+0x1a0/0x1a0 [ 1347.791057] ? lock_downgrade+0x740/0x740 [ 1347.795203] ? __fget+0x225/0x360 [ 1347.798651] ? do_vfs_ioctl+0xff0/0xff0 [ 1347.802619] ? security_file_ioctl+0x83/0xb0 [ 1347.807021] SyS_ioctl+0x7f/0xb0 [ 1347.810375] ? do_vfs_ioctl+0xff0/0xff0 [ 1347.811007] Node 0 [ 1347.814342] do_syscall_64+0x1d5/0x640 [ 1347.814357] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1347.814362] lowmem_reserve[]: [ 1347.816603] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1347.820497] 0 [ 1347.845996] RIP: 0033:0x4665f9 [ 1347.846002] RSP: 002b:00007feafbab4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1347.846011] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1347.846016] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1347.846020] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1347.846026] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1347.846031] R13: 00007ffcb6e8eadf R14: 00007feafbab4300 R15: 0000000000022000 [ 1347.857599] warn_alloc_show_mem: 2 callbacks suppressed [ 1347.857603] Mem-Info: [ 1347.859482] syz-executor.1: [ 1347.875551] active_anon:22361 inactive_anon:33144 isolated_anon:0 [ 1347.875551] active_file:20 inactive_file:17 isolated_file:0 [ 1347.875551] unevictable:0 dirty:0 writeback:1 unstable:0 [ 1347.875551] slab_reclaimable:11931 slab_unreclaimable:110950 [ 1347.875551] mapped:43568 shmem:33554 pagetables:763 bounce:0 [ 1347.875551] free:13972 free_pcp:59 free_cma:0 [ 1347.881869] syz-executor.5: [ 1347.890542] Node 0 active_anon:88720kB inactive_anon:108440kB active_file:60kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174204kB dirty:0kB writeback:12kB shmem:109868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1347.905699] CPU: 0 PID: 1045 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1347.916684] Node 1 active_anon:724kB inactive_anon:24136kB active_file:20kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:68kB dirty:8kB writeback:0kB shmem:24348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1347.948991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1347.948996] Call Trace: [ 1347.949019] dump_stack+0x1b2/0x281 [ 1347.949032] warn_alloc.cold+0x96/0x1cc [ 1347.949044] ? zone_watermark_ok_safe+0x220/0x220 [ 1347.949053] ? usleep_range+0x130/0x130 [ 1347.949062] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1347.949074] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1347.949083] ? run_timer_softirq+0x5a0/0x5a0 [ 1347.949098] __alloc_pages_nodemask+0x2127/0x2720 [ 1347.949114] ? lock_acquire+0x170/0x3f0 [ 1347.949129] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1347.949139] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1347.949157] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1347.960459] Node 0 [ 1347.980343] ? alloc_pages_current+0x16/0x260 [ 1347.980355] alloc_pages_current+0x155/0x260 [ 1347.980369] ion_page_pool_alloc+0x118/0x1b0 [ 1347.980379] ion_system_heap_allocate+0x133/0x8c0 [ 1347.980388] ? ion_alloc+0x187/0x810 [ 1347.980397] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1347.980406] ? ion_system_contig_heap_create+0x130/0x130 [ 1347.980415] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1347.980425] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1347.980434] ion_alloc+0x204/0x810 [ 1347.980448] ? ion_dma_buf_release+0x40/0x40 [ 1347.980460] ? __might_fault+0x177/0x1b0 [ 1347.980471] ion_ioctl+0xea/0x1f0 [ 1347.980479] ? ion_query_heaps+0x360/0x360 [ 1347.980490] ? ion_query_heaps+0x360/0x360 [ 1347.980503] do_vfs_ioctl+0x75a/0xff0 [ 1347.997408] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1348.015140] ? ioctl_preallocate+0x1a0/0x1a0 [ 1348.015151] ? lock_downgrade+0x740/0x740 [ 1348.015163] ? __fget+0x225/0x360 [ 1348.015171] ? do_vfs_ioctl+0xff0/0xff0 [ 1348.015182] ? security_file_ioctl+0x83/0xb0 [ 1348.015191] SyS_ioctl+0x7f/0xb0 [ 1348.015197] ? do_vfs_ioctl+0xff0/0xff0 [ 1348.015208] do_syscall_64+0x1d5/0x640 [ 1348.015223] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1348.015232] RIP: 0033:0x4665f9 [ 1348.015237] RSP: 002b:00007f84085c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1348.015247] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1348.015252] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1348.015257] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1348.015262] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1348.015267] R13: 00007ffcbe3a947f R14: 00007f84085c7300 R15: 0000000000022000 [ 1348.023828] page allocation failure: order:0 [ 1348.033064] lowmem_reserve[]: [ 1348.042961] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1348.049964] 0 [ 1348.062052] page allocation failure: order:0 [ 1348.071609] 2717 [ 1348.080349] (null) [ 1348.088403] 2718 [ 1348.088933] syz-executor.5 cpuset= [ 1348.095546] 2718 [ 1348.105152] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1348.115408] 2718 [ 1348.119616] 2717 [ 1348.127696] 2718 [ 1348.137604] Node 0 [ 1348.141008] (null) [ 1348.147459] / [ 1348.156917] syz-executor.1 cpuset= [ 1348.191944] DMA32 free:18100kB min:36200kB low:45248kB high:54296kB active_anon:88728kB inactive_anon:108440kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2836kB bounce:0kB free_pcp:236kB local_pcp:116kB free_cma:0kB [ 1348.199546] 2718 [ 1348.210175] lowmem_reserve[]: [ 1348.219366] 2718 [ 1348.232462] 0 [ 1348.256217] mems_allowed=0-1 [ 1348.263151] / [ 1348.278481] 0 [ 1348.288962] Node 0 [ 1348.306140] CPU: 1 PID: 1047 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1348.311163] DMA32 free:18100kB min:36200kB low:45248kB high:54296kB active_anon:88728kB inactive_anon:108440kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2836kB bounce:0kB free_pcp:236kB local_pcp:120kB free_cma:0kB [ 1348.312937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1348.314989] lowmem_reserve[]: [ 1348.317211] Call Trace: [ 1348.319343] 0 [ 1348.321159] dump_stack+0x1b2/0x281 [ 1348.321173] warn_alloc.cold+0x96/0x1cc [ 1348.321184] ? zone_watermark_ok_safe+0x220/0x220 [ 1348.321196] ? usleep_range+0x130/0x130 [ 1348.324741] mems_allowed=0-1 [ 1348.353095] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1348.353111] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1348.353121] ? run_timer_softirq+0x5a0/0x5a0 [ 1348.353138] __alloc_pages_nodemask+0x2127/0x2720 [ 1348.353154] ? lock_acquire+0x170/0x3f0 [ 1348.371029] 0 [ 1348.378734] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1348.461012] 0 [ 1348.462728] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1348.466692] 0 [ 1348.468489] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1348.486815] alloc_pages_current+0x155/0x260 [ 1348.491350] ion_page_pool_alloc+0x118/0x1b0 [ 1348.495767] ion_system_heap_allocate+0x133/0x8c0 [ 1348.500610] ? ion_alloc+0x187/0x810 [ 1348.501010] 0 [ 1348.504316] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1348.504323] Node 0 [ 1348.506136] ? ion_system_contig_heap_create+0x130/0x130 [ 1348.519285] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1348.524324] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1348.529183] ion_alloc+0x204/0x810 [ 1348.531045] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1348.532727] ? ion_dma_buf_release+0x40/0x40 [ 1348.562200] ? __might_fault+0x177/0x1b0 [ 1348.566269] ion_ioctl+0xea/0x1f0 [ 1348.569753] ? ion_query_heaps+0x360/0x360 [ 1348.574018] ? ion_query_heaps+0x360/0x360 [ 1348.578383] do_vfs_ioctl+0x75a/0xff0 [ 1348.582186] ? ioctl_preallocate+0x1a0/0x1a0 [ 1348.586594] ? lock_downgrade+0x740/0x740 [ 1348.590748] ? __fget+0x225/0x360 [ 1348.594202] ? do_vfs_ioctl+0xff0/0xff0 [ 1348.598196] ? security_file_ioctl+0x83/0xb0 [ 1348.602624] SyS_ioctl+0x7f/0xb0 [ 1348.605987] ? do_vfs_ioctl+0xff0/0xff0 [ 1348.610079] do_syscall_64+0x1d5/0x640 [ 1348.611012] lowmem_reserve[]: 0 [ 1348.613975] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1348.613976] 0 0 [ 1348.617250] RIP: 0033:0x4665f9 [ 1348.627587] RSP: 002b:00007f1bb23e0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1348.635296] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1348.642591] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1348.649952] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1348.651032] 0 [ 1348.657241] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1348.657250] R13: 00007ffeb0190c0f R14: 00007f1bb23e0300 R15: 0000000000022000 [ 1348.659049] 0 [ 1348.674134] CPU: 0 PID: 1035 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1348.683731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1348.686041] 0 [ 1348.693116] Call Trace: [ 1348.693139] dump_stack+0x1b2/0x281 [ 1348.693153] warn_alloc.cold+0x96/0x1cc [ 1348.693164] ? zone_watermark_ok_safe+0x220/0x220 [ 1348.693174] ? usleep_range+0x130/0x130 [ 1348.693182] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1348.693194] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1348.693203] ? run_timer_softirq+0x5a0/0x5a0 [ 1348.693218] __alloc_pages_nodemask+0x2127/0x2720 [ 1348.693233] ? lock_acquire+0x170/0x3f0 [ 1348.693247] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1348.693257] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1348.693272] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1348.693290] alloc_pages_current+0x155/0x260 [ 1348.693301] ion_page_pool_alloc+0x118/0x1b0 [ 1348.693310] ion_system_heap_allocate+0x133/0x8c0 [ 1348.693321] ? _raw_spin_unlock+0x29/0x40 [ 1348.693342] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1348.704310] 0 [ 1348.704372] ? ion_system_contig_heap_create+0x130/0x130 [ 1348.708387] 0 [ 1348.713166] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1348.713180] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1348.713191] ion_alloc+0x27a/0x810 [ 1348.713205] ? ion_dma_buf_release+0x40/0x40 [ 1348.713216] ? __might_fault+0x177/0x1b0 [ 1348.713226] ion_ioctl+0xea/0x1f0 [ 1348.713234] ? ion_query_heaps+0x360/0x360 [ 1348.713244] ? ion_query_heaps+0x360/0x360 [ 1348.713254] do_vfs_ioctl+0x75a/0xff0 [ 1348.713265] ? ioctl_preallocate+0x1a0/0x1a0 [ 1348.713274] ? lock_downgrade+0x740/0x740 [ 1348.713286] ? __fget+0x225/0x360 [ 1348.713295] ? do_vfs_ioctl+0xff0/0xff0 [ 1348.713306] ? security_file_ioctl+0x83/0xb0 [ 1348.713315] SyS_ioctl+0x7f/0xb0 [ 1348.713321] ? do_vfs_ioctl+0xff0/0xff0 [ 1348.713332] do_syscall_64+0x1d5/0x640 [ 1348.713345] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1348.713354] RIP: 0033:0x4665f9 [ 1348.713362] RSP: 002b:00007efdf923c188 EFLAGS: 00000246 [ 1348.722416] ORIG_RAX: 0000000000000010 08:24:38 executing program 2: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1348.722422] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1348.722427] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1348.722432] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1348.722437] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1348.722441] R13: 00007fff68d20daf R14: 00007efdf923c300 R15: 0000000000022000 [ 1348.746100] Node 0 [ 1348.750534] Node 1 Normal free:26804kB min:53696kB low:67120kB high:80544kB active_anon:724kB inactive_anon:24136kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1348.750555] lowmem_reserve[]: 0 0 0 [ 1348.780349] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1348.780932] 0 [ 1348.786956] lowmem_reserve[]: [ 1348.811013] 0 [ 1348.854642] 0 [ 1348.974143] 0 0 0 0 [ 1348.984599] Node 1 Normal free:207140kB min:53696kB low:67120kB high:80544kB active_anon:724kB inactive_anon:24136kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:160kB bounce:0kB free_pcp:668kB local_pcp:0kB free_cma:0kB [ 1349.014429] lowmem_reserve[]: 0 0 0 0 0 [ 1349.018596] Node 0 DMA: 10*4kB (U) 4*8kB (UE) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11000kB [ 1349.033856] Node 0 DMA32: 995*4kB (UE) 404*8kB (UE) 488*16kB (UE) 1706*32kB (UE) 55*64kB (UME) 14*128kB (UM) 3*256kB (UM) 5*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 79276kB [ 1349.047096] Node 0 [ 1349.049907] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1349.057354] DMA: [ 1349.064277] Node 1 Normal: 69*4kB (UME) 64*8kB (UME) 55*16kB (UME) 33*32kB (UME) 48*64kB (UME) 107*128kB (UM) 19*256kB (UME) 27*512kB (U) 171*1024kB (U) 16*2048kB (U) 7*4096kB (U) = 274724kB [ 1349.084466] 10*4kB (U) 4*8kB (UE) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11000kB [ 1349.109276] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1349.143719] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1349.160738] Node 0 DMA32: 995*4kB (UE) 399*8kB (UME) 488*16kB (UE) 1705*32kB (UE) 51*64kB (UME) 14*128kB (UM) 3*256kB (UM) 5*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 77924kB [ 1349.161240] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1349.210699] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1349.217235] Node 0 [ 1349.228451] warn_alloc_show_mem: 3 callbacks suppressed [ 1349.228455] Mem-Info: [ 1349.238126] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1349.247452] 35294 total pagecache pages [ 1349.252967] active_anon:22374 inactive_anon:33144 isolated_anon:0 [ 1349.252967] active_file:47 inactive_file:1684 isolated_file:0 [ 1349.252967] unevictable:0 dirty:13 writeback:0 unstable:0 [ 1349.252967] slab_reclaimable:11931 slab_unreclaimable:110990 [ 1349.252967] mapped:44817 shmem:33554 pagetables:775 bounce:0 [ 1349.252967] free:63472 free_pcp:375 free_cma:0 [ 1349.263629] Node 1 [ 1349.286708] 0 pages in swap cache [ 1349.292639] Swap cache stats: add 0, delete 0, find 0/0 [ 1349.298057] Free swap = 0kB [ 1349.301207] Total swap = 0kB [ 1349.304292] 2097051 pages RAM [ 1349.307443] 0 pages HighMem/MovableOnly [ 1349.311531] 363849 pages reserved [ 1349.315029] 0 pages cma reserved [ 1349.318462] Node 0 active_anon:88772kB inactive_anon:108440kB active_file:180kB inactive_file:6728kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:179268kB dirty:48kB writeback:0kB shmem:109868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1349.368152] Normal: 69*4kB (UME) 64*8kB (UME) 55*16kB (UME) 33*32kB (UME) 14*64kB (ME) 125*128kB (UM) 253*256kB (UME) 98*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 135588kB [ 1349.403206] Node 1 active_anon:724kB inactive_anon:24136kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:24348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1349.434964] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1349.448433] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1349.474722] Node 0 DMA free:11000kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1349.484142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1349.516197] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1349.532363] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1349.536893] CPU: 0 PID: 1053 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1349.539073] Node 0 [ 1349.545225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1349.545229] Call Trace: [ 1349.545251] dump_stack+0x1b2/0x281 [ 1349.545265] warn_alloc.cold+0x96/0x1cc [ 1349.545276] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1349.545292] ? zone_watermark_ok_safe+0x220/0x220 [ 1349.545314] __alloc_pages_nodemask+0x2127/0x2720 [ 1349.547610] DMA32 free:17852kB min:36200kB low:45248kB high:54296kB active_anon:88772kB inactive_anon:108440kB active_file:560kB inactive_file:844kB unevictable:0kB writepending:48kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7776kB pagetables:2940kB bounce:0kB free_pcp:264kB local_pcp:0kB free_cma:0kB [ 1349.556912] ? __schedule+0x893/0x1de0 [ 1349.556930] ? lock_acquire+0x170/0x3f0 [ 1349.556946] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1349.556961] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1349.556973] ? __mutex_unlock_slowpath+0x75/0x770 [ 1349.556986] alloc_pages_current+0x155/0x260 [ 1349.556999] ion_page_pool_alloc+0x118/0x1b0 [ 1349.557008] ion_system_heap_allocate+0x133/0x8c0 [ 1349.557017] ? ion_alloc+0x187/0x810 [ 1349.557026] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1349.557034] ? ion_system_contig_heap_create+0x130/0x130 [ 1349.557043] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1349.557054] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1349.557065] ion_alloc+0x204/0x810 [ 1349.560818] lowmem_reserve[]: [ 1349.563312] ? ion_dma_buf_release+0x40/0x40 [ 1349.563326] ? __might_fault+0x177/0x1b0 [ 1349.563337] ion_ioctl+0xea/0x1f0 [ 1349.563346] ? ion_query_heaps+0x360/0x360 [ 1349.563357] ? ion_query_heaps+0x360/0x360 [ 1349.563368] do_vfs_ioctl+0x75a/0xff0 [ 1349.573863] syz-executor.3: [ 1349.577260] ? ioctl_preallocate+0x1a0/0x1a0 [ 1349.582219] 0 [ 1349.610736] ? lock_downgrade+0x740/0x740 [ 1349.610751] ? __fget+0x225/0x360 [ 1349.610760] ? do_vfs_ioctl+0xff0/0xff0 [ 1349.610771] ? security_file_ioctl+0x83/0xb0 [ 1349.610780] SyS_ioctl+0x7f/0xb0 [ 1349.610789] ? do_vfs_ioctl+0xff0/0xff0 [ 1349.610799] do_syscall_64+0x1d5/0x640 [ 1349.610814] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1349.610822] RIP: 0033:0x4665f9 [ 1349.610826] RSP: 002b:00007f56be175188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1349.610836] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1349.610840] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1349.610850] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1349.619020] page allocation failure: order:4 [ 1349.623543] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1349.623549] R13: 00007fffaba42f8f R14: 00007f56be175300 R15: 0000000000022000 [ 1349.624535] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1349.650488] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1349.709365] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1349.727401] 0 [ 1349.779796] 33594 total pagecache pages [ 1349.783670] (null) [ 1349.807501] 0 pages in swap cache [ 1349.816080] 0 [ 1349.826662] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1349.840420] 0 [ 1349.849180] syz-executor.3 cpuset= [ 1349.851977] Swap cache stats: add 0, delete 0, find 0/0 [ 1349.860862] Free swap = 0kB [ 1349.862013] / mems_allowed=0-1 [ 1349.865969] syz-executor.4 cpuset=/ [ 1349.867078] CPU: 1 PID: 1045 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1349.867086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1349.870807] mems_allowed=0-1 [ 1349.878608] Call Trace: [ 1349.878634] dump_stack+0x1b2/0x281 [ 1349.878647] warn_alloc.cold+0x96/0x1cc [ 1349.878660] ? zone_watermark_ok_safe+0x220/0x220 [ 1349.878681] __alloc_pages_nodemask+0x2127/0x2720 [ 1349.888179] Total swap = 0kB [ 1349.891338] ? lock_acquire+0x170/0x3f0 [ 1349.891356] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1349.893994] 2097051 pages RAM [ 1349.897547] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1349.903924] 0 pages HighMem/MovableOnly [ 1349.906341] ? __mutex_unlock_slowpath+0x75/0x770 [ 1349.921022] 363849 pages reserved [ 1349.923925] alloc_pages_current+0x155/0x260 [ 1349.927095] 0 pages cma reserved [ 1349.932572] ion_page_pool_alloc+0x118/0x1b0 [ 1349.932583] ion_system_heap_allocate+0x133/0x8c0 [ 1349.932595] ? _raw_spin_unlock+0x29/0x40 [ 1349.932604] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1349.932614] ? ion_system_contig_heap_create+0x130/0x130 [ 1349.951018] Out of memory (oom_kill_allocating_task): Kill process 1049 (systemd-journal) score 0 or sacrifice child [ 1349.952640] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1349.957293] Killed process 1049 (systemd-journal) total-vm:37896kB, anon-rss:384kB, file-rss:0kB, shmem-rss:0kB [ 1349.961860] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1349.961872] ion_alloc+0x27a/0x810 [ 1349.961886] ? ion_dma_buf_release+0x40/0x40 [ 1349.961897] ? __might_fault+0x177/0x1b0 [ 1349.961909] ion_ioctl+0xea/0x1f0 [ 1349.961918] ? ion_query_heaps+0x360/0x360 [ 1349.961931] ? ion_query_heaps+0x360/0x360 [ 1349.961941] do_vfs_ioctl+0x75a/0xff0 [ 1349.961953] ? ioctl_preallocate+0x1a0/0x1a0 [ 1350.040625] ? lock_downgrade+0x740/0x740 [ 1350.044778] ? __fget+0x225/0x360 [ 1350.048232] ? do_vfs_ioctl+0xff0/0xff0 [ 1350.052205] ? security_file_ioctl+0x83/0xb0 [ 1350.056632] SyS_ioctl+0x7f/0xb0 [ 1350.059990] ? do_vfs_ioctl+0xff0/0xff0 [ 1350.063960] do_syscall_64+0x1d5/0x640 [ 1350.067852] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1350.073386] RIP: 0033:0x4665f9 [ 1350.077007] RSP: 002b:00007f84085c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1350.084721] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1350.092011] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1350.099458] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1350.106734] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1350.114652] R13: 00007ffcbe3a947f R14: 00007f84085c7300 R15: 0000000000022000 [ 1350.122550] oom_reaper: reaped process 1049 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1350.138525] 0 [ 1350.139829] CPU: 0 PID: 1040 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1350.140382] Node 0 [ 1350.148318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.148324] Call Trace: [ 1350.148345] dump_stack+0x1b2/0x281 [ 1350.148359] warn_alloc.cold+0x96/0x1cc [ 1350.148370] ? zone_watermark_ok_safe+0x220/0x220 [ 1350.148380] ? usleep_range+0x130/0x130 [ 1350.148388] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1350.148400] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1350.148409] ? run_timer_softirq+0x5a0/0x5a0 [ 1350.148426] __alloc_pages_nodemask+0x2127/0x2720 [ 1350.148442] ? lock_acquire+0x170/0x3f0 [ 1350.148456] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1350.148469] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1350.162955] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1350.166240] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1350.170187] lowmem_reserve[]: [ 1350.175034] alloc_pages_current+0x155/0x260 [ 1350.175049] ion_page_pool_alloc+0x118/0x1b0 [ 1350.175058] ion_system_heap_allocate+0x133/0x8c0 [ 1350.175070] ? _raw_spin_unlock+0x29/0x40 [ 1350.175078] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1350.175086] ? ion_system_contig_heap_create+0x130/0x130 [ 1350.175096] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1350.175105] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1350.175116] ion_alloc+0x27a/0x810 [ 1350.175130] ? ion_dma_buf_release+0x40/0x40 [ 1350.175142] ? __might_fault+0x177/0x1b0 [ 1350.175154] ion_ioctl+0xea/0x1f0 [ 1350.175164] ? ion_query_heaps+0x360/0x360 [ 1350.196755] 0 [ 1350.198587] ? ion_query_heaps+0x360/0x360 [ 1350.217384] 0 [ 1350.236998] do_vfs_ioctl+0x75a/0xff0 [ 1350.237013] ? ioctl_preallocate+0x1a0/0x1a0 [ 1350.237022] ? lock_downgrade+0x740/0x740 [ 1350.237034] ? __fget+0x225/0x360 [ 1350.237042] ? do_vfs_ioctl+0xff0/0xff0 [ 1350.237053] ? security_file_ioctl+0x83/0xb0 [ 1350.237062] SyS_ioctl+0x7f/0xb0 [ 1350.237069] ? do_vfs_ioctl+0xff0/0xff0 [ 1350.237080] do_syscall_64+0x1d5/0x640 [ 1350.237095] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1350.237104] RIP: 0033:0x4665f9 [ 1350.237108] RSP: 002b:00007ff6cdf47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1350.237119] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1350.237124] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1350.237129] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1350.237135] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1350.237140] R13: 00007ffe714d338f R14: 00007ff6cdf47300 R15: 0000000000022000 [ 1350.249228] kworker/0:4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 1350.267067] 0 [ 1350.275406] (null) [ 1350.291470] 0 [ 1350.298838] , order=1, oom_score_adj=0 [ 1350.300174] 0 [ 1350.304875] kworker/0:4 cpuset= [ 1350.325127] / [ 1350.346986] Node 1 [ 1350.352743] mems_allowed=0-1 [ 1350.365799] Normal free:26724kB min:53696kB low:67120kB high:80544kB active_anon:504kB inactive_anon:24136kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:156kB bounce:0kB free_pcp:364kB local_pcp:0kB free_cma:0kB [ 1350.380482] CPU: 0 PID: 29091 Comm: kworker/0:4 Not tainted 4.14.232-syzkaller #0 [ 1350.400498] lowmem_reserve[]: [ 1350.400932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.422847] 0 [ 1350.424605] Workqueue: events cgroup1_release_agent [ 1350.426302] 0 [ 1350.443944] 0 [ 1350.459330] Call Trace: [ 1350.459354] dump_stack+0x1b2/0x281 [ 1350.459365] dump_header+0x178/0x82f [ 1350.459375] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1350.459383] ? ___ratelimit+0x2cd/0x530 [ 1350.459392] oom_kill_process.cold+0x10/0xa40 [ 1350.459403] ? lock_downgrade+0x740/0x740 [ 1350.459417] out_of_memory+0x2dc/0x1190 [ 1350.459431] ? oom_killer_disable+0x1c0/0x1c0 [ 1350.459438] ? mutex_trylock+0x152/0x1a0 [ 1350.459450] __alloc_pages_nodemask+0x23e1/0x2720 [ 1350.459470] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1350.459486] ? mark_held_locks+0xa6/0xf0 [ 1350.459495] ? cache_grow_begin+0x3f/0x700 [ 1350.459505] cache_grow_begin+0x91/0x700 [ 1350.459518] fallback_alloc+0x207/0x2c0 [ 1350.479301] 0 [ 1350.479602] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 1350.484716] 0 [ 1350.486426] cgroup1_release_agent+0xa1/0x250 [ 1350.490030] ? cgroup1_check_for_release+0x1b0/0x1b0 [ 1350.504889] Node 0 [ 1350.505119] ? lock_acquire+0x170/0x3f0 [ 1350.509100] DMA: [ 1350.513628] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1350.513640] process_one_work+0x793/0x14a0 [ 1350.513653] ? work_busy+0x320/0x320 [ 1350.513659] ? worker_thread+0x158/0xff0 [ 1350.513669] ? _raw_spin_unlock_irq+0x24/0x80 [ 1350.513679] worker_thread+0x5cc/0xff0 [ 1350.513693] ? rescuer_thread+0xc80/0xc80 [ 1350.513702] kthread+0x30d/0x420 [ 1350.513709] ? kthread_create_on_node+0xd0/0xd0 [ 1350.513717] ret_from_fork+0x24/0x30 [ 1350.530080] warn_alloc_show_mem: 1 callbacks suppressed [ 1350.530084] Mem-Info: [ 1350.555140] 3*4kB [ 1350.573506] active_anon:22285 inactive_anon:33144 isolated_anon:0 [ 1350.573506] active_file:13 inactive_file:16 isolated_file:0 [ 1350.573506] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1350.573506] slab_reclaimable:11930 slab_unreclaimable:111001 [ 1350.573506] mapped:43521 shmem:33554 pagetables:774 bounce:0 [ 1350.573506] free:13889 free_pcp:230 free_cma:0 [ 1350.617586] (U) [ 1350.637532] Node 0 active_anon:88636kB inactive_anon:108440kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:109868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1350.707925] 4*8kB (UE) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10972kB [ 1350.715332] Mem-Info: [ 1350.729629] Node 0 DMA32: 1111*4kB (ME) 237*8kB (ME) 192*16kB (UME) 257*32kB (UME) 4*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17892kB [ 1350.740029] active_anon:22285 inactive_anon:33144 isolated_anon:0 [ 1350.740029] active_file:13 inactive_file:16 isolated_file:0 [ 1350.740029] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1350.740029] slab_reclaimable:11930 slab_unreclaimable:111001 [ 1350.740029] mapped:43521 shmem:33554 pagetables:737 bounce:0 [ 1350.740029] free:13889 free_pcp:256 free_cma:0 [ 1350.743833] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1350.743857] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1350.743882] CPU: 1 PID: 1045 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1350.743887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.743891] Call Trace: [ 1350.743910] dump_stack+0x1b2/0x281 [ 1350.743924] warn_alloc.cold+0x96/0x1cc [ 1350.743950] ? zone_watermark_ok_safe+0x220/0x220 [ 1350.793882] Node 1 active_anon:504kB inactive_anon:24136kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1350.794575] ? usleep_range+0x130/0x130 [ 1350.802529] Node 0 [ 1350.811853] ? try_to_free_pages+0x23f/0x6e0 [ 1350.811865] ? _find_next_bit+0xdb/0x100 [ 1350.811875] ? run_timer_softirq+0x5a0/0x5a0 [ 1350.811895] __alloc_pages_nodemask+0x2127/0x2720 [ 1350.814481] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1350.818113] ? lock_acquire+0x170/0x3f0 [ 1350.822137] lowmem_reserve[]: [ 1350.826948] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1350.853547] Node 0 active_anon:88636kB inactive_anon:108440kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:109868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1350.857452] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1350.859668] Node 1 active_anon:504kB inactive_anon:24136kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1350.864061] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1350.864080] alloc_pages_current+0x155/0x260 [ 1350.864096] ion_page_pool_alloc+0x118/0x1b0 [ 1350.868150] Node 0 [ 1350.872573] ion_system_heap_allocate+0x133/0x8c0 [ 1350.872586] ? _raw_spin_unlock+0x29/0x40 [ 1350.872594] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1350.872603] ? ion_system_contig_heap_create+0x130/0x130 [ 1350.872616] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1350.877458] 0 [ 1350.903065] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1350.903078] ion_alloc+0x27a/0x810 [ 1350.903092] ? ion_dma_buf_release+0x40/0x40 [ 1350.903103] ? __might_fault+0x177/0x1b0 [ 1350.907646] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1350.910737] ion_ioctl+0xea/0x1f0 [ 1350.915606] lowmem_reserve[]: [ 1350.943416] ? ion_query_heaps+0x360/0x360 [ 1350.943428] ? ion_query_heaps+0x360/0x360 [ 1350.943438] do_vfs_ioctl+0x75a/0xff0 [ 1350.943454] ? ioctl_preallocate+0x1a0/0x1a0 [ 1350.947960] 2717 [ 1350.974847] ? lock_downgrade+0x740/0x740 [ 1350.974862] ? __fget+0x225/0x360 [ 1350.974871] ? do_vfs_ioctl+0xff0/0xff0 [ 1350.974882] ? security_file_ioctl+0x83/0xb0 [ 1350.974893] SyS_ioctl+0x7f/0xb0 [ 1350.980356] 0 [ 1350.984794] ? do_vfs_ioctl+0xff0/0xff0 [ 1350.984807] do_syscall_64+0x1d5/0x640 [ 1350.984822] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1350.984831] RIP: 0033:0x4665f9 [ 1350.989256] 2717 [ 1350.991477] RSP: 002b:00007f84085c7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1350.991486] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1350.991491] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1350.991495] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1350.991500] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1350.991505] R13: 00007ffcbe3a947f R14: 00007f84085c7300 R15: 0000000000022000 [ 1350.991975] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1350.996652] 2718 [ 1351.001204] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1351.039946] 2718 [ 1351.061448] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1351.068796] Node 0 [ 1351.084512] 2718 [ 1351.091382] Normal: [ 1351.110554] 2718 [ 1351.118438] 0*4kB [ 1351.137323] 2718 [ 1351.148150] 0*8kB [ 1351.177669] 0*16kB [ 1351.193946] Node 0 [ 1351.201952] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1351.220625] 2718 [ 1351.229302] Node 1 [ 1351.235827] DMA32 free:17860kB min:36200kB low:45248kB high:54296kB active_anon:88636kB inactive_anon:108440kB active_file:76kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2940kB bounce:0kB free_pcp:524kB local_pcp:408kB free_cma:0kB [ 1351.235928] Normal: [ 1351.238088] lowmem_reserve[]: [ 1351.277714] 57*4kB (UME) 45*8kB (ME) 39*16kB (ME) 28*32kB (UME) 15*64kB (UME) 5*128kB (UM) 4*256kB (UME) 41*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 26748kB [ 1351.306475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1351.308025] Node 0 DMA32 free:17860kB min:36200kB low:45248kB high:54296kB active_anon:88636kB inactive_anon:108440kB active_file:76kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2940kB bounce:0kB free_pcp:524kB local_pcp:408kB free_cma:0kB [ 1351.319720] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1351.370685] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1351.371760] 0 0 0 0 0 [ 1351.379626] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1351.394523] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1351.399226] 33583 total pagecache pages [ 1351.435701] lowmem_reserve[]: 0 0 0 0 0 [ 1351.439729] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1351.461849] 0 pages in swap cache [ 1351.483686] Swap cache stats: add 0, delete 0, find 0/0 [ 1351.509366] lowmem_reserve[]: 0 0 0 0 0 [ 1351.517167] Free swap = 0kB [ 1351.526349] Node 1 Normal free:74616kB min:53696kB low:67120kB high:80544kB active_anon:504kB inactive_anon:24136kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:56kB bounce:0kB free_pcp:480kB local_pcp:340kB free_cma:0kB [ 1351.534470] Total swap = 0kB [ 1351.569650] lowmem_reserve[]: 0 0 0 0 0 [ 1351.600127] Node 1 Normal free:146296kB min:53696kB low:67120kB high:80544kB active_anon:504kB inactive_anon:24136kB active_file:176kB inactive_file:920kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:56kB bounce:0kB free_pcp:532kB local_pcp:392kB free_cma:0kB [ 1351.645878] lowmem_reserve[]: 0 0 0 0 0 [ 1351.654393] 2097051 pages RAM [ 1351.656825] Node 0 DMA: 3*4kB (U) 4*8kB (UE) 1*16kB (E) 1*32kB [ 1351.657631] 0 pages HighMem/MovableOnly [ 1351.665573] 363849 pages reserved [ 1351.673341] (E) 9*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11420kB [ 1351.684827] 0 pages cma reserved [ 1351.694698] lowmem_reserve[]: 0 0 0 0 0 08:24:41 executing program 1: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(0x0, 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1351.705005] Node 0 DMA32: 445*4kB (UE) 65*8kB (EH) 149*16kB (UME) 12*32kB (UME) 321*64kB (UMEH) 207*128kB (U) 45*256kB (U) 7*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 67212kB [ 1351.722224] Node 0 DMA: 3*4kB (U) 4*8kB (UE) 1*16kB (E) 1*32kB (E) 9*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11420kB [ 1351.757267] Node 0 DMA32: 445*4kB (UE) 66*8kB (UEH) 149*16kB (UME) 10*32kB (E) 6*64kB (MEH) 199*128kB (UM) 46*256kB (UM) 5*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 45204kB [ 1351.772915] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1351.783769] Node 1 Normal: 2*4kB (ME) 2*8kB (E) 3*16kB (E) 9*32kB (ME) 242*64kB (UME) 182*128kB (UM) 84*256kB (UME) 57*512kB (U) 41*1024kB (U) 3*2048kB (U) 0*4096kB = 137960kB [ 1351.799791] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1351.810636] Node 1 Normal: 2*4kB (ME) 3*8kB (ME) 4*16kB (ME) 1*32kB (E) 234*64kB (UME) 182*128kB (UM) 84*256kB (UME) 57*512kB (U) 28*1024kB (U) 3*2048kB (U) 0*4096kB = 123904kB [ 1351.827051] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1351.836025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1351.844742] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1351.853688] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1351.862662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1351.871438] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1351.880108] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1351.891518] 36332 total pagecache pages [ 1351.909865] 0 pages in swap cache [ 1351.919754] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1351.933010] Swap cache stats: add 0, delete 0, find 0/0 [ 1351.938653] Free swap = 0kB [ 1351.943908] 35682 total pagecache pages [ 1351.947943] Total swap = 0kB [ 1351.954313] 2097051 pages RAM [ 1351.958117] 0 pages in swap cache [ 1351.970409] 0 pages HighMem/MovableOnly [ 1351.976353] Swap cache stats: add 0, delete 0, find 0/0 [ 1351.983932] 363849 pages reserved [ 1351.987442] Free swap = 0kB [ 1351.990514] 0 pages cma reserved [ 1351.996036] Total swap = 0kB [ 1352.001418] 2097051 pages RAM [ 1352.007522] 0 pages HighMem/MovableOnly [ 1352.015574] 363849 pages reserved [ 1352.019072] 0 pages cma reserved [ 1352.023637] Out of memory: Kill process 1050 (syz-executor.0) score 1004 or sacrifice child [ 1352.060342] Killed process 1051 (syz-executor.0) total-vm:93252kB, anon-rss:148kB, file-rss:34816kB, shmem-rss:0kB [ 1352.100382] oom_reaper: reaped process 1051 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 08:24:41 executing program 4: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1352.137389] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1352.192933] systemd[1]: Failed to start Journal Service. [ 1352.267096] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1352.296911] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1352.354088] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1352.366029] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1352.366053] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1352.366075] CPU: 0 PID: 1062 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1352.366085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1352.400106] Call Trace: [ 1352.402700] dump_stack+0x1b2/0x281 [ 1352.406528] warn_alloc.cold+0x96/0x1cc [ 1352.410497] ? zone_watermark_ok_safe+0x220/0x220 [ 1352.415364] __alloc_pages_nodemask+0x2127/0x2720 [ 1352.420227] ? lock_acquire+0x170/0x3f0 [ 1352.424220] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1352.429201] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1352.434696] ? __mutex_unlock_slowpath+0x75/0x770 [ 1352.439907] alloc_pages_current+0x155/0x260 [ 1352.444407] ion_page_pool_alloc+0x118/0x1b0 [ 1352.448831] ion_system_heap_allocate+0x133/0x8c0 [ 1352.453673] ? ion_alloc+0x187/0x810 [ 1352.457400] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1352.462848] ? ion_system_contig_heap_create+0x130/0x130 [ 1352.468303] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1352.473316] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1352.478154] ion_alloc+0x204/0x810 [ 1352.481692] ? ion_dma_buf_release+0x40/0x40 [ 1352.486096] ? __might_fault+0x177/0x1b0 [ 1352.490154] ion_ioctl+0xea/0x1f0 [ 1352.493598] ? ion_query_heaps+0x360/0x360 [ 1352.497828] ? ion_query_heaps+0x360/0x360 [ 1352.502077] do_vfs_ioctl+0x75a/0xff0 [ 1352.505873] ? ioctl_preallocate+0x1a0/0x1a0 [ 1352.511235] ? lock_downgrade+0x740/0x740 [ 1352.515398] ? __fget+0x225/0x360 [ 1352.518854] ? do_vfs_ioctl+0xff0/0xff0 [ 1352.522845] ? security_file_ioctl+0x83/0xb0 [ 1352.527279] SyS_ioctl+0x7f/0xb0 [ 1352.530641] ? do_vfs_ioctl+0xff0/0xff0 [ 1352.534615] do_syscall_64+0x1d5/0x640 [ 1352.538518] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1352.543714] RIP: 0033:0x4665f9 [ 1352.546988] RSP: 002b:00007ff6cdf47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1352.554706] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1352.561969] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1352.569254] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1352.576522] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1352.583874] R13: 00007ffe714d338f R14: 00007ff6cdf47300 R15: 0000000000022000 [ 1352.596791] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1352.617094] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1352.628703] CPU: 1 PID: 1057 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1352.636524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1352.645971] Call Trace: [ 1352.648567] dump_stack+0x1b2/0x281 [ 1352.652196] warn_alloc.cold+0x96/0x1cc [ 1352.656168] ? zone_watermark_ok_safe+0x220/0x220 [ 1352.661020] __alloc_pages_nodemask+0x2127/0x2720 [ 1352.665863] ? lock_acquire+0x170/0x3f0 [ 1352.669842] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1352.674712] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1352.680160] ? __mutex_unlock_slowpath+0x75/0x770 [ 1352.685005] alloc_pages_current+0x155/0x260 [ 1352.689412] ion_page_pool_alloc+0x118/0x1b0 [ 1352.693817] ion_system_heap_allocate+0x133/0x8c0 [ 1352.698787] ? ion_alloc+0x187/0x810 [ 1352.702497] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1352.707944] ? ion_system_contig_heap_create+0x130/0x130 [ 1352.713389] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1352.718406] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1352.723251] ion_alloc+0x204/0x810 [ 1352.726789] ? ion_dma_buf_release+0x40/0x40 [ 1352.731191] ? __might_fault+0x177/0x1b0 [ 1352.735251] ion_ioctl+0xea/0x1f0 [ 1352.738702] ? ion_query_heaps+0x360/0x360 [ 1352.742931] ? ion_query_heaps+0x360/0x360 [ 1352.747174] do_vfs_ioctl+0x75a/0xff0 [ 1352.750970] ? ioctl_preallocate+0x1a0/0x1a0 [ 1352.755399] ? lock_downgrade+0x740/0x740 [ 1352.759570] ? __fget+0x225/0x360 [ 1352.763036] ? do_vfs_ioctl+0xff0/0xff0 [ 1352.767026] ? security_file_ioctl+0x83/0xb0 [ 1352.771457] SyS_ioctl+0x7f/0xb0 [ 1352.774816] ? do_vfs_ioctl+0xff0/0xff0 [ 1352.778786] do_syscall_64+0x1d5/0x640 [ 1352.782674] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1352.787858] RIP: 0033:0x4665f9 [ 1352.791038] RSP: 002b:00007efdf923c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1352.798744] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1352.806016] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1352.813281] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1352.820558] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1352.827838] R13: 00007fff68d20daf R14: 00007efdf923c300 R15: 0000000000022000 [ 1352.837928] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1352.877468] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1352.883762] warn_alloc_show_mem: 2 callbacks suppressed [ 1352.883766] Mem-Info: [ 1352.891813] active_anon:22364 inactive_anon:33144 isolated_anon:0 [ 1352.891813] active_file:235 inactive_file:222 isolated_file:29 [ 1352.891813] unevictable:0 dirty:20 writeback:0 unstable:0 [ 1352.891813] slab_reclaimable:11952 slab_unreclaimable:110622 [ 1352.891813] mapped:43949 shmem:33554 pagetables:793 bounce:0 [ 1352.891813] free:25171 free_pcp:0 free_cma:0 [ 1352.896594] CPU: 0 PID: 32270 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1352.933920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1352.941082] Node 0 active_anon:88692kB inactive_anon:108440kB active_file:856kB inactive_file:864kB unevictable:0kB isolated(anon):0kB isolated(file):116kB mapped:175796kB dirty:72kB writeback:0kB shmem:109868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1352.943289] Call Trace: [ 1352.974366] dump_stack+0x1b2/0x281 [ 1352.977993] dump_header+0x178/0x82f [ 1352.981701] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1352.986806] ? ___ratelimit+0x2cd/0x530 [ 1352.990776] oom_kill_process.cold+0x10/0xa40 [ 1352.995291] out_of_memory+0xe3e/0x1190 [ 1352.999288] ? oom_killer_disable+0x1c0/0x1c0 [ 1353.001223] Node 1 active_anon:764kB inactive_anon:24136kB active_file:84kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:24348kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1353.003783] ? mutex_trylock+0x152/0x1a0 [ 1353.034591] __alloc_pages_nodemask+0x23e1/0x2720 [ 1353.039455] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1353.044334] alloc_pages_current+0x155/0x260 [ 1353.048744] filemap_fault+0x11a1/0x1ad0 [ 1353.053076] ext4_filemap_fault+0x84/0xb0 [ 1353.057224] __do_fault+0xfa/0x380 [ 1353.060765] __handle_mm_fault+0x2497/0x4620 [ 1353.065174] ? vm_insert_page+0x7c0/0x7c0 [ 1353.069326] ? mark_held_locks+0xa6/0xf0 [ 1353.073386] handle_mm_fault+0x455/0x9c0 [ 1353.077453] __do_page_fault+0x549/0xad0 [ 1353.081517] ? spurious_fault+0x640/0x640 [ 1353.085657] ? do_page_fault+0x60/0x500 [ 1353.089648] ? page_fault+0x2f/0x50 [ 1353.093271] page_fault+0x45/0x50 [ 1353.096720] RIP: 0001:0x145b33805a0 [ 1353.100348] RSP: 461220:000000c000157c68 EFLAGS: 145b33805a0 [ 1353.126472] Node 0 DMA free:11084kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1353.176236] Mem-Info: [ 1353.181184] active_anon:22398 inactive_anon:33144 isolated_anon:0 [ 1353.181184] active_file:178 inactive_file:286 isolated_file:15 [ 1353.181184] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1353.181184] slab_reclaimable:11979 slab_unreclaimable:110635 [ 1353.181184] mapped:43859 shmem:33554 pagetables:749 bounce:0 [ 1353.181184] free:30946 free_pcp:281 free_cma:0 [ 1353.181740] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1353.221477] Node 0 DMA32 free:42644kB min:36200kB low:45248kB high:54296kB active_anon:88740kB inactive_anon:108436kB active_file:936kB inactive_file:984kB unevictable:0kB writepending:16kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:2788kB bounce:0kB free_pcp:716kB local_pcp:600kB free_cma:0kB [ 1353.270629] Node 0 active_anon:88756kB inactive_anon:108436kB active_file:300kB inactive_file:276kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:174636kB dirty:16kB writeback:0kB shmem:109864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1353.320417] Node 1 active_anon:836kB inactive_anon:24140kB active_file:856kB inactive_file:884kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1500kB dirty:0kB writeback:0kB shmem:24352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1353.331468] lowmem_reserve[]: 0 0 0 0 0 [ 1353.351941] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1353.351968] Node 0 [ 1353.377651] lowmem_reserve[]: 0 0 0 0 0 [ 1353.377678] Node 1 Normal free:27836kB min:53696kB low:67120kB high:80544kB active_anon:836kB inactive_anon:24140kB active_file:0kB inactive_file:696kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:200kB bounce:0kB free_pcp:1052kB local_pcp:724kB free_cma:0kB [ 1353.377706] lowmem_reserve[]: [ 1353.383819] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1353.384544] 0 [ 1353.417488] lowmem_reserve[]: [ 1353.418310] 0 [ 1353.448393] 0 2717 2718 2718 2718 [ 1353.452147] 0 0 0 [ 1353.454101] Node 0 [ 1353.456181] Node 0 [ 1353.456203] DMA32 free:18340kB min:36200kB low:45248kB high:54296kB active_anon:88740kB inactive_anon:108436kB active_file:428kB inactive_file:480kB unevictable:0kB writepending:16kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:2788kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1353.458407] DMA: [ 1353.460648] lowmem_reserve[]: [ 1353.489550] 1*4kB (E) 2*8kB (UE) 2*16kB (UM) 3*32kB (UME) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10964kB [ 1353.495456] 0 0 0 0 0 [ 1353.509469] Node 0 DMA32: 1097*4kB (UMEH) 238*8kB (UMEH) 196*16kB (UMEH) 27*32kB (UMEH) 16*64kB (UMEH) 0*128kB 21*256kB (UM) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18740kB [ 1353.515877] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1353.528416] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1353.558085] lowmem_reserve[]: 0 0 0 0 0 [ 1353.568280] Node 1 [ 1353.568969] Node 1 [ 1353.568972] Normal: 93*4kB (UME) 55*8kB (ME) 52*16kB (UME) 24*32kB (UME) 16*64kB (ME) 3*128kB (UM) 1*256kB (E) 1*512kB (U) 0*1024kB 7*2048kB (U) 2*4096kB (UM) = 27116kB [ 1353.575144] Normal free:26788kB min:53696kB low:67120kB high:80544kB active_anon:836kB inactive_anon:24140kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:200kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1353.589285] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1353.589302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1353.621156] lowmem_reserve[]: [ 1353.626321] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1353.638893] 0 0 0 0 0 [ 1353.648865] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1353.649242] Node 0 [ 1353.657943] 33619 total pagecache pages [ 1353.661830] DMA: 1*4kB (E) 2*8kB (UE) 2*16kB (UM) 3*32kB (UME) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) [ 1353.664190] 0 pages in swap cache [ 1353.664192] 3*512kB (UME) [ 1353.673772] Swap cache stats: add 0, delete 0, find 0/0 [ 1353.673777] Free swap = 0kB [ 1353.673781] Total swap = 0kB [ 1353.673789] 2097051 pages RAM [ 1353.673793] 0 pages HighMem/MovableOnly [ 1353.673796] 363849 pages reserved [ 1353.673799] 0 pages cma reserved [ 1353.710133] 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10964kB [ 1353.716045] Node 0 DMA32: 1149*4kB (UMEH) 1108*8kB (UMEH) 198*16kB (UMEH) 27*32kB (MEH) 16*64kB (UMEH) 1*128kB (U) 19*256kB (UM) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 25556kB [ 1353.732899] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1353.743840] Node 1 Normal: 92*4kB (ME) 55*8kB (ME) 52*16kB (UME) 24*32kB (UME) 16*64kB (ME) 3*128kB (UM) 1*256kB (E) 1*512kB (U) 0*1024kB 7*2048kB (U) 2*4096kB (UM) = 27112kB [ 1353.759723] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1353.768649] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1353.777536] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1353.786802] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1353.795423] 33585 total pagecache pages [ 1353.799401] 0 pages in swap cache [ 1353.805196] Swap cache stats: add 0, delete 0, find 0/0 [ 1353.810569] Free swap = 0kB [ 1353.813624] Total swap = 0kB [ 1353.816660] 2097051 pages RAM [ 1353.819753] 0 pages HighMem/MovableOnly [ 1353.833964] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1353.850453] 363849 pages reserved [ 1353.853992] 0 pages cma reserved [ 1353.857359] Out of memory (oom_kill_allocating_task): Kill process 32270 (syz-fuzzer) score 0 or sacrifice child [ 1353.872380] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1353.877561] CPU: 0 PID: 1047 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1353.885792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1353.895150] Call Trace: [ 1353.897761] dump_stack+0x1b2/0x281 [ 1353.901400] warn_alloc.cold+0x96/0x1cc [ 1353.905379] ? zone_watermark_ok_safe+0x220/0x220 [ 1353.910241] __alloc_pages_nodemask+0x2127/0x2720 [ 1353.915095] ? lock_acquire+0x170/0x3f0 [ 1353.919076] ? lock_acquire+0x170/0x3f0 [ 1353.923063] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1353.927918] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1353.933374] ? __mutex_unlock_slowpath+0x75/0x770 [ 1353.938225] alloc_pages_current+0x155/0x260 [ 1353.942704] ion_page_pool_alloc+0x118/0x1b0 [ 1353.947125] ion_system_heap_allocate+0x133/0x8c0 [ 1353.951975] ? _raw_spin_unlock+0x29/0x40 [ 1353.956125] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1353.961054] ? ion_system_contig_heap_create+0x130/0x130 [ 1353.966701] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1353.971744] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1353.976597] ion_alloc+0x27a/0x810 [ 1353.980143] ? ion_dma_buf_release+0x40/0x40 [ 1353.984575] ? __might_fault+0x177/0x1b0 [ 1353.988638] ion_ioctl+0xea/0x1f0 [ 1353.992089] ? ion_query_heaps+0x360/0x360 [ 1353.996332] ? ion_query_heaps+0x360/0x360 [ 1354.000576] do_vfs_ioctl+0x75a/0xff0 [ 1354.004398] ? ioctl_preallocate+0x1a0/0x1a0 [ 1354.008821] ? lock_downgrade+0x740/0x740 [ 1354.012989] ? __fget+0x225/0x360 [ 1354.016464] ? do_vfs_ioctl+0xff0/0xff0 [ 1354.020441] ? security_file_ioctl+0x83/0xb0 [ 1354.024852] SyS_ioctl+0x7f/0xb0 [ 1354.028216] ? do_vfs_ioctl+0xff0/0xff0 [ 1354.032193] do_syscall_64+0x1d5/0x640 [ 1354.036085] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1354.041377] RIP: 0033:0x4665f9 [ 1354.044582] RSP: 002b:00007f1bb23e0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1354.051079] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1354.052303] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1354.059060] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1354.066226] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1354.066232] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1354.066237] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1354.066241] R13: 00007ffeb0190c0f R14: 00007f1bb23e0300 R15: 0000000000022000 [ 1354.075765] Killed process 32274 (syz-executor.4) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1354.080202] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1354.099490] oom_reaper: reaped process 32274 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1354.102768] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1354.123420] warn_alloc_show_mem: 1 callbacks suppressed [ 1354.123424] Mem-Info: [ 1354.129512] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1354.142812] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1354.143813] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1354.150339] (null) [ 1354.160188] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1354.175327] active_anon:22398 inactive_anon:33144 isolated_anon:0 [ 1354.175327] active_file:20 inactive_file:11 isolated_file:0 [ 1354.175327] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1354.175327] slab_reclaimable:11979 slab_unreclaimable:110686 [ 1354.175327] mapped:43521 shmem:33554 pagetables:749 bounce:0 [ 1354.175327] free:13855 free_pcp:71 free_cma:0 [ 1354.187072] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1354.220678] , order=0, oom_score_adj=0 [ 1354.228936] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1354.233035] syz-fuzzer cpuset=/ [ 1354.238142] CPU: 1 PID: 1051 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1354.238150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1354.245353] Node 0 active_anon:88756kB inactive_anon:108436kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:174084kB dirty:0kB writeback:0kB shmem:109864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1354.249223] Call Trace: [ 1354.258776] mems_allowed=0-1 [ 1354.286766] dump_stack+0x1b2/0x281 [ 1354.286780] warn_alloc.cold+0x96/0x1cc [ 1354.286791] ? zone_watermark_ok_safe+0x220/0x220 [ 1354.286806] ? usleep_range+0x130/0x130 [ 1354.289414] Node 1 active_anon:836kB inactive_anon:24140kB active_file:32kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1354.292472] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1354.292495] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1354.292507] ? run_timer_softirq+0x5a0/0x5a0 [ 1354.296115] Node 0 [ 1354.300101] __alloc_pages_nodemask+0x2127/0x2720 [ 1354.305062] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1354.308989] ? lock_acquire+0x170/0x3f0 [ 1354.361014] lowmem_reserve[]: [ 1354.383385] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1354.383396] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1354.383412] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1354.383420] ? retint_kernel+0x2d/0x2d [ 1354.383438] alloc_pages_current+0x155/0x260 [ 1354.413758] ion_page_pool_alloc+0x118/0x1b0 [ 1354.418197] ion_system_heap_allocate+0x133/0x8c0 [ 1354.421023] 0 2717 [ 1354.423045] ? ion_alloc+0x187/0x810 [ 1354.423058] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1354.425283] 2718 [ 1354.429005] ? ion_system_contig_heap_create+0x130/0x130 [ 1354.440999] 2718 [ 1354.443146] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1354.443153] 2718 [ 1354.445220] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1354.452279] ion_alloc+0x204/0x810 [ 1354.452295] ? ion_dma_buf_release+0x40/0x40 [ 1354.452306] ? __might_fault+0x177/0x1b0 [ 1354.452318] ion_ioctl+0xea/0x1f0 [ 1354.452328] ? ion_query_heaps+0x360/0x360 [ 1354.471021] Node 0 [ 1354.472928] ? ion_query_heaps+0x360/0x360 [ 1354.477173] DMA32 free:17608kB min:36200kB low:45248kB high:54296kB active_anon:88740kB inactive_anon:108436kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:2788kB bounce:0kB free_pcp:276kB local_pcp:168kB free_cma:0kB [ 1354.479399] do_vfs_ioctl+0x75a/0xff0 [ 1354.501008] lowmem_reserve[]: [ 1354.512090] ? ioctl_preallocate+0x1a0/0x1a0 [ 1354.512101] ? lock_downgrade+0x740/0x740 [ 1354.512116] ? __fget+0x225/0x360 [ 1354.530972] ? do_vfs_ioctl+0xff0/0xff0 [ 1354.530996] 0 [ 1354.534951] ? security_file_ioctl+0x83/0xb0 [ 1354.534953] 0 0 [ 1354.536749] SyS_ioctl+0x7f/0xb0 [ 1354.546491] ? do_vfs_ioctl+0xff0/0xff0 [ 1354.550467] do_syscall_64+0x1d5/0x640 [ 1354.551010] 0 0 [ 1354.554399] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1354.554408] RIP: 0033:0x4665f9 [ 1354.556383] Node 0 [ 1354.561552] RSP: 002b:00007feafbab4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1354.561561] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1354.561566] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1354.561570] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1354.561575] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1354.561580] R13: 00007ffcb6e8eadf R14: 00007feafbab4300 R15: 0000000000022000 [ 1354.633133] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1354.636933] CPU: 1 PID: 32270 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1354.658300] lowmem_reserve[]: [ 1354.665791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1354.665795] Call Trace: [ 1354.665818] dump_stack+0x1b2/0x281 [ 1354.665831] dump_header+0x178/0x82f [ 1354.668933] 0 [ 1354.678383] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1354.678393] ? ___ratelimit+0x2cd/0x530 [ 1354.678404] oom_kill_process.cold+0x10/0xa40 [ 1354.678422] out_of_memory+0xe3e/0x1190 [ 1354.681002] 0 [ 1354.684703] ? oom_killer_disable+0x1c0/0x1c0 [ 1354.688407] 0 [ 1354.690199] ? mutex_trylock+0x152/0x1a0 [ 1354.695322] 0 [ 1354.699252] __alloc_pages_nodemask+0x23e1/0x2720 [ 1354.703742] 0 [ 1354.707698] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1354.713953] alloc_pages_current+0x155/0x260 [ 1354.713968] filemap_fault+0x11a1/0x1ad0 [ 1354.715741] Node 1 [ 1354.719814] ext4_filemap_fault+0x84/0xb0 [ 1354.721623] Normal free:56032kB min:53696kB low:67120kB high:80544kB active_anon:836kB inactive_anon:24140kB active_file:32kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:200kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1354.726415] __do_fault+0xfa/0x380 [ 1354.728187] lowmem_reserve[]: [ 1354.733549] __handle_mm_fault+0x2497/0x4620 [ 1354.733559] ? vm_insert_page+0x7c0/0x7c0 [ 1354.733577] ? mark_held_locks+0xa6/0xf0 [ 1354.733587] handle_mm_fault+0x455/0x9c0 [ 1354.738066] 0 [ 1354.742127] __do_page_fault+0x549/0xad0 [ 1354.742139] ? spurious_fault+0x640/0x640 [ 1354.742147] ? do_page_fault+0x60/0x500 [ 1354.742159] ? page_fault+0x2f/0x50 [ 1354.744378] 0 [ 1354.748523] page_fault+0x45/0x50 [ 1354.777080] 0 [ 1354.780576] RIP: 0001:0x145b33805a0 [ 1354.783687] 0 [ 1354.788051] RSP: 461220:000000c000157c68 EFLAGS: 145b33805a0 [ 1354.971169] Mem-Info: [ 1354.974912] 0 [ 1354.981363] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 2*16kB (UM) 3*32kB (UME) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10964kB [ 1355.001045] Node 0 DMA32: 4486*4kB (UME) 2133*8kB (UME) 412*16kB (UME) 509*32kB (UME) 464*64kB (U) 193*128kB (U) 16*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 116384kB [ 1355.001113] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1355.001162] Node 1 Normal: [ 1355.041108] active_anon:22398 inactive_anon:33144 isolated_anon:0 [ 1355.041108] active_file:15 inactive_file:12 isolated_file:4 [ 1355.041108] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1355.041108] slab_reclaimable:11979 slab_unreclaimable:110689 [ 1355.041108] mapped:43521 shmem:33554 pagetables:749 bounce:0 [ 1355.041108] free:92297 free_pcp:698 free_cma:0 [ 1355.044792] 4341*4kB [ 1355.078463] Node 0 active_anon:88756kB inactive_anon:108436kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174084kB dirty:0kB writeback:0kB shmem:109864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1355.131312] Node 1 active_anon:836kB inactive_anon:24140kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24352kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1355.135115] (UME) [ 1355.158256] Node 0 DMA free:11172kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1355.158277] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1355.158297] Node 0 DMA32 free:136788kB min:36200kB low:45248kB high:54296kB active_anon:88692kB inactive_anon:108436kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:2788kB bounce:0kB free_pcp:1260kB local_pcp:620kB free_cma:0kB [ 1355.158320] lowmem_reserve[]: [ 1355.204041] 953*8kB (UME) 680*16kB (UME) 708*32kB (UME) 1174*64kB (UME) 391*128kB (UM) 71*256kB (UE) 12*512kB (U) 4*1024kB (U) 8*2048kB (U) 2*4096kB (UM) = 236700kB [ 1355.281882] 0 0 0 0 0 [ 1355.285521] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1355.311030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1355.320743] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1355.360433] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1355.390295] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1355.412726] lowmem_reserve[]: 0 0 0 0 0 [ 1355.420515] 34780 total pagecache pages [ 1355.425948] 0 pages in swap cache [ 1355.429846] Swap cache stats: add 0, delete 0, find 0/0 [ 1355.431421] Node 1 [ 1355.453384] Free swap = 0kB [ 1355.455096] Normal free:303348kB min:53696kB low:67120kB high:80544kB active_anon:836kB inactive_anon:24140kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:200kB bounce:0kB free_pcp:1408kB local_pcp:672kB free_cma:0kB [ 1355.464326] Total swap = 0kB [ 1355.526061] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1355.545132] systemd[1]: Stopped Journal Service. [ 1355.551467] lowmem_reserve[]: 0 0 0 0 0 [ 1355.566906] Node 0 DMA: 43*4kB (UE) 5*8kB (UE) 4*16kB (UM) 4*32kB (UME) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11220kB [ 1355.603970] Node 0 DMA32: 381*4kB (UME) 828*8kB (UE) 204*16kB (UME) 13*32kB (UE) 453*64kB (U) 195*128kB (U) 37*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 75252kB [ 1355.619832] 2097051 pages RAM [ 1355.635003] 0 pages HighMem/MovableOnly [ 1355.639006] 363849 pages reserved [ 1355.655384] 0 pages cma reserved [ 1355.661087] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1355.684905] Node 1 Normal: 3931*4kB (UME) 2117*8kB (UME) 1036*16kB (UME) 907*32kB (UME) 1374*64kB (UME) 458*128kB (UM) 89*256kB (UE) 19*512kB (U) 9*1024kB (U) 10*2048kB (U) 4*4096kB (UM) = 303412kB [ 1355.702933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1355.712530] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1355.721815] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 08:24:45 executing program 3: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1355.731405] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1355.740457] 36075 total pagecache pages [ 1355.745105] 0 pages in swap cache [ 1355.749081] Swap cache stats: add 0, delete 0, find 0/0 [ 1355.755068] Free swap = 0kB [ 1355.758587] Total swap = 0kB [ 1355.762759] 2097051 pages RAM [ 1355.766227] 0 pages HighMem/MovableOnly [ 1355.770612] 363849 pages reserved [ 1355.774569] 0 pages cma reserved [ 1355.778578] Out of memory (oom_kill_allocating_task): Kill process 32270 (syz-fuzzer) score 0 or sacrifice child [ 1355.797310] Killed process 32271 (syz-executor.5) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1355.825966] oom_reaper: reaped process 32271 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1355.889997] systemd[1]: Starting Journal Service... [ 1356.193695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1356.200829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1356.261669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1356.307706] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1356.322390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1356.350933] device bridge_slave_1 left promiscuous mode [ 1356.361520] systemd-journald[1072]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1356.395731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.482214] oom_reaper: reaped process 1062 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1356.556658] oom_reaper: reaped process 1053 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1356.586282] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1356.611215] net_ratelimit: 7 callbacks suppressed [ 1356.611220] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1356.622860] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1356.629416] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1356.629940] syz-fuzzer cpuset= [ 1356.636035] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1356.640062] / [ 1356.645796] syz-executor.5: [ 1356.645818] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1356.647524] page allocation failure: order:0 [ 1356.650589] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1356.662473] mems_allowed=0-1 [ 1356.668071] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1356.675556] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1356.677800] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1356.685437] CPU: 0 PID: 7962 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1356.691984] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1356.699325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1356.706112] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1356.715597] Call Trace: [ 1356.715620] dump_stack+0x1b2/0x281 [ 1356.715632] dump_header+0x178/0x82f [ 1356.715642] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1356.715654] ? ___ratelimit+0x2cd/0x530 [ 1356.741184] syz-executor.0: page allocation failure: order:4 [ 1356.741447] oom_kill_process.cold+0x10/0xa40 [ 1356.741458] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1356.747252] out_of_memory+0xe3e/0x1190 [ 1356.762805] ? oom_killer_disable+0x1c0/0x1c0 [ 1356.772528] ? mutex_trylock+0x152/0x1a0 [ 1356.776775] __alloc_pages_nodemask+0x23e1/0x2720 [ 1356.781633] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1356.781825] (null) [ 1356.786490] alloc_pages_current+0x155/0x260 [ 1356.788615] syz-executor.0 cpuset= [ 1356.793053] filemap_fault+0x11a1/0x1ad0 [ 1356.793071] ext4_filemap_fault+0x84/0xb0 [ 1356.793080] __do_fault+0xfa/0x380 [ 1356.793090] __handle_mm_fault+0x2497/0x4620 [ 1356.793099] ? vm_insert_page+0x7c0/0x7c0 [ 1356.793116] ? mark_held_locks+0xa6/0xf0 [ 1356.793126] handle_mm_fault+0x455/0x9c0 [ 1356.793139] __do_page_fault+0x549/0xad0 [ 1356.793151] ? spurious_fault+0x640/0x640 [ 1356.793160] ? do_page_fault+0x60/0x500 [ 1356.793169] ? page_fault+0x2f/0x50 [ 1356.793176] page_fault+0x45/0x50 [ 1356.793181] RIP: 0f00: (null) [ 1356.793185] RSP: 01c6:000000c000039e40 EFLAGS: 00000003 [ 1356.804991] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1356.805015] CPU: 0 PID: 1047 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1356.805022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1356.805025] Call Trace: [ 1356.805042] dump_stack+0x1b2/0x281 [ 1356.805058] warn_alloc.cold+0x96/0x1cc [ 1356.805070] ? zone_watermark_ok_safe+0x220/0x220 [ 1356.805081] ? usleep_range+0x130/0x130 [ 1356.805093] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1356.859613] / [ 1356.866869] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1356.886725] mems_allowed=0-1 [ 1356.886815] ? run_timer_softirq+0x5a0/0x5a0 [ 1356.901129] syz-executor.4: [ 1356.902613] __alloc_pages_nodemask+0x2127/0x2720 [ 1356.907627] page allocation failure: order:0 [ 1356.910747] ? lock_acquire+0x170/0x3f0 [ 1356.931519] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1356.936455] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1356.940976] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1356.944082] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1356.946590] alloc_pages_current+0x155/0x260 [ 1356.958674] ion_page_pool_alloc+0x118/0x1b0 [ 1356.963095] ion_system_heap_allocate+0x133/0x8c0 [ 1356.967956] ? _raw_spin_unlock+0x29/0x40 [ 1356.972106] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1356.976487] syz-executor.4 cpuset= [ 1356.977035] ? ion_system_contig_heap_create+0x130/0x130 [ 1356.977037] / mems_allowed=0-1 [ 1356.980574] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1356.980588] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1356.999062] ion_alloc+0x27a/0x810 [ 1357.002612] ? ion_dma_buf_release+0x40/0x40 [ 1357.007022] ? __might_fault+0x177/0x1b0 [ 1357.011103] ion_ioctl+0xea/0x1f0 [ 1357.014560] ? ion_query_heaps+0x360/0x360 [ 1357.018803] ? ion_query_heaps+0x360/0x360 [ 1357.023038] do_vfs_ioctl+0x75a/0xff0 [ 1357.026853] ? ioctl_preallocate+0x1a0/0x1a0 [ 1357.031267] ? lock_downgrade+0x740/0x740 [ 1357.035427] ? __fget+0x225/0x360 [ 1357.038885] ? do_vfs_ioctl+0xff0/0xff0 [ 1357.042863] ? security_file_ioctl+0x83/0xb0 [ 1357.047300] SyS_ioctl+0x7f/0xb0 [ 1357.050684] ? do_vfs_ioctl+0xff0/0xff0 [ 1357.054659] do_syscall_64+0x1d5/0x640 [ 1357.058568] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1357.063751] RIP: 0033:0x4665f9 [ 1357.066935] RSP: 002b:00007f1bb23e0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1357.074640] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1357.081929] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1357.089199] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1357.096505] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1357.103797] R13: 00007ffeb0190c0f R14: 00007f1bb23e0300 R15: 0000000000022000 [ 1357.118914] CPU: 1 PID: 1051 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1357.126739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1357.136371] Call Trace: [ 1357.138967] dump_stack+0x1b2/0x281 [ 1357.142601] warn_alloc.cold+0x96/0x1cc [ 1357.144398] Mem-Info: [ 1357.146582] ? zone_watermark_ok_safe+0x220/0x220 [ 1357.148991] active_anon:22336 inactive_anon:33127 isolated_anon:0 [ 1357.148991] active_file:17 inactive_file:17 isolated_file:0 [ 1357.148991] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1357.148991] slab_reclaimable:12065 slab_unreclaimable:109700 [ 1357.148991] mapped:26113 shmem:33551 pagetables:680 bounce:0 [ 1357.148991] free:13957 free_pcp:30 free_cma:0 [ 1357.153836] __alloc_pages_nodemask+0x2127/0x2720 [ 1357.153848] ? lock_acquire+0x170/0x3f0 [ 1357.153865] ? lock_acquire+0x170/0x3f0 [ 1357.153888] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1357.187087] Node 0 active_anon:88124kB inactive_anon:108376kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104452kB dirty:0kB writeback:0kB shmem:109864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1357.191897] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1357.191910] ? __mutex_unlock_slowpath+0x75/0x770 [ 1357.191929] alloc_pages_current+0x155/0x260 [ 1357.195921] Node 1 active_anon:1220kB inactive_anon:24132kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1357.199878] ion_page_pool_alloc+0x118/0x1b0 [ 1357.204787] Node 0 [ 1357.232692] ion_system_heap_allocate+0x133/0x8c0 [ 1357.232705] ? _raw_spin_unlock+0x29/0x40 [ 1357.232713] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1357.232722] ? ion_system_contig_heap_create+0x130/0x130 [ 1357.232733] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1357.232748] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1357.238301] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1357.243123] ion_alloc+0x27a/0x810 [ 1357.243138] ? ion_dma_buf_release+0x40/0x40 [ 1357.243150] ? __might_fault+0x177/0x1b0 [ 1357.243161] ion_ioctl+0xea/0x1f0 [ 1357.243171] ? ion_query_heaps+0x360/0x360 [ 1357.247569] lowmem_reserve[]: [ 1357.275073] ? ion_query_heaps+0x360/0x360 [ 1357.275084] do_vfs_ioctl+0x75a/0xff0 [ 1357.275097] ? ioctl_preallocate+0x1a0/0x1a0 [ 1357.275106] ? lock_downgrade+0x740/0x740 [ 1357.275119] ? __fget+0x225/0x360 [ 1357.279533] 0 [ 1357.281765] ? do_vfs_ioctl+0xff0/0xff0 [ 1357.281777] ? security_file_ioctl+0x83/0xb0 [ 1357.281786] SyS_ioctl+0x7f/0xb0 [ 1357.281794] ? do_vfs_ioctl+0xff0/0xff0 [ 1357.281806] do_syscall_64+0x1d5/0x640 [ 1357.286637] 2717 [ 1357.290780] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1357.295733] 2718 [ 1357.301125] RIP: 0033:0x4665f9 [ 1357.301131] RSP: 002b:00007feafbab4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1357.301141] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1357.301149] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1357.306149] 2718 [ 1357.310976] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1357.310982] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1357.310987] R13: 00007ffcb6e8eadf R14: 00007feafbab4300 R15: 0000000000022000 [ 1357.325385] CPU: 1 PID: 1062 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1357.337034] syz-executor.2: [ 1357.340161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1357.349292] 2718 [ 1357.352329] Call Trace: [ 1357.352355] dump_stack+0x1b2/0x281 [ 1357.352374] warn_alloc.cold+0x96/0x1cc [ 1357.359707] ? zone_watermark_ok_safe+0x220/0x220 [ 1357.363985] page allocation failure: order:0 [ 1357.367715] ? usleep_range+0x130/0x130 [ 1357.372139] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1357.376250] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1357.379675] (null) [ 1357.381470] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1357.381479] ? run_timer_softirq+0x5a0/0x5a0 [ 1357.381496] __alloc_pages_nodemask+0x2127/0x2720 [ 1357.381512] ? lock_acquire+0x170/0x3f0 [ 1357.385485] warn_alloc_show_mem: 1 callbacks suppressed [ 1357.385488] Mem-Info: [ 1357.389867] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1357.393259] Node 0 [ 1357.397186] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1357.401116] active_anon:22336 inactive_anon:33127 isolated_anon:0 [ 1357.401116] active_file:17 inactive_file:17 isolated_file:0 [ 1357.401116] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1357.401116] slab_reclaimable:12065 slab_unreclaimable:109700 [ 1357.401116] mapped:26113 shmem:33551 pagetables:680 bounce:0 [ 1357.401116] free:13957 free_pcp:29 free_cma:0 [ 1357.403103] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1357.408278] Node 0 active_anon:88124kB inactive_anon:108376kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104452kB dirty:0kB writeback:0kB shmem:109864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1357.410327] ? __sanitizer_cov_trace_pc+0x3a/0x50 [ 1357.413559] syz-executor.2 cpuset= [ 1357.421202] alloc_pages_current+0x155/0x260 [ 1357.421218] ion_page_pool_alloc+0x118/0x1b0 [ 1357.421229] ion_system_heap_allocate+0x133/0x8c0 [ 1357.428527] DMA32 free:18028kB min:36200kB low:45248kB high:54296kB active_anon:88108kB inactive_anon:108376kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2468kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 1357.436391] ? ion_alloc+0x187/0x810 [ 1357.436404] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1357.436413] ? ion_system_contig_heap_create+0x130/0x130 [ 1357.436423] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1357.436437] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1357.438482] lowmem_reserve[]: [ 1357.445752] ion_alloc+0x204/0x810 [ 1357.445767] ? ion_dma_buf_release+0x40/0x40 [ 1357.445779] ? __might_fault+0x177/0x1b0 [ 1357.445790] ion_ioctl+0xea/0x1f0 [ 1357.453109] Node 1 active_anon:1220kB inactive_anon:24132kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1357.460346] ? ion_query_heaps+0x360/0x360 [ 1357.468178] / [ 1357.471133] ? ion_query_heaps+0x360/0x360 [ 1357.480519] 0 [ 1357.482522] do_vfs_ioctl+0x75a/0xff0 [ 1357.482536] ? ioctl_preallocate+0x1a0/0x1a0 [ 1357.485095] 0 [ 1357.488707] ? lock_downgrade+0x740/0x740 [ 1357.488721] ? __fget+0x225/0x360 [ 1357.492852] Node 0 [ 1357.497631] ? do_vfs_ioctl+0xff0/0xff0 [ 1357.502095] mems_allowed=0-1 [ 1357.506015] ? security_file_ioctl+0x83/0xb0 [ 1357.513163] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1357.518203] SyS_ioctl+0x7f/0xb0 [ 1357.520350] lowmem_reserve[]: [ 1357.525355] ? do_vfs_ioctl+0xff0/0xff0 [ 1357.525368] do_syscall_64+0x1d5/0x640 [ 1357.525383] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1357.525391] RIP: 0033:0x4665f9 [ 1357.525399] RSP: 002b:00007ff6cdf47188 EFLAGS: 00000246 [ 1357.529813] 0 [ 1357.534616] ORIG_RAX: 0000000000000010 [ 1357.534623] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1357.534628] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1357.534632] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1357.534637] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1357.534642] R13: 00007ffe714d338f R14: 00007ff6cdf47300 R15: 0000000000022000 [ 1357.620725] CPU: 1 PID: 1053 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1357.632894] 0 [ 1357.633242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1357.637648] 2717 [ 1357.642037] Call Trace: [ 1357.642059] dump_stack+0x1b2/0x281 [ 1357.642073] warn_alloc.cold+0x96/0x1cc [ 1357.642086] ? zone_watermark_ok_safe+0x220/0x220 [ 1357.648550] 2718 [ 1357.675230] ? usleep_range+0x130/0x130 [ 1357.675241] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1357.675253] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1357.675262] ? run_timer_softirq+0x5a0/0x5a0 [ 1357.675280] __alloc_pages_nodemask+0x2127/0x2720 [ 1357.679444] 2718 [ 1357.684470] ? lock_acquire+0x170/0x3f0 [ 1357.684487] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1357.684496] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1357.684511] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1357.684525] ? alloc_pages_current+0x37/0x260 [ 1357.684536] alloc_pages_current+0x155/0x260 [ 1357.684547] ion_page_pool_alloc+0x118/0x1b0 [ 1357.684557] ion_system_heap_allocate+0x133/0x8c0 [ 1357.684567] ? ion_alloc+0x187/0x810 [ 1357.690036] 2718 [ 1357.695020] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1357.695030] ? ion_system_contig_heap_create+0x130/0x130 [ 1357.695040] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1357.695052] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1357.695062] ion_alloc+0x204/0x810 [ 1357.702995] ? ion_dma_buf_release+0x40/0x40 [ 1357.703007] ? __might_fault+0x177/0x1b0 [ 1357.703019] ion_ioctl+0xea/0x1f0 [ 1357.706558] Node 0 [ 1357.710956] ? ion_query_heaps+0x360/0x360 [ 1357.715050] DMA32 free:34068kB min:36200kB low:45248kB high:54296kB active_anon:88108kB inactive_anon:108376kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2468kB bounce:0kB free_pcp:700kB local_pcp:4kB free_cma:0kB [ 1357.718436] ? ion_query_heaps+0x360/0x360 [ 1357.745291] 0 [ 1357.749465] do_vfs_ioctl+0x75a/0xff0 [ 1357.751175] 0 [ 1357.755375] ? ioctl_preallocate+0x1a0/0x1a0 [ 1357.761033] ? lock_downgrade+0x740/0x740 [ 1357.761046] ? __fget+0x225/0x360 [ 1357.761055] ? do_vfs_ioctl+0xff0/0xff0 [ 1357.761067] ? security_file_ioctl+0x83/0xb0 [ 1357.761077] SyS_ioctl+0x7f/0xb0 [ 1357.765483] Node 0 [ 1357.767267] ? do_vfs_ioctl+0xff0/0xff0 [ 1357.771460] lowmem_reserve[]: [ 1357.774856] do_syscall_64+0x1d5/0x640 [ 1357.777082] 0 [ 1357.781059] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1357.781069] RIP: 0033:0x4665f9 [ 1357.781073] RSP: 002b:00007f56be175188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1357.781083] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1357.781088] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1357.781096] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1357.784222] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1357.788752] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1357.788760] R13: 00007fffaba42f8f R14: 00007f56be175300 R15: 0000000000022000 [ 1357.814416] 0 [ 1358.219922] lowmem_reserve[]: 0 0 0 0 0 [ 1358.226420] Node 1 Normal free:85356kB min:53696kB low:67120kB high:80544kB active_anon:1220kB inactive_anon:24132kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:244kB bounce:0kB free_pcp:1340kB local_pcp:640kB free_cma:0kB [ 1358.269586] device bridge_slave_0 left promiscuous mode [ 1358.286177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.311083] lowmem_reserve[]: 0 0 0 0 0 [ 1358.315281] Node 0 DMA: 3*4kB (ME) 4*8kB (UME) 1*16kB (M) 7*32kB (UME) 2*64kB (UE) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11036kB [ 1358.335110] device veth1_macvtap left promiscuous mode [ 1358.365016] device veth0_macvtap left promiscuous mode [ 1358.371148] Node 0 DMA32: 2773*4kB (UME) 1883*8kB (UME) 981*16kB (UME) 573*32kB (UME) 384*64kB (UM) 71*128kB (UM) 9*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 96156kB [ 1358.376286] device veth1_vlan left promiscuous mode [ 1358.407196] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1358.429430] Node 1 Normal: 2093*4kB (UME) 880*8kB (UME) 251*16kB (UME) 143*32kB (UME) 241*64kB (UME) 119*128kB (UM) 23*256kB (UME) 25*512kB (UM) 193*1024kB (UM) 3*2048kB (U) 0*4096kB = 277124kB [ 1358.471254] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1358.480126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1358.484891] device veth0_vlan left promiscuous mode [ 1358.501324] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1358.510194] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1358.550580] 37773 total pagecache pages [ 1358.573039] 0 pages in swap cache [ 1358.576538] Swap cache stats: add 0, delete 0, find 0/0 [ 1358.612952] Free swap = 0kB [ 1358.616002] Total swap = 0kB [ 1358.619045] 2097051 pages RAM [ 1358.633443] 0 pages HighMem/MovableOnly [ 1358.637461] 363849 pages reserved [ 1358.640900] 0 pages cma reserved [ 1358.681033] Out of memory (oom_kill_allocating_task): Kill process 7962 (syz-fuzzer) score 0 or sacrifice child [ 1358.706835] Killed process 1073 (syz-executor.3) total-vm:84924kB, anon-rss:60kB, file-rss:876kB, shmem-rss:0kB [ 1358.738730] oom_reaper: reaped process 1073 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1358.908967] device hsr_slave_1 left promiscuous mode [ 1358.946194] device hsr_slave_0 left promiscuous mode [ 1358.995573] team0 (unregistering): Port device team_slave_1 removed [ 1359.019993] team0 (unregistering): Port device team_slave_0 removed [ 1359.031055] 0 0 0 [ 1359.033279] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1359.095822] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1359.131027] lowmem_reserve[]: 0 0 0 0 0 [ 1359.135115] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1359.135118] Node 1 Normal free:353936kB min:53696kB low:67120kB high:80544kB active_anon:1220kB inactive_anon:24132kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:244kB bounce:0kB free_pcp:844kB local_pcp:724kB free_cma:0kB [ 1359.241036] lowmem_reserve[]: 0 0 0 0 0 [ 1359.245173] Node 0 DMA: 3*4kB (ME) 4*8kB (UME) 3*16kB (UM) 7*32kB (UME) 2*64kB (UE) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11068kB [ 1359.259619] bond0 (unregistering): Released all slaves [ 1359.311039] Node 0 DMA32: 524*4kB (UME) 149*8kB (UME) 160*16kB (UME) 17*32kB (UME) 381*64kB (UM) 74*128kB (UM) 4*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 41272kB [ 1359.371035] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1359.391068] Node 1 Normal: 89*4kB (ME) 63*8kB (UME) 58*16kB (UME) 32*32kB (UME) 32*64kB (UME) 18*128kB (UM) 10*256kB (UME) 37*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 28668kB [ 1359.406252] syz-executor.0 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1359.407656] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1359.432778] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1359.441702] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1359.450280] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1359.459248] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1359.464512] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1359.465767] CPU: 0 PID: 1053 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1359.478612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1359.487986] Call Trace: [ 1359.490600] dump_stack+0x1b2/0x281 [ 1359.494232] warn_alloc.cold+0x96/0x1cc [ 1359.498202] ? zone_watermark_ok_safe+0x220/0x220 [ 1359.503072] __alloc_pages_nodemask+0x2127/0x2720 [ 1359.507920] ? lock_acquire+0x170/0x3f0 [ 1359.512074] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1359.516971] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1359.522433] ? __mutex_unlock_slowpath+0x75/0x770 [ 1359.527290] ? retint_kernel+0x2d/0x2d [ 1359.531188] alloc_pages_current+0x155/0x260 [ 1359.535600] ion_page_pool_alloc+0x118/0x1b0 [ 1359.540007] ion_system_heap_allocate+0x133/0x8c0 [ 1359.544852] ? _raw_spin_unlock+0x29/0x40 [ 1359.549009] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1359.554138] ? ion_system_contig_heap_create+0x130/0x130 [ 1359.559696] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1359.564724] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1359.569582] ion_alloc+0x27a/0x810 [ 1359.573170] ? ion_dma_buf_release+0x40/0x40 [ 1359.577595] ? __might_fault+0x177/0x1b0 [ 1359.581656] ion_ioctl+0xea/0x1f0 [ 1359.584926] syz-executor.4: page allocation failure: order:4 [ 1359.585106] ? ion_query_heaps+0x360/0x360 [ 1359.585118] ? ion_query_heaps+0x360/0x360 [ 1359.590920] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1359.595144] do_vfs_ioctl+0x75a/0xff0 [ 1359.595157] ? ioctl_preallocate+0x1a0/0x1a0 [ 1359.595166] ? lock_downgrade+0x740/0x740 [ 1359.595178] ? __fget+0x225/0x360 [ 1359.595186] ? do_vfs_ioctl+0xff0/0xff0 [ 1359.595197] ? security_file_ioctl+0x83/0xb0 [ 1359.595206] SyS_ioctl+0x7f/0xb0 [ 1359.595213] ? do_vfs_ioctl+0xff0/0xff0 [ 1359.595223] do_syscall_64+0x1d5/0x640 [ 1359.595236] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1359.595244] RIP: 0033:0x4665f9 [ 1359.595249] RSP: 002b:00007f56be175188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1359.611055] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1359.614798] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1359.618948] 35667 total pagecache pages [ 1359.622380] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1359.622386] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1359.622390] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1359.622395] R13: 00007fffaba42f8f R14: 00007f56be175300 R15: 0000000000022000 [ 1359.627259] (null) [ 1359.631595] CPU: 1 PID: 1051 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1359.641022] syz-executor.4 cpuset= [ 1359.642103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1359.647284] / [ 1359.650466] Call Trace: [ 1359.681011] mems_allowed=0-1 [ 1359.685303] dump_stack+0x1b2/0x281 [ 1359.740918] dump_header+0x178/0x82f [ 1359.744727] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1359.749830] ? ___ratelimit+0x2cd/0x530 [ 1359.753922] oom_kill_process.cold+0x10/0xa40 [ 1359.758454] out_of_memory+0xe3e/0x1190 [ 1359.762456] ? oom_killer_disable+0x1c0/0x1c0 [ 1359.767066] ? mutex_trylock+0x152/0x1a0 [ 1359.771132] __alloc_pages_nodemask+0x23e1/0x2720 [ 1359.775984] ? lock_acquire+0x170/0x3f0 [ 1359.779982] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1359.784830] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1359.789327] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1359.794790] alloc_pages_current+0x155/0x260 [ 1359.799207] ion_page_pool_alloc+0x118/0x1b0 [ 1359.803619] ion_system_heap_allocate+0x133/0x8c0 [ 1359.808484] ? _raw_spin_unlock+0x29/0x40 [ 1359.812631] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1359.817559] ? ion_system_contig_heap_create+0x130/0x130 [ 1359.823041] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1359.828081] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1359.832924] ion_alloc+0x27a/0x810 [ 1359.836471] ? ion_dma_buf_release+0x40/0x40 [ 1359.840889] ? __might_fault+0x177/0x1b0 [ 1359.844957] ion_ioctl+0xea/0x1f0 [ 1359.848410] ? ion_query_heaps+0x360/0x360 [ 1359.852660] ? ion_query_heaps+0x360/0x360 [ 1359.856894] do_vfs_ioctl+0x75a/0xff0 [ 1359.860696] ? ioctl_preallocate+0x1a0/0x1a0 [ 1359.865101] ? lock_downgrade+0x740/0x740 [ 1359.869348] ? __fget+0x225/0x360 [ 1359.872804] ? do_vfs_ioctl+0xff0/0xff0 [ 1359.876867] ? security_file_ioctl+0x83/0xb0 [ 1359.881274] SyS_ioctl+0x7f/0xb0 [ 1359.884637] ? do_vfs_ioctl+0xff0/0xff0 [ 1359.888708] do_syscall_64+0x1d5/0x640 [ 1359.892620] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1359.897809] RIP: 0033:0x4665f9 [ 1359.900989] RSP: 002b:00007feafbab4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1359.908696] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1359.915969] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1359.923324] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1359.930595] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1359.931026] warn_alloc_show_mem: 3 callbacks suppressed [ 1359.931030] Mem-Info: [ 1359.937864] R13: 00007ffcb6e8eadf R14: 00007feafbab4300 R15: 0000000000022000 [ 1359.952934] CPU: 0 PID: 1062 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1359.959317] 0 pages in swap cache [ 1359.960753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1359.964273] Swap cache stats: add 0, delete 0, find 0/0 [ 1359.973724] Call Trace: [ 1359.973746] dump_stack+0x1b2/0x281 [ 1359.973759] warn_alloc.cold+0x96/0x1cc [ 1359.973771] ? zone_watermark_ok_safe+0x220/0x220 [ 1359.973799] __alloc_pages_nodemask+0x2127/0x2720 [ 1359.973809] ? __schedule+0x893/0x1de0 [ 1359.973824] ? lock_acquire+0x170/0x3f0 [ 1359.973841] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1359.981025] Free swap = 0kB [ 1359.982481] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1359.986075] Total swap = 0kB [ 1359.990050] ? __mutex_unlock_slowpath+0x75/0x770 [ 1359.995379] 2097051 pages RAM [ 1359.999733] alloc_pages_current+0x155/0x260 [ 1360.003673] 0 pages HighMem/MovableOnly [ 1360.007559] ion_page_pool_alloc+0x118/0x1b0 [ 1360.012843] 363849 pages reserved [ 1360.015382] ion_system_heap_allocate+0x133/0x8c0 [ 1360.020805] 0 pages cma reserved [ 1360.023822] ? _raw_spin_unlock+0x29/0x40 [ 1360.023832] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1360.023840] ? ion_system_contig_heap_create+0x130/0x130 [ 1360.023850] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1360.023869] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1360.023879] ion_alloc+0x27a/0x810 [ 1360.023891] ? ion_dma_buf_release+0x40/0x40 [ 1360.023903] ? __might_fault+0x177/0x1b0 [ 1360.091378] active_anon:22389 inactive_anon:35175 isolated_anon:0 [ 1360.091378] active_file:16 inactive_file:13 isolated_file:0 [ 1360.091378] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1360.091378] slab_reclaimable:12075 slab_unreclaimable:112552 [ 1360.091378] mapped:35242 shmem:35599 pagetables:725 bounce:0 [ 1360.091378] free:24829 free_pcp:30 free_cma:0 [ 1360.092536] ion_ioctl+0xea/0x1f0 [ 1360.129647] ? ion_query_heaps+0x360/0x360 [ 1360.134080] ? ion_query_heaps+0x360/0x360 [ 1360.138318] do_vfs_ioctl+0x75a/0xff0 [ 1360.142126] ? ioctl_preallocate+0x1a0/0x1a0 [ 1360.146550] ? lock_downgrade+0x740/0x740 [ 1360.150835] ? __fget+0x225/0x360 [ 1360.154292] ? do_vfs_ioctl+0xff0/0xff0 [ 1360.158267] ? security_file_ioctl+0x83/0xb0 [ 1360.162771] SyS_ioctl+0x7f/0xb0 [ 1360.166140] ? do_vfs_ioctl+0xff0/0xff0 [ 1360.170124] do_syscall_64+0x1d5/0x640 [ 1360.174013] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1360.179214] RIP: 0033:0x4665f9 [ 1360.182492] RSP: 002b:00007ff6cdf47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1360.190384] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1360.197659] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1360.201111] Node 0 active_anon:88336kB inactive_anon:116568kB active_file:52kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140968kB dirty:0kB writeback:0kB shmem:118056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1360.204927] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1360.204937] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1360.250299] R13: 00007ffe714d338f R14: 00007ff6cdf47300 R15: 0000000000022000 [ 1360.251459] Mem-Info: [ 1360.260172] active_anon:22389 inactive_anon:35175 isolated_anon:0 [ 1360.260172] active_file:16 inactive_file:13 isolated_file:0 [ 1360.260172] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1360.260172] slab_reclaimable:12075 slab_unreclaimable:112552 [ 1360.260172] mapped:35242 shmem:35599 pagetables:725 bounce:0 [ 1360.260172] free:24612 free_pcp:30 free_cma:0 [ 1360.294259] Node 1 active_anon:1220kB inactive_anon:24132kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1360.321842] Node 0 active_anon:88336kB inactive_anon:116568kB active_file:44kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140944kB dirty:0kB writeback:0kB shmem:118056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1360.351678] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1360.379336] Node 1 active_anon:1220kB inactive_anon:24132kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1360.406826] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1360.411140] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1360.412005] Node 0 DMA32 free:17992kB min:36200kB low:45248kB high:54296kB active_anon:88320kB inactive_anon:116568kB active_file:44kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:2648kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1360.441030] syz-executor.4 cpuset= [ 1360.455436] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1360.474167] / [ 1360.486030] lowmem_reserve[]: 0 0 0 0 0 [ 1360.491795] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1360.501040] mems_allowed=0-1 [ 1360.518484] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1360.525765] Node 0 DMA32 free:17992kB min:36200kB low:45248kB high:54296kB active_anon:88320kB inactive_anon:116568kB active_file:44kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:2648kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1360.541062] CPU: 0 PID: 1062 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1360.555490] lowmem_reserve[]: [ 1360.562847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1360.562852] Call Trace: [ 1360.562876] dump_stack+0x1b2/0x281 [ 1360.562890] warn_alloc.cold+0x96/0x1cc [ 1360.562902] ? zone_watermark_ok_safe+0x220/0x220 [ 1360.562911] ? usleep_range+0x130/0x130 [ 1360.562919] ? try_to_free_pages+0x23f/0x6e0 [ 1360.562929] ? _find_next_bit+0xdb/0x100 [ 1360.562939] ? run_timer_softirq+0x5a0/0x5a0 [ 1360.562954] __alloc_pages_nodemask+0x2127/0x2720 [ 1360.562971] ? lock_acquire+0x170/0x3f0 [ 1360.562988] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1360.562998] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1360.563014] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1360.563035] alloc_pages_current+0x155/0x260 [ 1360.563046] ion_page_pool_alloc+0x118/0x1b0 [ 1360.563056] ion_system_heap_allocate+0x133/0x8c0 [ 1360.563067] ? _raw_spin_unlock+0x29/0x40 [ 1360.563076] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1360.563086] ? ion_system_contig_heap_create+0x130/0x130 [ 1360.563096] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1360.563107] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1360.563118] ion_alloc+0x27a/0x810 [ 1360.563131] ? ion_dma_buf_release+0x40/0x40 [ 1360.563144] ? __might_fault+0x177/0x1b0 [ 1360.563154] ion_ioctl+0xea/0x1f0 [ 1360.563166] ? ion_query_heaps+0x360/0x360 [ 1360.566276] lowmem_reserve[]: [ 1360.575641] ? ion_query_heaps+0x360/0x360 [ 1360.575652] do_vfs_ioctl+0x75a/0xff0 [ 1360.575664] ? ioctl_preallocate+0x1a0/0x1a0 [ 1360.575673] ? lock_downgrade+0x740/0x740 [ 1360.575684] ? __fget+0x225/0x360 [ 1360.575692] ? do_vfs_ioctl+0xff0/0xff0 [ 1360.575704] ? security_file_ioctl+0x83/0xb0 [ 1360.575714] SyS_ioctl+0x7f/0xb0 [ 1360.575721] ? do_vfs_ioctl+0xff0/0xff0 [ 1360.575731] do_syscall_64+0x1d5/0x640 [ 1360.575746] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1360.575756] RIP: 0033:0x4665f9 [ 1360.578817] 0 [ 1360.581936] RSP: 002b:00007ff6cdf47188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1360.581946] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1360.581951] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1360.581956] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1360.581961] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1360.581965] R13: 00007ffe714d338f R14: 00007ff6cdf47300 R15: 0000000000022000 [ 1360.732380] 0 [ 1360.733340] 0 [ 1360.739507] 0 [ 1360.742813] 0 0 0 [ 1360.742827] Node 1 Normal free:26792kB min:53696kB low:67120kB high:80544kB active_anon:1220kB inactive_anon:24132kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:244kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 1360.742851] lowmem_reserve[]: 0 0 0 0 0 [ 1360.742871] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (M) [ 1360.761043] 0 [ 1360.767102] 2*32kB [ 1360.805499] 0 [ 1360.825844] (ME) 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10976kB [ 1360.852767] 0 [ 1360.854576] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1360.861015] Node 0 [ 1360.881495] lowmem_reserve[]: 0 0 0 0 0 [ 1360.887785] Node 1 Normal free:27560kB min:53696kB low:67120kB high:80544kB active_anon:1220kB inactive_anon:24132kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:244kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 1360.887942] DMA32: [ 1360.917398] lowmem_reserve[]: 0 0 0 0 0 [ 1360.924486] 927*4kB (UME) 120*8kB (UME) 161*16kB (UME) 17*32kB (UME) 24*64kB (UME) 44*128kB (U) 34*256kB (U) 4*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 26732kB [ 1360.931718] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (M) 2*32kB (ME) 4*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 4*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10976kB [ 1360.951029] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1360.956352] Node 0 DMA32: 927*4kB (UME) 120*8kB (UME) 161*16kB (UME) 17*32kB (UME) 24*64kB (UME) 44*128kB (U) 34*256kB (U) 4*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 26732kB [ 1360.981025] Node 1 Normal: 90*4kB (UME) 62*8kB (ME) 57*16kB (ME) 32*32kB (UME) 31*64kB (ME) 20*128kB (UM) 11*256kB (UME) 6*512kB (UM) 0*1024kB 7*2048kB (U) 0*4096kB = 27560kB [ 1360.983259] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1361.001195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1361.021129] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1361.022563] Node 1 Normal: 90*4kB (UME) 62*8kB [ 1361.029756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1361.029898] (ME) [ 1361.037200] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1361.057828] 35630 total pagecache pages [ 1361.061874] 0 pages in swap cache [ 1361.062517] 57*16kB (ME) 32*32kB (UME) 31*64kB (ME) 20*128kB (UM) 11*256kB (UME) 6*512kB (UM) 0*1024kB 7*2048kB (U) 0*4096kB = 27560kB [ 1361.065402] Swap cache stats: add 0, delete 0, find 0/0 [ 1361.065409] Free swap = 0kB [ 1361.090047] Total swap = 0kB [ 1361.096472] 2097051 pages RAM [ 1361.099609] 0 pages HighMem/MovableOnly [ 1361.107132] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1361.116415] 363849 pages reserved [ 1361.119886] 0 pages cma reserved [ 1361.122648] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1361.151090] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1361.159963] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1361.180026] 35630 total pagecache pages [ 1361.186236] 0 pages in swap cache [ 1361.189698] Swap cache stats: add 0, delete 0, find 0/0 [ 1361.195257] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1361.207173] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1361.212430] CPU: 0 PID: 1053 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1361.220332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1361.222910] Free swap = 0kB [ 1361.229699] Call Trace: [ 1361.235875] dump_stack+0x1b2/0x281 [ 1361.239519] warn_alloc.cold+0x96/0x1cc [ 1361.243531] ? zone_watermark_ok_safe+0x220/0x220 [ 1361.248409] Total swap = 0kB [ 1361.248464] ? usleep_range+0x130/0x130 [ 1361.255448] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1361.259065] 2097051 pages RAM [ 1361.260555] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1361.268649] ? run_timer_softirq+0x5a0/0x5a0 [ 1361.269054] 0 pages HighMem/MovableOnly [ 1361.273066] __alloc_pages_nodemask+0x2127/0x2720 [ 1361.273085] ? lock_acquire+0x170/0x3f0 [ 1361.273100] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1361.273110] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1361.273127] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1361.273140] ? retint_kernel+0x2d/0x2d [ 1361.273154] alloc_pages_current+0x155/0x260 [ 1361.273165] ion_page_pool_alloc+0x118/0x1b0 [ 1361.273174] ion_system_heap_allocate+0x133/0x8c0 [ 1361.273187] ? _raw_spin_unlock+0x29/0x40 [ 1361.289191] 363849 pages reserved [ 1361.290795] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1361.298646] 0 pages cma reserved [ 1361.300725] ? ion_system_contig_heap_create+0x130/0x130 [ 1361.320204] Out of memory (oom_kill_allocating_task): Kill process 1051 (syz-executor.0) score 0 or sacrifice child [ 1361.322330] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1361.322344] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1361.322356] ion_alloc+0x27a/0x810 [ 1361.322371] ? ion_dma_buf_release+0x40/0x40 [ 1361.322384] ? __might_fault+0x177/0x1b0 [ 1361.322396] ion_ioctl+0xea/0x1f0 [ 1361.322405] ? ion_query_heaps+0x360/0x360 [ 1361.322416] ? ion_query_heaps+0x360/0x360 [ 1361.322426] do_vfs_ioctl+0x75a/0xff0 [ 1361.322437] ? ioctl_preallocate+0x1a0/0x1a0 [ 1361.329979] Killed process 1051 (syz-executor.0) total-vm:93252kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1361.331000] ? lock_downgrade+0x740/0x740 [ 1361.331014] ? __fget+0x225/0x360 [ 1361.331024] ? do_vfs_ioctl+0xff0/0xff0 [ 1361.331036] ? security_file_ioctl+0x83/0xb0 [ 1361.331046] SyS_ioctl+0x7f/0xb0 [ 1361.331056] ? do_vfs_ioctl+0xff0/0xff0 [ 1361.331068] do_syscall_64+0x1d5/0x640 [ 1361.331083] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1361.331092] RIP: 0033:0x4665f9 [ 1361.331100] RSP: 002b:00007f56be175188 EFLAGS: 00000246 [ 1361.347318] syz-executor.0: [ 1361.350544] ORIG_RAX: 0000000000000010 [ 1361.350555] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1361.359934] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1361.360396] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1361.373978] (null) [ 1361.375817] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1361.380039] , order=0, oom_score_adj=0 [ 1361.384253] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1361.384258] R13: 00007fffaba42f8f R14: 00007f56be175300 R15: 0000000000022000 [ 1361.457234] warn_alloc_show_mem: 2 callbacks suppressed [ 1361.457239] Mem-Info: [ 1361.468193] page allocation failure: order:0 [ 1361.468918] active_anon:22389 inactive_anon:35175 isolated_anon:0 [ 1361.468918] active_file:15 inactive_file:16 isolated_file:0 [ 1361.468918] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1361.468918] slab_reclaimable:12075 slab_unreclaimable:112370 [ 1361.468918] mapped:26536 shmem:35599 pagetables:725 bounce:0 [ 1361.468918] free:13999 free_pcp:76 free_cma:0 [ 1361.477001] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1361.484411] Node 0 active_anon:88336kB inactive_anon:116568kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106144kB dirty:0kB writeback:0kB shmem:118056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1361.490738] (null) [ 1361.503458] Node 1 active_anon:1220kB inactive_anon:24132kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:24340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1361.515324] syz-executor.0 cpuset= [ 1361.522382] Node 0 [ 1361.556933] / [ 1361.593332] systemd-journal cpuset=/ mems_allowed=0-1 [ 1361.629078] mems_allowed=0-1 [ 1361.631553] CPU: 0 PID: 1072 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1361.631560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1361.631567] Call Trace: [ 1361.654863] dump_stack+0x1b2/0x281 [ 1361.658507] dump_header+0x178/0x82f [ 1361.662219] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1361.667336] ? ___ratelimit+0x2cd/0x530 [ 1361.671311] oom_kill_process.cold+0x10/0xa40 [ 1361.675820] out_of_memory+0xe3e/0x1190 [ 1361.680138] ? oom_killer_disable+0x1c0/0x1c0 [ 1361.684630] ? mutex_trylock+0x152/0x1a0 [ 1361.688694] __alloc_pages_nodemask+0x23e1/0x2720 [ 1361.693554] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1361.698409] alloc_pages_current+0x155/0x260 [ 1361.702904] filemap_fault+0x11a1/0x1ad0 [ 1361.706996] ext4_filemap_fault+0x84/0xb0 [ 1361.711141] __do_fault+0xfa/0x380 [ 1361.714675] __handle_mm_fault+0x2497/0x4620 [ 1361.719077] ? vm_insert_page+0x7c0/0x7c0 [ 1361.723225] ? check_stack_object+0x86/0xa0 [ 1361.727583] ? mark_held_locks+0xa6/0xf0 [ 1361.731675] handle_mm_fault+0x455/0x9c0 [ 1361.735743] __do_page_fault+0x549/0xad0 [ 1361.739824] ? spurious_fault+0x640/0x640 [ 1361.743978] ? do_page_fault+0x60/0x500 [ 1361.747953] ? page_fault+0x2f/0x50 [ 1361.751579] page_fault+0x45/0x50 [ 1361.755028] RIP: 0001:0x559529d6b300 [ 1361.758729] RSP: ea018b60:00007ffeea015b30 EFLAGS: 00000000 [ 1361.758754] CPU: 1 PID: 1051 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1361.761690] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1361.764494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1361.772337] lowmem_reserve[]: [ 1361.798145] Call Trace: [ 1361.798171] dump_stack+0x1b2/0x281 [ 1361.798184] warn_alloc.cold+0x96/0x1cc [ 1361.798195] ? lock_downgrade+0x740/0x740 [ 1361.798210] ? zone_watermark_ok_safe+0x220/0x220 [ 1361.807632] 0 [ 1361.810724] ? wake_up_q+0x82/0xd0 [ 1361.813340] 2717 [ 1361.816923] ? wait_for_completion_io+0x10/0x10 [ 1361.820875] 2718 [ 1361.825203] __alloc_pages_nodemask+0x2127/0x2720 [ 1361.825221] ? lock_acquire+0x170/0x3f0 [ 1361.825239] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1361.831070] 2718 [ 1361.832840] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1361.836489] 2718 [ 1361.838577] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1361.845479] alloc_pages_current+0x155/0x260 [ 1361.850354] Node 0 [ 1361.854349] ion_page_pool_alloc+0x118/0x1b0 [ 1361.854358] ion_system_heap_allocate+0x133/0x8c0 [ 1361.854370] ? _raw_spin_unlock+0x29/0x40 [ 1361.854379] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1361.854390] ? ion_system_contig_heap_create+0x130/0x130 [ 1361.859246] DMA32 free:18108kB min:36200kB low:45248kB high:54296kB active_anon:88320kB inactive_anon:116568kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2648kB bounce:0kB free_pcp:316kB local_pcp:0kB free_cma:0kB [ 1361.861286] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1361.861301] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1361.861312] ion_alloc+0x27a/0x810 [ 1361.861326] ? ion_dma_buf_release+0x40/0x40 [ 1361.861337] ? __might_fault+0x177/0x1b0 [ 1361.865823] lowmem_reserve[]: [ 1361.867888] ion_ioctl+0xea/0x1f0 [ 1361.873684] 0 [ 1361.878064] ? ion_query_heaps+0x360/0x360 [ 1361.880275] 0 [ 1361.885042] ? ion_query_heaps+0x360/0x360 [ 1361.885054] do_vfs_ioctl+0x75a/0xff0 [ 1361.885066] ? ioctl_preallocate+0x1a0/0x1a0 [ 1361.885075] ? lock_downgrade+0x740/0x740 [ 1361.885088] ? __fget+0x225/0x360 [ 1361.889921] 0 [ 1361.894061] ? do_vfs_ioctl+0xff0/0xff0 [ 1361.894073] ? security_file_ioctl+0x83/0xb0 [ 1361.894083] SyS_ioctl+0x7f/0xb0 [ 1361.894092] ? do_vfs_ioctl+0xff0/0xff0 [ 1361.894105] do_syscall_64+0x1d5/0x640 [ 1361.899034] Mem-Info: [ 1361.904479] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1361.904489] RIP: 0033:0x4665f9 [ 1361.904493] RSP: 002b:00007feafbab4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1361.904503] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1361.904508] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1361.904518] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1361.933909] 0 [ 1361.940106] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1361.945012] 0 [ 1361.948578] R13: 00007ffcb6e8eadf R14: 00007feafbab4300 R15: 0000000000022000 [ 1362.080579] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1362.106176] lowmem_reserve[]: 0 0 0 0 0 [ 1362.109410] active_anon:22372 inactive_anon:35175 isolated_anon:0 [ 1362.109410] active_file:16 inactive_file:1274 isolated_file:0 [ 1362.109410] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1362.109410] slab_reclaimable:12069 slab_unreclaimable:112005 [ 1362.109410] mapped:27322 shmem:35599 pagetables:677 bounce:0 [ 1362.109410] free:39802 free_pcp:353 free_cma:0 [ 1362.110321] Node 1 Normal free:109684kB min:53696kB low:67120kB high:80544kB active_anon:1220kB inactive_anon:24132kB active_file:12kB inactive_file:4048kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:244kB bounce:0kB free_pcp:756kB local_pcp:0kB free_cma:0kB [ 1362.110345] lowmem_reserve[]: 0 0 0 0 0 [ 1362.110365] Node 0 DMA: 282*4kB (UE) 7*8kB (UME) 1*16kB (M) 2*32kB (ME) 4*64kB (UE) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UE) 2*2048kB (UM) 0*4096kB = 11120kB [ 1362.211075] Node 0 DMA32: 2556*4kB (UME) 1079*8kB (UME) 265*16kB (UME) 83*32kB (UME) 111*64kB (UME) 104*128kB (U) 29*256kB (U) 7*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 58200kB [ 1362.211612] Node 0 active_anon:88268kB inactive_anon:116568kB active_file:52kB inactive_file:1048kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:106928kB dirty:0kB writeback:0kB shmem:118056kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1362.227457] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1362.227506] Node 1 Normal: 1148*4kB (UE) 538*8kB (UME) 333*16kB (UE) 327*32kB (UE) 292*64kB (UE) 128*128kB (UM) 42*256kB (UME) 6*512kB (UM) 9*1024kB (U) 17*2048kB (U) 1*4096kB (U) = 121712kB [ 1362.227583] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1362.227590] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1362.227597] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1362.227603] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1362.227607] 37067 total pagecache pages [ 1362.227617] 0 pages in swap cache [ 1362.227623] Swap cache stats: add 0, delete 0, find 0/0 [ 1362.227626] Free swap = 0kB [ 1362.227629] Total swap = 0kB [ 1362.227635] 2097051 pages RAM [ 1362.227644] 0 pages HighMem/MovableOnly [ 1362.256112] Node 1 active_anon:1220kB inactive_anon:24132kB active_file:12kB inactive_file:4648kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2760kB dirty:0kB writeback:0kB shmem:24340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1362.301044] 363849 pages reserved [ 1362.334096] Node 0 [ 1362.371034] 0 pages cma reserved [ 1362.380060] DMA free:11160kB min:204kB low:252kB high:300kB active_anon:16kB inactive_anon:0kB active_file:0kB inactive_file:1080kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1362.461020] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1362.466093] Node 0 DMA32 free:80136kB min:36200kB low:45248kB high:54296kB active_anon:88152kB inactive_anon:116568kB active_file:352kB inactive_file:1048kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:2456kB bounce:0kB free_pcp:1036kB local_pcp:648kB free_cma:0kB [ 1362.524488] lowmem_reserve[]: 0 0 0 0 0 [ 1362.529703] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1362.567581] lowmem_reserve[]: 0 0 0 0 0 [ 1362.576004] Node 1 Normal free:519440kB min:53696kB low:67120kB high:80544kB active_anon:1020kB inactive_anon:24132kB active_file:312kB inactive_file:4300kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:244kB bounce:0kB free_pcp:1308kB local_pcp:636kB free_cma:0kB [ 1362.611700] lowmem_reserve[]: 0 0 0 0 0 [ 1362.616185] Node 0 DMA: 300*4kB (UME) 11*8kB (UME) 2*16kB (M) 2*32kB (ME) 4*64kB (UE) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UE) 2*2048kB (UM) 0*4096kB = 11240kB [ 1362.636428] Node 0 DMA32: 3082*4kB (UME) 1729*8kB (UME) 310*16kB (UME) 489*32kB (UME) 111*64kB (UME) 104*128kB (U) 28*256kB (U) 8*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 79472kB [ 1362.654111] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1362.667684] Node 1 Normal: 2082*4kB (UME) 1219*8kB (UME) 410*16kB (UME) 374*32kB (UME) 364*64kB (UE) 183*128kB (UM) 82*256kB (UME) 17*512kB (UM) 255*1024kB (U) 55*2048kB (U) 8*4096kB (U) = 519552kB [ 1362.686986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1362.697876] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1362.707018] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1362.716287] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1362.727036] 37609 total pagecache pages [ 1362.731932] 0 pages in swap cache [ 1362.736238] Swap cache stats: add 0, delete 0, find 0/0 [ 1362.742167] Free swap = 0kB [ 1362.749360] Total swap = 0kB [ 1362.752618] 2097051 pages RAM [ 1362.755719] 0 pages HighMem/MovableOnly [ 1362.759735] 363849 pages reserved [ 1362.763278] 0 pages cma reserved [ 1362.766645] Out of memory (oom_kill_allocating_task): Kill process 1072 (systemd-journal) score 0 or sacrifice child [ 1362.777500] Killed process 1072 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1516kB [ 1362.793339] oom_reaper: reaped process 1072 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1516kB [ 1362.815337] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL 08:24:52 executing program 1: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:24:52 executing program 0: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:24:52 executing program 2: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1362.844083] systemd[1]: Failed to start Journal Service. [ 1362.870945] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1362.879860] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1362.889527] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1362.900393] systemd[1]: Stopped Journal Service. [ 1362.918484] systemd[1]: Starting Journal Service... [ 1363.112318] systemd-journald[1078]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1363.221932] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1363.225018] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1363.261005] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1363.291127] CPU: 0 PID: 1084 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1363.298957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1363.308306] Call Trace: [ 1363.310915] dump_stack+0x1b2/0x281 [ 1363.314542] warn_alloc.cold+0x96/0x1cc [ 1363.318509] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1363.323524] ? zone_watermark_ok_safe+0x220/0x220 [ 1363.328378] __alloc_pages_nodemask+0x2127/0x2720 [ 1363.333237] ? __schedule+0x893/0x1de0 [ 1363.337136] ? lock_acquire+0x170/0x3f0 [ 1363.341112] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1363.345974] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1363.351436] ? __mutex_unlock_slowpath+0x75/0x770 [ 1363.356282] alloc_pages_current+0x155/0x260 [ 1363.360700] ion_page_pool_alloc+0x118/0x1b0 [ 1363.365234] ion_system_heap_allocate+0x133/0x8c0 [ 1363.370076] ? ion_alloc+0x187/0x810 [ 1363.375703] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1363.381157] ? ion_system_contig_heap_create+0x130/0x130 [ 1363.386781] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1363.391797] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1363.396642] ion_alloc+0x204/0x810 [ 1363.400187] ? ion_dma_buf_release+0x40/0x40 [ 1363.404638] ? __might_fault+0x177/0x1b0 [ 1363.408696] ion_ioctl+0xea/0x1f0 [ 1363.412141] ? ion_query_heaps+0x360/0x360 [ 1363.416380] ? ion_query_heaps+0x360/0x360 [ 1363.420607] do_vfs_ioctl+0x75a/0xff0 [ 1363.424405] ? ioctl_preallocate+0x1a0/0x1a0 [ 1363.428806] ? lock_downgrade+0x740/0x740 [ 1363.433077] ? __fget+0x225/0x360 [ 1363.436526] ? do_vfs_ioctl+0xff0/0xff0 [ 1363.440501] ? security_file_ioctl+0x83/0xb0 [ 1363.444902] SyS_ioctl+0x7f/0xb0 [ 1363.448290] ? do_vfs_ioctl+0xff0/0xff0 [ 1363.452259] do_syscall_64+0x1d5/0x640 [ 1363.456145] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1363.461325] RIP: 0033:0x4665f9 [ 1363.464595] RSP: 002b:00007efdf923c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1363.472297] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1363.479560] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1363.486831] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1363.494105] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1363.501377] R13: 00007fff68d20daf R14: 00007efdf923c300 R15: 0000000000022000 [ 1363.512861] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1363.519092] CPU: 1 PID: 1082 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1363.526936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1363.527973] warn_alloc_show_mem: 1 callbacks suppressed [ 1363.527977] Mem-Info: [ 1363.536407] Call Trace: [ 1363.536432] dump_stack+0x1b2/0x281 [ 1363.536444] warn_alloc.cold+0x96/0x1cc [ 1363.536456] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1363.536466] ? zone_watermark_ok_safe+0x220/0x220 [ 1363.536488] __alloc_pages_nodemask+0x2127/0x2720 [ 1363.543114] active_anon:22313 inactive_anon:37199 isolated_anon:12 [ 1363.543114] active_file:1507 inactive_file:3308 isolated_file:0 [ 1363.543114] unevictable:0 dirty:33 writeback:0 unstable:0 [ 1363.543114] slab_reclaimable:12073 slab_unreclaimable:112653 [ 1363.543114] mapped:29895 shmem:37624 pagetables:608 bounce:0 [ 1363.543114] free:31310 free_pcp:233 free_cma:0 [ 1363.545404] ? io_schedule_timeout+0x140/0x140 [ 1363.545422] ? lock_acquire+0x170/0x3f0 [ 1363.545440] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1363.548048] Node 0 active_anon:88712kB inactive_anon:124664kB active_file:5888kB inactive_file:13120kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:119388kB dirty:128kB writeback:0kB shmem:126156kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1363.551635] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1363.551648] ? __mutex_unlock_slowpath+0x75/0x770 [ 1363.551656] ? retint_kernel+0x2d/0x2d [ 1363.551670] alloc_pages_current+0x155/0x260 [ 1363.551684] ion_page_pool_alloc+0x118/0x1b0 [ 1363.555712] Node 1 active_anon:540kB inactive_anon:24132kB active_file:140kB inactive_file:112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192kB dirty:4kB writeback:0kB shmem:24340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1363.560658] ion_system_heap_allocate+0x133/0x8c0 [ 1363.560669] ? ion_alloc+0x187/0x810 [ 1363.560680] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1363.560691] ? ion_system_contig_heap_create+0x130/0x130 [ 1363.565602] Node 0 [ 1363.570354] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1363.570369] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1363.570395] ion_alloc+0x204/0x810 [ 1363.604353] DMA free:11104kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:968kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1363.608809] ? ion_dma_buf_release+0x40/0x40 [ 1363.608825] ? __might_fault+0x177/0x1b0 [ 1363.613550] lowmem_reserve[]: [ 1363.618323] ion_ioctl+0xea/0x1f0 [ 1363.618338] ? ion_query_heaps+0x360/0x360 [ 1363.647036] 0 [ 1363.652372] ? ion_query_heaps+0x360/0x360 [ 1363.652384] do_vfs_ioctl+0x75a/0xff0 [ 1363.652397] ? ioctl_preallocate+0x1a0/0x1a0 [ 1363.652407] ? lock_downgrade+0x740/0x740 [ 1363.652420] ? __fget+0x225/0x360 [ 1363.657313] 2717 [ 1363.661134] ? do_vfs_ioctl+0xff0/0xff0 [ 1363.661147] ? security_file_ioctl+0x83/0xb0 [ 1363.661156] SyS_ioctl+0x7f/0xb0 [ 1363.661164] ? do_vfs_ioctl+0xff0/0xff0 [ 1363.661177] do_syscall_64+0x1d5/0x640 [ 1363.661191] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1363.665659] 2718 [ 1363.670098] RIP: 0033:0x4665f9 [ 1363.670103] RSP: 002b:00007f56be175188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1363.670112] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1363.670117] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1363.670126] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1363.697757] 2718 [ 1363.702475] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1363.702480] R13: 00007fffaba42f8f R14: 00007f56be175300 R15: 0000000000022000 [ 1363.879660] 2718 [ 1363.881821] Node 0 DMA32 free:46480kB min:36200kB low:45248kB high:54296kB active_anon:88712kB inactive_anon:124664kB active_file:5084kB inactive_file:9948kB unevictable:0kB writepending:128kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:2396kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1363.885935] syz-executor.0: [ 1363.912555] lowmem_reserve[]: 0 0 0 0 0 [ 1363.919702] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1363.945537] lowmem_reserve[]: 0 0 0 0 0 [ 1363.949689] Node 1 Normal free:53656kB min:53696kB low:67120kB high:80544kB active_anon:540kB inactive_anon:24132kB active_file:308kB inactive_file:416kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:36kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1363.999237] lowmem_reserve[]: 0 0 0 0 0 [ 1364.006676] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1364.022792] Node 0 DMA: 295*4kB (UME) 13*8kB (UME) 4*16kB (M) 2*32kB (ME) 1*64kB (E) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UE) 2*2048kB (UM) 0*4096kB = 11076kB [ 1364.047389] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1364.058230] CPU: 0 PID: 1085 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1364.066038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1364.075386] Call Trace: [ 1364.077984] dump_stack+0x1b2/0x281 [ 1364.081608] warn_alloc.cold+0x96/0x1cc [ 1364.085591] ? zone_watermark_ok_safe+0x220/0x220 [ 1364.090444] __alloc_pages_nodemask+0x2127/0x2720 [ 1364.095378] ? lock_acquire+0x170/0x3f0 [ 1364.099350] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1364.104192] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1364.109636] ? __mutex_unlock_slowpath+0x75/0x770 [ 1364.114473] ? alloc_pages_current+0xe3/0x260 [ 1364.118961] alloc_pages_current+0x155/0x260 [ 1364.123376] ion_page_pool_alloc+0x118/0x1b0 [ 1364.127772] ion_system_heap_allocate+0x133/0x8c0 [ 1364.132605] ? ion_alloc+0x187/0x810 [ 1364.136314] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1364.141760] ? ion_system_contig_heap_create+0x130/0x130 [ 1364.147205] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1364.152219] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1364.157058] ion_alloc+0x204/0x810 [ 1364.160592] ? ion_dma_buf_release+0x40/0x40 [ 1364.164995] ? __might_fault+0x177/0x1b0 [ 1364.169158] ion_ioctl+0xea/0x1f0 [ 1364.172604] ? ion_query_heaps+0x360/0x360 [ 1364.176835] ? ion_query_heaps+0x360/0x360 [ 1364.181085] do_vfs_ioctl+0x75a/0xff0 [ 1364.184880] ? ioctl_preallocate+0x1a0/0x1a0 [ 1364.189316] ? lock_downgrade+0x740/0x740 [ 1364.193470] ? __fget+0x225/0x360 [ 1364.196923] ? do_vfs_ioctl+0xff0/0xff0 [ 1364.200919] ? security_file_ioctl+0x83/0xb0 [ 1364.205323] SyS_ioctl+0x7f/0xb0 [ 1364.208679] ? do_vfs_ioctl+0xff0/0xff0 [ 1364.212664] do_syscall_64+0x1d5/0x640 [ 1364.216562] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1364.221764] RIP: 0033:0x4665f9 [ 1364.225306] RSP: 002b:00007feafbab4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1364.233412] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1364.240803] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1364.248073] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1364.255336] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1364.262614] R13: 00007ffcb6e8eadf R14: 00007feafbab4300 R15: 0000000000022000 [ 1364.281992] Node 0 DMA32: 172*4kB (UME) 117*8kB (UME) 776*16kB (UME) 668*32kB (UME) 19*64kB (U) 3*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37016kB [ 1364.302141] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1364.315415] Node 1 Normal: 2248*4kB (UME) 1324*8kB (UME) 449*16kB (UME) 396*32kB (UME) 19*64kB (ME) 8*128kB (UM) 5*256kB (ME) 9*512kB (UM) 2*1024kB (M) 2*2048kB (M) 0*4096kB = 53712kB [ 1364.335653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1364.345701] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1364.357977] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1364.366890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1364.379104] 37781 total pagecache pages [ 1364.383130] 0 pages in swap cache [ 1364.386838] Swap cache stats: add 0, delete 0, find 0/0 [ 1364.395528] Free swap = 0kB [ 1364.398550] Total swap = 0kB [ 1364.401609] 2097051 pages RAM [ 1364.404730] 0 pages HighMem/MovableOnly [ 1364.408693] 363849 pages reserved [ 1364.415521] 0 pages cma reserved [ 1364.726404] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1364.743395] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1364.748720] CPU: 1 PID: 7960 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1364.756271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1364.765716] Call Trace: [ 1364.768305] dump_stack+0x1b2/0x281 [ 1364.771930] dump_header+0x178/0x82f [ 1364.775643] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1364.780745] ? ___ratelimit+0x2cd/0x530 [ 1364.784718] oom_kill_process.cold+0x10/0xa40 [ 1364.789220] out_of_memory+0xe3e/0x1190 [ 1364.793210] ? oom_killer_disable+0x1c0/0x1c0 [ 1364.797711] ? mutex_trylock+0x152/0x1a0 [ 1364.801785] __alloc_pages_nodemask+0x23e1/0x2720 [ 1364.806647] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1364.811507] alloc_pages_current+0x155/0x260 [ 1364.815938] filemap_fault+0x11a1/0x1ad0 [ 1364.820006] ext4_filemap_fault+0x84/0xb0 [ 1364.824177] __do_fault+0xfa/0x380 [ 1364.827715] __handle_mm_fault+0x2497/0x4620 [ 1364.832141] ? vm_insert_page+0x7c0/0x7c0 [ 1364.836284] ? free_object+0xe4/0x240 [ 1364.840087] ? mark_held_locks+0xa6/0xf0 [ 1364.844146] handle_mm_fault+0x455/0x9c0 [ 1364.848210] __do_page_fault+0x549/0xad0 [ 1364.852357] ? spurious_fault+0x640/0x640 [ 1364.856501] ? do_page_fault+0x60/0x500 [ 1364.860468] ? page_fault+0x2f/0x50 [ 1364.864088] page_fault+0x45/0x50 [ 1364.867534] RIP: 0000:0x947a14 [ 1364.870714] RSP: 4e20:000000c00003dfa0 EFLAGS: 0043b6a0 [ 1364.881447] Mem-Info: [ 1364.894834] active_anon:22308 inactive_anon:37207 isolated_anon:0 [ 1364.894834] active_file:86 inactive_file:325 isolated_file:0 [ 1364.894834] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1364.894834] slab_reclaimable:12073 slab_unreclaimable:112629 [ 1364.894834] mapped:26610 shmem:37647 pagetables:610 bounce:0 [ 1364.894834] free:76684 free_pcp:189 free_cma:0 [ 1364.966126] Node 0 active_anon:88724kB inactive_anon:124696kB active_file:300kB inactive_file:3772kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:107920kB dirty:4kB writeback:0kB shmem:126248kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1365.008763] Node 1 active_anon:508kB inactive_anon:24132kB active_file:44kB inactive_file:628kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:320kB dirty:0kB writeback:0kB shmem:24340kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1365.056626] Node 0 DMA free:11120kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1365.087495] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1365.125864] Node 0 DMA32 free:35872kB min:36200kB low:45248kB high:54296kB active_anon:88728kB inactive_anon:124696kB active_file:2312kB inactive_file:2112kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2404kB bounce:0kB free_pcp:608kB local_pcp:252kB free_cma:0kB [ 1365.183841] lowmem_reserve[]: 0 0 0 0 0 [ 1365.188073] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1365.213887] lowmem_reserve[]: 0 0 0 0 0 [ 1365.217995] Node 1 Normal free:53268kB min:53696kB low:67120kB high:80544kB active_anon:508kB inactive_anon:24132kB active_file:4kB inactive_file:336kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:36kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1365.247437] lowmem_reserve[]: 0 0 0 0 0 [ 1365.251787] Node 0 DMA: 26*4kB (UE) 11*8kB (UE) 2*16kB (U) 1*32kB (E) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11072kB [ 1365.267267] Node 0 DMA32: 478*4kB (UME) 130*8kB (UME) 166*16kB (UME) 15*32kB (UME) 1*64kB (M) 186*128kB (U) 23*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35848kB [ 1365.283404] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1365.294438] Node 1 Normal: 51*4kB (ME) 42*8kB (UME) 37*16kB (UME) 20*32kB (ME) 20*64kB (UME) 7*128kB (M) 6*256kB (UME) 3*512kB (UM) 41*1024kB (UM) 2*2048kB (M) 0*4096kB = 53100kB [ 1365.311611] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1365.320599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1365.329336] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1365.338397] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1365.347570] 37713 total pagecache pages [ 1365.352167] 0 pages in swap cache [ 1365.356146] Swap cache stats: add 0, delete 0, find 0/0 [ 1365.362704] Free swap = 0kB [ 1365.366012] Total swap = 0kB [ 1365.369151] 2097051 pages RAM [ 1365.372390] 0 pages HighMem/MovableOnly [ 1365.376477] 363849 pages reserved [ 1365.380048] 0 pages cma reserved [ 1365.383580] Out of memory (oom_kill_allocating_task): Kill process 7960 (syz-fuzzer) score 0 or sacrifice child [ 1365.394567] Killed process 32272 (syz-executor.2) total-vm:84924kB, anon-rss:60kB, file-rss:0kB, shmem-rss:0kB [ 1365.413646] oom_reaper: reaped process 32272 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1367.146860] systemd[1]: Starting Load/Save RF Kill Switch Status... 08:24:56 executing program 4: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:24:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1367.859833] systemd-rfkill invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 1367.921085] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 1367.926276] CPU: 0 PID: 1100 Comm: systemd-rfkill Not tainted 4.14.232-syzkaller #0 [ 1367.934108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1367.943471] Call Trace: [ 1367.946064] dump_stack+0x1b2/0x281 [ 1367.949709] dump_header+0x178/0x82f [ 1367.953424] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1367.958528] ? ___ratelimit+0x2cd/0x530 [ 1367.962529] oom_kill_process.cold+0x10/0xa40 [ 1367.967058] out_of_memory+0xe3e/0x1190 [ 1367.971039] ? oom_killer_disable+0x1c0/0x1c0 [ 1367.975536] ? mutex_trylock+0x152/0x1a0 [ 1367.979598] __alloc_pages_nodemask+0x23e1/0x2720 [ 1367.984468] ? validate_mm+0x418/0x580 [ 1367.988366] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1367.993219] ? perf_event_mmap+0x74/0xb80 [ 1367.997375] ? __lock_acquire+0x5fc/0x3f20 [ 1368.001622] alloc_pages_vma+0xd2/0x6d0 [ 1368.005624] __handle_mm_fault+0xe4f/0x4620 [ 1368.009963] ? change_protection+0xa0/0xa0 [ 1368.014201] ? vm_insert_page+0x7c0/0x7c0 [ 1368.019476] ? do_mprotect_pkey+0x691/0x7e0 [ 1368.023816] ? mark_held_locks+0xa6/0xf0 [ 1368.027888] handle_mm_fault+0x455/0x9c0 [ 1368.031983] __do_page_fault+0x549/0xad0 [ 1368.036054] ? spurious_fault+0x640/0x640 [ 1368.040206] ? do_page_fault+0x60/0x500 [ 1368.044179] ? page_fault+0x2f/0x50 [ 1368.047831] page_fault+0x45/0x50 [ 1368.051278] RIP: 0000:0x7f8538e46000 [ 1368.054993] RSP: 38e752b8:00007ffff2cfb300 EFLAGS: 7f8539286000 [ 1368.162324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1368.188671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1368.190374] Mem-Info: [ 1368.198085] active_anon:22485 inactive_anon:37202 isolated_anon:0 [ 1368.198085] active_file:16 inactive_file:27 isolated_file:0 [ 1368.198085] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1368.198085] slab_reclaimable:12065 slab_unreclaimable:114539 [ 1368.198085] mapped:35267 shmem:37639 pagetables:630 bounce:0 [ 1368.198085] free:25112 free_pcp:68 free_cma:0 [ 1368.199672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1368.241101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1368.249442] device bridge_slave_1 left promiscuous mode [ 1368.255244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.268165] Node 0 active_anon:89384kB inactive_anon:124696kB active_file:160kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):100kB mapped:129544kB dirty:0kB writeback:0kB shmem:126248kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1368.300957] device bridge_slave_0 left promiscuous mode [ 1368.306793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.323427] Node 1 active_anon:556kB inactive_anon:24112kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:11524kB dirty:0kB writeback:0kB shmem:24308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1368.354192] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1368.380879] device veth1_macvtap left promiscuous mode [ 1368.383798] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1368.389028] device veth0_macvtap left promiscuous mode [ 1368.392209] Node 0 DMA32 free:36380kB min:36200kB low:45248kB high:54296kB active_anon:89384kB inactive_anon:124696kB active_file:132kB inactive_file:196kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2436kB bounce:0kB free_pcp:336kB local_pcp:136kB free_cma:0kB [ 1368.397558] device veth1_vlan left promiscuous mode [ 1368.427223] lowmem_reserve[]: 0 0 0 0 0 [ 1368.435605] device veth0_vlan left promiscuous mode [ 1368.481095] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1368.651209] lowmem_reserve[]: 0 0 0 0 0 [ 1368.655229] Node 1 Normal free:1195648kB min:53696kB low:67120kB high:80544kB active_anon:856kB inactive_anon:24112kB active_file:1012kB inactive_file:832kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:232kB bounce:0kB free_pcp:668kB local_pcp:96kB free_cma:0kB [ 1368.801146] lowmem_reserve[]: 0 0 0 0 0 [ 1368.805271] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 0*16kB 3*32kB (UE) 1*64kB (E) 3*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (M) 1*4096kB (U) = 12088kB [ 1368.821430] Node 0 DMA32: 56*4kB (UE) 355*8kB (UE) 160*16kB (UE) 13*32kB (UME) 1*64kB (U) 227*128kB (UM) 1*256kB (M) 1*512kB (M) 290*1024kB (U) 14*2048kB (U) 0*4096kB = 361560kB [ 1368.838149] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1368.849543] Node 1 Normal: 16*4kB (UME) 11*8kB (UME) 8*16kB (UME) 5*32kB (UME) 3*64kB (UE) 6*128kB (UM) 6*256kB (UME) 2*512kB (UM) 676*1024kB (UM) 448*2048kB (UM) 50*4096kB (U) = 1818488kB [ 1368.867368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1368.876948] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1368.888980] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1368.931042] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1368.940442] 39419 total pagecache pages [ 1368.974370] 0 pages in swap cache [ 1368.977944] Swap cache stats: add 0, delete 0, find 0/0 [ 1368.983383] device hsr_slave_1 left promiscuous mode [ 1368.989544] device hsr_slave_0 left promiscuous mode [ 1369.014795] Free swap = 0kB [ 1369.017852] Total swap = 0kB [ 1369.020912] 2097051 pages RAM [ 1369.044737] team0 (unregistering): Port device team_slave_1 removed [ 1369.051259] 0 pages HighMem/MovableOnly [ 1369.051264] 363849 pages reserved [ 1369.051267] 0 pages cma reserved [ 1369.051274] Out of memory (oom_kill_allocating_task): Kill process 1100 (systemd-rfkill) score 0 or sacrifice child [ 1369.051297] Killed process 1100 (systemd-rfkill) total-vm:37680kB, anon-rss:300kB, file-rss:0kB, shmem-rss:0kB [ 1369.099413] systemd[1]: systemd-rfkill.service: Main process exited, code=killed, status=9/KILL [ 1369.170384] systemd[1]: Failed to start Load/Save RF Kill Switch Status. [ 1369.201986] systemd[1]: systemd-rfkill.service: Unit entered failed state. [ 1369.224968] systemd[1]: systemd-rfkill.service: Failed with result 'signal'. [ 1369.241598] team0 (unregistering): Port device team_slave_0 removed [ 1369.289424] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1369.305432] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1369.328818] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1369.438160] bond0 (unregistering): Released all slaves [ 1369.520749] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1370.101591] systemd[1]: Started Journal Service. [ 1370.611139] Bluetooth: hci1 command 0x0409 tx timeout 08:25:00 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1371.432170] IPVS: ftp: loaded support on port[0] = 21 [ 1371.515486] oom_reaper: reaped process 1085 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1371.554635] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1371.582549] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1371.587707] CPU: 0 PID: 7960 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1371.595157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1371.604517] Call Trace: [ 1371.607115] dump_stack+0x1b2/0x281 [ 1371.610763] dump_header+0x178/0x82f [ 1371.614479] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1371.619587] ? ___ratelimit+0x2cd/0x530 [ 1371.623567] oom_kill_process.cold+0x10/0xa40 [ 1371.628074] out_of_memory+0xe3e/0x1190 [ 1371.632075] ? oom_killer_disable+0x1c0/0x1c0 [ 1371.636570] ? mutex_trylock+0x152/0x1a0 [ 1371.640636] __alloc_pages_nodemask+0x23e1/0x2720 [ 1371.645506] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1371.650390] alloc_pages_current+0x155/0x260 [ 1371.652748] syz-executor.0: page allocation failure: order:0 [ 1371.654824] filemap_fault+0x11a1/0x1ad0 [ 1371.654843] ext4_filemap_fault+0x84/0xb0 [ 1371.660637] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1371.664779] __do_fault+0xfa/0x380 [ 1371.664789] __handle_mm_fault+0x2497/0x4620 [ 1371.664798] ? vm_insert_page+0x7c0/0x7c0 [ 1371.664807] ? lock_downgrade+0x740/0x740 [ 1371.664819] ? mark_held_locks+0xa6/0xf0 [ 1371.664829] handle_mm_fault+0x455/0x9c0 [ 1371.664841] __do_page_fault+0x549/0xad0 [ 1371.664853] ? spurious_fault+0x640/0x640 [ 1371.664862] ? do_page_fault+0x60/0x500 [ 1371.664870] ? page_fault+0x2f/0x50 [ 1371.664876] page_fault+0x45/0x50 [ 1371.664884] RIP: 0000:0x947a14 [ 1371.664891] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1371.686927] (null) [ 1371.701028] Mem-Info: [ 1371.726092] syz-executor.0 cpuset= [ 1371.737032] active_anon:22427 inactive_anon:37204 isolated_anon:0 [ 1371.737032] active_file:0 inactive_file:61 isolated_file:0 [ 1371.737032] unevictable:0 dirty:19 writeback:0 unstable:0 [ 1371.737032] slab_reclaimable:11961 slab_unreclaimable:117367 [ 1371.737032] mapped:44124 shmem:37643 pagetables:682 bounce:0 [ 1371.737032] free:13934 free_pcp:0 free_cma:0 [ 1371.750131] / [ 1371.782434] Node 0 active_anon:88936kB inactive_anon:124704kB active_file:64kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:95256kB dirty:48kB writeback:0kB shmem:126256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1371.790816] mems_allowed=0-1 [ 1371.822291] Node 1 active_anon:772kB inactive_anon:24112kB active_file:0kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:81240kB dirty:28kB writeback:0kB shmem:24316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1371.830595] CPU: 1 PID: 1085 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1371.849630] Node 0 [ 1371.857368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1371.857373] Call Trace: [ 1371.857398] dump_stack+0x1b2/0x281 [ 1371.857412] warn_alloc.cold+0x96/0x1cc [ 1371.857426] ? zone_watermark_ok_safe+0x220/0x220 [ 1371.859661] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1371.869005] ? usleep_range+0x130/0x130 [ 1371.869015] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1371.869027] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1371.869036] ? run_timer_softirq+0x5a0/0x5a0 [ 1371.869053] __alloc_pages_nodemask+0x2127/0x2720 [ 1371.871648] lowmem_reserve[]: [ 1371.875339] ? lock_acquire+0x170/0x3f0 [ 1371.879283] 0 [ 1371.884127] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1371.884138] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1371.884154] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1371.884164] ? check_preemption_disabled+0x35/0x240 [ 1371.884182] alloc_pages_current+0x155/0x260 [ 1371.909898] 2717 [ 1371.913842] ion_page_pool_alloc+0x118/0x1b0 [ 1371.913853] ion_system_heap_allocate+0x133/0x8c0 [ 1371.913869] ? ion_alloc+0x187/0x810 [ 1371.918979] 2718 [ 1371.923989] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1371.924000] ? ion_system_contig_heap_create+0x130/0x130 [ 1371.924009] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1371.924021] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1371.924032] ion_alloc+0x204/0x810 [ 1371.928427] 2718 [ 1371.933266] ? ion_dma_buf_release+0x40/0x40 [ 1371.933278] ? __might_fault+0x177/0x1b0 [ 1371.933290] ion_ioctl+0xea/0x1f0 [ 1371.933300] ? ion_query_heaps+0x360/0x360 [ 1371.936393] 2718 [ 1371.940354] ? ion_query_heaps+0x360/0x360 [ 1371.946963] do_vfs_ioctl+0x75a/0xff0 [ 1371.951481] Node 0 [ 1371.956900] ? ioctl_preallocate+0x1a0/0x1a0 [ 1371.961949] DMA32 free:17912kB min:36200kB low:45248kB high:54296kB active_anon:88836kB inactive_anon:124704kB active_file:76kB inactive_file:0kB unevictable:0kB writepending:48kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2308kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1371.966301] ? lock_downgrade+0x740/0x740 [ 1371.968336] lowmem_reserve[]: [ 1371.972770] ? __fget+0x225/0x360 [ 1371.972780] ? do_vfs_ioctl+0xff0/0xff0 [ 1371.972791] ? security_file_ioctl+0x83/0xb0 [ 1371.972801] SyS_ioctl+0x7f/0xb0 [ 1371.972811] ? do_vfs_ioctl+0xff0/0xff0 [ 1371.977728] 0 [ 1371.981446] do_syscall_64+0x1d5/0x640 [ 1371.981469] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1371.981478] RIP: 0033:0x4665f9 [ 1371.983524] 0 [ 1371.988964] RSP: 002b:00007feafbab4188 EFLAGS: 00000246 [ 1371.994440] 0 [ 1371.999399] ORIG_RAX: 0000000000000010 [ 1372.004265] 0 [ 1372.007770] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1372.009855] 0 [ 1372.014242] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1372.014247] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1372.014252] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1372.014257] R13: 00007ffcb6e8eadf R14: 00007feafbab4300 R15: 0000000000022000 [ 1372.024612] warn_alloc_show_mem: 2 callbacks suppressed [ 1372.024616] Mem-Info: [ 1372.051767] active_anon:22407 inactive_anon:37202 isolated_anon:0 [ 1372.051767] active_file:3 inactive_file:4 isolated_file:0 [ 1372.051767] unevictable:0 dirty:28 writeback:0 unstable:0 [ 1372.051767] slab_reclaimable:11977 slab_unreclaimable:117371 [ 1372.051767] mapped:44110 shmem:37640 pagetables:714 bounce:0 [ 1372.051767] free:13969 free_pcp:0 free_cma:0 [ 1372.087333] Node 0 [ 1372.094924] Node 0 active_anon:88864kB inactive_anon:124704kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:95152kB dirty:0kB writeback:0kB shmem:126256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1372.109505] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1372.116001] Node 1 active_anon:764kB inactive_anon:24100kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:81156kB dirty:0kB writeback:0kB shmem:24300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1372.126362] lowmem_reserve[]: [ 1372.126894] Node 0 [ 1372.145169] 0 [ 1372.160338] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1372.183299] 0 [ 1372.217431] lowmem_reserve[]: [ 1372.250703] 0 [ 1372.274819] 0 [ 1372.297379] 0 0 [ 1372.331992] 2717 2718 2718 2718 [ 1372.337501] Node 0 DMA32 free:18420kB min:36200kB low:45248kB high:54296kB active_anon:88864kB inactive_anon:124704kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2352kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 1372.376822] Node 1 Normal free:26988kB min:53696kB low:67120kB high:80544kB active_anon:764kB inactive_anon:24100kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:420kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1372.384292] lowmem_reserve[]: [ 1372.415889] lowmem_reserve[]: 0 0 0 0 0 [ 1372.420288] 0 [ 1372.427178] Node 0 [ 1372.427196] 0 [ 1372.428989] DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (U) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (M) 1*4096kB (U) = 10976kB [ 1372.445992] 0 [ 1372.464350] Node 0 DMA32: 769*4kB (UME) 198*8kB (UME) 192*16kB (UME) 36*32kB (UME) 21*64kB (UM) 14*128kB (UM) 9*256kB (M) 4*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 18420kB [ 1372.469365] 0 [ 1372.492901] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1372.497243] 0 [ 1372.516095] Node 1 Normal: 89*4kB (ME) 57*8kB (UME) 42*16kB (UME) 21*32kB (UME) 12*64kB (UME) 8*128kB (UME) 4*256kB (UM) 1*512kB (M) 1*1024kB (M) 4*2048kB (UM) 3*4096kB (U) = 26988kB [ 1372.547181] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1372.547514] Node 0 [ 1372.560329] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1372.568778] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1372.582835] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1372.609377] lowmem_reserve[]: 0 0 0 0 0 [ 1372.617262] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1372.618289] Node 1 [ 1372.638457] 37665 total pagecache pages [ 1372.639063] Normal free:26988kB min:53696kB low:67120kB high:80544kB active_anon:764kB inactive_anon:24100kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:420kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1372.640721] 0 pages in swap cache [ 1372.648633] lowmem_reserve[]: [ 1372.684779] Swap cache stats: add 0, delete 0, find 0/0 [ 1372.688733] 0 [ 1372.693428] Bluetooth: hci1 command 0x041b tx timeout [ 1372.708814] Free swap = 0kB [ 1372.710181] 0 [ 1372.712115] Total swap = 0kB [ 1372.712124] 2097051 pages RAM [ 1372.712127] 0 pages HighMem/MovableOnly [ 1372.712130] 363849 pages reserved [ 1372.712133] 0 pages cma reserved [ 1372.712140] Out of memory (oom_kill_allocating_task): Kill process 7960 (syz-fuzzer) score 0 or sacrifice child [ 1372.712197] Killed process 1116 (syz-executor.5) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1372.720488] 0 [ 1372.739406] oom_reaper: reaped process 1116 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1372.748090] 0 0 [ 1372.777912] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (U) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (M) 1*4096kB (U) = 10976kB [ 1372.795560] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 1372.816973] Node 0 DMA32: 769*4kB (UME) 198*8kB (UME) 192*16kB (UME) 36*32kB (UME) 21*64kB (UM) 14*128kB (UM) 9*256kB (M) 4*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 18420kB [ 1372.841265] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1372.846340] CPU: 1 PID: 4632 Comm: systemd-udevd Not tainted 4.14.232-syzkaller #0 [ 1372.854046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1372.863533] Call Trace: [ 1372.866133] dump_stack+0x1b2/0x281 [ 1372.869779] dump_header+0x178/0x82f [ 1372.873523] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1372.878640] ? ___ratelimit+0x2cd/0x530 [ 1372.882640] oom_kill_process.cold+0x10/0xa40 [ 1372.887129] ? lock_downgrade+0x740/0x740 [ 1372.891275] out_of_memory+0x2dc/0x1190 [ 1372.895243] ? oom_killer_disable+0x1c0/0x1c0 [ 1372.899737] ? mutex_trylock+0x152/0x1a0 [ 1372.903805] __alloc_pages_nodemask+0x23e1/0x2720 [ 1372.908660] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1372.913529] alloc_pages_current+0x155/0x260 [ 1372.917944] filemap_fault+0x11a1/0x1ad0 [ 1372.922008] ext4_filemap_fault+0x84/0xb0 [ 1372.926162] __do_fault+0xfa/0x380 [ 1372.929696] __handle_mm_fault+0x2497/0x4620 [ 1372.934096] ? vm_insert_page+0x7c0/0x7c0 [ 1372.938234] ? lock_downgrade+0x740/0x740 [ 1372.942371] ? __fdget+0x167/0x1f0 [ 1372.946000] ? mark_held_locks+0xa6/0xf0 [ 1372.950052] handle_mm_fault+0x455/0x9c0 [ 1372.954114] __do_page_fault+0x549/0xad0 [ 1372.959138] ? spurious_fault+0x640/0x640 [ 1372.963278] ? do_page_fault+0x60/0x500 [ 1372.967243] ? page_fault+0x2f/0x50 [ 1372.970856] page_fault+0x45/0x50 [ 1372.974295] RIP: 183e0620:0x7ffcff643490 [ 1372.978337] RSP: 0085:00007ffcff645528 EFLAGS: 55bb183f21a0 [ 1372.983445] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1373.004149] Node 1 Normal: 89*4kB (ME) 57*8kB (UME) 42*16kB (UME) 22*32kB (UME) 12*64kB (UME) 8*128kB (UME) 4*256kB (UM) 1*512kB (M) 1*1024kB (M) 4*2048kB (UM) 3*4096kB (U) = 27020kB [ 1373.025376] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1373.034503] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1373.041015] Mem-Info: [ 1373.045539] active_anon:22407 inactive_anon:37201 isolated_anon:0 [ 1373.045539] active_file:17 inactive_file:3 isolated_file:0 [ 1373.045539] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1373.045539] slab_reclaimable:11977 slab_unreclaimable:117347 [ 1373.045539] mapped:44077 shmem:37639 pagetables:693 bounce:0 [ 1373.045539] free:14096 free_pcp:46 free_cma:0 [ 1373.046991] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1373.093160] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1373.102555] Node 0 active_anon:88864kB inactive_anon:124704kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:95152kB dirty:0kB writeback:0kB shmem:126256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1373.110082] 37665 total pagecache pages [ 1373.147269] 0 pages in swap cache [ 1373.149479] Node 1 active_anon:732kB inactive_anon:24100kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:81156kB dirty:0kB writeback:0kB shmem:24300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1373.150917] Swap cache stats: add 0, delete 0, find 0/0 [ 1373.196026] Free swap = 0kB [ 1373.199145] Total swap = 0kB [ 1373.200577] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1373.209596] 2097051 pages RAM [ 1373.251586] 0 pages HighMem/MovableOnly [ 1373.255702] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1373.255771] 363849 pages reserved [ 1373.260745] Node 0 [ 1373.277231] 0 pages cma reserved [ 1373.279468] DMA32 free:18420kB min:36200kB low:45248kB high:54296kB active_anon:88864kB inactive_anon:124704kB active_file:136kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2352kB bounce:0kB free_pcp:32kB local_pcp:20kB free_cma:0kB [ 1373.404319] lowmem_reserve[]: 0 0 0 0 0 [ 1373.417417] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1373.513152] lowmem_reserve[]: 0 0 0 0 0 [ 1373.517197] Node 1 Normal free:246520kB min:53696kB low:67120kB high:80544kB active_anon:732kB inactive_anon:24100kB active_file:716kB inactive_file:8216kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:332kB bounce:0kB free_pcp:476kB local_pcp:172kB free_cma:0kB [ 1373.674991] lowmem_reserve[]: 0 0 0 0 0 [ 1373.679028] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (U) 2*32kB (UE) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (M) 1*4096kB (U) = 11040kB 08:25:03 executing program 1: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1373.742272] chnl_net:caif_netlink_parms(): no params data found [ 1373.750690] Node 0 DMA32: 675*4kB (ME) 195*8kB (UME) 193*16kB (UME) 36*32kB (UME) 1402*64kB (UME) 39*128kB (UM) 20*256kB (UM) 4*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 112436kB [ 1373.794163] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1373.808772] Node 1 Normal: 128*4kB (UME) 108*8kB (UME) 112*16kB (UME) 109*32kB (UME) 1984*64kB (UM) 321*128kB (UME) 162*256kB (UM) 16*512kB (U) 168*1024kB (U) 19*2048kB (UM) 3*4096kB (U) = 447616kB [ 1373.839187] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1373.863063] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1373.892586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1373.918508] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1373.937996] 40292 total pagecache pages [ 1373.963365] 0 pages in swap cache [ 1373.981347] Swap cache stats: add 0, delete 0, find 0/0 [ 1374.000310] Free swap = 0kB [ 1374.010113] Total swap = 0kB [ 1374.018721] 2097051 pages RAM [ 1374.031373] 0 pages HighMem/MovableOnly [ 1374.044231] 363849 pages reserved [ 1374.055012] 0 pages cma reserved [ 1374.063536] Out of memory: Kill process 1083 (syz-executor.1) score 1004 or sacrifice child [ 1374.292795] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.317830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.336475] device bridge_slave_0 entered promiscuous mode [ 1374.347650] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1374.368459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.373089] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1374.378175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.387992] CPU: 1 PID: 1085 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1374.389941] syz-executor.1: [ 1374.396575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1374.396581] Call Trace: [ 1374.396602] dump_stack+0x1b2/0x281 [ 1374.396616] warn_alloc.cold+0x96/0x1cc [ 1374.396627] ? zone_watermark_ok_safe+0x220/0x220 [ 1374.396649] __alloc_pages_nodemask+0x2127/0x2720 [ 1374.396659] ? io_schedule_timeout+0x140/0x140 [ 1374.396675] ? lock_acquire+0x170/0x3f0 [ 1374.396689] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1374.396704] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1374.396718] ? __mutex_unlock_slowpath+0x75/0x770 [ 1374.396726] ? retint_kernel+0x2d/0x2d [ 1374.396741] alloc_pages_current+0x155/0x260 [ 1374.396754] ion_page_pool_alloc+0x118/0x1b0 [ 1374.396764] ion_system_heap_allocate+0x133/0x8c0 [ 1374.396774] ? _raw_spin_unlock+0x29/0x40 [ 1374.396780] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1374.396789] ? ion_system_contig_heap_create+0x130/0x130 [ 1374.396799] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1374.396809] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1374.396818] ion_alloc+0x27a/0x810 [ 1374.396830] ? ion_dma_buf_release+0x40/0x40 [ 1374.396841] ? __might_fault+0x177/0x1b0 [ 1374.396853] ion_ioctl+0xea/0x1f0 [ 1374.396862] ? ion_query_heaps+0x360/0x360 [ 1374.396875] ? ion_query_heaps+0x360/0x360 [ 1374.396885] do_vfs_ioctl+0x75a/0xff0 [ 1374.396897] ? ioctl_preallocate+0x1a0/0x1a0 [ 1374.396905] ? lock_downgrade+0x740/0x740 [ 1374.396919] ? __fget+0x225/0x360 [ 1374.396928] ? do_vfs_ioctl+0xff0/0xff0 [ 1374.396939] ? security_file_ioctl+0x83/0xb0 [ 1374.396949] SyS_ioctl+0x7f/0xb0 [ 1374.396956] ? do_vfs_ioctl+0xff0/0xff0 [ 1374.396967] do_syscall_64+0x1d5/0x640 [ 1374.396981] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1374.396989] RIP: 0033:0x4665f9 [ 1374.396994] RSP: 002b:00007feafbab4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1374.397004] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1374.397010] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1374.397015] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1374.397021] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1374.397026] R13: 00007ffcb6e8eadf R14: 00007feafbab4300 R15: 0000000000022000 [ 1374.405978] Mem-Info: [ 1374.414278] device bridge_slave_1 entered promiscuous mode [ 1374.422346] active_anon:22447 inactive_anon:37201 isolated_anon:12 [ 1374.422346] active_file:925 inactive_file:2409 isolated_file:0 [ 1374.422346] unevictable:0 dirty:22 writeback:0 unstable:0 [ 1374.422346] slab_reclaimable:12011 slab_unreclaimable:117719 [ 1374.422346] mapped:46415 shmem:37639 pagetables:679 bounce:0 [ 1374.422346] free:50273 free_pcp:338 free_cma:0 [ 1374.426924] page allocation failure: order:4 [ 1374.431632] Node 0 active_anon:88956kB inactive_anon:124704kB active_file:1548kB inactive_file:2736kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:106376kB dirty:68kB writeback:0kB shmem:126256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1374.436813] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1374.441652] Node 1 active_anon:832kB inactive_anon:24100kB active_file:2152kB inactive_file:6900kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:79284kB dirty:20kB writeback:0kB shmem:24300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1374.446861] (null) [ 1374.453986] Node 0 [ 1374.458621] syz-executor.1 cpuset= [ 1374.470520] DMA free:11084kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1374.475069] / [ 1374.480845] lowmem_reserve[]: [ 1374.489183] mems_allowed=0-1 [ 1374.495131] 0 [ 1374.503740] CPU: 0 PID: 1242 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1374.516408] 2717 [ 1374.519667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1374.519671] Call Trace: [ 1374.519693] dump_stack+0x1b2/0x281 [ 1374.519707] warn_alloc.cold+0x96/0x1cc [ 1374.531269] 2718 [ 1374.532031] ? zone_watermark_ok_safe+0x220/0x220 [ 1374.539891] 2718 [ 1374.543835] __alloc_pages_nodemask+0x2127/0x2720 [ 1374.543854] ? lock_acquire+0x170/0x3f0 [ 1374.543875] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1374.543894] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1374.551666] 2718 [ 1374.555117] ? __mutex_unlock_slowpath+0x75/0x770 [ 1374.555133] alloc_pages_current+0x155/0x260 [ 1374.578478] ion_page_pool_alloc+0x118/0x1b0 [ 1374.578490] ion_system_heap_allocate+0x133/0x8c0 [ 1374.578501] ? ion_alloc+0x187/0x810 [ 1374.593534] Node 0 [ 1374.600343] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1374.600354] ? ion_system_contig_heap_create+0x130/0x130 [ 1374.600368] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1374.623137] DMA32 free:176148kB min:36200kB low:45248kB high:54296kB active_anon:88956kB inactive_anon:124704kB active_file:1548kB inactive_file:2736kB unevictable:0kB writepending:68kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2492kB bounce:0kB free_pcp:920kB local_pcp:620kB free_cma:0kB [ 1374.649335] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1374.649348] ion_alloc+0x204/0x810 [ 1374.649362] ? ion_dma_buf_release+0x40/0x40 [ 1374.649373] ? __might_fault+0x177/0x1b0 [ 1374.649383] ion_ioctl+0xea/0x1f0 [ 1374.649391] ? ion_query_heaps+0x360/0x360 [ 1374.649402] ? ion_query_heaps+0x360/0x360 [ 1374.649412] do_vfs_ioctl+0x75a/0xff0 [ 1374.649427] ? ioctl_preallocate+0x1a0/0x1a0 [ 1374.675699] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1374.682231] ? lock_downgrade+0x740/0x740 [ 1374.682247] ? __fget+0x225/0x360 [ 1374.682257] ? do_vfs_ioctl+0xff0/0xff0 [ 1374.682268] ? security_file_ioctl+0x83/0xb0 [ 1374.682279] SyS_ioctl+0x7f/0xb0 [ 1374.682290] ? do_vfs_ioctl+0xff0/0xff0 [ 1374.703583] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1374.716908] do_syscall_64+0x1d5/0x640 [ 1374.716926] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1374.716934] RIP: 0033:0x4665f9 [ 1374.716938] RSP: 002b:00007efdf923c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1374.716947] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1374.716952] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1374.716957] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1374.716961] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1374.716967] R13: 00007fff68d20daf R14: 00007efdf923c300 R15: 0000000000022000 [ 1374.781111] Bluetooth: hci1 command 0x040f tx timeout [ 1374.791935] lowmem_reserve[]: 0 0 0 0 0 [ 1375.035740] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1375.064129] lowmem_reserve[]: 0 0 0 0 0 [ 1375.068245] Node 1 Normal free:222680kB min:53696kB low:67120kB high:80544kB active_anon:832kB inactive_anon:24100kB active_file:2200kB inactive_file:6852kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:224kB bounce:0kB free_pcp:1308kB local_pcp:684kB free_cma:0kB [ 1375.098270] lowmem_reserve[]: 0 0 0 0 0 [ 1375.102675] Node 0 DMA: 63*4kB (UE) 4*8kB (UE) 2*16kB (U) 2*32kB (UE) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (M) 1*4096kB (U) = 11196kB [ 1375.114503] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1375.118516] Node 0 DMA32: 10845*4kB (UME) 5065*8kB (UME) 3844*16kB (UE) 2753*32kB (UE) 311*64kB (U) 96*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 265948kB [ 1375.140338] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1375.151761] Node 1 Normal: 6506*4kB (UM) 3680*8kB (U) 1927*16kB (U) 1597*32kB [ 1375.151808] team0: Port device team_slave_0 added [ 1375.164576] (U) 1036*64kB (U) 116*128kB (U) 21*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 223928kB [ 1375.174630] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1375.175731] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1375.190341] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1375.191980] team0: Port device team_slave_1 added [ 1375.199231] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1375.212872] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1375.221586] 41006 total pagecache pages [ 1375.225636] 0 pages in swap cache [ 1375.229160] Swap cache stats: add 0, delete 0, find 0/0 [ 1375.234816] Free swap = 0kB [ 1375.237929] Total swap = 0kB [ 1375.241069] 2097051 pages RAM [ 1375.244231] 0 pages HighMem/MovableOnly [ 1375.248263] 363849 pages reserved [ 1375.252514] 0 pages cma reserved [ 1375.304264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1375.321051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1375.384472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1375.416438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1375.432858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1375.494210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1375.521496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1375.528318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1375.555593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1375.570211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1375.595079] device bridge_slave_1 left promiscuous mode [ 1375.607351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.625317] device bridge_slave_0 left promiscuous mode [ 1375.639957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.670458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1375.688050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1375.709287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1375.727178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1375.746581] device bridge_slave_1 left promiscuous mode [ 1375.762088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.779619] device bridge_slave_0 left promiscuous mode [ 1375.794693] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.820317] device veth1_macvtap left promiscuous mode [ 1375.835503] device veth0_macvtap left promiscuous mode [ 1375.847489] device veth1_vlan left promiscuous mode [ 1375.860333] device veth0_vlan left promiscuous mode [ 1375.875687] device veth1_macvtap left promiscuous mode [ 1375.886698] device veth0_macvtap left promiscuous mode [ 1375.902943] device veth1_vlan left promiscuous mode [ 1375.916709] device veth0_vlan left promiscuous mode 08:25:05 executing program 1: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1376.309839] device hsr_slave_1 left promiscuous mode [ 1376.336238] device hsr_slave_0 left promiscuous mode [ 1376.375543] team0 (unregistering): Port device team_slave_1 removed [ 1376.396842] team0 (unregistering): Port device team_slave_0 removed [ 1376.418888] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1376.443732] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1376.519606] bond0 (unregistering): Released all slaves [ 1376.618809] device hsr_slave_1 left promiscuous mode [ 1376.638482] device hsr_slave_0 left promiscuous mode [ 1376.670567] team0 (unregistering): Port device team_slave_1 removed [ 1376.694374] team0 (unregistering): Port device team_slave_0 removed [ 1376.715971] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1376.739809] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1376.815327] bond0 (unregistering): Released all slaves [ 1376.845095] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1376.856579] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1376.931181] Bluetooth: hci1 command 0x0419 tx timeout [ 1376.939638] device hsr_slave_0 entered promiscuous mode [ 1376.955206] device hsr_slave_1 entered promiscuous mode [ 1376.984692] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1377.000194] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1377.585615] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1377.599021] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1377.621014] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1377.626170] CPU: 0 PID: 1289 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1377.633960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1377.643510] Call Trace: [ 1377.646103] dump_stack+0x1b2/0x281 [ 1377.650111] warn_alloc.cold+0x96/0x1cc [ 1377.654175] ? zone_watermark_ok_safe+0x220/0x220 [ 1377.659040] __alloc_pages_nodemask+0x2127/0x2720 [ 1377.663906] ? lock_acquire+0x170/0x3f0 [ 1377.667999] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1377.672860] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1377.678339] ? __mutex_unlock_slowpath+0x75/0x770 [ 1377.683211] ? alloc_pages_current+0x37/0x260 [ 1377.687714] alloc_pages_current+0x155/0x260 [ 1377.692129] ion_page_pool_alloc+0x118/0x1b0 [ 1377.697237] ion_system_heap_allocate+0x133/0x8c0 [ 1377.702866] ? ion_alloc+0x187/0x810 [ 1377.706587] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1377.712043] ? ion_system_contig_heap_create+0x130/0x130 [ 1377.717519] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1377.722655] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1377.727715] ion_alloc+0x204/0x810 [ 1377.731309] ? ion_dma_buf_release+0x40/0x40 [ 1377.735786] ? __might_fault+0x177/0x1b0 [ 1377.739852] ion_ioctl+0xea/0x1f0 [ 1377.743309] ? ion_query_heaps+0x360/0x360 [ 1377.747585] ? ion_query_heaps+0x360/0x360 [ 1377.751850] do_vfs_ioctl+0x75a/0xff0 [ 1377.755656] ? ioctl_preallocate+0x1a0/0x1a0 [ 1377.760067] ? lock_downgrade+0x740/0x740 [ 1377.764220] ? __fget+0x225/0x360 [ 1377.765278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1377.767691] ? do_vfs_ioctl+0xff0/0xff0 [ 1377.767704] ? security_file_ioctl+0x83/0xb0 [ 1377.767715] SyS_ioctl+0x7f/0xb0 [ 1377.785331] ? do_vfs_ioctl+0xff0/0xff0 [ 1377.789305] do_syscall_64+0x1d5/0x640 [ 1377.793196] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1377.798387] RIP: 0033:0x4665f9 [ 1377.801597] RSP: 002b:00007efdf923c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1377.809305] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1377.816576] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1377.821382] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1377.823844] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1377.823851] (null) [ 1377.833908] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1377.833914] R13: 00007fff68d20daf R14: 00007efdf923c300 R15: 0000000000022000 [ 1377.921062] , order=0, oom_score_adj=0 [ 1377.925075] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1377.930195] CPU: 1 PID: 1104 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1377.937982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1377.947353] Call Trace: [ 1377.949970] dump_stack+0x1b2/0x281 [ 1377.953626] dump_header+0x178/0x82f [ 1377.957336] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1377.962438] ? ___ratelimit+0x2cd/0x530 [ 1377.966408] oom_kill_process.cold+0x10/0xa40 [ 1377.970912] out_of_memory+0xe3e/0x1190 [ 1377.974894] ? oom_killer_disable+0x1c0/0x1c0 [ 1377.979387] ? mutex_trylock+0x152/0x1a0 [ 1377.983453] __alloc_pages_nodemask+0x23e1/0x2720 [ 1377.988329] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1377.993183] alloc_pages_current+0x155/0x260 [ 1377.997595] filemap_fault+0x11a1/0x1ad0 [ 1378.001665] ext4_filemap_fault+0x84/0xb0 [ 1378.005813] __do_fault+0xfa/0x380 [ 1378.009353] __handle_mm_fault+0x2497/0x4620 [ 1378.013761] ? vm_insert_page+0x7c0/0x7c0 [ 1378.017916] ? mark_held_locks+0xa6/0xf0 [ 1378.021983] handle_mm_fault+0x455/0x9c0 [ 1378.026057] __do_page_fault+0x549/0xad0 [ 1378.030126] ? spurious_fault+0x640/0x640 [ 1378.034272] ? do_page_fault+0x60/0x500 [ 1378.038334] ? page_fault+0x2f/0x50 [ 1378.042043] page_fault+0x45/0x50 [ 1378.045529] RIP: 14a4370:0x3 [ 1378.048539] RSP: 14a4320:0000000000000000 EFLAGS: 00000000 [ 1378.064829] warn_alloc_show_mem: 1 callbacks suppressed [ 1378.064833] Mem-Info: [ 1378.094094] active_anon:22445 inactive_anon:37203 isolated_anon:0 [ 1378.094094] active_file:18 inactive_file:121 isolated_file:0 [ 1378.094094] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1378.094094] slab_reclaimable:12010 slab_unreclaimable:115068 [ 1378.094094] mapped:44138 shmem:37643 pagetables:671 bounce:0 [ 1378.094094] free:102539 free_pcp:516 free_cma:0 [ 1378.168615] Node 0 active_anon:88756kB inactive_anon:124708kB active_file:68kB inactive_file:480kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104344kB dirty:0kB writeback:0kB shmem:126268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1378.230561] Node 1 active_anon:1024kB inactive_anon:24104kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72208kB dirty:0kB writeback:0kB shmem:24304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1378.288795] Mem-Info: [ 1378.292423] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1378.322151] active_anon:22445 inactive_anon:37203 isolated_anon:0 [ 1378.322151] active_file:18 inactive_file:121 isolated_file:0 [ 1378.322151] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1378.322151] slab_reclaimable:12010 slab_unreclaimable:115068 [ 1378.322151] mapped:44138 shmem:37643 pagetables:671 bounce:0 [ 1378.322151] free:110733 free_pcp:515 free_cma:0 [ 1378.387905] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1378.400562] Node 0 DMA32 free:45240kB min:36200kB low:45248kB high:54296kB active_anon:88756kB inactive_anon:124708kB active_file:68kB inactive_file:480kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2384kB bounce:0kB free_pcp:1340kB local_pcp:664kB free_cma:0kB [ 1378.421085] Node 0 active_anon:88756kB inactive_anon:124708kB active_file:68kB inactive_file:480kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104344kB dirty:0kB writeback:0kB shmem:126268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1378.464353] lowmem_reserve[]: 0 0 0 0 0 [ 1378.472822] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1378.527286] Node 1 active_anon:1024kB inactive_anon:24104kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:72208kB dirty:0kB writeback:0kB shmem:24304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1378.559632] lowmem_reserve[]: 0 0 0 0 0 [ 1378.568152] Node 1 Normal free:433260kB min:53696kB low:67120kB high:80544kB active_anon:1024kB inactive_anon:24104kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:300kB bounce:0kB free_pcp:756kB local_pcp:692kB free_cma:0kB [ 1378.630832] lowmem_reserve[]: 0 0 0 0 0 [ 1378.631040] Node 0 DMA free:11116kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1378.639354] Node 0 DMA: 212*4kB (UE) 46*8kB (UE) 3*16kB (U) 2*32kB (UE) 3*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11120kB [ 1378.719128] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1378.727407] Node 0 DMA32: 288*4kB (ME) 2935*8kB (UME) 991*16kB (UME) 59*32kB (UME) 22*64kB (U) 2*128kB (U) 37*256kB (U) 18*512kB (U) 15*1024kB (U) 3*2048kB (U) 0*4096kB = 84232kB [ 1378.750313] Node 0 DMA32 free:78068kB min:36200kB low:45248kB high:54296kB active_anon:88756kB inactive_anon:124708kB active_file:68kB inactive_file:1280kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2384kB bounce:0kB free_pcp:692kB local_pcp:620kB free_cma:0kB [ 1378.795046] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1378.819479] Node 1 Normal: 99*4kB (UM) 65*8kB (UM) 41*16kB (UM) 24*32kB (UM) 1940*64kB (UME) 236*128kB (UME) 83*256kB (UM) 51*512kB (UM) 116*1024kB (UM) 37*2048kB (U) 11*4096kB (U) = 443684kB [ 1378.831038] lowmem_reserve[]: 0 0 0 0 0 [ 1378.860242] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1378.860772] Node 0 [ 1378.880698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1378.881124] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1378.885314] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1378.901463] lowmem_reserve[]: [ 1378.957461] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1378.982966] 38006 total pagecache pages [ 1378.991062] 0 0 0 0 0 [ 1378.991500] 0 pages in swap cache [ 1378.993623] Node 1 Normal free:462440kB min:53696kB low:67120kB high:80544kB active_anon:1024kB inactive_anon:24104kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:300kB bounce:0kB free_pcp:776kB local_pcp:52kB free_cma:0kB [ 1378.993647] lowmem_reserve[]: [ 1378.999352] Swap cache stats: add 0, delete 0, find 0/0 [ 1379.069464] 0 0 0 0 0 [ 1379.077384] Node 0 DMA: 217*4kB (UE) 49*8kB (UE) 4*16kB (U) 2*32kB (UE) 3*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11180kB [ 1379.097616] Free swap = 0kB [ 1379.104016] Total swap = 0kB [ 1379.110418] 2097051 pages RAM [ 1379.118931] 0 pages HighMem/MovableOnly [ 1379.124148] Node 0 DMA32: 288*4kB (ME) 129*8kB (UME) 158*16kB (UME) 13*32kB (ME) 406*64kB (U) 2*128kB (U) 38*256kB (U) 19*512kB (U) 15*1024kB (U) 3*2048kB (U) 0*4096kB = 72328kB [ 1379.146243] 363849 pages reserved [ 1379.153079] 0 pages cma reserved [ 1379.177399] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1379.211057] Node 1 Normal: 106*4kB (UM) 3091*8kB (UME) 2743*16kB (UME) 983*32kB (UM) 1995*64kB (UME) 246*128kB (UME) 86*256kB (UM) 55*512kB (UM) 116*1024kB (UM) 37*2048kB (U) 11*4096kB (U) = 549456kB [ 1379.271052] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1379.280067] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1379.326523] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1379.363050] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1379.388662] 39017 total pagecache pages [ 1379.395542] 0 pages in swap cache [ 1379.400750] Swap cache stats: add 0, delete 0, find 0/0 [ 1379.425461] Free swap = 0kB [ 1379.431082] Total swap = 0kB [ 1379.440175] 2097051 pages RAM [ 1379.446944] 0 pages HighMem/MovableOnly [ 1379.455483] 363849 pages reserved [ 1379.464230] 0 pages cma reserved [ 1379.472365] Out of memory (oom_kill_allocating_task): Kill process 1104 (syz-executor.3) score 0 or sacrifice child [ 1379.496147] Killed process 1104 (syz-executor.3) total-vm:93120kB, anon-rss:84kB, file-rss:33928kB, shmem-rss:0kB [ 1379.529672] oom_reaper: reaped process 1104 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1380.193229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1380.237452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1380.286740] device bridge_slave_1 left promiscuous mode [ 1380.302268] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.322080] device bridge_slave_0 left promiscuous mode [ 1380.327723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.339709] oom_reaper: reaped process 1289 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1380.378168] kworker/u4:0 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1380.392765] kworker/u4:0 cpuset=/ mems_allowed=0-1 [ 1380.398208] CPU: 0 PID: 5 Comm: kworker/u4:0 Not tainted 4.14.232-syzkaller #0 [ 1380.405833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1380.415206] Workqueue: netns cleanup_net [ 1380.419275] Call Trace: [ 1380.421872] dump_stack+0x1b2/0x281 [ 1380.425508] dump_header+0x178/0x82f [ 1380.429229] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1380.434338] ? ___ratelimit+0x2cd/0x530 [ 1380.438317] oom_kill_process.cold+0x10/0xa40 [ 1380.442821] ? lock_downgrade+0x740/0x740 [ 1380.446982] out_of_memory+0x2dc/0x1190 [ 1380.450971] ? oom_killer_disable+0x1c0/0x1c0 [ 1380.455469] ? mutex_trylock+0x152/0x1a0 [ 1380.459544] __alloc_pages_nodemask+0x23e1/0x2720 [ 1380.464412] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1380.469268] ? mark_held_locks+0xa6/0xf0 [ 1380.473335] ? cache_grow_begin+0x3f/0x700 [ 1380.477589] cache_grow_begin+0x91/0x700 [ 1380.481691] fallback_alloc+0x207/0x2c0 [ 1380.485686] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 1380.490363] ? dev_uevent_filter+0xd0/0xd0 [ 1380.494601] kobject_uevent_env+0x20c/0xf40 [ 1380.498948] ? wait_for_completion_io+0x10/0x10 [ 1380.503634] ? is_acpi_device_node+0x5b/0x70 [ 1380.508053] device_del+0x642/0xa80 [ 1380.511709] ? __device_links_no_driver+0x1b0/0x1b0 [ 1380.516725] device_unregister+0x22/0xc0 [ 1380.520795] device_destroy+0x81/0xa0 [ 1380.524711] ? root_device_unregister+0x60/0x60 [ 1380.529381] ? kernfs_remove_by_name_ns+0x66/0x90 [ 1380.534223] macvtap_device_event+0x220/0x360 [ 1380.538734] ? macvtap_setup+0x50/0x50 [ 1380.542624] notifier_call_chain+0x108/0x1a0 [ 1380.547037] ? macsec_dev_open+0x260/0x260 [ 1380.551288] rollback_registered_many+0x765/0xba0 [ 1380.556143] ? netdev_state_change+0xf0/0xf0 [ 1380.560638] ? sysfs_remove_group+0xbe/0x100 [ 1380.565071] unregister_netdevice_many.part.0+0x18/0x2e0 [ 1380.570528] default_device_exit_batch+0x2d8/0x380 [ 1380.575548] ? unregister_netdevice_many+0x50/0x50 [ 1380.580478] ? do_wait_intr_irq+0x270/0x270 [ 1380.584798] ? __local_bh_enable_ip+0xc1/0x170 [ 1380.589377] ? unregister_netdevice_many+0x50/0x50 [ 1380.594304] ? dev_change_net_namespace+0xc90/0xc90 [ 1380.599327] ops_exit_list+0xf9/0x150 [ 1380.603144] cleanup_net+0x3b3/0x840 [ 1380.606949] ? net_drop_ns+0x70/0x70 [ 1380.610655] ? lock_acquire+0x170/0x3f0 [ 1380.615290] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1380.620739] process_one_work+0x793/0x14a0 [ 1380.624985] ? work_busy+0x320/0x320 [ 1380.628701] ? worker_thread+0x158/0xff0 [ 1380.632762] ? _raw_spin_unlock_irq+0x24/0x80 [ 1380.637274] worker_thread+0x5cc/0xff0 [ 1380.641260] ? rescuer_thread+0xc80/0xc80 [ 1380.645409] kthread+0x30d/0x420 [ 1380.648773] ? kthread_create_on_node+0xd0/0xd0 [ 1380.653557] ret_from_fork+0x24/0x30 [ 1380.706138] Mem-Info: [ 1380.708628] active_anon:22354 inactive_anon:37201 isolated_anon:0 [ 1380.708628] active_file:47 inactive_file:21 isolated_file:0 [ 1380.708628] unevictable:0 dirty:8 writeback:0 unstable:0 [ 1380.708628] slab_reclaimable:12142 slab_unreclaimable:116085 [ 1380.708628] mapped:35489 shmem:37639 pagetables:627 bounce:0 [ 1380.708628] free:13810 free_pcp:3 free_cma:0 [ 1380.746246] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1380.757092] syz-executor.0: page allocation failure: order:0, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 1380.758544] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1380.775411] Node 0 active_anon:88168kB inactive_anon:124700kB active_file:8kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:81124kB dirty:0kB writeback:0kB shmem:126260kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1380.779843] CPU: 1 PID: 1289 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1380.811023] Node 1 active_anon:1248kB inactive_anon:24104kB active_file:180kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60832kB dirty:32kB writeback:0kB shmem:24296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1380.815503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1380.815511] Call Trace: [ 1380.844392] Node 0 [ 1380.853716] dump_stack+0x1b2/0x281 [ 1380.853739] warn_alloc.cold+0x96/0x1cc [ 1380.853753] ? zone_watermark_ok_safe+0x220/0x220 [ 1380.856338] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1380.858549] ? usleep_range+0x130/0x130 [ 1380.862199] lowmem_reserve[]: [ 1380.866132] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1380.871019] 0 [ 1380.896735] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1380.896746] ? run_timer_softirq+0x5a0/0x5a0 [ 1380.896764] __alloc_pages_nodemask+0x2127/0x2720 [ 1380.896779] ? lock_acquire+0x170/0x3f0 [ 1380.900745] 2717 [ 1380.903844] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1380.903854] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1380.903876] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1380.903889] ? __alloc_pages_nodemask+0x9/0x2720 [ 1380.908996] 2718 [ 1380.910797] alloc_pages_current+0x155/0x260 [ 1380.915831] 2718 [ 1380.920212] ion_page_pool_alloc+0x118/0x1b0 [ 1380.925068] 2718 [ 1380.929000] ion_system_heap_allocate+0x133/0x8c0 [ 1380.935923] ? ion_alloc+0x187/0x810 [ 1380.940400] Node 0 [ 1380.945885] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1380.945896] ? ion_system_contig_heap_create+0x130/0x130 [ 1380.945906] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1380.945918] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1380.945929] ion_alloc+0x204/0x810 [ 1380.950715] DMA32 free:17984kB min:36200kB low:45248kB high:54296kB active_anon:88268kB inactive_anon:124700kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2212kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1380.952762] ? ion_dma_buf_release+0x40/0x40 [ 1380.952775] ? __might_fault+0x177/0x1b0 [ 1380.952786] ion_ioctl+0xea/0x1f0 [ 1380.952795] ? ion_query_heaps+0x360/0x360 [ 1380.957200] lowmem_reserve[]: [ 1380.959261] ? ion_query_heaps+0x360/0x360 [ 1380.963693] 0 [ 1380.965731] do_vfs_ioctl+0x75a/0xff0 [ 1380.965745] ? ioctl_preallocate+0x1a0/0x1a0 [ 1380.971394] 0 [ 1380.975095] ? lock_downgrade+0x740/0x740 [ 1380.977307] 0 [ 1380.982757] ? __fget+0x225/0x360 [ 1380.982774] ? do_vfs_ioctl+0xff0/0xff0 [ 1380.982786] ? security_file_ioctl+0x83/0xb0 [ 1380.982796] SyS_ioctl+0x7f/0xb0 [ 1380.988242] 0 [ 1380.993252] ? do_vfs_ioctl+0xff0/0xff0 [ 1380.993265] do_syscall_64+0x1d5/0x640 [ 1380.993280] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1380.993290] RIP: 0033:0x4665f9 [ 1380.998118] 0 [ 1381.001664] RSP: 002b:00007efdf923c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1381.001673] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1381.001678] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1381.001683] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1381.001688] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1381.001693] R13: 00007fff68d20daf R14: 00007efdf923c300 R15: 0000000000022000 [ 1381.008644] syz-executor.0 cpuset= [ 1381.044385] / [ 1381.052426] Node 0 [ 1381.055694] mems_allowed=0-1 [ 1381.057431] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1381.061265] CPU: 1 PID: 1085 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1381.061272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1381.061276] Call Trace: [ 1381.061298] dump_stack+0x1b2/0x281 [ 1381.061313] warn_alloc.cold+0x96/0x1cc [ 1381.061326] ? zone_watermark_ok_safe+0x220/0x220 [ 1381.061336] ? usleep_range+0x130/0x130 [ 1381.061348] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1381.075890] lowmem_reserve[]: [ 1381.076960] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1381.080915] 0 [ 1381.085335] ? run_timer_softirq+0x5a0/0x5a0 [ 1381.085353] __alloc_pages_nodemask+0x2127/0x2720 [ 1381.085377] ? do_vfs_ioctl+0x75a/0xff0 [ 1381.088727] 0 [ 1381.090522] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1381.094512] 0 [ 1381.098366] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1381.103564] 0 [ 1381.106718] alloc_pages_current+0x155/0x260 [ 1381.108489] 0 [ 1381.116218] __get_free_pages+0xb/0x40 [ 1381.116227] sg_kmalloc+0x44/0x60 [ 1381.116236] __sg_alloc_table.part.0+0x23f/0x370 [ 1381.116246] ? sg_init_one+0x170/0x170 [ 1381.116256] sg_alloc_table+0x4e/0x250 [ 1381.130810] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1381.138115] Node 1 [ 1381.145351] ion_system_heap_allocate+0x367/0x8c0 [ 1381.145365] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1381.145376] ? ion_system_contig_heap_create+0x130/0x130 [ 1381.152682] Normal free:26460kB min:53696kB low:67120kB high:80544kB active_anon:1348kB inactive_anon:24104kB active_file:44kB inactive_file:60kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:296kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1381.156174] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1381.157862] lowmem_reserve[]: [ 1381.160091] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1381.163213] 0 [ 1381.188163] ion_alloc+0x27a/0x810 [ 1381.188179] ? ion_dma_buf_release+0x40/0x40 [ 1381.188191] ? __might_fault+0x177/0x1b0 [ 1381.188203] ion_ioctl+0xea/0x1f0 [ 1381.188215] ? ion_query_heaps+0x360/0x360 [ 1381.196059] 0 [ 1381.206292] ? ion_query_heaps+0x360/0x360 [ 1381.206305] do_vfs_ioctl+0x75a/0xff0 [ 1381.208889] 0 [ 1381.212950] ? ioctl_preallocate+0x1a0/0x1a0 [ 1381.212960] ? lock_downgrade+0x740/0x740 [ 1381.212973] ? __fget+0x225/0x360 [ 1381.212983] ? do_vfs_ioctl+0xff0/0xff0 [ 1381.217039] 0 [ 1381.221877] ? security_file_ioctl+0x83/0xb0 [ 1381.221890] SyS_ioctl+0x7f/0xb0 [ 1381.221898] ? do_vfs_ioctl+0xff0/0xff0 [ 1381.221909] do_syscall_64+0x1d5/0x640 [ 1381.221924] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1381.225893] 0 [ 1381.231019] RIP: 0033:0x4665f9 [ 1381.231025] RSP: 002b:00007feafbab4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1381.231034] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1381.231038] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1381.231043] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1381.231048] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1381.231053] R13: 00007ffcb6e8eadf R14: 00007feafbab4300 R15: 0000000000022000 [ 1381.231811] Mem-Info: [ 1381.239188] active_anon:22354 inactive_anon:37201 isolated_anon:0 [ 1381.239188] active_file:30 inactive_file:28 isolated_file:0 [ 1381.239188] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1381.239188] slab_reclaimable:12142 slab_unreclaimable:116085 [ 1381.239188] mapped:35475 shmem:37639 pagetables:627 bounce:0 [ 1381.239188] free:13885 free_pcp:3 free_cma:0 [ 1381.261032] Node 0 [ 1381.262949] Node 0 active_anon:88156kB inactive_anon:124700kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:81048kB dirty:0kB writeback:0kB shmem:126260kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1381.267355] DMA: [ 1381.269173] Node 1 active_anon:1220kB inactive_anon:24104kB active_file:64kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60684kB dirty:0kB writeback:0kB shmem:24296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1381.297344] 166*4kB [ 1381.302873] Node 0 [ 1381.320684] (UE) [ 1381.349008] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1381.440084] 49*8kB [ 1381.449639] lowmem_reserve[]: [ 1381.501130] (UE) [ 1381.525763] 0 [ 1381.623018] 4*16kB (U) 2*32kB (UE) 3*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 10976kB [ 1381.639000] 2717 2718 2718 2718 [ 1381.643313] Node 0 DMA32 free:45040kB min:36200kB low:45248kB high:54296kB active_anon:88256kB inactive_anon:124700kB active_file:4kB inactive_file:104kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:2212kB bounce:0kB free_pcp:644kB local_pcp:256kB free_cma:0kB [ 1381.675674] lowmem_reserve[]: 0 0 0 0 0 [ 1381.711376] Node 0 DMA32: 103*4kB (UM) 63*8kB (UME) 158*16kB (ME) 13*32kB (ME) 80*64kB (U) 122*128kB (U) 35*256kB (U) 11*512kB (U) 1*1024kB (U) 2*2048kB (U) 0*4096kB = 44308kB [ 1381.715961] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1381.765356] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1381.766388] lowmem_reserve[]: 0 0 0 0 0 [ 1381.800694] Node 1 Normal free:297652kB min:53696kB low:67120kB high:80544kB active_anon:1220kB inactive_anon:24104kB active_file:1664kB inactive_file:6664kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:296kB bounce:0kB free_pcp:1424kB local_pcp:688kB free_cma:0kB [ 1381.811022] Node 1 Normal: 594*4kB (UE) 83*8kB (UE) 91*16kB (UE) 111*32kB (U) 2965*64kB (UE) 274*128kB (UE) 12*256kB (UM) 18*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 245168kB [ 1381.901355] lowmem_reserve[]: 0 0 0 0 0 [ 1381.912780] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1381.918393] Node 0 DMA: 175*4kB (U) 11*8kB (UME) 4*16kB (U) 3*32kB (UME) 5*64kB (UME) 3*128kB (UME) 1*256kB (E) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (M) 1*4096kB (U) = 11124kB [ 1381.971251] Node 0 DMA32: 172*4kB (UME) 55*8kB (UE) 181*16kB (UE) 20*32kB (UME) 171*64kB (U) 122*128kB (U) 35*256kB (UM) 9*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 44792kB [ 1381.972957] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1381.997529] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1382.009043] Node 1 Normal: 3*4kB (UME) 996*8kB (UME) 342*16kB (UME) 663*32kB (U) 1554*64kB (UE) 274*128kB (UME) 8*256kB (U) 9*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 175852kB [ 1382.026190] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1382.035844] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1382.051560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1382.061051] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1382.069925] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1382.071870] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1382.104249] 43054 total pagecache pages [ 1382.108276] 0 pages in swap cache [ 1382.111672] 43054 total pagecache pages [ 1382.115103] Swap cache stats: add 0, delete 0, find 0/0 [ 1382.121599] Free swap = 0kB [ 1382.124628] Total swap = 0kB [ 1382.125276] 0 pages in swap cache [ 1382.127804] 2097051 pages RAM [ 1382.137772] 0 pages HighMem/MovableOnly [ 1382.142289] 363849 pages reserved [ 1382.144952] Swap cache stats: add 0, delete 0, find 0/0 [ 1382.145740] 0 pages cma reserved [ 1382.145749] Out of memory: Kill process 7959 (syz-fuzzer) score 10 or sacrifice child [ 1382.146140] Killed process 1351 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:956kB, shmem-rss:0kB [ 1382.166708] Free swap = 0kB [ 1382.206623] Total swap = 0kB [ 1382.209781] 2097051 pages RAM [ 1382.220397] oom_reaper: reaped process 1351 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1382.248413] 0 pages HighMem/MovableOnly [ 1382.268337] 363849 pages reserved [ 1382.284762] 0 pages cma reserved [ 1382.290479] device hsr_slave_1 left promiscuous mode [ 1382.321390] device hsr_slave_0 left promiscuous mode [ 1382.347594] team0 (unregistering): Port device team_slave_1 removed [ 1382.369334] team0 (unregistering): Port device team_slave_0 removed [ 1382.395890] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1382.420588] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1382.427664] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1382.456253] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1382.467433] CPU: 1 PID: 1289 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1382.475252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1382.484619] Call Trace: [ 1382.487245] dump_stack+0x1b2/0x281 [ 1382.490877] warn_alloc.cold+0x96/0x1cc [ 1382.494866] ? zone_watermark_ok_safe+0x220/0x220 [ 1382.499740] __alloc_pages_nodemask+0x2127/0x2720 [ 1382.504610] ? _raw_spin_unlock_irq+0x24/0x80 [ 1382.509109] ? lock_acquire+0x170/0x3f0 [ 1382.513087] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1382.517946] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1382.523398] ? __mutex_unlock_slowpath+0x75/0x770 [ 1382.528246] alloc_pages_current+0x155/0x260 [ 1382.532665] ion_page_pool_alloc+0x118/0x1b0 [ 1382.537107] ion_system_heap_allocate+0x133/0x8c0 [ 1382.541953] ? _raw_spin_unlock+0x29/0x40 [ 1382.546099] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1382.551210] ? ion_system_contig_heap_create+0x130/0x130 [ 1382.556661] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1382.561673] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1382.566515] ion_alloc+0x27a/0x810 [ 1382.570751] ? ion_dma_buf_release+0x40/0x40 [ 1382.575175] ? __might_fault+0x177/0x1b0 [ 1382.579232] ion_ioctl+0xea/0x1f0 [ 1382.584777] ? ion_query_heaps+0x360/0x360 [ 1382.589006] ? ion_query_heaps+0x360/0x360 [ 1382.593236] do_vfs_ioctl+0x75a/0xff0 [ 1382.597058] ? ioctl_preallocate+0x1a0/0x1a0 [ 1382.601519] ? lock_downgrade+0x740/0x740 [ 1382.605849] ? __fget+0x225/0x360 [ 1382.609313] ? do_vfs_ioctl+0xff0/0xff0 [ 1382.613285] ? security_file_ioctl+0x83/0xb0 [ 1382.617688] SyS_ioctl+0x7f/0xb0 [ 1382.621050] ? do_vfs_ioctl+0xff0/0xff0 [ 1382.625021] do_syscall_64+0x1d5/0x640 [ 1382.628913] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1382.634320] RIP: 0033:0x4665f9 [ 1382.637521] RSP: 002b:00007efdf923c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1382.645228] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1382.652508] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1382.659792] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1382.667068] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1382.674340] R13: 00007fff68d20daf R14: 00007efdf923c300 R15: 0000000000022000 [ 1382.707170] bond0 (unregistering): Released all slaves [ 1382.721848] warn_alloc_show_mem: 1 callbacks suppressed [ 1382.721852] Mem-Info: [ 1382.741087] active_anon:22438 inactive_anon:37201 isolated_anon:0 [ 1382.741087] active_file:1377 inactive_file:1412 isolated_file:0 [ 1382.741087] unevictable:0 dirty:14 writeback:0 unstable:0 [ 1382.741087] slab_reclaimable:12153 slab_unreclaimable:115915 [ 1382.741087] mapped:37954 shmem:37639 pagetables:621 bounce:0 [ 1382.741087] free:45765 free_pcp:257 free_cma:0 [ 1382.775044] Node 0 active_anon:88200kB inactive_anon:124696kB active_file:12kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:86416kB dirty:4kB writeback:0kB shmem:126256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1382.811751] Node 1 active_anon:1552kB inactive_anon:24108kB active_file:5496kB inactive_file:5588kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:65400kB dirty:52kB writeback:0kB shmem:24300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1382.841182] Node 0 DMA free:11016kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1382.900085] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1382.912037] Node 0 DMA32 free:26552kB min:36200kB low:45248kB high:54296kB active_anon:88128kB inactive_anon:124696kB active_file:8kB inactive_file:516kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2124kB bounce:0kB free_pcp:1396kB local_pcp:700kB free_cma:0kB [ 1382.942057] lowmem_reserve[]: 0 0 0 0 0 [ 1382.946133] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1382.972013] lowmem_reserve[]: 0 0 0 0 0 [ 1382.976078] Node 1 Normal free:209912kB min:53696kB low:67120kB high:80544kB active_anon:1552kB inactive_anon:24108kB active_file:5520kB inactive_file:5840kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:360kB bounce:0kB free_pcp:1320kB local_pcp:696kB free_cma:0kB [ 1383.005720] lowmem_reserve[]: 0 0 0 0 0 [ 1383.009778] Node 0 DMA: 184*4kB (UM) 5*8kB (UME) 2*16kB (UM) 3*32kB (ME) 2*64kB (UE) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (M) 1*4096kB (U) = 11016kB [ 1383.026725] Node 0 DMA32: 7079*4kB (UME) 2237*8kB (UME) 422*16kB (UME) 103*32kB (UE) 9*64kB (UM) 1*128kB (U) 14*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 61060kB [ 1383.042591] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1383.061097] Node 1 Normal: 703*4kB (UME) 432*8kB (UM) 1278*16kB (UM) 2260*32kB (UM) 319*64kB (U) 101*128kB (UM) 49*256kB (U) 43*512kB (U) 36*1024kB (U) 3*2048kB (U) 0*4096kB = 209948kB [ 1383.078621] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1383.087692] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1383.111774] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1383.130947] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1383.139739] 40381 total pagecache pages [ 1383.143854] 0 pages in swap cache [ 1383.161086] Swap cache stats: add 0, delete 0, find 0/0 [ 1383.166733] Free swap = 0kB [ 1383.173500] Total swap = 0kB [ 1383.180098] 2097051 pages RAM [ 1383.184338] 0 pages HighMem/MovableOnly [ 1383.188486] 363849 pages reserved [ 1383.192066] 0 pages cma reserved 08:25:14 executing program 1: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) 08:25:14 executing program 0: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1385.802083] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1385.815474] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1385.822081] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1385.822601] CPU: 0 PID: 1363 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1385.836606] syz-executor.0 cpuset= [ 1385.841721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1385.841726] Call Trace: [ 1385.841746] dump_stack+0x1b2/0x281 [ 1385.841760] warn_alloc.cold+0x96/0x1cc [ 1385.841773] ? zone_watermark_ok_safe+0x220/0x220 [ 1385.841794] __alloc_pages_nodemask+0x2127/0x2720 [ 1385.841810] ? lock_acquire+0x170/0x3f0 [ 1385.841824] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1385.841841] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1385.841853] ? __mutex_unlock_slowpath+0x75/0x770 [ 1385.841867] alloc_pages_current+0x155/0x260 [ 1385.841878] ion_page_pool_alloc+0x118/0x1b0 [ 1385.841890] ion_system_heap_allocate+0x133/0x8c0 [ 1385.846332] / [ 1385.854797] ? ion_alloc+0x187/0x810 [ 1385.857707] mems_allowed=0-1 [ 1385.861196] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1385.861207] ? ion_system_contig_heap_create+0x130/0x130 [ 1385.861217] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1385.861229] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1385.861239] ion_alloc+0x204/0x810 [ 1385.942013] ? ion_dma_buf_release+0x40/0x40 [ 1385.946421] ? __might_fault+0x177/0x1b0 [ 1385.950475] ion_ioctl+0xea/0x1f0 [ 1385.953923] ? ion_query_heaps+0x360/0x360 [ 1385.958152] ? ion_query_heaps+0x360/0x360 [ 1385.962398] do_vfs_ioctl+0x75a/0xff0 [ 1385.966218] ? ioctl_preallocate+0x1a0/0x1a0 [ 1385.970618] ? lock_downgrade+0x740/0x740 [ 1385.974762] ? __fget+0x225/0x360 [ 1385.978206] ? do_vfs_ioctl+0xff0/0xff0 [ 1385.982191] ? security_file_ioctl+0x83/0xb0 [ 1385.986608] SyS_ioctl+0x7f/0xb0 [ 1385.989962] ? do_vfs_ioctl+0xff0/0xff0 [ 1385.993931] do_syscall_64+0x1d5/0x640 [ 1385.997989] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1386.003171] RIP: 0033:0x4665f9 [ 1386.006373] RSP: 002b:00007efdf923c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1386.014083] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1386.021346] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1386.028611] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1386.035877] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1386.043177] R13: 00007fff68d20daf R14: 00007efdf923c300 R15: 0000000000022000 [ 1386.050462] CPU: 1 PID: 1361 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1386.058292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1386.067678] Call Trace: [ 1386.070300] dump_stack+0x1b2/0x281 [ 1386.073931] warn_alloc.cold+0x96/0x1cc [ 1386.077932] ? zone_watermark_ok_safe+0x220/0x220 [ 1386.082797] __alloc_pages_nodemask+0x2127/0x2720 [ 1386.087692] ? lock_acquire+0x170/0x3f0 [ 1386.091679] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1386.097157] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1386.102617] ? __mutex_unlock_slowpath+0x75/0x770 [ 1386.107484] alloc_pages_current+0x155/0x260 [ 1386.111899] ion_page_pool_alloc+0x118/0x1b0 [ 1386.116324] ion_system_heap_allocate+0x133/0x8c0 [ 1386.121167] ? ion_alloc+0x187/0x810 [ 1386.124882] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1386.130332] ? ion_system_contig_heap_create+0x130/0x130 [ 1386.135797] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1386.140835] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1386.145695] ion_alloc+0x204/0x810 [ 1386.149238] ? ion_dma_buf_release+0x40/0x40 [ 1386.153810] ? __might_fault+0x177/0x1b0 [ 1386.158050] ion_ioctl+0xea/0x1f0 [ 1386.161501] ? ion_query_heaps+0x360/0x360 [ 1386.165751] ? ion_query_heaps+0x360/0x360 [ 1386.170008] do_vfs_ioctl+0x75a/0xff0 [ 1386.173817] ? ioctl_preallocate+0x1a0/0x1a0 [ 1386.178308] ? lock_downgrade+0x740/0x740 [ 1386.182487] ? __fget+0x225/0x360 [ 1386.185950] ? do_vfs_ioctl+0xff0/0xff0 [ 1386.189924] ? security_file_ioctl+0x83/0xb0 [ 1386.194353] SyS_ioctl+0x7f/0xb0 [ 1386.197717] ? do_vfs_ioctl+0xff0/0xff0 [ 1386.201701] do_syscall_64+0x1d5/0x640 [ 1386.205593] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1386.210779] RIP: 0033:0x4665f9 [ 1386.214003] RSP: 002b:00007feafbab4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1386.221977] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1386.229347] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1386.236710] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1386.244118] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1386.251388] R13: 00007ffcb6e8eadf R14: 00007feafbab4300 R15: 0000000000022000 [ 1386.294769] Mem-Info: [ 1386.299553] active_anon:23382 inactive_anon:37194 isolated_anon:18 [ 1386.299553] active_file:2090 inactive_file:3082 isolated_file:9 [ 1386.299553] unevictable:0 dirty:36 writeback:0 unstable:0 [ 1386.299553] slab_reclaimable:12139 slab_unreclaimable:115094 [ 1386.299553] mapped:33351 shmem:37637 pagetables:584 bounce:0 [ 1386.299553] free:269504 free_pcp:106 free_cma:0 [ 1386.412395] Node 0 active_anon:92432kB inactive_anon:124696kB active_file:2652kB inactive_file:7664kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:179224kB dirty:72kB writeback:0kB shmem:126252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1386.450887] Node 1 active_anon:1096kB inactive_anon:24080kB active_file:5708kB inactive_file:4664kB unevictable:0kB isolated(anon):72kB isolated(file):36kB mapped:36080kB dirty:72kB writeback:0kB shmem:24296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1386.484464] Node 0 DMA free:11092kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1386.512321] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1386.517497] Node 0 DMA32 free:422656kB min:36200kB low:45248kB high:54296kB active_anon:92520kB inactive_anon:124696kB active_file:2652kB inactive_file:7664kB unevictable:0kB writepending:72kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2644kB bounce:0kB free_pcp:336kB local_pcp:248kB free_cma:0kB [ 1386.549397] lowmem_reserve[]: 0 0 0 0 0 [ 1386.553917] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1386.581294] lowmem_reserve[]: 0 0 0 0 0 [ 1386.585402] Node 1 Normal free:414032kB min:53696kB low:67120kB high:80544kB active_anon:1096kB inactive_anon:24080kB active_file:5708kB inactive_file:4664kB unevictable:0kB writepending:72kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:136kB bounce:0kB free_pcp:68kB local_pcp:0kB free_cma:0kB [ 1386.616378] lowmem_reserve[]: 0 0 0 0 0 [ 1386.620469] Node 0 DMA: 117*4kB (UM) 32*8kB (UME) 10*16kB (UM) 9*32kB (UME) 1*64kB (E) 5*128kB (UME) 4*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 11092kB [ 1386.637977] Node 0 DMA32: 2*4kB (UM) 10*8kB (E) 4846*16kB (UME) 7175*32kB (UME) 11*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 307928kB [ 1386.653603] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1386.664750] Node 1 Normal: 10924*4kB (UM) 8293*8kB (UM) 6575*16kB (UM) 6180*32kB (UM) 3*64kB (UM) 3*128kB (M) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 414088kB [ 1386.682232] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1386.692692] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1386.702099] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1386.711800] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1386.720513] 42733 total pagecache pages [ 1386.725386] 0 pages in swap cache [ 1386.728955] Swap cache stats: add 0, delete 0, find 0/0 [ 1386.735163] Free swap = 0kB [ 1386.738295] Total swap = 0kB [ 1386.742143] 2097051 pages RAM [ 1386.745431] 0 pages HighMem/MovableOnly [ 1386.749495] 363849 pages reserved [ 1386.753804] 0 pages cma reserved [ 1387.329713] oom_reaper: reaped process 1363 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1387.360086] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1387.389038] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1387.398075] CPU: 1 PID: 31275 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1387.405971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1387.415329] Call Trace: [ 1387.417935] dump_stack+0x1b2/0x281 [ 1387.421601] dump_header+0x178/0x82f [ 1387.425409] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1387.430534] ? ___ratelimit+0x2cd/0x530 [ 1387.431098] syz-executor.1: page allocation failure: order:0 [ 1387.434517] oom_kill_process.cold+0x10/0xa40 [ 1387.434536] out_of_memory+0xe3e/0x1190 [ 1387.440326] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1387.444818] ? oom_killer_disable+0x1c0/0x1c0 [ 1387.444828] ? mutex_trylock+0x152/0x1a0 [ 1387.444838] __alloc_pages_nodemask+0x23e1/0x2720 [ 1387.444856] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1387.444885] alloc_pages_current+0x155/0x260 [ 1387.444894] filemap_fault+0x11a1/0x1ad0 [ 1387.444913] ext4_filemap_fault+0x84/0xb0 [ 1387.463080] (null) [ 1387.464528] __do_fault+0xfa/0x380 [ 1387.469358] syz-executor.1 cpuset= [ 1387.474193] __handle_mm_fault+0x2497/0x4620 [ 1387.474204] ? vm_insert_page+0x7c0/0x7c0 [ 1387.474211] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1387.474218] ? nanosleep_copyout+0x100/0x100 [ 1387.474233] ? mark_held_locks+0xa6/0xf0 [ 1387.474242] handle_mm_fault+0x455/0x9c0 [ 1387.474255] __do_page_fault+0x549/0xad0 [ 1387.474266] ? spurious_fault+0x640/0x640 [ 1387.474278] ? do_page_fault+0x60/0x500 [ 1387.484478] / [ 1387.486887] ? page_fault+0x2f/0x50 [ 1387.489010] mems_allowed=0-1 [ 1387.492532] page_fault+0x45/0x50 [ 1387.492540] RIP: 15253c:0x6 [ 1387.492544] RSP: 0017:00007ffcb6e8ed9c EFLAGS: 00000032 [ 1387.503671] Mem-Info: [ 1387.510350] CPU: 0 PID: 1363 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1387.513520] active_anon:22979 inactive_anon:37199 isolated_anon:0 [ 1387.513520] active_file:19 inactive_file:16 isolated_file:0 [ 1387.513520] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1387.513520] slab_reclaimable:12143 slab_unreclaimable:114961 [ 1387.513520] mapped:52899 shmem:37637 pagetables:719 bounce:0 [ 1387.513520] free:13869 free_pcp:0 free_cma:0 [ 1387.517513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1387.521625] Node 0 active_anon:90816kB inactive_anon:124696kB active_file:0kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185720kB dirty:0kB writeback:0kB shmem:126252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1387.525629] Call Trace: [ 1387.529770] Node 1 active_anon:1100kB inactive_anon:24100kB active_file:76kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25876kB dirty:0kB writeback:0kB shmem:24296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1387.533740] dump_stack+0x1b2/0x281 [ 1387.533754] warn_alloc.cold+0x96/0x1cc [ 1387.533765] ? ath_cmn_process_fft+0x610/0xd20 [ 1387.533776] ? zone_watermark_ok_safe+0x220/0x220 [ 1387.535489] Node 0 [ 1387.539193] ? usleep_range+0x130/0x130 [ 1387.542313] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1387.546091] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1387.549001] lowmem_reserve[]: [ 1387.554360] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1387.554375] ? run_timer_softirq+0x5a0/0x5a0 [ 1387.554393] __alloc_pages_nodemask+0x2127/0x2720 [ 1387.554408] ? lock_acquire+0x170/0x3f0 [ 1387.554423] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1387.560677] 0 [ 1387.564602] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1387.564619] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1387.564646] ? alloc_pages_current+0x84/0x260 [ 1387.598435] 2717 [ 1387.607410] alloc_pages_current+0x155/0x260 [ 1387.607425] ion_page_pool_alloc+0x118/0x1b0 [ 1387.607436] ion_system_heap_allocate+0x133/0x8c0 [ 1387.635229] 2718 [ 1387.637783] ? ion_alloc+0x187/0x810 [ 1387.664961] 2718 [ 1387.668547] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1387.672536] 2718 [ 1387.677084] ? ion_system_contig_heap_create+0x130/0x130 [ 1387.685454] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1387.689401] Node 0 [ 1387.714998] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1387.715011] ion_alloc+0x204/0x810 [ 1387.715026] ? ion_dma_buf_release+0x40/0x40 [ 1387.715037] ? __might_fault+0x177/0x1b0 [ 1387.720139] DMA32 free:17800kB min:36200kB low:45248kB high:54296kB active_anon:90804kB inactive_anon:124696kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2740kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1387.723255] ion_ioctl+0xea/0x1f0 [ 1387.723265] ? ion_query_heaps+0x360/0x360 [ 1387.723276] ? ion_query_heaps+0x360/0x360 [ 1387.723287] do_vfs_ioctl+0x75a/0xff0 [ 1387.728282] lowmem_reserve[]: [ 1387.732699] ? ioctl_preallocate+0x1a0/0x1a0 [ 1387.732709] ? lock_downgrade+0x740/0x740 [ 1387.732723] ? __fget+0x225/0x360 [ 1387.732732] ? do_vfs_ioctl+0xff0/0xff0 [ 1387.737556] 0 [ 1387.741548] ? security_file_ioctl+0x83/0xb0 [ 1387.741560] SyS_ioctl+0x7f/0xb0 [ 1387.741568] ? do_vfs_ioctl+0xff0/0xff0 [ 1387.741580] do_syscall_64+0x1d5/0x640 [ 1387.746420] 0 [ 1387.748232] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1387.752733] 0 [ 1387.758159] RIP: 0033:0x4665f9 [ 1387.762699] 0 [ 1387.764713] RSP: 002b:00007efdf923c188 EFLAGS: 00000246 [ 1387.769208] 0 [ 1387.773721] ORIG_RAX: 0000000000000010 [ 1387.773727] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1387.773732] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1387.773736] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1387.773741] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1387.773745] R13: 00007fff68d20daf R14: 00007efdf923c300 R15: 0000000000022000 [ 1387.783426] warn_alloc_show_mem: 1 callbacks suppressed [ 1387.783430] Mem-Info: [ 1387.806661] active_anon:22979 inactive_anon:37199 isolated_anon:0 [ 1387.806661] active_file:19 inactive_file:16 isolated_file:0 [ 1387.806661] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1387.806661] slab_reclaimable:12143 slab_unreclaimable:114961 [ 1387.806661] mapped:52899 shmem:37637 pagetables:719 bounce:0 [ 1387.806661] free:13869 free_pcp:0 free_cma:0 [ 1387.812974] Node 0 [ 1387.815527] Node 0 active_anon:90816kB inactive_anon:124696kB active_file:0kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185720kB dirty:0kB writeback:0kB shmem:126252kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1387.819929] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1387.830375] Node 1 active_anon:1100kB inactive_anon:24100kB active_file:76kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25876kB dirty:0kB writeback:0kB shmem:24296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1387.862916] lowmem_reserve[]: [ 1387.871516] Node 0 [ 1387.886155] 0 [ 1387.894431] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1387.902475] 0 [ 1387.908416] lowmem_reserve[]: [ 1387.922516] 0 [ 1387.931536] 0 [ 1387.948402] 0 [ 1387.959111] 2717 [ 1387.977129] 0 [ 1388.015175] 2718 [ 1388.070915] 2718 [ 1388.102163] Node 1 [ 1388.131381] 2718 [ 1388.143062] Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:1084kB inactive_anon:24104kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:136kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1388.182703] Node 0 DMA32 free:18260kB min:36200kB low:45248kB high:54296kB active_anon:90796kB inactive_anon:124696kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2724kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1388.185880] lowmem_reserve[]: [ 1388.219965] lowmem_reserve[]: 0 0 0 0 0 [ 1388.223212] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1388.223232] lowmem_reserve[]: 0 0 0 0 0 [ 1388.223251] Node 1 Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:1084kB inactive_anon:24104kB active_file:32kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:136kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1388.223272] lowmem_reserve[]: 0 0 0 0 0 [ 1388.223290] Node 0 DMA: 87*4kB (UM) 32*8kB (UME) 10*16kB (UM) 9*32kB (UME) 1*64kB (E) 5*128kB (UME) 4*256kB [ 1388.227365] 0 [ 1388.260713] (UME) [ 1388.297159] 0 [ 1388.307465] 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10972kB [ 1388.314846] 0 0 0 [ 1388.316279] Node 0 DMA32: [ 1388.318420] Node 0 DMA: [ 1388.329625] 589*4kB (UME) 74*8kB (UME) 163*16kB (ME) 121*32kB (UME) 26*64kB (UM) 4*128kB (M) 6*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 18260kB [ 1388.333039] 87*4kB [ 1388.355417] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1388.358573] (UM) [ 1388.370828] Node 1 [ 1388.370856] 32*8kB [ 1388.378855] Normal: [ 1388.384707] (UME) [ 1388.385433] 206*4kB [ 1388.387044] 10*16kB [ 1388.389210] (UM) [ 1388.397067] (UM) 9*32kB (UME) 1*64kB (E) 5*128kB (UME) 4*256kB (UME) 2*512kB (ME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 10972kB [ 1388.399741] 154*8kB (M) 103*16kB (M) 561*32kB (UM) 29*64kB (UM) 14*128kB (M) 4*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB [ 1388.421364] Node 0 DMA32: 589*4kB (UME) 74*8kB (UME) 163*16kB (ME) 121*32kB (UME) 26*64kB (UM) 4*128kB (M) 6*256kB (M) 4*512kB (M) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 18260kB [ 1388.440681] 0*4096kB [ 1388.465836] Node 0 [ 1388.466347] = 26840kB [ 1388.468383] Normal: [ 1388.470617] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1388.476931] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1388.494209] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1388.503163] Node 1 Normal: 206*4kB (UM) 154*8kB (M) 103*16kB (M) 561*32kB (UM) 29*64kB (UM) 14*128kB (M) 4*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 26840kB [ 1388.517501] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1388.532093] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1388.541406] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1388.548692] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1388.550084] 37658 total pagecache pages [ 1388.560820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1388.572301] 0 pages in swap cache [ 1388.575766] Swap cache stats: add 0, delete 0, find 0/0 [ 1388.580722] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1388.588760] Free swap = 0kB [ 1388.589773] 37658 total pagecache pages [ 1388.594765] Total swap = 0kB [ 1388.599888] 2097051 pages RAM [ 1388.605932] 0 pages in swap cache [ 1388.609481] Swap cache stats: add 0, delete 0, find 0/0 [ 1388.610788] 0 pages HighMem/MovableOnly [ 1388.625640] Free swap = 0kB [ 1388.628674] Total swap = 0kB [ 1388.629728] 363849 pages reserved [ 1388.635224] 0 pages cma reserved [ 1388.635566] 2097051 pages RAM [ 1388.663294] 0 pages HighMem/MovableOnly [ 1388.680617] 363849 pages reserved [ 1388.691503] 0 pages cma reserved [ 1388.703476] Out of memory (oom_kill_allocating_task): Kill process 31275 (syz-executor.0) score 0 or sacrifice child [ 1388.775826] Killed process 1361 (syz-executor.0) total-vm:93252kB, anon-rss:2192kB, file-rss:34820kB, shmem-rss:0kB [ 1388.848347] oom_reaper: reaped process 1361 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 08:25:18 executing program 0: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f00000001c0), 0x400007, 0x2aa040) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x0, 0x3a75, 0x4}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140), 0x189a40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0x7fffffff, 0x22}) [ 1390.082505] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1390.100129] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1390.110715] CPU: 1 PID: 1386 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1390.118549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1390.127915] Call Trace: [ 1390.130567] dump_stack+0x1b2/0x281 [ 1390.134215] warn_alloc.cold+0x96/0x1cc [ 1390.138293] ? zone_watermark_ok_safe+0x220/0x220 [ 1390.143143] __alloc_pages_nodemask+0x2127/0x2720 [ 1390.147989] ? lock_acquire+0x170/0x3f0 [ 1390.152051] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1390.156897] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1390.162344] ? __mutex_unlock_slowpath+0x75/0x770 [ 1390.167197] ? retint_kernel+0x2d/0x2d [ 1390.171082] alloc_pages_current+0x155/0x260 [ 1390.175492] ion_page_pool_alloc+0x118/0x1b0 [ 1390.179924] ion_system_heap_allocate+0x133/0x8c0 [ 1390.184813] ? ion_alloc+0x187/0x810 [ 1390.188529] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1390.193989] ? ion_system_contig_heap_create+0x130/0x130 [ 1390.199440] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1390.204459] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1390.209322] ion_alloc+0x204/0x810 [ 1390.212883] ? ion_dma_buf_release+0x40/0x40 [ 1390.217289] ? __might_fault+0x177/0x1b0 [ 1390.221351] ion_ioctl+0xea/0x1f0 [ 1390.224797] ? ion_query_heaps+0x360/0x360 [ 1390.229025] ? ion_query_heaps+0x360/0x360 [ 1390.233278] do_vfs_ioctl+0x75a/0xff0 [ 1390.237111] ? ioctl_preallocate+0x1a0/0x1a0 [ 1390.241521] ? lock_downgrade+0x740/0x740 [ 1390.245667] ? __fget+0x225/0x360 [ 1390.249114] ? do_vfs_ioctl+0xff0/0xff0 [ 1390.253106] ? security_file_ioctl+0x83/0xb0 [ 1390.257520] SyS_ioctl+0x7f/0xb0 [ 1390.260880] ? do_vfs_ioctl+0xff0/0xff0 [ 1390.264853] do_syscall_64+0x1d5/0x640 [ 1390.268749] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1390.273932] RIP: 0033:0x4665f9 [ 1390.277111] RSP: 002b:00007feafbab4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1390.284815] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1390.292079] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1390.299399] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1390.306856] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1390.314211] R13: 00007ffcb6e8eadf R14: 00007feafbab4300 R15: 0000000000022000 [ 1390.322160] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1390.348335] Mem-Info: [ 1390.350888] active_anon:22479 inactive_anon:37209 isolated_anon:12 [ 1390.350888] active_file:1334 inactive_file:975 isolated_file:24 [ 1390.350888] unevictable:0 dirty:15 writeback:0 unstable:0 [ 1390.350888] slab_reclaimable:12149 slab_unreclaimable:116553 [ 1390.350888] mapped:54995 shmem:37649 pagetables:715 bounce:0 [ 1390.350888] free:167791 free_pcp:185 free_cma:0 [ 1390.351079] syz-executor.1 cpuset= [ 1390.387498] Node 0 active_anon:88844kB inactive_anon:124732kB active_file:1840kB inactive_file:1964kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:189452kB dirty:20kB writeback:0kB shmem:126296kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1390.422317] / mems_allowed=0-1 [ 1390.425621] CPU: 1 PID: 1363 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1390.433695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1390.441116] Node 1 active_anon:1072kB inactive_anon:24104kB active_file:3496kB inactive_file:1936kB unevictable:0kB isolated(anon):48kB isolated(file):48kB mapped:30528kB dirty:40kB writeback:0kB shmem:24300kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1390.443167] Call Trace: [ 1390.473574] dump_stack+0x1b2/0x281 [ 1390.477211] warn_alloc.cold+0x96/0x1cc [ 1390.481190] ? zone_watermark_ok_safe+0x220/0x220 [ 1390.486045] __alloc_pages_nodemask+0x2127/0x2720 [ 1390.490910] ? __schedule+0x893/0x1de0 [ 1390.494802] ? lock_acquire+0x170/0x3f0 [ 1390.498780] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1390.501053] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1390.503724] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1390.503737] ? __mutex_unlock_slowpath+0x75/0x770 [ 1390.542019] alloc_pages_current+0x155/0x260 [ 1390.546432] ion_page_pool_alloc+0x118/0x1b0 [ 1390.550848] ion_system_heap_allocate+0x133/0x8c0 [ 1390.555696] ? _raw_spin_unlock+0x29/0x40 [ 1390.559843] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1390.561099] lowmem_reserve[]: [ 1390.564884] ? ion_system_contig_heap_create+0x130/0x130 [ 1390.564886] 0 2717 [ 1390.567994] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1390.580689] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1390.581122] 2718 2718 [ 1390.585552] ion_alloc+0x27a/0x810 [ 1390.585566] ? ion_dma_buf_release+0x40/0x40 [ 1390.588075] 2718 [ 1390.591629] ? __might_fault+0x177/0x1b0 [ 1390.591640] ion_ioctl+0xea/0x1f0 [ 1390.591649] ? ion_query_heaps+0x360/0x360 [ 1390.591659] ? ion_query_heaps+0x360/0x360 [ 1390.591669] do_vfs_ioctl+0x75a/0xff0 [ 1390.591679] ? ioctl_preallocate+0x1a0/0x1a0 [ 1390.591690] ? lock_downgrade+0x740/0x740 [ 1390.591704] ? __fget+0x225/0x360 [ 1390.622383] ? do_vfs_ioctl+0xff0/0xff0 [ 1390.626513] Node 0 [ 1390.629989] ? security_file_ioctl+0x83/0xb0 [ 1390.640597] SyS_ioctl+0x7f/0xb0 [ 1390.643968] ? do_vfs_ioctl+0xff0/0xff0 [ 1390.647942] do_syscall_64+0x1d5/0x640 [ 1390.651056] DMA32 free:502272kB min:36200kB low:45248kB high:54296kB active_anon:88844kB inactive_anon:124732kB active_file:1904kB inactive_file:1984kB unevictable:0kB writepending:20kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:2724kB bounce:0kB free_pcp:644kB local_pcp:708kB free_cma:0kB [ 1390.651827] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1390.685926] RIP: 0033:0x4665f9 [ 1390.689115] RSP: 002b:00007efdf923c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1390.691096] Bluetooth: hci2 command 0x0409 tx timeout [ 1390.696816] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1390.696825] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1390.711145] Bluetooth: hci4 command 0x0409 tx timeout [ 1390.716526] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1390.729008] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1390.731053] lowmem_reserve[]: [ 1390.736279] R13: 00007fff68d20daf R14: 00007efdf923c300 R15: 0000000000022000 [ 1390.746827] 0 0 0 0 0 [ 1390.749388] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1390.776625] lowmem_reserve[]: 0 0 0 0 0 [ 1390.780638] Node 1 Normal free:412616kB min:53696kB low:67120kB high:80544kB active_anon:1072kB inactive_anon:24104kB active_file:3376kB inactive_file:1852kB unevictable:0kB writepending:40kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:136kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1390.808843] IPVS: ftp: loaded support on port[0] = 21 [ 1390.811024] lowmem_reserve[]: 0 0 0 0 0 [ 1390.818815] Node 0 DMA: 114*4kB (U) 33*8kB (UE) 12*16kB (U) 8*32kB (UE) 1*64kB (E) 3*128kB (UE) 3*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UM) 0*4096kB = 11088kB [ 1390.835295] Node 0 DMA32: 22*4kB (UE) 12926*8kB (UME) 13057*16kB (UME) 6911*32kB (UME) 123*64kB (U) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 541816kB [ 1390.851662] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1390.862589] Node 1 Normal: 10929*4kB (UM) 8351*8kB (UM) 6600*16kB (UM) 6137*32kB (UM) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 412636kB [ 1390.879467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1390.889462] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1390.898912] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1390.908565] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1390.918166] 40175 total pagecache pages [ 1390.924073] 0 pages in swap cache [ 1390.927536] Swap cache stats: add 0, delete 0, find 0/0 [ 1390.934479] Free swap = 0kB [ 1390.936761] IPVS: ftp: loaded support on port[0] = 21 [ 1390.937507] Total swap = 0kB [ 1390.946981] 2097051 pages RAM [ 1390.950090] 0 pages HighMem/MovableOnly [ 1390.955423] 363849 pages reserved [ 1390.959323] 0 pages cma reserved [ 1391.184295] IPVS: ftp: loaded support on port[0] = 21 [ 1391.195381] chnl_net:caif_netlink_parms(): no params data found [ 1391.224178] syz-executor.5: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 1391.234900] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1391.240298] CPU: 0 PID: 1368 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1391.248121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1391.257502] Call Trace: [ 1391.260102] dump_stack+0x1b2/0x281 [ 1391.263738] warn_alloc.cold+0x96/0x1cc [ 1391.267722] ? zone_watermark_ok_safe+0x220/0x220 [ 1391.272573] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1391.278249] ? wake_all_kswapds+0x175/0x360 [ 1391.282588] __alloc_pages_nodemask+0x2127/0x2720 [ 1391.287454] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1391.292509] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 1391.297548] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1391.302401] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1391.307291] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1391.312679] ? cache_alloc_refill+0x2fa/0x350 [ 1391.317188] ? ____cache_alloc_node+0x156/0x1d0 [ 1391.321873] cache_grow_begin+0x91/0x700 [ 1391.326058] fallback_alloc+0x207/0x2c0 [ 1391.330043] __kmalloc+0x213/0x400 [ 1391.333591] ? batadv_hash_new+0xaa/0x270 [ 1391.337747] batadv_hash_new+0xaa/0x270 [ 1391.341729] ? batadv_hash_set_lock_class+0x9a/0xf0 [ 1391.346756] batadv_tt_init+0x2b2/0x390 [ 1391.350738] batadv_mesh_init+0x478/0x630 [ 1391.354893] batadv_softif_init_late+0xa26/0xc90 [ 1391.359660] ? batadv_get_strings+0x40/0x40 [ 1391.363989] ? dev_valid_name+0x1a0/0x1a0 [ 1391.368145] ? batadv_get_strings+0x40/0x40 [ 1391.372473] register_netdevice+0x291/0xe40 [ 1391.376826] ? netdev_change_features+0xa0/0xa0 [ 1391.381498] ? rtnl_create_link+0x129/0x890 [ 1391.385826] rtnl_newlink+0x14ff/0x1860 [ 1391.389811] ? rtnl_newlink+0x43d/0x1860 [ 1391.393886] ? __lock_acquire+0x5fc/0x3f20 [ 1391.398344] ? trace_hardirqs_on+0x10/0x10 [ 1391.402626] ? rtnl_dellink+0x6a0/0x6a0 [ 1391.406609] ? trace_hardirqs_on+0x10/0x10 [ 1391.410873] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1391.416768] ? deref_stack_reg+0x124/0x1a0 [ 1391.421051] ? lock_acquire+0x170/0x3f0 [ 1391.425066] ? lock_downgrade+0x740/0x740 [ 1391.429224] ? rtnl_dellink+0x6a0/0x6a0 [ 1391.433316] rtnetlink_rcv_msg+0x3be/0xb10 [ 1391.438428] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1391.442928] ? __netlink_lookup+0x345/0x5d0 [ 1391.447261] netlink_rcv_skb+0x125/0x390 [ 1391.451327] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1391.455838] ? netlink_ack+0x9a0/0x9a0 [ 1391.459742] netlink_unicast+0x437/0x610 [ 1391.463816] ? netlink_sendskb+0xd0/0xd0 [ 1391.467880] ? __check_object_size+0x179/0x230 [ 1391.472474] netlink_sendmsg+0x62e/0xb80 [ 1391.476564] ? nlmsg_notify+0x170/0x170 [ 1391.480639] ? security_socket_sendmsg+0x83/0xb0 [ 1391.485404] ? nlmsg_notify+0x170/0x170 [ 1391.489383] sock_sendmsg+0xb5/0x100 [ 1391.493100] SyS_sendto+0x1c7/0x2c0 [ 1391.496729] ? SyS_getpeername+0x220/0x220 [ 1391.500989] ? sock_poll+0x220/0x220 [ 1391.504726] ? SyS_socket+0x12f/0x1b0 [ 1391.508527] ? move_addr_to_kernel+0x60/0x60 [ 1391.512957] ? do_syscall_64+0x4c/0x640 [ 1391.517278] ? SyS_getpeername+0x220/0x220 [ 1391.521509] do_syscall_64+0x1d5/0x640 [ 1391.525421] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1391.530645] RIP: 0033:0x41958c [ 1391.533855] RSP: 002b:00007ffe26843410 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1391.541572] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041958c [ 1391.548850] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1391.556134] RBP: 0000000000000000 R08: 00007ffe26843464 R09: 000000000000000c [ 1391.563406] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1391.570939] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1391.731093] Bluetooth: hci5 command 0x0409 tx timeout [ 1392.052566] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 1392.062839] ------------[ cut here ]------------ [ 1392.067611] WARNING: CPU: 1 PID: 1368 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 1392.076660] Kernel panic - not syncing: panic_on_warn set ... [ 1392.076660] [ 1392.084065] CPU: 1 PID: 1368 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1392.091855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1392.101212] Call Trace: [ 1392.103813] dump_stack+0x1b2/0x281 [ 1392.107445] panic+0x1f9/0x42d [ 1392.110657] ? add_taint.cold+0x16/0x16 [ 1392.114636] ? debug_print_object.cold+0xa7/0xdb [ 1392.119391] ? debug_print_object.cold+0xa7/0xdb [ 1392.124173] __warn.cold+0x20/0x44 [ 1392.127713] ? ist_end_non_atomic+0x10/0x10 [ 1392.132036] ? debug_print_object.cold+0xa7/0xdb [ 1392.136792] report_bug+0x208/0x250 [ 1392.140423] do_error_trap+0x195/0x2d0 [ 1392.144313] ? math_error+0x2d0/0x2d0 [ 1392.148157] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1392.153005] invalid_op+0x1b/0x40 [ 1392.153740] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 1392.156456] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 1392.156463] RSP: 0018:ffff888050b4f248 EFLAGS: 00010086 [ 1392.177762] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 1392.185040] RDX: 0000000000000000 RSI: ffffffff878bbbc0 RDI: ffffed100a169e3f [ 1392.185208] , order=0, oom_score_adj=0 [ 1392.192315] RBP: ffffffff878b6e80 R08: 0000000000000061 R09: 0000000000000001 [ 1392.192320] R10: 0000000000000000 R11: ffff88802b25a000 R12: 0000000000000000 [ 1392.192324] R13: 0000000000000000 R14: ffff8880183c5bf0 R15: 1ffff1100a169e52 [ 1392.192353] ? debug_print_object.cold+0xa7/0xdb [ 1392.192364] debug_object_assert_init+0x1d3/0x2d0 [ 1392.192373] ? debug_object_active_state+0x330/0x330 [ 1392.192380] ? rtnl_newlink+0x14ff/0x1860 [ 1392.192386] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 1392.192395] ? netlink_rcv_skb+0x125/0x390 [ 1392.192404] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1392.192415] del_timer+0x5d/0xe0 [ 1392.206407] syz-executor.0 cpuset= [ 1392.210929] ? process_timeout+0x20/0x20 [ 1392.237534] / [ 1392.241632] try_to_grab_pending+0x243/0x610 [ 1392.248251] mems_allowed=0-1 [ 1392.251212] __cancel_work_timer+0x90/0x460 [ 1392.251221] ? work_on_cpu_safe+0x70/0x70 [ 1392.251233] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 1392.251246] batadv_nc_mesh_free+0x41/0x120 [ 1392.251253] batadv_mesh_free+0x70/0x150 [ 1392.251260] batadv_mesh_init+0x561/0x630 [ 1392.251269] batadv_softif_init_late+0xa26/0xc90 [ 1392.251279] ? batadv_get_strings+0x40/0x40 [ 1392.261080] syz-executor.1: [ 1392.262234] ? dev_valid_name+0x1a0/0x1a0 [ 1392.263949] page allocation failure: order:0 [ 1392.268349] ? batadv_get_strings+0x40/0x40 [ 1392.295238] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1392.297458] register_netdevice+0x291/0xe40 [ 1392.302365] (null) [ 1392.306622] ? netdev_change_features+0xa0/0xa0 [ 1392.309618] syz-executor.1 cpuset= [ 1392.313760] ? rtnl_create_link+0x129/0x890 [ 1392.313770] rtnl_newlink+0x14ff/0x1860 [ 1392.313777] ? rtnl_newlink+0x43d/0x1860 [ 1392.313785] ? __lock_acquire+0x5fc/0x3f20 [ 1392.313799] ? trace_hardirqs_on+0x10/0x10 [ 1392.313805] ? rtnl_dellink+0x6a0/0x6a0 [ 1392.313811] ? trace_hardirqs_on+0x10/0x10 [ 1392.313820] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1392.313827] ? deref_stack_reg+0x124/0x1a0 [ 1392.313869] ? lock_acquire+0x170/0x3f0 [ 1392.313877] ? lock_downgrade+0x740/0x740 [ 1392.313893] ? rtnl_dellink+0x6a0/0x6a0 [ 1392.332961] / [ 1392.334032] rtnetlink_rcv_msg+0x3be/0xb10 [ 1392.336198] mems_allowed=0-1 [ 1392.340876] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1392.409536] ? __netlink_lookup+0x345/0x5d0 [ 1392.413916] netlink_rcv_skb+0x125/0x390 [ 1392.417993] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1392.422491] ? netlink_ack+0x9a0/0x9a0 [ 1392.426380] netlink_unicast+0x437/0x610 [ 1392.430443] ? netlink_sendskb+0xd0/0xd0 [ 1392.434512] ? __check_object_size+0x179/0x230 [ 1392.439099] netlink_sendmsg+0x62e/0xb80 [ 1392.443166] ? nlmsg_notify+0x170/0x170 [ 1392.447229] ? security_socket_sendmsg+0x83/0xb0 [ 1392.451985] ? nlmsg_notify+0x170/0x170 [ 1392.455967] sock_sendmsg+0xb5/0x100 [ 1392.459677] SyS_sendto+0x1c7/0x2c0 [ 1392.463303] ? SyS_getpeername+0x220/0x220 [ 1392.467545] ? sock_poll+0x220/0x220 [ 1392.471808] ? SyS_socket+0x12f/0x1b0 [ 1392.475609] ? move_addr_to_kernel+0x60/0x60 [ 1392.480037] ? do_syscall_64+0x4c/0x640 [ 1392.484012] ? SyS_getpeername+0x220/0x220 [ 1392.488349] do_syscall_64+0x1d5/0x640 [ 1392.492243] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1392.497453] RIP: 0033:0x41958c [ 1392.500634] RSP: 002b:00007ffe26843410 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1392.508338] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041958c [ 1392.515631] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1392.522906] RBP: 0000000000000000 R08: 00007ffe26843464 R09: 000000000000000c [ 1392.530284] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1392.537565] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1392.544860] CPU: 0 PID: 1363 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1392.552701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1392.562087] Call Trace: [ 1392.564713] dump_stack+0x1b2/0x281 [ 1392.568344] warn_alloc.cold+0x96/0x1cc [ 1392.572375] ? ath_cmn_process_fft+0x610/0xd20 [ 1392.577049] ? zone_watermark_ok_safe+0x220/0x220 [ 1392.581917] ? usleep_range+0x130/0x130 [ 1392.585891] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1392.590999] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1392.596021] ? run_timer_softirq+0x5a0/0x5a0 [ 1392.600440] __alloc_pages_nodemask+0x2127/0x2720 [ 1392.605298] ? lock_acquire+0x170/0x3f0 [ 1392.609285] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1392.614129] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1392.618633] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1392.624102] alloc_pages_current+0x155/0x260 [ 1392.628609] ion_page_pool_alloc+0x118/0x1b0 [ 1392.633020] ion_system_heap_allocate+0x133/0x8c0 [ 1392.637869] ? _raw_spin_unlock+0x29/0x40 [ 1392.642026] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1392.646973] ? ion_system_contig_heap_create+0x130/0x130 [ 1392.652447] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1392.657482] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1392.662436] ion_alloc+0x27a/0x810 [ 1392.665984] ? ion_dma_buf_release+0x40/0x40 [ 1392.670419] ? __might_fault+0x177/0x1b0 [ 1392.674487] ion_ioctl+0xea/0x1f0 [ 1392.677957] ? ion_query_heaps+0x360/0x360 [ 1392.682306] ? ion_query_heaps+0x360/0x360 [ 1392.686551] do_vfs_ioctl+0x75a/0xff0 [ 1392.690351] ? ioctl_preallocate+0x1a0/0x1a0 [ 1392.694760] ? lock_downgrade+0x740/0x740 [ 1392.698907] ? __fget+0x225/0x360 [ 1392.702886] ? do_vfs_ioctl+0xff0/0xff0 [ 1392.706864] ? security_file_ioctl+0x83/0xb0 [ 1392.711272] SyS_ioctl+0x7f/0xb0 [ 1392.714737] ? do_vfs_ioctl+0xff0/0xff0 [ 1392.718798] do_syscall_64+0x1d5/0x640 [ 1392.722684] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1392.727876] RIP: 0033:0x4665f9 [ 1392.731077] RSP: 002b:00007efdf923c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1392.738892] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 1392.746184] RDX: 0000000020000180 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1392.753456] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 1392.760729] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1392.768007] R13: 00007fff68d20daf R14: 00007efdf923c300 R15: 0000000000022000 [ 1392.775742] Kernel Offset: disabled [ 1392.779376] Rebooting in 86400 seconds..