es RAM [ 1264.650346] 0 pages HighMem/MovableOnly [ 1264.665140] 363840 pages reserved [ 1264.668615] 0 pages cma reserved [ 1264.821167] lowmem_reserve[]: 0 0 0 0 0 [ 1264.825179] Node 0 DMA: 0*4kB 2*8kB (UE) 1*16kB (E) 2*32kB (UE) 4*64kB (UE) 4*128kB (UE) 1*256kB (E) 3*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 11872kB [ 1264.965013] Node 0 DMA32: 570*4kB (ME) 640*8kB (UME) 245*16kB (UME) 66*32kB (UM) 293*64kB (UM) 53*128kB (U) 40*256kB (U) 25*512kB (U) 45*1024kB (U) 1*2048kB (U) 0*4096kB = 110136kB [ 1265.009212] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1265.025357] Node 1 Normal: 1548*4kB (UME) 1477*8kB (UME) 1481*16kB (UME) 1471*32kB (UME) 3129*64kB (UME) 147*128kB (UM) 107*256kB (UME) 96*512kB (UE) 328*1024kB (UE) 73*2048kB (UM) 17*4096kB (UM) = 939400kB [ 1265.048965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1265.057983] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1265.147407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1265.160372] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1265.332387] 11375 total pagecache pages [ 1265.336422] 0 pages in swap cache [ 1265.339869] Swap cache stats: add 0, delete 0, find 0/0 [ 1265.351488] Free swap = 0kB [ 1265.385368] device hsr_slave_1 left promiscuous mode [ 1265.394355] device hsr_slave_0 left promiscuous mode [ 1265.448960] team0 (unregistering): Port device team_slave_1 removed [ 1265.465182] team0 (unregistering): Port device team_slave_0 removed [ 1265.504871] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1265.529154] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1265.624833] Total swap = 0kB [ 1265.627885] 2097051 pages RAM [ 1265.628011] bond0 (unregistering): Released all slaves [ 1265.765540] systemd[1]: Started Journal Service. 08:35:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000005c0)) io_setup(0x5dfd, &(0x7f0000000140)) 08:35:07 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x40, 0x0, 0x0, "fb44afce86e36c4e4d48a0329145928c", "9c7dce2c799945391e0c1afdaceb01e6aa9b48c17b9aac7ec0829a45bada1b718b63a9d14d2b10b0744b5d"}, 0x40, 0x0) 08:35:07 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000005c0)) io_setup(0x5dfd, &(0x7f0000000140)=0x0) io_cancel(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000180), 0x0, 0x1}, &(0x7f0000000200)) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) 08:35:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYBLOB="005c323b7d1d38bca3480cb3"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 08:35:07 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x38, 0x0, 0x0, "fb44afce86e36c4e4d48a0329145928c", "9c7dce2c799945391e0c1afdaceb01e6aa9b48c17b9aac7ec0829a45bada1b718b63a9"}, 0x38, 0x1) 08:35:07 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x38, 0x0, 0x0, "fb44afce86e36c4e4d48a0329145928c", "9c7dce2c799945391e0c1afdaceb01e6aa9b48c17b9aac7ec0829a45bada1b718b63a9"}, 0x38, 0x1) 08:35:07 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x38, 0x0, 0x0, "fb44afce86e36c4e4d48a0329145928c", "9c7dce2c799945391e0c1afdaceb01e6aa9b48c17b9aac7ec0829a45bada1b718b63a9"}, 0x38, 0x1) [ 1266.382424] 0 pages HighMem/MovableOnly [ 1266.406303] 363840 pages reserved [ 1266.907752] 0 pages cma reserved [ 1267.057686] Out of memory: Kill process 19745 (syz-executor.0) score 1004 or sacrifice child 08:35:09 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000005c0)) io_setup(0x5dfd, &(0x7f0000000140)=0x0) io_cancel(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000180), 0x0, 0x1}, &(0x7f0000000200)) 08:35:09 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x39, 0x0, 0x0, "fb44afce86e36c4e4d48a0329145928c", "9c7dce2c799945391e0c1afdaceb01e6aa9b48c17b9aac7ec0829a45bada1b718b63a9d1"}, 0x39, 0x0) 08:35:09 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x39, 0x0, 0x0, "fb44afce86e36c4e4d48a0329145928c", "9c7dce2c799945391e0c1afdaceb01e6aa9b48c17b9aac7ec0829a45bada1b718b63a9d1"}, 0x39, 0x0) 08:35:09 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x39, 0x0, 0x0, "fb44afce86e36c4e4d48a0329145928c", "9c7dce2c799945391e0c1afdaceb01e6aa9b48c17b9aac7ec0829a45bada1b718b63a9d1"}, 0x39, 0x0) 08:35:09 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x39, 0x0, 0x0, "fb44afce86e36c4e4d48a0329145928c", "9c7dce2c799945391e0c1afdaceb01e6aa9b48c17b9aac7ec0829a45bada1b718b63a9d1"}, 0x39, 0x1) [ 1268.625716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1268.635653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1268.656420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1268.676854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1268.695526] device bridge_slave_1 left promiscuous mode [ 1268.711630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.719003] device bridge_slave_0 left promiscuous mode [ 1268.744036] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.766950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1268.791318] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1268.822411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1268.829144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1268.842050] device bridge_slave_1 left promiscuous mode [ 1268.847605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.855696] device bridge_slave_0 left promiscuous mode [ 1268.861718] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.871651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1268.878363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1268.887328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1268.894869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1268.903951] device bridge_slave_1 left promiscuous mode [ 1268.909465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.917835] device bridge_slave_0 left promiscuous mode [ 1268.923438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.936020] device veth1_macvtap left promiscuous mode [ 1268.941459] device veth0_macvtap left promiscuous mode [ 1268.946798] device veth1_vlan left promiscuous mode [ 1268.953151] device veth0_vlan left promiscuous mode [ 1268.958600] device veth1_macvtap left promiscuous mode [ 1268.964770] device veth0_macvtap left promiscuous mode [ 1268.970511] device veth1_vlan left promiscuous mode [ 1268.976481] device veth0_vlan left promiscuous mode [ 1268.982359] device veth1_macvtap left promiscuous mode [ 1268.987660] device veth0_macvtap left promiscuous mode [ 1268.994099] device veth1_vlan left promiscuous mode [ 1268.999171] device veth0_vlan left promiscuous mode [ 1269.179353] device hsr_slave_1 left promiscuous mode [ 1269.190062] device hsr_slave_0 left promiscuous mode [ 1269.205903] team0 (unregistering): Port device team_slave_1 removed [ 1269.214616] team0 (unregistering): Port device team_slave_0 removed [ 1269.224627] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1269.235223] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1269.258405] bond0 (unregistering): Released all slaves [ 1269.287695] device hsr_slave_1 left promiscuous mode [ 1269.297483] device hsr_slave_0 left promiscuous mode [ 1269.309183] team0 (unregistering): Port device team_slave_1 removed [ 1269.319161] team0 (unregistering): Port device team_slave_0 removed [ 1269.328883] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1269.339549] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1269.364543] bond0 (unregistering): Released all slaves [ 1269.394733] device hsr_slave_1 left promiscuous mode [ 1269.405380] device hsr_slave_0 left promiscuous mode [ 1269.417625] team0 (unregistering): Port device team_slave_1 removed [ 1269.426316] team0 (unregistering): Port device team_slave_0 removed [ 1269.435633] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1269.445355] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1269.469634] bond0 (unregistering): Released all slaves [ 1270.307703] IPVS: ftp: loaded support on port[0] = 21 [ 1270.343528] IPVS: ftp: loaded support on port[0] = 21 [ 1270.433602] chnl_net:caif_netlink_parms(): no params data found [ 1270.465168] IPVS: ftp: loaded support on port[0] = 21 [ 1270.584574] chnl_net:caif_netlink_parms(): no params data found [ 1270.594635] IPVS: ftp: loaded support on port[0] = 21 [ 1270.715020] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.724786] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.732960] device bridge_slave_0 entered promiscuous mode [ 1270.763003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.769397] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.777798] device bridge_slave_1 entered promiscuous mode [ 1270.812539] chnl_net:caif_netlink_parms(): no params data found [ 1270.836806] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1270.848730] IPVS: ftp: loaded support on port[0] = 21 [ 1270.852733] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1270.913981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.920359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.928553] device bridge_slave_0 entered promiscuous mode [ 1270.957316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.963890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.972765] device bridge_slave_1 entered promiscuous mode [ 1270.979434] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1270.987771] team0: Port device team_slave_0 added [ 1271.044416] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1271.053411] team0: Port device team_slave_1 added [ 1271.119704] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1271.141552] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1271.155392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1271.162704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.188781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1271.208028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1271.215566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.241458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1271.251934] chnl_net:caif_netlink_parms(): no params data found [ 1271.285793] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1271.294074] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1271.310031] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1271.320901] team0: Port device team_slave_0 added [ 1271.374874] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1271.383600] team0: Port device team_slave_1 added [ 1271.443721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.450212] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.458117] device bridge_slave_0 entered promiscuous mode [ 1271.468953] device hsr_slave_0 entered promiscuous mode [ 1271.476550] device hsr_slave_1 entered promiscuous mode [ 1271.482912] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1271.509443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.518111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.525609] device bridge_slave_1 entered promiscuous mode [ 1271.537337] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1271.547457] chnl_net:caif_netlink_parms(): no params data found [ 1271.558984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1271.566240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.592016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1271.611581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1271.617865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.643737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1271.682945] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1271.696864] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1271.707662] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1271.728268] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1271.736104] Bluetooth: hci1 command 0x0409 tx timeout [ 1271.797271] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1271.804887] team0: Port device team_slave_0 added [ 1271.816350] device hsr_slave_0 entered promiscuous mode [ 1271.822385] device hsr_slave_1 entered promiscuous mode [ 1271.853913] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1271.861419] team0: Port device team_slave_1 added [ 1271.866691] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1271.874094] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1271.890877] Bluetooth: hci3 command 0x0409 tx timeout [ 1271.895080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.896122] Bluetooth: hci2 command 0x0409 tx timeout [ 1271.903023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.915641] device bridge_slave_0 entered promiscuous mode [ 1271.922839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.929216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.942382] device bridge_slave_1 entered promiscuous mode [ 1271.973904] Bluetooth: hci5 command 0x0409 tx timeout [ 1271.981789] Bluetooth: hci4 command 0x0409 tx timeout [ 1272.003374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.009723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.036473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.080939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1272.087207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.113599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1272.131085] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1272.150733] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1272.168611] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1272.179972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.187406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.194994] device bridge_slave_0 entered promiscuous mode [ 1272.201938] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1272.209067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.216143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.224189] device bridge_slave_1 entered promiscuous mode [ 1272.308208] device hsr_slave_0 entered promiscuous mode [ 1272.314101] device hsr_slave_1 entered promiscuous mode [ 1272.320296] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1272.332916] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1272.340159] team0: Port device team_slave_0 added [ 1272.347972] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1272.359395] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1272.377627] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1272.385038] team0: Port device team_slave_1 added [ 1272.391660] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1272.453787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.460094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.485695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.506859] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1272.514908] team0: Port device team_slave_0 added [ 1272.536384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1272.542726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.568251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1272.583595] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1272.591305] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1272.598617] team0: Port device team_slave_1 added [ 1272.604903] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1272.622288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1272.629018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1272.638395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1272.645674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1272.654360] device bridge_slave_1 left promiscuous mode [ 1272.659863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.667413] device bridge_slave_0 left promiscuous mode [ 1272.673205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.682254] device veth1_macvtap left promiscuous mode [ 1272.687551] device veth0_macvtap left promiscuous mode [ 1272.693833] device veth1_vlan left promiscuous mode [ 1272.698893] device veth0_vlan left promiscuous mode [ 1272.769659] device hsr_slave_1 left promiscuous mode [ 1272.778889] device hsr_slave_0 left promiscuous mode [ 1272.790135] team0 (unregistering): Port device team_slave_1 removed [ 1272.802920] team0 (unregistering): Port device team_slave_0 removed [ 1272.813950] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1272.823350] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1272.848338] bond0 (unregistering): Released all slaves [ 1272.859256] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1272.909782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.917034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.942844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.966816] device hsr_slave_0 entered promiscuous mode [ 1272.972755] device hsr_slave_1 entered promiscuous mode [ 1272.979571] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1273.002475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.008752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.035543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1273.046585] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1273.055198] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1273.070038] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1273.097052] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1273.138669] device hsr_slave_0 entered promiscuous mode [ 1273.144531] device hsr_slave_1 entered promiscuous mode [ 1273.174740] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1273.183085] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1273.310033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1273.320898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1273.355214] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1273.382500] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1273.398959] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1273.443317] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1273.456575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1273.464948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1273.477638] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1273.493338] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1273.499427] 8021q: adding VLAN 0 to HW filter on device team0 [ 1273.517166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1273.531851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1273.541925] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1273.548004] 8021q: adding VLAN 0 to HW filter on device team0 [ 1273.563843] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1273.587083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1273.601484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1273.609165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.615604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.634953] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1273.649170] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1273.658555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1273.666672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1273.675701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1273.684735] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.691186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.699776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1273.708514] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1273.719206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.725642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1273.744055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1273.757632] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1273.769484] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1273.780523] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1273.788997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1273.797244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1273.812754] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1273.820671] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.827026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1273.840069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1273.858663] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1273.865106] Bluetooth: hci1 command 0x041b tx timeout [ 1273.876191] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1273.894037] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1273.904324] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1273.924965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1273.933254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1273.948326] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1273.970935] Bluetooth: hci2 command 0x041b tx timeout [ 1273.981057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1273.990387] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1273.998206] Bluetooth: hci3 command 0x041b tx timeout [ 1274.008980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1274.016515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1274.025886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1274.033890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1274.041881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1274.060930] Bluetooth: hci4 command 0x041b tx timeout [ 1274.066208] Bluetooth: hci5 command 0x041b tx timeout [ 1274.070062] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1274.078145] 8021q: adding VLAN 0 to HW filter on device team0 [ 1274.087232] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1274.096441] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1274.103523] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1274.110575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1274.119115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1274.126818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.133253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1274.140485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1274.148362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1274.156502] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1274.173885] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1274.195598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1274.203819] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1274.215986] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1274.225241] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1274.235080] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1274.249306] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1274.275163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1274.283550] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1274.291938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1274.299704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.306155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1274.313970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1274.322243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1274.329696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1274.337584] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1274.347157] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1274.359934] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1274.369475] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1274.377633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1274.388295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1274.396246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1274.406311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1274.416935] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1274.428543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1274.439801] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1274.446659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1274.457812] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1274.471405] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1274.486908] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1274.493969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1274.502003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1274.509774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1274.517641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1274.525613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1274.533279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1274.541261] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1274.555342] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1274.568375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1274.577017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1274.585353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1274.596337] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1274.605104] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1274.614300] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1274.620357] 8021q: adding VLAN 0 to HW filter on device team0 [ 1274.628182] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1274.634822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1274.644994] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1274.651985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1274.659644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1274.668544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1274.675584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1274.684971] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1274.696843] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1274.709094] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1274.715969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1274.724853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1274.732752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1274.740459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1274.748285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.754701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1274.762303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1274.769180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1274.776332] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1274.787759] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1274.794398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1274.804030] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1274.818062] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1274.827601] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1274.837591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1274.847058] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1274.857879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.864300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1274.871714] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1274.878429] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1274.889826] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1274.901445] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1274.914322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1274.924461] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1274.934983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1274.951869] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1274.957956] 8021q: adding VLAN 0 to HW filter on device team0 [ 1274.968578] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1274.983751] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1274.997844] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1275.005697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1275.019081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1275.029162] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1275.041249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1275.050316] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1275.063563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1275.070364] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1275.085048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1275.093815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1275.102262] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.108630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1275.115814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1275.125223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1275.136666] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1275.145529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1275.154297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1275.163358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1275.171997] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1275.179704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.186140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.194889] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1275.205335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1275.213781] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1275.227920] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1275.240368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1275.250113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1275.258810] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1275.273134] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1275.280523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1275.295729] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1275.316159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1275.324740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1275.333275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1275.346673] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1275.357745] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1275.367980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1275.375575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1275.388279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1275.397047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1275.404796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1275.415443] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1275.426615] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1275.437731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1275.446596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1275.457596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1275.466943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1275.477005] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1275.488786] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1275.496643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1275.506916] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1275.516361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1275.524882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1275.536588] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1275.549450] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1275.557731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1275.570491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1275.579470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1275.588223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1275.600307] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1275.609507] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1275.616663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1275.627052] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1275.634882] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1275.642463] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1275.663156] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1275.688532] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1275.698185] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1275.707959] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1275.716009] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1275.723302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1275.731462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1275.739014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1275.746439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1275.753516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1275.762054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1275.770029] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1275.777230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1275.788314] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1275.796040] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1275.803052] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1275.810443] device veth0_vlan entered promiscuous mode [ 1275.823315] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1275.834190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1275.845156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1275.853450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1275.861991] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1275.878581] device veth1_vlan entered promiscuous mode [ 1275.885396] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1275.892035] Bluetooth: hci1 command 0x040f tx timeout [ 1275.901360] device veth0_vlan entered promiscuous mode [ 1275.909778] device veth1_vlan entered promiscuous mode [ 1275.916942] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1275.923933] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1275.933620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1275.941653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1275.949079] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1275.958297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1275.966111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1275.975458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1275.986778] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1275.995207] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1276.006137] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1276.030314] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1276.051205] Bluetooth: hci2 command 0x040f tx timeout [ 1276.054509] Bluetooth: hci3 command 0x040f tx timeout [ 1276.059511] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1276.073386] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1276.090822] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1276.100442] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1276.111263] device veth0_macvtap entered promiscuous mode [ 1276.117677] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1276.124848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1276.133254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1276.141217] Bluetooth: hci5 command 0x040f tx timeout [ 1276.141266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1276.148147] Bluetooth: hci4 command 0x040f tx timeout [ 1276.154178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1276.166385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1276.174187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1276.184405] device veth0_macvtap entered promiscuous mode [ 1276.191943] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1276.202131] device veth0_vlan entered promiscuous mode [ 1276.208306] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1276.220522] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1276.227843] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1276.236442] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1276.245586] device veth1_macvtap entered promiscuous mode [ 1276.254363] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1276.266781] device veth1_macvtap entered promiscuous mode [ 1276.274113] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1276.284157] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1276.299017] device veth1_vlan entered promiscuous mode [ 1276.307701] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1276.317782] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1276.373154] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1276.383745] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1276.395830] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1276.411587] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1276.420318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1276.431393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.442275] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1276.449190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1276.462374] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1276.472220] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1276.480998] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1276.488238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1276.496046] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1276.503765] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1276.511429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1276.519111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1276.527293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1276.535646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1276.550378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1276.561463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.571896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1276.581977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.592624] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1276.599564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1276.606709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1276.616865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.627289] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1276.634328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1276.642507] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1276.652208] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1276.660059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1276.673822] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1276.681843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1276.689602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1276.698374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1276.713792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1276.724571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.734307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1276.744563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.754928] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1276.762063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1276.774570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1276.787906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1276.797797] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1276.816554] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1276.831953] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1276.839415] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1276.851998] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1276.862972] device veth0_macvtap entered promiscuous mode [ 1276.869332] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1276.878230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1276.886383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1276.897860] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1276.908461] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1276.920446] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1276.927621] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1276.938514] device veth1_macvtap entered promiscuous mode [ 1276.945506] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1276.952468] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1276.960108] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1276.968354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1276.976240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1276.984145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1276.991215] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1276.999111] device veth0_vlan entered promiscuous mode [ 1277.009368] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1277.027266] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1277.041857] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1277.050597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1277.062479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.072449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1277.082526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.092633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1277.102706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.112886] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1277.119802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1277.127792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1277.136237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1277.144038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1277.152937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1277.160807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1277.167862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1277.177254] device veth0_vlan entered promiscuous mode [ 1277.192456] device veth1_vlan entered promiscuous mode [ 1277.201344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1277.216586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.226210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1277.236377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.245771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1277.256146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.266415] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1277.273708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1277.283942] device veth1_vlan entered promiscuous mode [ 1277.290023] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1277.308983] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1277.315846] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1277.328067] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1277.341106] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1277.348936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1277.365095] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1277.375717] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1277.389004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1277.398920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1277.409143] device veth0_macvtap entered promiscuous mode [ 1277.417192] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1277.428683] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1277.446542] device veth1_macvtap entered promiscuous mode [ 1277.458151] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1277.469360] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1277.479613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1277.489247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1277.498159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1277.507011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1277.518149] device veth0_macvtap entered promiscuous mode [ 1277.525314] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1277.534399] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1277.546214] device veth1_macvtap entered promiscuous mode [ 1277.556069] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1277.565488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1277.582809] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1277.596474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1277.607153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.617488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1277.627915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.637501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1277.647813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.657776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1277.667546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.678140] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1277.685518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1277.694535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1277.705102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.714551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1277.725302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.735637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1277.746122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.755953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1277.766399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.777633] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1277.795693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1277.804839] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1277.816913] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1277.826283] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 08:35:19 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000005c0)) [ 1277.846233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1277.858228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1277.871243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1277.886208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1277.920099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1277.932003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.953465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1277.975996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.985911] Bluetooth: hci1 command 0x0419 tx timeout [ 1278.002603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1278.024331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.034041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1278.051036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.060197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1278.074342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.084980] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1278.096861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1278.131130] Bluetooth: hci3 command 0x0419 tx timeout [ 1278.136657] Bluetooth: hci2 command 0x0419 tx timeout [ 1278.140943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1278.160031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.182013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1278.191972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.201467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1278.212223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.221219] Bluetooth: hci4 command 0x0419 tx timeout [ 1278.226669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1278.226831] Bluetooth: hci5 command 0x0419 tx timeout [ 1278.237538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.254822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1278.267510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.282469] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1278.289520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1278.314099] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1278.324875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1278.345572] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1278.362597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1279.745766] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1279.751611] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1279.757785] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1279.779974] CPU: 1 PID: 21052 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1279.787864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1279.797225] Call Trace: [ 1279.799820] dump_stack+0x1b2/0x281 [ 1279.803458] warn_alloc.cold+0x96/0x1cc [ 1279.807434] ? zone_watermark_ok_safe+0x220/0x220 [ 1279.811422] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1279.812294] __alloc_pages_nodemask+0x2127/0x2720 [ 1279.822238] ? lock_acquire+0x170/0x3f0 [ 1279.827119] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1279.831972] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1279.837420] ? __mutex_unlock_slowpath+0x75/0x770 [ 1279.842284] alloc_pages_current+0x155/0x260 [ 1279.846703] ion_page_pool_alloc+0x118/0x1b0 [ 1279.851118] ion_system_heap_allocate+0x133/0x8c0 [ 1279.855987] ? ion_alloc+0x187/0x810 [ 1279.859700] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1279.865161] ? ion_system_contig_heap_create+0x130/0x130 [ 1279.870619] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1279.875638] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1279.880484] ion_alloc+0x204/0x810 [ 1279.884027] ? ion_dma_buf_release+0x40/0x40 [ 1279.888432] ? __might_fault+0x177/0x1b0 [ 1279.892489] ion_ioctl+0xea/0x1f0 [ 1279.895954] ? ion_query_heaps+0x360/0x360 [ 1279.900178] ? __alloc_fd+0x1be/0x490 [ 1279.903975] ? ion_query_heaps+0x360/0x360 [ 1279.908208] do_vfs_ioctl+0x75a/0xff0 [ 1279.912003] ? ioctl_preallocate+0x1a0/0x1a0 [ 1279.916406] ? lock_downgrade+0x740/0x740 [ 1279.920550] ? __fget+0x225/0x360 [ 1279.923997] ? do_vfs_ioctl+0xff0/0xff0 [ 1279.927962] ? security_file_ioctl+0x83/0xb0 [ 1279.932366] SyS_ioctl+0x7f/0xb0 [ 1279.935724] ? do_vfs_ioctl+0xff0/0xff0 [ 1279.939696] do_syscall_64+0x1d5/0x640 [ 1279.943850] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1279.949035] RIP: 0033:0x465f69 [ 1279.952216] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1279.959925] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1279.967293] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1279.974573] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1279.981842] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1279.989114] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1279.996398] CPU: 0 PID: 21064 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1280.004924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1280.009644] Mem-Info: [ 1280.014274] Call Trace: [ 1280.014295] dump_stack+0x1b2/0x281 [ 1280.014308] warn_alloc.cold+0x96/0x1cc [ 1280.014320] ? zone_watermark_ok_safe+0x220/0x220 [ 1280.014341] __alloc_pages_nodemask+0x2127/0x2720 [ 1280.016811] active_anon:28663 inactive_anon:7067 isolated_anon:12 [ 1280.016811] active_file:2952 inactive_file:3296 isolated_file:0 [ 1280.016811] unevictable:0 dirty:16 writeback:0 unstable:0 [ 1280.016811] slab_reclaimable:15717 slab_unreclaimable:109204 [ 1280.016811] mapped:57058 shmem:8979 pagetables:753 bounce:0 [ 1280.016811] free:87857 free_pcp:202 free_cma:0 [ 1280.019305] ? __schedule+0x893/0x1de0 [ 1280.019323] ? lock_acquire+0x170/0x3f0 [ 1280.019339] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1280.023525] Node 0 active_anon:113828kB inactive_anon:20072kB active_file:11784kB inactive_file:11680kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:226228kB dirty:56kB writeback:0kB shmem:27720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1280.026930] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1280.026943] ? __mutex_unlock_slowpath+0x75/0x770 [ 1280.026954] ? retint_kernel+0x2d/0x2d [ 1280.032139] Node 1 active_anon:824kB inactive_anon:8196kB active_file:24kB inactive_file:1504kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2004kB dirty:8kB writeback:0kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1280.036619] alloc_pages_current+0x155/0x260 [ 1280.036636] ion_page_pool_alloc+0x118/0x1b0 [ 1280.036663] ion_system_heap_allocate+0x133/0x8c0 [ 1280.070703] Node 0 [ 1280.074123] ? ion_alloc+0x187/0x810 [ 1280.074134] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1280.074147] ? ion_system_contig_heap_create+0x130/0x130 [ 1280.078168] DMA free:12352kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1280.082930] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1280.082943] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1280.082956] ion_alloc+0x204/0x810 [ 1280.082971] ? ion_dma_buf_release+0x40/0x40 [ 1280.082982] ? __might_fault+0x177/0x1b0 [ 1280.082994] ion_ioctl+0xea/0x1f0 [ 1280.111905] lowmem_reserve[]: [ 1280.116821] ? ion_query_heaps+0x360/0x360 [ 1280.116832] ? __alloc_fd+0x1be/0x490 [ 1280.116846] ? ion_query_heaps+0x360/0x360 [ 1280.122084] 0 [ 1280.125566] do_vfs_ioctl+0x75a/0xff0 [ 1280.125580] ? ioctl_preallocate+0x1a0/0x1a0 [ 1280.125593] ? lock_downgrade+0x740/0x740 [ 1280.152880] 2717 [ 1280.156902] ? __fget+0x225/0x360 [ 1280.156913] ? do_vfs_ioctl+0xff0/0xff0 [ 1280.156925] ? security_file_ioctl+0x83/0xb0 [ 1280.161644] 2718 [ 1280.166159] SyS_ioctl+0x7f/0xb0 [ 1280.166169] ? do_vfs_ioctl+0xff0/0xff0 [ 1280.166180] do_syscall_64+0x1d5/0x640 [ 1280.166197] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1280.168515] 2718 [ 1280.172142] RIP: 0033:0x465f69 [ 1280.172147] RSP: 002b:00007f978c555188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1280.172158] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1280.172163] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1280.172167] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1280.172172] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1280.172177] R13: 00007ffd7f926e0f R14: 00007f978c555300 R15: 0000000000022000 [ 1280.353214] 2718 [ 1280.355381] Node 0 DMA32 free:45172kB min:36200kB low:45248kB high:54296kB active_anon:113828kB inactive_anon:20072kB active_file:11664kB inactive_file:11668kB unevictable:0kB writepending:60kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2828kB bounce:0kB free_pcp:844kB local_pcp:140kB free_cma:0kB [ 1280.386440] lowmem_reserve[]: 0 0 0 0 0 [ 1280.390512] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1280.416332] lowmem_reserve[]: 0 0 0 0 0 [ 1280.420391] Node 1 Normal free:128360kB min:53696kB low:67120kB high:80544kB active_anon:824kB inactive_anon:8196kB active_file:32kB inactive_file:1544kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:184kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1280.449847] lowmem_reserve[]: 0 0 0 0 0 [ 1280.454714] Node 0 DMA: 0*4kB 1*8kB (E) 2*16kB (UE) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11112kB [ 1280.470103] Node 0 DMA32: 2626*4kB (UME) 1611*8kB (MEH) 421*16kB (MEH) 74*32kB (UMEH) 3*64kB (UEH) 1*128kB (E) 0*256kB 0*512kB 12*1024kB (UH) 0*2048kB 0*4096kB = 45104kB [ 1280.485744] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1280.496619] Node 1 Normal: 5*4kB (UME) 52*8kB (UME) 53*16kB (UME) 41*32kB (M) 36*64kB (UM) 17*128kB (M) 8*256kB (UM) 114*512kB (U) 3*1024kB (U) 0*2048kB 3*4096kB (U) = 82852kB [ 1280.512758] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1280.521814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1280.530465] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1280.539723] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1280.549049] 14609 total pagecache pages [ 1280.553294] 0 pages in swap cache [ 1280.556812] Swap cache stats: add 0, delete 0, find 0/0 [ 1280.562295] Free swap = 0kB [ 1280.565365] Total swap = 0kB [ 1280.568442] 2097051 pages RAM [ 1280.571693] 0 pages HighMem/MovableOnly [ 1280.575735] 363840 pages reserved [ 1280.579242] 0 pages cma reserved [ 1281.283788] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1281.297882] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1281.302714] CPU: 1 PID: 9736 Comm: syz-fuzzer Not tainted 4.14.225-syzkaller #0 [ 1281.310305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1281.320063] Call Trace: [ 1281.322669] dump_stack+0x1b2/0x281 [ 1281.326557] dump_header+0x178/0x82f [ 1281.330317] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1281.335546] ? ___ratelimit+0x2cd/0x530 [ 1281.339923] oom_kill_process.cold+0x10/0xb18 [ 1281.344562] out_of_memory+0xe3e/0x1190 [ 1281.348558] ? oom_killer_disable+0x1c0/0x1c0 [ 1281.353067] ? mutex_trylock+0x152/0x1a0 [ 1281.357295] __alloc_pages_nodemask+0x23e1/0x2720 [ 1281.362433] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1281.367328] alloc_pages_current+0x155/0x260 [ 1281.371775] filemap_fault+0xea3/0x1980 [ 1281.375872] ext4_filemap_fault+0x84/0xb0 [ 1281.380038] __do_fault+0xfa/0x380 [ 1281.383599] __handle_mm_fault+0x2497/0x4620 [ 1281.388026] ? vm_insert_page+0x7c0/0x7c0 [ 1281.392201] handle_mm_fault+0x391/0x860 [ 1281.396453] __do_page_fault+0x549/0xad0 [ 1281.400619] ? spurious_fault+0x640/0x640 [ 1281.404787] ? do_page_fault+0x60/0x500 [ 1281.408999] ? page_fault+0x2f/0x50 [ 1281.412637] page_fault+0x45/0x50 [ 1281.416267] RIP: 581c300:0x12a360de826 [ 1281.420156] RSP: 030b:000000c005567e40 EFLAGS: 00000003 [ 1281.470680] Mem-Info: [ 1281.478688] active_anon:28888 inactive_anon:7067 isolated_anon:0 [ 1281.478688] active_file:308 inactive_file:688 isolated_file:34 [ 1281.478688] unevictable:0 dirty:8 writeback:20 unstable:0 [ 1281.478688] slab_reclaimable:13780 slab_unreclaimable:110631 [ 1281.478688] mapped:53018 shmem:8979 pagetables:753 bounce:0 [ 1281.478688] free:25184 free_pcp:0 free_cma:0 [ 1281.517223] Node 0 active_anon:114728kB inactive_anon:20072kB active_file:1128kB inactive_file:1420kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210008kB dirty:20kB writeback:68kB shmem:27720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1281.547020] Node 1 active_anon:824kB inactive_anon:8196kB active_file:104kB inactive_file:1332kB unevictable:0kB isolated(anon):0kB isolated(file):212kB mapped:2064kB dirty:12kB writeback:12kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1281.575352] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1281.602341] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1281.607397] Node 0 DMA32 free:35984kB min:36200kB low:45248kB high:54296kB active_anon:114428kB inactive_anon:20072kB active_file:1588kB inactive_file:1448kB unevictable:0kB writepending:88kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2828kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 1281.642599] lowmem_reserve[]: 0 0 0 0 0 [ 1281.647068] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1281.676050] lowmem_reserve[]: 0 0 0 0 0 [ 1281.680160] Node 1 Normal free:53696kB min:53696kB low:67120kB high:80544kB active_anon:824kB inactive_anon:8196kB active_file:104kB inactive_file:1384kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:184kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1281.709948] lowmem_reserve[]: 0 0 0 0 0 [ 1281.714462] Node 0 DMA: 0*4kB 2*8kB (UE) 2*16kB (UE) 2*32kB (UE) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11056kB [ 1281.729699] Node 0 DMA32: 2422*4kB (ME) 1777*8kB (UME) 516*16kB (UME) 80*32kB (UME) 2*64kB (UM) 0*128kB 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 35872kB [ 1281.745175] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1281.756216] Node 1 Normal: 36*4kB (UME) 51*8kB (UME) 53*16kB (UME) 42*32kB (UM) 36*64kB (M) 17*128kB (M) 8*256kB (UM) 57*512kB (U) 3*1024kB (U) 0*2048kB 3*4096kB (U) = 53816kB [ 1281.776497] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1281.785984] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1281.795105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1281.804035] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1281.813154] 10030 total pagecache pages [ 1281.817587] 0 pages in swap cache [ 1281.821297] Swap cache stats: add 0, delete 0, find 0/0 [ 1281.827105] Free swap = 0kB [ 1281.830461] Total swap = 0kB [ 1281.833674] 2097051 pages RAM [ 1281.836876] 0 pages HighMem/MovableOnly [ 1281.850662] 363840 pages reserved [ 1281.854145] 0 pages cma reserved [ 1281.857519] Out of memory (oom_kill_allocating_task): Kill process 9736 (syz-fuzzer) score 0 or sacrifice child [ 1281.880594] Killed process 19842 (syz-executor.3) total-vm:84924kB, anon-rss:68kB, file-rss:24kB, shmem-rss:0kB [ 1281.920461] oom_reaper: reaped process 19842 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1281.987303] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 1281.999948] ion_system_heap cpuset=/ mems_allowed=0-1 [ 1282.005401] CPU: 1 PID: 4244 Comm: ion_system_heap Not tainted 4.14.225-syzkaller #0 [ 1282.013963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1282.023728] Call Trace: [ 1282.026320] dump_stack+0x1b2/0x281 [ 1282.030200] dump_header+0x178/0x82f [ 1282.034097] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1282.039350] ? ___ratelimit+0x2cd/0x530 [ 1282.043944] oom_kill_process.cold+0x10/0xb18 [ 1282.048436] ? lock_downgrade+0x740/0x740 [ 1282.052596] out_of_memory+0x2dc/0x1190 [ 1282.056594] ? oom_killer_disable+0x1c0/0x1c0 [ 1282.061104] ? mutex_trylock+0x152/0x1a0 [ 1282.065625] __alloc_pages_nodemask+0x23e1/0x2720 [ 1282.071215] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1282.076229] ? ion_heap_sglist_zero+0x165/0x220 [ 1282.081013] ? cache_grow_begin+0x41/0x630 [ 1282.085556] cache_grow_begin+0x91/0x630 [ 1282.089720] ? cache_grow_begin+0x91/0x630 [ 1282.094215] fallback_alloc+0x207/0x2c0 [ 1282.098380] kmem_cache_alloc_node_trace+0xed/0x400 [ 1282.103905] __get_vm_area_node+0xed/0x340 [ 1282.108250] vmap+0xd5/0x290 [ 1282.111285] ? ion_heap_clear_pages+0x23/0x70 [ 1282.116094] ? vunmap+0x50/0x50 [ 1282.119641] ? __vunmap+0x21c/0x300 [ 1282.123406] ion_heap_clear_pages+0x23/0x70 [ 1282.127747] ion_heap_sglist_zero+0x165/0x220 [ 1282.132495] ? ion_heap_clear_pages+0x70/0x70 [ 1282.137185] ? finish_task_switch+0x178/0x610 [ 1282.141806] ? pagerange_is_ram_callback+0x100/0x100 [ 1282.147068] ? ion_heap_deferred_free+0x222/0x470 [ 1282.152168] ion_system_heap_free+0x1d0/0x240 [ 1282.156826] ion_buffer_destroy+0x132/0x190 [ 1282.161312] ion_heap_deferred_free+0x22a/0x470 [ 1282.166001] ? __schedule+0x857/0x1de0 [ 1282.169909] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1282.174682] ? wait_woken+0x230/0x230 [ 1282.178541] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1282.183915] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 1282.188890] kthread+0x30d/0x420 [ 1282.192374] ? kthread_create_on_node+0xd0/0xd0 [ 1282.197060] ret_from_fork+0x24/0x30 [ 1282.297398] Mem-Info: [ 1282.300017] active_anon:28856 inactive_anon:7067 isolated_anon:0 [ 1282.300017] active_file:167 inactive_file:704 isolated_file:0 [ 1282.300017] unevictable:0 dirty:9 writeback:0 unstable:0 [ 1282.300017] slab_reclaimable:13774 slab_unreclaimable:110665 [ 1282.300017] mapped:44174 shmem:8979 pagetables:708 bounce:0 [ 1282.300017] free:25160 free_pcp:132 free_cma:0 [ 1282.334595] Node 0 active_anon:114600kB inactive_anon:20072kB active_file:480kB inactive_file:1652kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174476kB dirty:24kB writeback:0kB shmem:27720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1282.420517] Node 1 active_anon:824kB inactive_anon:8196kB active_file:252kB inactive_file:1356kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2220kB dirty:12kB writeback:0kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1282.450163] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1282.477242] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1282.482821] Node 0 DMA32 free:35916kB min:36200kB low:45248kB high:54296kB active_anon:114600kB inactive_anon:20072kB active_file:480kB inactive_file:1244kB unevictable:0kB writepending:24kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2648kB bounce:0kB free_pcp:108kB local_pcp:0kB free_cma:0kB [ 1282.569515] lowmem_reserve[]: 0 0 0 0 0 [ 1282.575396] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1282.606382] lowmem_reserve[]: 0 0 0 0 0 [ 1282.610959] Node 1 Normal free:53576kB min:53696kB low:67120kB high:80544kB active_anon:824kB inactive_anon:8196kB active_file:252kB inactive_file:1504kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:184kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1282.657344] lowmem_reserve[]: 0 0 0 0 0 [ 1282.665924] Node 0 DMA: 0*4kB 2*8kB (UE) 2*16kB (UE) 2*32kB (UE) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11056kB [ 1282.738980] Node 0 DMA32: 2484*4kB (UME) 1792*8kB (UME) 526*16kB (UME) 81*32kB (UME) 4*64kB (UM) 0*128kB 0*256kB 0*512kB 1*1024kB (M) 0*2048kB 0*4096kB = 36560kB [ 1282.757459] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1282.768670] Node 1 Normal: 4*4kB (UME) 39*8kB (UME) 53*16kB (UME) 43*32kB (UM) 37*64kB (UM) 18*128kB (UM) 7*256kB (M) 57*512kB (U) 3*1024kB (U) 0*2048kB 3*4096kB (U) = 53560kB [ 1282.785299] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1282.794491] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1282.808065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1282.817069] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1282.915720] 9927 total pagecache pages [ 1282.920075] 0 pages in swap cache [ 1282.925460] Swap cache stats: add 0, delete 0, find 0/0 [ 1282.935433] Free swap = 0kB [ 1282.938570] Total swap = 0kB [ 1282.941726] 2097051 pages RAM [ 1282.944939] 0 pages HighMem/MovableOnly [ 1282.949124] 363840 pages reserved [ 1282.983082] 0 pages cma reserved [ 1282.986586] Out of memory: Kill process 21051 (syz-executor.2) score 1005 or sacrifice child [ 1283.132049] Killed process 21052 (syz-executor.2) total-vm:94888kB, anon-rss:2188kB, file-rss:34840kB, shmem-rss:0kB [ 1283.172987] oom_reaper: reaped process 21052 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1283.315756] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1283.387380] in:imklog cpuset=/ mems_allowed=0-1 [ 1283.397768] CPU: 1 PID: 7739 Comm: in:imklog Not tainted 4.14.225-syzkaller #0 [ 1283.405351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1283.415264] Call Trace: [ 1283.418336] dump_stack+0x1b2/0x281 [ 1283.421984] dump_header+0x178/0x82f [ 1283.425715] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1283.430832] ? ___ratelimit+0x2cd/0x530 [ 1283.435079] oom_kill_process.cold+0x10/0xb18 [ 1283.439600] out_of_memory+0xe3e/0x1190 [ 1283.443600] ? oom_killer_disable+0x1c0/0x1c0 [ 1283.448118] ? mutex_trylock+0x152/0x1a0 [ 1283.452198] __alloc_pages_nodemask+0x23e1/0x2720 [ 1283.457273] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1283.462766] alloc_pages_current+0x155/0x260 [ 1283.467190] filemap_fault+0xea3/0x1980 [ 1283.471278] ext4_filemap_fault+0x84/0xb0 [ 1283.475594] __do_fault+0xfa/0x380 [ 1283.479225] __handle_mm_fault+0x2497/0x4620 [ 1283.483662] ? vm_insert_page+0x7c0/0x7c0 [ 1283.487827] ? lock_downgrade+0x740/0x740 [ 1283.492258] handle_mm_fault+0x391/0x860 [ 1283.496860] __do_page_fault+0x549/0xad0 [ 1283.501056] ? spurious_fault+0x640/0x640 [ 1283.505642] ? do_page_fault+0x60/0x500 [ 1283.509712] ? page_fault+0x2f/0x50 [ 1283.513360] page_fault+0x45/0x50 [ 1283.516946] RIP: 1fa0:0x1f9f [ 1283.519966] RSP: 0000:000055739391b9d0 EFLAGS: 7fe2a2b9dda0 [ 1283.562680] Mem-Info: [ 1283.578125] active_anon:28325 inactive_anon:7067 isolated_anon:0 [ 1283.578125] active_file:183 inactive_file:677 isolated_file:0 [ 1283.578125] unevictable:0 dirty:9 writeback:0 unstable:0 [ 1283.578125] slab_reclaimable:13724 slab_unreclaimable:110560 [ 1283.578125] mapped:44174 shmem:8979 pagetables:708 bounce:0 [ 1283.578125] free:21630 free_pcp:30 free_cma:0 [ 1283.616706] Node 0 active_anon:112476kB inactive_anon:20072kB active_file:400kB inactive_file:1368kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174464kB dirty:24kB writeback:0kB shmem:27720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1283.664731] Node 1 active_anon:824kB inactive_anon:8196kB active_file:332kB inactive_file:1316kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2232kB dirty:12kB writeback:0kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1283.699939] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1283.727498] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1283.741963] Node 0 DMA32 free:18516kB min:36200kB low:45248kB high:54296kB active_anon:112476kB inactive_anon:20072kB active_file:468kB inactive_file:1392kB unevictable:0kB writepending:24kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2648kB bounce:0kB free_pcp:352kB local_pcp:120kB free_cma:0kB [ 1283.789931] lowmem_reserve[]: 0 0 0 0 0 [ 1283.838143] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1283.891890] lowmem_reserve[]: 0 0 0 0 0 [ 1283.897561] Node 1 Normal free:46740kB min:53696kB low:67120kB high:80544kB active_anon:824kB inactive_anon:8196kB active_file:332kB inactive_file:1368kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:184kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1283.932020] lowmem_reserve[]: 0 0 0 0 0 [ 1283.936363] Node 0 DMA: 1*4kB (U) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10972kB [ 1283.952352] Node 0 DMA32: 1352*4kB (UME) 1144*8kB (UME) 270*16kB (UME) 38*32kB (UM) 1*64kB (U) 6*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20928kB [ 1283.967462] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1283.978455] Node 1 Normal: 6*4kB (UME) 38*8kB (UME) 52*16kB (UME) 40*32kB (M) 36*64kB (M) 17*128kB (M) 8*256kB (UM) 44*512kB (U) 3*1024kB (U) 0*2048kB 3*4096kB (U) = 46856kB [ 1283.995147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1284.004747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1284.013822] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1284.023289] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1284.156204] 9440 total pagecache pages [ 1284.250289] 0 pages in swap cache [ 1284.305108] Swap cache stats: add 0, delete 0, find 0/0 [ 1284.469928] Free swap = 0kB [ 1284.526223] Total swap = 0kB [ 1284.529534] 2097051 pages RAM [ 1284.623124] 0 pages HighMem/MovableOnly [ 1284.627604] 363840 pages reserved [ 1284.675904] 0 pages cma reserved [ 1284.679522] Out of memory (oom_kill_allocating_task): Kill process 7739 (in:imklog) score 0 or sacrifice child [ 1284.691346] Killed process 7691 (rsyslogd) total-vm:254332kB, anon-rss:1160kB, file-rss:0kB, shmem-rss:0kB [ 1284.708016] oom_reaper: reaped process 7691 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1285.273461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1285.281348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1285.312608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1285.319717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.357597] device bridge_slave_1 left promiscuous mode [ 1285.363682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1285.377077] device bridge_slave_0 left promiscuous mode [ 1285.392323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.406788] device veth1_macvtap left promiscuous mode [ 1285.413367] device veth0_macvtap left promiscuous mode [ 1285.430796] device veth1_vlan left promiscuous mode [ 1285.450780] device veth0_vlan left promiscuous mode [ 1285.647139] device hsr_slave_1 left promiscuous mode [ 1285.670109] device hsr_slave_0 left promiscuous mode [ 1285.711578] team0 (unregistering): Port device team_slave_1 removed [ 1285.738229] team0 (unregistering): Port device team_slave_0 removed [ 1285.771147] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1285.794261] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1285.858890] bond0 (unregistering): Released all slaves 08:35:27 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x40, 0x0, 0x0, "fb44afce86e36c4e4d48a0329145928c", "9c7dce2c799945391e0c1afdaceb01e6aa9b48c17b9aac7ec0829a45bada1b718b63a9d14d2b10b0744b5d"}, 0x40, 0x0) 08:35:27 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) socket$nl_route(0x10, 0x3, 0x0) 08:35:27 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x3b, 0x0, 0x0, "fb44afce86e36c4e4d48a0329145928c", "9c7dce2c799945391e0c1afdaceb01e6aa9b48c17b9aac7ec0829a45bada1b718b63a9d14d2b"}, 0x3b, 0x0) 08:35:27 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000005c0)) io_setup(0x5dfd, &(0x7f0000000140)=0x0) io_cancel(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000180), 0x0, 0x1}, &(0x7f0000000200)) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) 08:35:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYBLOB="005c323b7d1d38bca3480cb3"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 08:35:27 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000005c0)) io_setup(0x5dfd, &(0x7f0000000140)=0x0) io_cancel(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000180), 0x0, 0x1}, &(0x7f0000000200)) 08:35:27 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x40, 0x0, 0x0, "fb44afce86e36c4e4d48a0329145928c", "9c7dce2c799945391e0c1afdaceb01e6aa9b48c17b9aac7ec0829a45bada1b718b63a9d14d2b10b0744b5d"}, 0x40, 0x0) 08:35:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r0, @ANYBLOB="005c323b7d1d38bca3480cb3"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 08:35:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000005c0)) 08:35:27 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x3b, 0x0, 0x0, "fb44afce86e36c4e4d48a0329145928c", "9c7dce2c799945391e0c1afdaceb01e6aa9b48c17b9aac7ec0829a45bada1b718b63a9d14d2b"}, 0x3b, 0x0) 08:35:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB="005c323b7d1d38bca3480cb3"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 08:35:27 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x3b, 0x0, 0x0, "fb44afce86e36c4e4d48a0329145928c", "9c7dce2c799945391e0c1afdaceb01e6aa9b48c17b9aac7ec0829a45bada1b718b63a9d14d2b"}, 0x3b, 0x0) [ 1287.498034] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1287.498503] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1287.549018] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1287.572591] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1287.581290] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1287.586540] CPU: 1 PID: 21090 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1287.594423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1287.595598] syz-executor.2 cpuset= [ 1287.603787] Call Trace: [ 1287.603812] dump_stack+0x1b2/0x281 [ 1287.603826] warn_alloc.cold+0x96/0x1cc [ 1287.603837] ? zone_watermark_ok_safe+0x220/0x220 [ 1287.603857] __alloc_pages_nodemask+0x2127/0x2720 [ 1287.603867] ? retint_kernel+0x2d/0x2d [ 1287.603882] ? lock_acquire+0x170/0x3f0 [ 1287.603897] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1287.603913] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1287.603924] ? __mutex_unlock_slowpath+0x75/0x770 [ 1287.603943] alloc_pages_current+0x155/0x260 [ 1287.632451] / [ 1287.635187] ion_page_pool_alloc+0x118/0x1b0 [ 1287.660810] ion_system_heap_allocate+0x133/0x8c0 [ 1287.665660] ? ion_alloc+0x187/0x810 [ 1287.669370] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1287.674850] ? ion_system_contig_heap_create+0x130/0x130 [ 1287.680305] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1287.685328] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1287.690187] ion_alloc+0x204/0x810 [ 1287.693736] ? ion_dma_buf_release+0x40/0x40 [ 1287.698147] ? __might_fault+0x177/0x1b0 [ 1287.702213] ion_ioctl+0xea/0x1f0 [ 1287.705669] ? ion_query_heaps+0x360/0x360 [ 1287.709909] ? __alloc_fd+0x1be/0x490 [ 1287.713726] ? ion_query_heaps+0x360/0x360 [ 1287.717973] do_vfs_ioctl+0x75a/0xff0 [ 1287.721783] ? ioctl_preallocate+0x1a0/0x1a0 [ 1287.726188] ? lock_downgrade+0x740/0x740 [ 1287.730341] ? __fget+0x225/0x360 [ 1287.733800] ? do_vfs_ioctl+0xff0/0xff0 [ 1287.737769] ? security_file_ioctl+0x83/0xb0 [ 1287.742196] SyS_ioctl+0x7f/0xb0 [ 1287.745563] ? do_vfs_ioctl+0xff0/0xff0 [ 1287.749536] do_syscall_64+0x1d5/0x640 [ 1287.753448] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1287.758632] RIP: 0033:0x465f69 [ 1287.761812] RSP: 002b:00007f978c555188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1287.769520] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1287.776797] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1287.784079] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1287.791367] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1287.798654] R13: 00007ffd7f926e0f R14: 00007f978c555300 R15: 0000000000022000 [ 1287.807663] CPU: 0 PID: 21104 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1287.815596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1287.824955] Call Trace: [ 1287.827549] dump_stack+0x1b2/0x281 [ 1287.831180] warn_alloc.cold+0x96/0x1cc [ 1287.835168] ? zone_watermark_ok_safe+0x220/0x220 [ 1287.840024] __alloc_pages_nodemask+0x2127/0x2720 [ 1287.840654] mems_allowed=0-1 [ 1287.844899] ? lock_acquire+0x170/0x3f0 [ 1287.844916] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1287.844932] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1287.862345] ? __mutex_unlock_slowpath+0x75/0x770 [ 1287.867201] alloc_pages_current+0x155/0x260 [ 1287.871662] ion_page_pool_alloc+0x118/0x1b0 [ 1287.876068] ion_system_heap_allocate+0x133/0x8c0 [ 1287.880910] ? ion_alloc+0x187/0x810 [ 1287.884625] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1287.890070] ? ion_system_contig_heap_create+0x130/0x130 [ 1287.895516] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1287.900540] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1287.905376] ion_alloc+0x204/0x810 [ 1287.908926] ? ion_dma_buf_release+0x40/0x40 [ 1287.913337] ? __might_fault+0x177/0x1b0 [ 1287.917415] ion_ioctl+0xea/0x1f0 [ 1287.920879] ? ion_query_heaps+0x360/0x360 [ 1287.925106] ? __alloc_fd+0x1be/0x490 [ 1287.928906] ? ion_query_heaps+0x360/0x360 [ 1287.933137] do_vfs_ioctl+0x75a/0xff0 [ 1287.936928] ? ioctl_preallocate+0x1a0/0x1a0 [ 1287.941328] ? lock_downgrade+0x740/0x740 [ 1287.945478] ? __fget+0x225/0x360 [ 1287.948929] ? do_vfs_ioctl+0xff0/0xff0 [ 1287.952901] ? security_file_ioctl+0x83/0xb0 [ 1287.957328] SyS_ioctl+0x7f/0xb0 [ 1287.960684] ? do_vfs_ioctl+0xff0/0xff0 [ 1287.964676] do_syscall_64+0x1d5/0x640 [ 1287.968577] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1287.973763] RIP: 0033:0x465f69 [ 1287.976946] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1287.984658] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1287.991942] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1287.999215] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1288.006478] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1288.013748] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1288.021032] CPU: 1 PID: 21094 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1288.029046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1288.038432] Call Trace: [ 1288.041024] dump_stack+0x1b2/0x281 [ 1288.044645] warn_alloc.cold+0x96/0x1cc [ 1288.048616] ? zone_watermark_ok_safe+0x220/0x220 [ 1288.053473] __alloc_pages_nodemask+0x2127/0x2720 [ 1288.058323] ? lock_acquire+0x170/0x3f0 [ 1288.062301] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1288.067165] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1288.072611] ? __mutex_unlock_slowpath+0x75/0x770 [ 1288.077451] alloc_pages_current+0x155/0x260 [ 1288.081858] ion_page_pool_alloc+0x118/0x1b0 [ 1288.086269] ion_system_heap_allocate+0x133/0x8c0 [ 1288.091112] ? ion_alloc+0x187/0x810 [ 1288.094820] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1288.100265] ? ion_system_contig_heap_create+0x130/0x130 [ 1288.105732] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1288.110758] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1288.115596] ion_alloc+0x204/0x810 [ 1288.119137] ? ion_dma_buf_release+0x40/0x40 [ 1288.123545] ? __might_fault+0x177/0x1b0 [ 1288.127603] ion_ioctl+0xea/0x1f0 [ 1288.131052] ? ion_query_heaps+0x360/0x360 [ 1288.135286] ? __alloc_fd+0x1be/0x490 [ 1288.139075] ? ion_query_heaps+0x360/0x360 [ 1288.143317] do_vfs_ioctl+0x75a/0xff0 [ 1288.147115] ? ioctl_preallocate+0x1a0/0x1a0 [ 1288.151513] ? lock_downgrade+0x740/0x740 [ 1288.155661] ? __fget+0x225/0x360 [ 1288.159197] ? do_vfs_ioctl+0xff0/0xff0 [ 1288.163174] ? security_file_ioctl+0x83/0xb0 [ 1288.167671] SyS_ioctl+0x7f/0xb0 [ 1288.171026] ? do_vfs_ioctl+0xff0/0xff0 [ 1288.174996] do_syscall_64+0x1d5/0x640 [ 1288.178884] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1288.184072] RIP: 0033:0x465f69 [ 1288.187250] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1288.194953] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1288.202338] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1288.209605] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1288.216877] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1288.224154] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1288.276212] warn_alloc_show_mem: 1 callbacks suppressed [ 1288.276217] Mem-Info: [ 1288.292694] active_anon:29269 inactive_anon:7065 isolated_anon:0 [ 1288.292694] active_file:2049 inactive_file:4708 isolated_file:32 [ 1288.292694] unevictable:0 dirty:10 writeback:0 unstable:0 [ 1288.292694] slab_reclaimable:13548 slab_unreclaimable:109576 [ 1288.292694] mapped:48588 shmem:8976 pagetables:756 bounce:0 [ 1288.292694] free:80674 free_pcp:513 free_cma:0 [ 1288.331352] Node 0 active_anon:116424kB inactive_anon:20068kB active_file:4924kB inactive_file:15432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:191708kB dirty:36kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1288.363661] Node 1 active_anon:652kB inactive_anon:8192kB active_file:3372kB inactive_file:3400kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:8844kB dirty:4kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1288.398751] Node 0 DMA free:11260kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1288.450719] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1288.455817] Node 0 DMA32 free:168936kB min:36200kB low:45248kB high:54296kB active_anon:116424kB inactive_anon:20068kB active_file:4920kB inactive_file:15432kB unevictable:0kB writepending:36kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:3048kB bounce:0kB free_pcp:772kB local_pcp:136kB free_cma:0kB [ 1288.544003] lowmem_reserve[]: 0 0 0 0 0 [ 1288.548040] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1288.616531] lowmem_reserve[]: 0 0 0 0 0 [ 1288.620566] Node 1 Normal free:183560kB min:53696kB low:67120kB high:80544kB active_anon:652kB inactive_anon:8192kB active_file:3372kB inactive_file:3400kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:124kB bounce:0kB free_pcp:1444kB local_pcp:704kB free_cma:0kB [ 1288.690777] lowmem_reserve[]: 0 0 0 0 0 [ 1288.694839] Node 0 DMA: 7*4kB (U) 2*8kB (UE) 5*16kB (UE) 8*32kB (UE) 6*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11260kB [ 1288.720695] Node 0 DMA32: 1139*4kB (UE) 395*8kB (ME) 184*16kB (UME) 57*32kB (UME) 1230*64kB (U) 302*128kB (U) 45*256kB (U) 2*512kB (U) 3*1024kB (U) 1*2048kB (M) 0*4096kB = 147524kB [ 1288.739279] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1288.756117] Node 1 Normal: 331*4kB (UME) 592*8kB (UME) 436*16kB (UME) 204*32kB (UM) 1867*64kB (UM) 113*128kB (UM) 13*256kB (UM) 1*512kB (U) 0*1024kB 1*2048kB (U) 6*4096kB (U) = 183980kB [ 1288.790701] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1288.801557] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1288.810181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1288.840681] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1288.849293] 15610 total pagecache pages [ 1288.856211] 0 pages in swap cache [ 1288.870712] Swap cache stats: add 0, delete 0, find 0/0 [ 1288.876141] Free swap = 0kB [ 1288.879158] Total swap = 0kB [ 1288.889459] 2097051 pages RAM [ 1288.893268] 0 pages HighMem/MovableOnly [ 1288.898252] 363840 pages reserved [ 1288.902710] 0 pages cma reserved [ 1289.565492] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1289.599562] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1289.619526] CPU: 0 PID: 7994 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1289.627356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1289.636713] Call Trace: [ 1289.639316] dump_stack+0x1b2/0x281 [ 1289.642946] dump_header+0x178/0x82f [ 1289.646673] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1289.651777] ? ___ratelimit+0x2cd/0x530 [ 1289.655755] oom_kill_process.cold+0x10/0xb18 [ 1289.660261] out_of_memory+0xe3e/0x1190 [ 1289.664237] ? oom_killer_disable+0x1c0/0x1c0 [ 1289.668730] ? mutex_trylock+0x152/0x1a0 [ 1289.672789] __alloc_pages_nodemask+0x23e1/0x2720 [ 1289.677649] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1289.682504] alloc_pages_current+0x155/0x260 [ 1289.686911] filemap_fault+0xea3/0x1980 [ 1289.690891] ext4_filemap_fault+0x84/0xb0 [ 1289.695040] __do_fault+0xfa/0x380 [ 1289.698597] __handle_mm_fault+0x2497/0x4620 [ 1289.703001] ? vm_insert_page+0x7c0/0x7c0 [ 1289.707144] ? nanosleep_copyout+0x100/0x100 [ 1289.711556] ? sync_mm_rss+0xf2/0x160 [ 1289.715356] handle_mm_fault+0x391/0x860 [ 1289.719416] __do_page_fault+0x549/0xad0 [ 1289.723479] ? spurious_fault+0x640/0x640 [ 1289.727641] ? do_page_fault+0x60/0x500 [ 1289.731615] ? page_fault+0x2f/0x50 [ 1289.735237] page_fault+0x45/0x50 [ 1289.738684] RIP: 13a414:0x9 [ 1289.741604] RSP: 404d:00007ffeec2ed78c EFLAGS: 00000032 [ 1289.885519] Mem-Info: [ 1289.893415] active_anon:29326 inactive_anon:7065 isolated_anon:0 [ 1289.893415] active_file:628 inactive_file:630 isolated_file:64 [ 1289.893415] unevictable:0 dirty:29 writeback:0 unstable:0 [ 1289.893415] slab_reclaimable:13548 slab_unreclaimable:109123 [ 1289.893415] mapped:53305 shmem:8976 pagetables:793 bounce:0 [ 1289.893415] free:25116 free_pcp:68 free_cma:0 [ 1290.054064] Node 0 active_anon:116652kB inactive_anon:20068kB active_file:2412kB inactive_file:2496kB unevictable:0kB isolated(anon):0kB isolated(file):384kB mapped:210964kB dirty:84kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1290.136569] Node 1 active_anon:652kB inactive_anon:8192kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2176kB dirty:0kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1290.324947] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1290.464141] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1290.469218] Node 0 DMA32 free:35916kB min:36200kB low:45248kB high:54296kB active_anon:116656kB inactive_anon:20068kB active_file:2412kB inactive_file:2496kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:3076kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1290.565148] lowmem_reserve[]: 0 0 0 0 0 [ 1290.569205] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1290.612485] lowmem_reserve[]: 0 0 0 0 0 [ 1290.616694] Node 1 Normal free:53604kB min:53696kB low:67120kB high:80544kB active_anon:652kB inactive_anon:8192kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:124kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1290.689453] lowmem_reserve[]: 0 0 0 0 0 [ 1290.710230] Node 0 DMA: 1*4kB (U) 1*8kB (E) 1*16kB (E) 5*32kB (UE) 6*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11068kB [ 1290.759182] Node 0 DMA32: 1682*4kB (UME) 1226*8kB (UME) 523*16kB (ME) 75*32kB (UME) 3*64kB (UM) 1*128kB (U) 9*256kB (U) 2*512kB (U) 3*1024kB (U) 1*2048kB (M) 0*4096kB = 36072kB [ 1290.815460] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1290.842633] Node 1 Normal: 77*4kB (UME) 50*8kB (ME) 49*16kB (ME) 48*32kB (UM) 40*64kB (M) 118*128kB (UM) 21*256kB (UM) 2*512kB (UM) 0*1024kB 1*2048kB (U) 6*4096kB (U) = 53716kB [ 1290.902776] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1290.930130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1290.958998] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1290.967930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1290.983117] 10311 total pagecache pages [ 1290.987115] 0 pages in swap cache [ 1290.990557] Swap cache stats: add 0, delete 0, find 0/0 [ 1291.036904] Free swap = 0kB [ 1291.039954] Total swap = 0kB [ 1291.065194] 2097051 pages RAM [ 1291.068327] 0 pages HighMem/MovableOnly [ 1291.107103] 363840 pages reserved [ 1291.110587] 0 pages cma reserved [ 1291.134055] Out of memory (oom_kill_allocating_task): Kill process 7994 (syz-executor.5) score 0 or sacrifice child [ 1291.179675] Killed process 21104 (syz-executor.5) total-vm:93384kB, anon-rss:156kB, file-rss:34864kB, shmem-rss:0kB [ 1291.229124] oom_reaper: reaped process 21104 (syz-executor.5), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 1291.316770] systemd-rfkill invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1291.342797] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 1291.347983] CPU: 0 PID: 21074 Comm: systemd-rfkill Not tainted 4.14.225-syzkaller #0 [ 1291.355864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1291.365222] Call Trace: [ 1291.367815] dump_stack+0x1b2/0x281 [ 1291.371443] dump_header+0x178/0x82f [ 1291.375151] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1291.380256] ? ___ratelimit+0x2cd/0x530 [ 1291.384230] oom_kill_process.cold+0x10/0xb18 [ 1291.388744] out_of_memory+0xe3e/0x1190 [ 1291.392724] ? oom_killer_disable+0x1c0/0x1c0 [ 1291.397213] ? mutex_trylock+0x152/0x1a0 [ 1291.401274] __alloc_pages_nodemask+0x23e1/0x2720 [ 1291.406129] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1291.410998] alloc_pages_current+0x155/0x260 [ 1291.415411] filemap_fault+0xea3/0x1980 [ 1291.419421] ext4_filemap_fault+0x84/0xb0 [ 1291.423571] __do_fault+0xfa/0x380 [ 1291.427112] __handle_mm_fault+0x2497/0x4620 [ 1291.431527] ? vm_insert_page+0x7c0/0x7c0 [ 1291.435672] ? compat_poll_select_copy_remaining+0x2c0/0x2c0 [ 1291.441470] ? ktime_get_ts64+0x261/0x3a0 [ 1291.445624] handle_mm_fault+0x391/0x860 [ 1291.450472] __do_page_fault+0x549/0xad0 [ 1291.454537] ? spurious_fault+0x640/0x640 [ 1291.458680] ? do_page_fault+0x60/0x500 [ 1291.462658] ? page_fault+0x2f/0x50 [ 1291.466282] page_fault+0x45/0x50 [ 1291.469881] RIP: 629c9930:0x1 [ 1291.472996] RSP: a11a0040:00007ffc629c9938 EFLAGS: 0000000b [ 1291.486775] Mem-Info: [ 1291.495138] active_anon:29327 inactive_anon:7065 isolated_anon:0 [ 1291.495138] active_file:610 inactive_file:670 isolated_file:64 [ 1291.495138] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1291.495138] slab_reclaimable:13539 slab_unreclaimable:109137 [ 1291.495138] mapped:53277 shmem:8976 pagetables:800 bounce:0 [ 1291.495138] free:13800 free_pcp:30 free_cma:0 [ 1291.534686] Node 0 active_anon:116656kB inactive_anon:20068kB active_file:2416kB inactive_file:2640kB unevictable:0kB isolated(anon):0kB isolated(file):256kB mapped:210932kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1291.570102] Node 1 active_anon:652kB inactive_anon:8192kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2176kB dirty:0kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1291.633572] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1291.674113] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1291.697877] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1291.703123] CPU: 1 PID: 21104 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1291.711008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1291.720363] Call Trace: [ 1291.722962] dump_stack+0x1b2/0x281 [ 1291.726592] warn_alloc.cold+0x96/0x1cc [ 1291.730565] ? zone_watermark_ok_safe+0x220/0x220 [ 1291.735411] ? usleep_range+0x130/0x130 [ 1291.739387] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1291.744500] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1291.747064] lowmem_reserve[]: 0 [ 1291.749519] ? run_timer_softirq+0x5a0/0x5a0 [ 1291.749537] __alloc_pages_nodemask+0x2127/0x2720 [ 1291.762055] ? lock_acquire+0x170/0x3f0 [ 1291.766051] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1291.770935] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1291.772939] 2717 2718 [ 1291.775435] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1291.775442] 2718 [ 1291.777952] ? __sanitizer_cov_trace_pc+0xe/0x50 [ 1291.790290] alloc_pages_current+0x155/0x260 [ 1291.794716] ion_page_pool_alloc+0x118/0x1b0 [ 1291.799150] ion_system_heap_allocate+0x133/0x8c0 [ 1291.799645] 2718 [ 1291.804003] ? ion_alloc+0x187/0x810 [ 1291.804014] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1291.804023] ? ion_system_contig_heap_create+0x130/0x130 [ 1291.804034] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1291.804044] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1291.804054] ion_alloc+0x204/0x810 [ 1291.804067] ? ion_dma_buf_release+0x40/0x40 [ 1291.804079] ? __might_fault+0x177/0x1b0 [ 1291.804092] ion_ioctl+0xea/0x1f0 [ 1291.804103] ? ion_query_heaps+0x360/0x360 [ 1291.850235] ? __alloc_fd+0x1be/0x490 [ 1291.854054] ? ion_query_heaps+0x360/0x360 [ 1291.858314] do_vfs_ioctl+0x75a/0xff0 [ 1291.862122] ? ioctl_preallocate+0x1a0/0x1a0 [ 1291.866532] ? lock_downgrade+0x740/0x740 [ 1291.870683] ? __fget+0x225/0x360 [ 1291.874135] ? do_vfs_ioctl+0xff0/0xff0 [ 1291.878112] ? security_file_ioctl+0x83/0xb0 [ 1291.887548] Node 0 [ 1291.887562] SyS_ioctl+0x7f/0xb0 [ 1291.887572] ? do_vfs_ioctl+0xff0/0xff0 [ 1291.889809] DMA32 free:17516kB min:36200kB low:45248kB high:54296kB active_anon:116656kB inactive_anon:20068kB active_file:2416kB inactive_file:2752kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:3076kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1291.893178] do_syscall_64+0x1d5/0x640 [ 1291.893196] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1291.893204] RIP: 0033:0x465f69 [ 1291.893208] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1291.893217] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1291.893222] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1291.893226] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1291.893231] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1291.893236] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1291.953414] warn_alloc_show_mem: 2 callbacks suppressed [ 1291.953418] Mem-Info: [ 1291.968705] lowmem_reserve[]: [ 1292.025315] active_anon:29327 inactive_anon:7065 isolated_anon:0 [ 1292.025315] active_file:610 inactive_file:632 isolated_file:96 [ 1292.025315] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1292.025315] slab_reclaimable:13539 slab_unreclaimable:109137 [ 1292.025315] mapped:53277 shmem:8976 pagetables:800 bounce:0 [ 1292.025315] free:13825 free_pcp:60 free_cma:0 [ 1292.076252] Node 0 active_anon:116560kB inactive_anon:20068kB active_file:2416kB inactive_file:2696kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:210932kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1292.108283] 0 0 0 0 0 [ 1292.111056] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1292.117727] Node 1 active_anon:652kB inactive_anon:8192kB active_file:24kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2176kB dirty:0kB writeback:0kB shmem:8192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1292.177967] lowmem_reserve[]: 0 0 0 0 0 [ 1292.183553] Node 1 Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:652kB inactive_anon:8192kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1292.202343] Node 0 [ 1292.238488] lowmem_reserve[]: 0 0 0 0 0 [ 1292.241461] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1292.244816] Node 0 DMA: 1*4kB (U) 1*8kB (E) 2*16kB (UE) 1*32kB (E) 6*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10956kB [ 1292.304416] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1292.344720] Node 0 DMA32: 940*4kB (ME) 854*8kB (UME) 348*16kB (UME) 41*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17472kB [ 1292.355121] Node 0 DMA32 free:17472kB min:36200kB low:45248kB high:54296kB active_anon:116560kB inactive_anon:20068kB active_file:2416kB inactive_file:2748kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:3076kB bounce:0kB free_pcp:284kB local_pcp:120kB free_cma:0kB [ 1292.397882] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1292.424124] lowmem_reserve[]: 0 0 0 0 0 [ 1292.428158] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1292.446899] Node 1 [ 1292.485666] lowmem_reserve[]: 0 0 0 0 0 [ 1292.500703] Normal: 76*4kB (ME) 50*8kB (ME) 50*16kB (UME) 48*32kB (UM) 40*64kB (M) 22*128kB (M) 10*256kB (UM) 1*512kB (M) 1*1024kB (U) 1*2048kB (U) 3*4096kB (U) = 26848kB [ 1292.509748] Node 1 [ 1292.525737] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1292.537010] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1292.559544] Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:652kB inactive_anon:8192kB active_file:24kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1292.568266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1292.616608] lowmem_reserve[]: 0 0 0 0 0 [ 1292.620785] Node 0 DMA: 1*4kB (U) 1*8kB (E) 2*16kB (UE) 1*32kB (E) 6*64kB (UE) 2*128kB (UE) 2*256kB (UE) 3*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10956kB [ 1292.649968] Node 0 DMA32: 955*4kB (UME) 866*8kB (UME) 348*16kB (UME) 41*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17628kB [ 1292.652616] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1292.676140] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1292.693817] Node 1 Normal: 76*4kB (ME) 50*8kB (ME) 50*16kB (UME) 48*32kB (UM) 40*64kB (M) 22*128kB (M) 10*256kB (UM) 1*512kB (M) 1*1024kB (U) 1*2048kB (U) 3*4096kB (U) = 26848kB [ 1292.737721] 10312 total pagecache pages [ 1292.745310] 0 pages in swap cache [ 1292.748779] Swap cache stats: add 0, delete 0, find 0/0 [ 1292.750918] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1292.770562] Free swap = 0kB [ 1292.780353] Total swap = 0kB [ 1292.788593] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1292.793263] 2097051 pages RAM [ 1292.800331] 0 pages HighMem/MovableOnly [ 1292.810270] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1292.814485] 363840 pages reserved [ 1292.840127] 0 pages cma reserved [ 1292.844464] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1292.856709] Out of memory (oom_kill_allocating_task): Kill process 21074 (systemd-rfkill) score 0 or sacrifice child [ 1292.877063] 10312 total pagecache pages [ 1292.881140] 0 pages in swap cache [ 1292.884591] Swap cache stats: add 0, delete 0, find 0/0 [ 1292.890010] Free swap = 0kB [ 1292.897264] Killed process 21074 (systemd-rfkill) total-vm:37800kB, anon-rss:376kB, file-rss:0kB, shmem-rss:0kB [ 1292.905849] Total swap = 0kB [ 1292.910525] 2097051 pages RAM [ 1292.927140] 0 pages HighMem/MovableOnly [ 1292.938791] 363840 pages reserved [ 1292.944935] 0 pages cma reserved [ 1292.954030] oom_reaper: reaped process 21074 (systemd-rfkill), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1293.286616] IPVS: ftp: loaded support on port[0] = 21 [ 1293.634856] oom_reaper: reaped process 21094 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1293.645053] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1293.679571] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1293.697271] CPU: 1 PID: 21104 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1293.705178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1293.708087] syz-executor.3 invoked oom-killer: gfp_mask=0x14002c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), nodemask= [ 1293.714536] Call Trace: [ 1293.714558] dump_stack+0x1b2/0x281 [ 1293.714570] warn_alloc.cold+0x96/0x1cc [ 1293.714581] ? zone_watermark_ok_safe+0x220/0x220 [ 1293.714601] __alloc_pages_nodemask+0x2127/0x2720 [ 1293.714610] ? __schedule+0x893/0x1de0 [ 1293.714625] ? lock_acquire+0x170/0x3f0 [ 1293.714638] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1293.714651] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1293.714660] ? __mutex_unlock_slowpath+0x75/0x770 [ 1293.714669] ? alloc_pages_current+0x73/0x260 [ 1293.714678] alloc_pages_current+0x155/0x260 [ 1293.714693] ion_page_pool_alloc+0x118/0x1b0 [ 1293.714703] ion_system_heap_allocate+0x133/0x8c0 [ 1293.714716] ? _raw_spin_unlock+0x29/0x40 [ 1293.714726] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1293.714736] ? ion_system_contig_heap_create+0x130/0x130 [ 1293.714746] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1293.769479] (null) [ 1293.773931] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1293.773945] ion_alloc+0x27a/0x810 [ 1293.773959] ? ion_dma_buf_release+0x40/0x40 [ 1293.773970] ? __might_fault+0x177/0x1b0 [ 1293.773982] ion_ioctl+0xea/0x1f0 [ 1293.773992] ? ion_query_heaps+0x360/0x360 [ 1293.774002] ? __alloc_fd+0x1be/0x490 [ 1293.774015] ? ion_query_heaps+0x360/0x360 [ 1293.806341] , order=0, oom_score_adj=0 [ 1293.807118] do_vfs_ioctl+0x75a/0xff0 [ 1293.809331] syz-executor.3 cpuset= [ 1293.814090] ? ioctl_preallocate+0x1a0/0x1a0 [ 1293.814100] ? lock_downgrade+0x740/0x740 [ 1293.814112] ? __fget+0x225/0x360 [ 1293.814120] ? do_vfs_ioctl+0xff0/0xff0 [ 1293.814129] ? security_file_ioctl+0x83/0xb0 [ 1293.814138] SyS_ioctl+0x7f/0xb0 [ 1293.814145] ? do_vfs_ioctl+0xff0/0xff0 [ 1293.814156] do_syscall_64+0x1d5/0x640 [ 1293.814173] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1293.814180] RIP: 0033:0x465f69 [ 1293.814184] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1293.814193] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1293.814198] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1293.814202] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1293.814207] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1293.814211] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1294.026615] Mem-Info: [ 1294.029069] active_anon:28802 inactive_anon:7065 isolated_anon:0 [ 1294.029069] active_file:715 inactive_file:720 isolated_file:11 [ 1294.029069] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1294.029069] slab_reclaimable:13531 slab_unreclaimable:109879 [ 1294.029069] mapped:53480 shmem:8976 pagetables:844 bounce:0 [ 1294.029069] free:13781 free_pcp:30 free_cma:0 [ 1294.048665] / mems_allowed=0-1 [ 1294.089350] CPU: 0 PID: 21121 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 1294.097231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1294.105457] Node 0 active_anon:114092kB inactive_anon:20064kB active_file:2632kB inactive_file:2952kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211516kB dirty:12kB writeback:0kB shmem:27708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1294.106602] Call Trace: [ 1294.137413] dump_stack+0x1b2/0x281 [ 1294.141054] dump_header+0x178/0x82f [ 1294.144820] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1294.149937] ? ___ratelimit+0x2cd/0x530 [ 1294.154179] oom_kill_process.cold+0x10/0xb18 [ 1294.159148] out_of_memory+0xe3e/0x1190 [ 1294.163134] ? oom_killer_disable+0x1c0/0x1c0 [ 1294.165137] Node 1 active_anon:1168kB inactive_anon:8204kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2272kB dirty:0kB writeback:0kB shmem:8212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1294.167635] ? mutex_trylock+0x152/0x1a0 [ 1294.198591] __alloc_pages_nodemask+0x23e1/0x2720 [ 1294.203501] ? __lock_acquire+0x5fc/0x3f20 [ 1294.207777] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1294.212622] ? fs_reclaim_release+0xd0/0x110 [ 1294.217039] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1294.222062] ? __kmalloc_node+0x38/0x70 [ 1294.224789] Node 0 [ 1294.226031] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1294.226052] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1294.228263] alloc_pages_current+0x155/0x260 [ 1294.239152] lowmem_reserve[]: [ 1294.259982] __vmalloc_area_node+0x40a/0x680 [ 1294.259995] ? __vmalloc_node_range+0x150/0x150 [ 1294.260000] ? __get_vm_area_node+0x27d/0x340 [ 1294.260008] ? ebt_register_table+0x1dd/0xc50 [ 1294.260016] vmalloc+0xc3/0x150 [ 1294.260023] ebt_register_table+0x1dd/0xc50 [ 1294.260035] ? ebt_nat_in+0x70/0x70 [ 1294.260047] ops_init+0xaa/0x3e0 [ 1294.264723] 0 [ 1294.267573] setup_net+0x22f/0x530 [ 1294.272148] 2717 [ 1294.276646] ? rtnl_net_dumpid_one+0x240/0x240 [ 1294.281154] 2718 [ 1294.285608] ? kmem_cache_alloc+0x35f/0x3c0 [ 1294.288862] 2718 [ 1294.293260] copy_net_ns+0x19b/0x440 [ 1294.293273] create_new_namespaces+0x375/0x720 [ 1294.293285] unshare_nsproxy_namespaces+0xa1/0x1d0 [ 1294.293294] SyS_unshare+0x308/0x7f0 [ 1294.293304] ? walk_process_tree+0x2a0/0x2a0 [ 1294.296918] 2718 [ 1294.300292] ? task_work_run+0xfd/0x190 [ 1294.305721] ? do_syscall_64+0x4c/0x640 [ 1294.307772] Node 0 [ 1294.312346] ? walk_process_tree+0x2a0/0x2a0 [ 1294.312356] do_syscall_64+0x1d5/0x640 [ 1294.312372] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1294.312380] RIP: 0033:0x467517 [ 1294.312384] RSP: 002b:00007ffc373105d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1294.312396] RAX: ffffffffffffffda RBX: 000000000056ca68 RCX: 0000000000467517 [ 1294.314488] DMA32 free:17744kB min:36200kB low:45248kB high:54296kB active_anon:114092kB inactive_anon:20064kB active_file:2632kB inactive_file:3008kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:2980kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 1294.318782] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000040000000 [ 1294.321087] lowmem_reserve[]: [ 1294.324539] RBP: 00007ffc37310600 R08: 0000000000000000 R09: 0000000000000000 [ 1294.329104] 0 [ 1294.334012] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000ffffffff [ 1294.334016] R13: 000000000056ca68 R14: 0000000000000000 R15: 0000000000400538 [ 1294.350728] Mem-Info: [ 1294.360686] syz-executor.2: [ 1294.366801] active_anon:28815 inactive_anon:7067 isolated_anon:0 [ 1294.366801] active_file:672 inactive_file:752 isolated_file:0 [ 1294.366801] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1294.366801] slab_reclaimable:13525 slab_unreclaimable:109887 [ 1294.366801] mapped:53447 shmem:8980 pagetables:798 bounce:0 [ 1294.366801] free:13735 free_pcp:31 free_cma:0 [ 1294.368170] page allocation failure: order:0 [ 1294.371467] Node 0 active_anon:114092kB inactive_anon:20064kB active_file:2632kB inactive_file:2952kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211516kB dirty:12kB writeback:0kB shmem:27708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1294.392538] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1294.431633] Node 1 active_anon:1168kB inactive_anon:8204kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2272kB dirty:0kB writeback:0kB shmem:8212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1294.442143] 0 [ 1294.459431] Node 0 [ 1294.488405] (null) [ 1294.561692] 0 0 0 [ 1294.563848] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1294.565875] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1294.589577] lowmem_reserve[]: 0 0 0 0 0 [ 1294.618296] lowmem_reserve[]: 0 [ 1294.619186] Node 1 Normal free:26228kB min:53696kB low:67120kB high:80544kB active_anon:1168kB inactive_anon:8204kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1294.622527] 2717 [ 1294.654403] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1294.665001] 2718 2718 2718 [ 1294.667963] Node 0 DMA32 free:17744kB min:36200kB low:45248kB high:54296kB active_anon:114092kB inactive_anon:20064kB active_file:2632kB inactive_file:2796kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:2980kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 1294.670763] CPU: 1 PID: 21094 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1294.705101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1294.710297] lowmem_reserve[]: [ 1294.714451] Call Trace: [ 1294.714474] dump_stack+0x1b2/0x281 [ 1294.714488] warn_alloc.cold+0x96/0x1cc [ 1294.714500] ? zone_watermark_ok_safe+0x220/0x220 [ 1294.714512] ? usleep_range+0x130/0x130 [ 1294.717971] 0 [ 1294.720184] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1294.730168] 0 [ 1294.732572] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1294.732583] ? run_timer_softirq+0x5a0/0x5a0 [ 1294.732601] __alloc_pages_nodemask+0x2127/0x2720 [ 1294.732618] ? lock_acquire+0x170/0x3f0 [ 1294.732633] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1294.732644] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1294.732660] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1294.747730] 0 [ 1294.750288] alloc_pages_current+0x155/0x260 [ 1294.763475] 0 [ 1294.768293] ion_page_pool_alloc+0x118/0x1b0 [ 1294.779384] 0 [ 1294.780005] ion_system_heap_allocate+0x133/0x8c0 [ 1294.797323] ? ion_alloc+0x187/0x810 [ 1294.801042] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1294.806492] ? ion_system_contig_heap_create+0x130/0x130 [ 1294.806495] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1294.812123] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1294.812135] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1294.812147] ion_alloc+0x204/0x810 [ 1294.812162] ? ion_dma_buf_release+0x40/0x40 [ 1294.812174] ? __might_fault+0x177/0x1b0 [ 1294.812186] ion_ioctl+0xea/0x1f0 [ 1294.812195] ? ion_query_heaps+0x360/0x360 [ 1294.812205] ? __alloc_fd+0x1be/0x490 [ 1294.812217] ? ion_query_heaps+0x360/0x360 [ 1294.845479] lowmem_reserve[]: [ 1294.847935] do_vfs_ioctl+0x75a/0xff0 [ 1294.870858] 0 [ 1294.871396] ? ioctl_preallocate+0x1a0/0x1a0 [ 1294.875645] 0 [ 1294.878744] ? lock_downgrade+0x740/0x740 [ 1294.894621] ? __fget+0x225/0x360 [ 1294.895630] 0 0 [ 1294.898072] ? do_vfs_ioctl+0xff0/0xff0 [ 1294.898084] ? security_file_ioctl+0x83/0xb0 [ 1294.900041] 0 [ 1294.904000] SyS_ioctl+0x7f/0xb0 [ 1294.904009] ? do_vfs_ioctl+0xff0/0xff0 [ 1294.904020] do_syscall_64+0x1d5/0x640 [ 1294.904036] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1294.904044] RIP: 0033:0x465f69 [ 1294.904049] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1294.904059] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1294.904064] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1294.904069] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1294.904074] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1294.904082] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1294.929592] lowmem_reserve[]: [ 1294.948399] Node 1 [ 1294.968162] 0 0 0 0 0 [ 1294.996046] Normal free:26228kB min:53696kB low:67120kB high:80544kB active_anon:1168kB inactive_anon:8204kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1294.998148] Node 0 [ 1295.048297] lowmem_reserve[]: [ 1295.051185] DMA: 0*4kB 1*8kB (E) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 6*128kB (UE) 3*256kB (UE) 4*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10968kB [ 1295.057495] 0 [ 1295.088623] Node 0 DMA32: 1128*4kB (ME) 790*8kB (ME) 300*16kB (UME) 42*32kB (UM) 4*64kB (M) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17744kB [ 1295.096167] 0 0 0 0 [ 1295.114925] Node 0 DMA: 0*4kB 1*8kB (E) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 6*128kB (UE) 3*256kB (UE) 4*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10968kB [ 1295.120930] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1295.149509] Node 0 DMA32: 1128*4kB (ME) 790*8kB (ME) 300*16kB (UME) 42*32kB (UM) 4*64kB (M) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17744kB [ 1295.157415] Node 1 [ 1295.179031] Node 0 [ 1295.188276] Normal: [ 1295.188406] Normal: [ 1295.190540] 87*4kB (UME) 51*8kB (UME) 30*16kB (ME) 39*32kB (M) 41*64kB (UM) 23*128kB (UM) 9*256kB (M) 31*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26228kB [ 1295.211238] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1295.235477] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1295.244403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1295.246125] Node 1 [ 1295.253115] Bluetooth: hci1 command 0x0409 tx timeout [ 1295.277979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1295.280226] Normal: [ 1295.294083] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1295.305986] 10418 total pagecache pages [ 1295.309979] 0 pages in swap cache [ 1295.324919] Swap cache stats: add 0, delete 0, find 0/0 [ 1295.328737] 87*4kB [ 1295.330303] Free swap = 0kB [ 1295.330312] (UME) [ 1295.339480] Total swap = 0kB [ 1295.340036] 51*8kB (UME) 30*16kB (ME) 39*32kB (M) 41*64kB (UM) 23*128kB (UM) 9*256kB (M) 31*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26228kB [ 1295.348267] 2097051 pages RAM [ 1295.378523] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1295.379467] 0 pages HighMem/MovableOnly [ 1295.394459] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1295.408320] Mem-Info: [ 1295.424070] active_anon:28815 inactive_anon:7067 isolated_anon:0 [ 1295.424070] active_file:683 inactive_file:716 isolated_file:0 [ 1295.424070] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1295.424070] slab_reclaimable:13525 slab_unreclaimable:109886 [ 1295.424070] mapped:53447 shmem:8980 pagetables:798 bounce:0 [ 1295.424070] free:13735 free_pcp:37 free_cma:0 [ 1295.424147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1295.464787] 363840 pages reserved [ 1295.469661] 0 pages cma reserved [ 1295.488055] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1295.498324] 10418 total pagecache pages [ 1295.506777] 0 pages in swap cache [ 1295.510236] Swap cache stats: add 0, delete 0, find 0/0 [ 1295.515706] Node 0 active_anon:114092kB inactive_anon:20064kB active_file:2632kB inactive_file:2852kB unevictable:0kB isolated(anon):0kB isolated(file):220kB mapped:211516kB dirty:12kB writeback:0kB shmem:27708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1295.544289] Free swap = 0kB [ 1295.547308] Total swap = 0kB [ 1295.550500] 2097051 pages RAM [ 1295.553658] 0 pages HighMem/MovableOnly [ 1295.557635] 363840 pages reserved [ 1295.562005] 0 pages cma reserved [ 1295.565382] Out of memory (oom_kill_allocating_task): Kill process 21121 (syz-executor.3) score 0 or sacrifice child [ 1295.576128] Node 1 active_anon:1168kB inactive_anon:8204kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2272kB dirty:0kB writeback:0kB shmem:8212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1295.604096] Killed process 21121 (syz-executor.3) total-vm:93120kB, anon-rss:76kB, file-rss:33648kB, shmem-rss:0kB [ 1295.645210] oom_reaper: reaped process 21121 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1295.689108] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1295.713698] syz-executor.5 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1295.718646] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1295.740326] Node 0 DMA32 free:17844kB min:36200kB low:45248kB high:54296kB active_anon:114092kB inactive_anon:20064kB active_file:2632kB inactive_file:2888kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:2980kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1295.764791] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1295.776102] lowmem_reserve[]: 0 0 0 0 0 [ 1295.780099] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1295.796314] CPU: 0 PID: 21104 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1295.811918] lowmem_reserve[]: [ 1295.813514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1295.813524] 0 [ 1295.816610] Call Trace: [ 1295.826246] 0 [ 1295.827759] dump_stack+0x1b2/0x281 [ 1295.830304] 0 [ 1295.832100] dump_header+0x178/0x82f [ 1295.832113] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1295.832123] ? ___ratelimit+0x2cd/0x530 [ 1295.832134] oom_kill_process.cold+0x10/0xb18 [ 1295.835745] 0 [ 1295.837553] out_of_memory+0xe3e/0x1190 [ 1295.841440] 0 [ 1295.846507] ? oom_killer_disable+0x1c0/0x1c0 [ 1295.854940] ? mutex_trylock+0x152/0x1a0 [ 1295.854953] __alloc_pages_nodemask+0x23e1/0x2720 [ 1295.854970] ? lock_acquire+0x170/0x3f0 [ 1295.854984] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1295.856760] Node 1 [ 1295.860726] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1295.860740] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1295.860754] ? alloc_pages_current+0x73/0x260 [ 1295.860765] alloc_pages_current+0x155/0x260 [ 1295.862583] Normal free:26228kB min:53696kB low:67120kB high:80544kB active_anon:1168kB inactive_anon:8204kB active_file:100kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1295.867064] ion_page_pool_alloc+0x118/0x1b0 [ 1295.871142] lowmem_reserve[]: [ 1295.875941] ion_system_heap_allocate+0x133/0x8c0 [ 1295.879904] 0 [ 1295.884761] ? _raw_spin_unlock+0x29/0x40 [ 1295.884771] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1295.884780] ? ion_system_contig_heap_create+0x130/0x130 [ 1295.884791] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1295.884805] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1295.887038] 0 [ 1295.891528] ion_alloc+0x27a/0x810 [ 1295.891542] ? ion_dma_buf_release+0x40/0x40 [ 1295.891554] ? __might_fault+0x177/0x1b0 [ 1295.891566] ion_ioctl+0xea/0x1f0 [ 1295.896995] 0 [ 1295.901483] ? ion_query_heaps+0x360/0x360 [ 1295.901493] ? __alloc_fd+0x1be/0x490 [ 1295.901502] ? ion_query_heaps+0x360/0x360 [ 1295.901512] do_vfs_ioctl+0x75a/0xff0 [ 1295.901523] ? ioctl_preallocate+0x1a0/0x1a0 [ 1295.905907] 0 [ 1295.933490] ? lock_downgrade+0x740/0x740 [ 1295.933503] ? __fget+0x225/0x360 [ 1295.933512] ? do_vfs_ioctl+0xff0/0xff0 [ 1295.933522] ? security_file_ioctl+0x83/0xb0 [ 1295.933533] SyS_ioctl+0x7f/0xb0 [ 1295.937928] 0 [ 1295.941029] ? do_vfs_ioctl+0xff0/0xff0 [ 1295.941040] do_syscall_64+0x1d5/0x640 [ 1295.941056] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1295.941066] RIP: 0033:0x465f69 [ 1295.947672] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1295.951876] Node 0 [ 1295.956761] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1295.962241] DMA: [ 1295.967214] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1295.972076] 0*4kB [ 1295.973827] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1295.977342] 1*8kB [ 1295.981733] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1295.981738] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1296.000719] Mem-Info: [ 1296.035632] (E) [ 1296.082716] active_anon:28801 inactive_anon:7067 isolated_anon:0 [ 1296.082716] active_file:670 inactive_file:744 isolated_file:0 [ 1296.082716] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1296.082716] slab_reclaimable:13525 slab_unreclaimable:109886 [ 1296.082716] mapped:53447 shmem:8980 pagetables:798 bounce:0 [ 1296.082716] free:13775 free_pcp:20 free_cma:0 [ 1296.147199] 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 6*128kB (UE) 3*256kB (UE) 4*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10968kB [ 1296.183059] Node 0 DMA32: 1129*4kB (UME) 793*8kB (UME) 305*16kB (UME) 42*32kB (UM) 4*64kB (M) 1*128kB (U) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17980kB [ 1296.208818] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1296.221975] Node 1 Normal: 87*4kB (UME) 51*8kB (UME) 30*16kB (ME) 39*32kB (M) 41*64kB (UM) 23*128kB (UM) 9*256kB (M) 31*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26228kB [ 1296.262233] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1296.281983] Node 0 active_anon:114036kB inactive_anon:20064kB active_file:2632kB inactive_file:2844kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:211516kB dirty:12kB writeback:0kB shmem:27708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1296.308872] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1296.325853] syz-executor.3: vmalloc: allocation failure, allocated 0 of 8192 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 1296.326642] Node 1 active_anon:1168kB inactive_anon:8204kB active_file:156kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2272kB dirty:0kB writeback:0kB shmem:8212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1296.357755] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1296.374237] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1296.397889] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1296.407816] CPU: 0 PID: 21121 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 1296.415878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1296.416346] lowmem_reserve[]: [ 1296.425232] Call Trace: [ 1296.428398] 0 [ 1296.430979] dump_stack+0x1b2/0x281 [ 1296.430993] warn_alloc.cold+0x96/0x1cc [ 1296.431004] ? zone_watermark_ok_safe+0x220/0x220 [ 1296.432786] 2717 [ 1296.436409] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1296.440351] 2718 [ 1296.445183] ? __kmalloc_node+0x38/0x70 [ 1296.445190] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1296.445202] __vmalloc_area_node+0x48a/0x680 [ 1296.445216] ? __vmalloc_node_range+0x150/0x150 [ 1296.445225] ? __get_vm_area_node+0x27d/0x340 [ 1296.447270] 2718 [ 1296.452279] ? ebt_register_table+0x1dd/0xc50 [ 1296.452289] vmalloc+0xc3/0x150 [ 1296.452297] ebt_register_table+0x1dd/0xc50 [ 1296.452310] ? ebt_nat_in+0x70/0x70 [ 1296.452320] ops_init+0xaa/0x3e0 [ 1296.454373] 2718 [ 1296.458336] setup_net+0x22f/0x530 [ 1296.467994] ? rtnl_net_dumpid_one+0x240/0x240 [ 1296.472695] Node 0 [ 1296.477230] ? kmem_cache_alloc+0x35f/0x3c0 [ 1296.479283] DMA32 free:17948kB min:36200kB low:45248kB high:54296kB active_anon:114036kB inactive_anon:20064kB active_file:2632kB inactive_file:2896kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:2980kB bounce:0kB free_pcp:80kB local_pcp:0kB free_cma:0kB [ 1296.483778] copy_net_ns+0x19b/0x440 [ 1296.483791] create_new_namespaces+0x375/0x720 [ 1296.483803] unshare_nsproxy_namespaces+0xa1/0x1d0 [ 1296.483814] SyS_unshare+0x308/0x7f0 [ 1296.487076] lowmem_reserve[]: [ 1296.491418] ? walk_process_tree+0x2a0/0x2a0 [ 1296.491424] ? task_work_run+0xfd/0x190 [ 1296.491435] ? do_syscall_64+0x4c/0x640 [ 1296.491442] ? walk_process_tree+0x2a0/0x2a0 [ 1296.491451] do_syscall_64+0x1d5/0x640 [ 1296.495077] 0 [ 1296.498440] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1296.500470] 0 [ 1296.503995] RIP: 0033:0x467517 [ 1296.503999] RSP: 002b:00007ffc373105d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1296.504007] RAX: ffffffffffffffda RBX: 000000000056ca68 RCX: 0000000000467517 [ 1296.504010] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000040000000 [ 1296.504014] RBP: 00007ffc37310600 R08: 0000000000000000 R09: 0000000000000000 [ 1296.504018] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000ffffffff [ 1296.504022] R13: 000000000056ca68 R14: 0000000000000000 R15: 0000000000400538 [ 1296.569252] Mem-Info: [ 1296.578624] 0 [ 1296.630387] active_anon:28801 inactive_anon:7067 isolated_anon:0 [ 1296.630387] active_file:697 inactive_file:701 isolated_file:16 [ 1296.630387] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1296.630387] slab_reclaimable:13525 slab_unreclaimable:109880 [ 1296.630387] mapped:53447 shmem:8980 pagetables:798 bounce:0 [ 1296.630387] free:13786 free_pcp:20 free_cma:0 [ 1296.646204] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1296.696789] Node 0 active_anon:114036kB inactive_anon:20064kB active_file:2632kB inactive_file:2860kB unevictable:0kB isolated(anon):0kB isolated(file):64kB mapped:211516kB dirty:12kB writeback:0kB shmem:27708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1296.713488] 10418 total pagecache pages [ 1296.744546] 0 0 [ 1296.746558] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1296.748526] Node 1 active_anon:1168kB inactive_anon:8204kB active_file:156kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2272kB dirty:0kB writeback:0kB shmem:8212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1296.772354] 0 pages in swap cache [ 1296.805771] lowmem_reserve[]: 0 0 0 0 0 [ 1296.809785] Node 1 Normal free:26228kB min:53696kB low:67120kB high:80544kB active_anon:1168kB inactive_anon:8204kB active_file:156kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1296.835548] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1296.844469] Swap cache stats: add 0, delete 0, find 0/0 [ 1296.877051] Free swap = 0kB [ 1296.880084] Total swap = 0kB [ 1296.888792] 2097051 pages RAM [ 1296.898887] 0 pages HighMem/MovableOnly [ 1296.907293] lowmem_reserve[]: 0 0 0 0 0 [ 1296.918461] 363840 pages reserved [ 1296.921983] 0 pages cma reserved [ 1296.934446] Node 0 DMA: 0*4kB 1*8kB (E) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 6*128kB (UE) 3*256kB (UE) 4*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10968kB [ 1296.960679] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1296.965745] Node 0 DMA32 free:119556kB min:36200kB low:45248kB high:54296kB active_anon:114036kB inactive_anon:20064kB active_file:2632kB inactive_file:2924kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:2980kB bounce:0kB free_pcp:192kB local_pcp:80kB free_cma:0kB [ 1296.990656] Node 0 DMA32: 1067*4kB (UME) 845*8kB (UME) 307*16kB (UME) 42*32kB (UM) 4*64kB (M) 1*128kB (U) 0*256kB 1*512kB (U) 63*1024kB (U) 14*2048kB (U) 2*4096kB (U) = 119556kB [ 1297.073869] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1297.100664] lowmem_reserve[]: 0 0 0 0 0 [ 1297.104687] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1297.110653] Node 1 Normal: 87*4kB (UME) 51*8kB (UME) 30*16kB (ME) 39*32kB (M) 4442*64kB (UM) 602*128kB (UM) 344*256kB (UM) 124*512kB (UM) 410*1024kB (U) 51*2048kB (U) 3*4096kB (U) = 1051956kB [ 1297.201288] lowmem_reserve[]: 0 0 0 0 0 [ 1297.274742] Node 1 Normal free:1087120kB min:53696kB low:67120kB high:80544kB active_anon:1168kB inactive_anon:8204kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:212kB bounce:0kB free_pcp:1380kB local_pcp:648kB free_cma:0kB [ 1297.280688] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1297.303721] lowmem_reserve[]: 0 0 0 0 0 [ 1297.330734] Bluetooth: hci1 command 0x041b tx timeout [ 1297.350674] Node 0 DMA: 18*4kB (U) 2*8kB (UE) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 6*128kB (UE) 3*256kB (UE) 4*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11048kB [ 1297.410877] Node 0 DMA32: 2541*4kB (UME) 2154*8kB (UME) 1007*16kB (UME) 845*32kB (UME) 1982*64kB (UME) 350*128kB (U) 108*256kB (U) 26*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 283156kB [ 1297.433936] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1297.469842] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1297.477685] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1297.492983] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1297.500710] Node 1 Normal: 757*4kB (UME) 1066*8kB (UME) 904*16kB (UME) 679*32kB (UM) 4588*64kB (UM) 1107*128kB (UM) 420*256kB (UM) 183*512kB (UM) 305*1024kB (U) 52*2048kB (U) 3*4096kB (U) = 1115396kB [ 1297.518590] 10735 total pagecache pages [ 1297.530690] 0 pages in swap cache [ 1297.534173] Swap cache stats: add 0, delete 0, find 0/0 [ 1297.543890] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1297.564857] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1297.571025] Free swap = 0kB [ 1297.576501] Total swap = 0kB [ 1297.579526] 2097051 pages RAM [ 1297.585930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1297.610678] 0 pages HighMem/MovableOnly [ 1297.611224] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1297.614683] 363840 pages reserved [ 1297.640733] 0 pages cma reserved [ 1297.644093] 11216 total pagecache pages [ 1297.644170] Out of memory (oom_kill_allocating_task): Kill process 21104 (syz-executor.5) score 0 or sacrifice child [ 1297.648123] 0 pages in swap cache [ 1297.680941] Killed process 21104 (syz-executor.5) total-vm:93384kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1297.701137] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1297.720689] Swap cache stats: add 0, delete 0, find 0/0 [ 1297.721558] syz-executor.5 cpuset= [ 1297.726084] Free swap = 0kB [ 1297.726091] / [ 1297.729670] Total swap = 0kB [ 1297.750716] mems_allowed=0-1 [ 1297.753903] CPU: 1 PID: 21104 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1297.761535] 2097051 pages RAM [ 1297.761784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1297.764886] 0 pages HighMem/MovableOnly [ 1297.774239] Call Trace: [ 1297.774271] dump_stack+0x1b2/0x281 [ 1297.774284] warn_alloc.cold+0x96/0x1cc [ 1297.774294] ? zone_watermark_ok_safe+0x220/0x220 [ 1297.774311] ? wait_for_completion_io+0x10/0x10 [ 1297.774323] __alloc_pages_nodemask+0x2127/0x2720 [ 1297.774339] ? lock_acquire+0x170/0x3f0 [ 1297.774353] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1297.774365] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1297.774380] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1297.774397] ? alloc_pages_current+0x73/0x260 [ 1297.820707] 363840 pages reserved [ 1297.821690] alloc_pages_current+0x155/0x260 [ 1297.826167] 0 pages cma reserved [ 1297.829616] ion_page_pool_alloc+0x118/0x1b0 [ 1297.841746] ion_system_heap_allocate+0x133/0x8c0 [ 1297.846597] ? _raw_spin_unlock+0x29/0x40 [ 1297.850763] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1297.855739] ? ion_system_contig_heap_create+0x130/0x130 [ 1297.861302] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1297.866367] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1297.871231] ion_alloc+0x27a/0x810 [ 1297.874879] ? ion_dma_buf_release+0x40/0x40 [ 1297.879295] ? __might_fault+0x177/0x1b0 [ 1297.883375] ion_ioctl+0xea/0x1f0 [ 1297.886855] ? ion_query_heaps+0x360/0x360 [ 1297.891102] ? __alloc_fd+0x1be/0x490 [ 1297.894912] ? ion_query_heaps+0x360/0x360 [ 1297.899584] do_vfs_ioctl+0x75a/0xff0 [ 1297.903394] ? ioctl_preallocate+0x1a0/0x1a0 [ 1297.907832] ? lock_downgrade+0x740/0x740 [ 1297.911988] ? __fget+0x225/0x360 [ 1297.915444] ? do_vfs_ioctl+0xff0/0xff0 [ 1297.919452] ? security_file_ioctl+0x83/0xb0 [ 1297.923882] SyS_ioctl+0x7f/0xb0 [ 1297.927297] ? do_vfs_ioctl+0xff0/0xff0 [ 1297.931287] do_syscall_64+0x1d5/0x640 [ 1297.935182] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1297.940373] RIP: 0033:0x465f69 [ 1297.943562] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1297.951276] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1297.958770] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1297.966055] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1297.973338] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1297.980612] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1298.096526] Mem-Info: [ 1298.099006] active_anon:28820 inactive_anon:7067 isolated_anon:0 [ 1298.099006] active_file:979 inactive_file:1236 isolated_file:0 [ 1298.099006] unevictable:0 dirty:45 writeback:0 unstable:0 [ 1298.099006] slab_reclaimable:13497 slab_unreclaimable:111725 [ 1298.099006] mapped:53950 shmem:8980 pagetables:798 bounce:0 [ 1298.099006] free:124618 free_pcp:402 free_cma:0 [ 1298.140711] Node 0 active_anon:114108kB inactive_anon:20064kB active_file:3860kB inactive_file:4876kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213364kB dirty:164kB writeback:0kB shmem:27708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1298.173618] Node 1 active_anon:1172kB inactive_anon:8204kB active_file:56kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2436kB dirty:16kB writeback:0kB shmem:8212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1298.230728] Node 0 DMA free:11112kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1298.293828] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1298.298931] Node 0 DMA32 free:40896kB min:36200kB low:45248kB high:54296kB active_anon:114108kB inactive_anon:20064kB active_file:3860kB inactive_file:4876kB unevictable:0kB writepending:164kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:2980kB bounce:0kB free_pcp:824kB local_pcp:644kB free_cma:0kB [ 1298.377319] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1298.389317] oom_reaper: reaped process 21090 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1298.399410] lowmem_reserve[]: 0 0 0 0 0 [ 1298.418191] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 1298.431542] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1298.468914] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1298.475513] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1298.484729] CPU: 1 PID: 21094 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1298.492626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1298.502007] Call Trace: [ 1298.504603] dump_stack+0x1b2/0x281 [ 1298.508237] warn_alloc.cold+0x96/0x1cc [ 1298.512307] ? zone_watermark_ok_safe+0x220/0x220 [ 1298.517167] __alloc_pages_nodemask+0x2127/0x2720 [ 1298.522047] ? lock_acquire+0x170/0x3f0 [ 1298.526030] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1298.530883] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1298.536336] ? __mutex_unlock_slowpath+0x75/0x770 [ 1298.541208] alloc_pages_current+0x155/0x260 [ 1298.545628] ion_page_pool_alloc+0x118/0x1b0 [ 1298.550043] ion_system_heap_allocate+0x133/0x8c0 [ 1298.554893] ? _raw_spin_unlock+0x29/0x40 [ 1298.559047] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1298.563980] ? ion_system_contig_heap_create+0x130/0x130 [ 1298.569472] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1298.574521] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1298.579374] ion_alloc+0x27a/0x810 [ 1298.582918] ? ion_dma_buf_release+0x40/0x40 [ 1298.587334] ? __might_fault+0x177/0x1b0 [ 1298.591412] ion_ioctl+0xea/0x1f0 [ 1298.594866] ? ion_query_heaps+0x360/0x360 [ 1298.599102] ? __alloc_fd+0x1be/0x490 [ 1298.602905] ? ion_query_heaps+0x360/0x360 [ 1298.607140] do_vfs_ioctl+0x75a/0xff0 [ 1298.610945] ? ioctl_preallocate+0x1a0/0x1a0 [ 1298.615357] ? lock_downgrade+0x740/0x740 [ 1298.619510] ? __fget+0x225/0x360 [ 1298.622966] ? do_vfs_ioctl+0xff0/0xff0 [ 1298.627292] ? security_file_ioctl+0x83/0xb0 [ 1298.631734] SyS_ioctl+0x7f/0xb0 [ 1298.635102] ? do_vfs_ioctl+0xff0/0xff0 [ 1298.639080] do_syscall_64+0x1d5/0x640 [ 1298.643082] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1298.648271] RIP: 0033:0x465f69 [ 1298.651458] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1298.659169] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1298.666440] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1298.673711] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1298.680979] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1298.688252] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1298.717796] CPU: 0 PID: 21082 Comm: rs:main Q:Reg Not tainted 4.14.225-syzkaller #0 [ 1298.725626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1298.727498] lowmem_reserve[]: [ 1298.734984] Call Trace: [ 1298.735027] dump_stack+0x1b2/0x281 [ 1298.735039] dump_header+0x178/0x82f [ 1298.738167] 0 [ 1298.740742] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1298.740752] ? ___ratelimit+0x2cd/0x530 [ 1298.740762] oom_kill_process.cold+0x10/0xb18 [ 1298.740778] out_of_memory+0xe3e/0x1190 [ 1298.740793] ? oom_killer_disable+0x1c0/0x1c0 [ 1298.744604] 0 [ 1298.748118] ? mutex_trylock+0x152/0x1a0 [ 1298.749900] 0 [ 1298.754997] __alloc_pages_nodemask+0x23e1/0x2720 [ 1298.755012] ? trace_hardirqs_on+0x10/0x10 [ 1298.755023] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1298.755034] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1298.755055] alloc_pages_current+0x155/0x260 [ 1298.759171] 0 [ 1298.763514] pagecache_get_page+0x3f5/0xab0 [ 1298.763527] grab_cache_page_write_begin+0x63/0x90 [ 1298.763538] ext4_da_write_begin+0x249/0xe70 [ 1298.763552] ? ext4_write_begin+0x1260/0x1260 [ 1298.763563] generic_perform_write+0x1c9/0x420 [ 1298.767644] 0 [ 1298.772022] ? __mnt_drop_write_file+0x5f/0x90 [ 1298.772031] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 1298.772039] ? current_time+0xb0/0xb0 [ 1298.772048] ? ext4_file_write_iter+0x1cc/0xd20 [ 1298.772058] __generic_file_write_iter+0x227/0x590 [ 1298.772068] ext4_file_write_iter+0x276/0xd20 [ 1298.777901] ? aa_file_perm+0x304/0xab0 [ 1298.790798] Node 1 [ 1298.793585] ? ext4_file_read_iter+0x330/0x330 [ 1298.798164] Normal free:26804kB min:53696kB low:67120kB high:80544kB active_anon:1172kB inactive_anon:8204kB active_file:56kB inactive_file:68kB unevictable:0kB writepending:16kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1298.802553] ? trace_hardirqs_on+0x10/0x10 [ 1298.802563] ? iov_iter_init+0xa6/0x1c0 [ 1298.802574] __vfs_write+0x44c/0x630 [ 1298.802585] ? kernel_read+0x110/0x110 [ 1298.802604] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1298.806354] lowmem_reserve[]: [ 1298.808701] vfs_write+0x17f/0x4d0 [ 1298.813832] 0 [ 1298.818023] SyS_write+0xf2/0x210 [ 1298.822547] 0 [ 1298.827079] ? SyS_read+0x210/0x210 [ 1298.828851] 0 [ 1298.833422] ? __do_page_fault+0x159/0xad0 [ 1298.833432] ? do_syscall_64+0x4c/0x640 [ 1298.833441] ? SyS_read+0x210/0x210 [ 1298.833448] do_syscall_64+0x1d5/0x640 [ 1298.833465] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1298.838119] 0 [ 1298.841908] RIP: 0033:0x7fb55b3aa1cd [ 1298.841912] RSP: 002b:00007fb558965590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1298.841920] RAX: ffffffffffffffda RBX: 00007fb550003dc0 RCX: 00007fb55b3aa1cd [ 1298.841924] RDX: 0000000000000186 RSI: 00007fb550003dc0 RDI: 0000000000000006 [ 1298.841928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1298.841932] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fb550003b00 [ 1298.841935] R13: 00007fb5589655b0 R14: 000055984e6e43a0 R15: 0000000000000186 [ 1298.938629] Mem-Info: [ 1298.977833] 0 [ 1298.984131] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1298.984154] syz-executor.0 cpuset=/ [ 1299.031425] mems_allowed=0-1 [ 1299.034554] CPU: 0 PID: 21090 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1299.042428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1299.051786] Call Trace: [ 1299.054334] Node 0 DMA: [ 1299.054374] dump_stack+0x1b2/0x281 [ 1299.054388] warn_alloc.cold+0x96/0x1cc [ 1299.057070] 1*4kB [ 1299.060691] ? zone_watermark_ok_safe+0x220/0x220 [ 1299.060701] ? usleep_range+0x130/0x130 [ 1299.060710] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1299.060722] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1299.060731] ? run_timer_softirq+0x5a0/0x5a0 [ 1299.060746] __alloc_pages_nodemask+0x2127/0x2720 [ 1299.060761] ? lock_acquire+0x170/0x3f0 [ 1299.060776] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1299.070044] (U) [ 1299.072232] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1299.072249] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1299.072269] ? __sanitizer_cov_trace_pc+0x2d/0x50 [ 1299.072286] alloc_pages_current+0x155/0x260 [ 1299.078936] 2*8kB [ 1299.081348] ion_page_pool_alloc+0x118/0x1b0 [ 1299.081360] ion_system_heap_allocate+0x133/0x8c0 [ 1299.081370] ? ion_alloc+0x187/0x810 [ 1299.081380] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1299.081393] ? ion_system_contig_heap_create+0x130/0x130 [ 1299.088382] (UE) [ 1299.090813] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1299.090825] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1299.090838] ion_alloc+0x204/0x810 [ 1299.090853] ? ion_dma_buf_release+0x40/0x40 [ 1299.090865] ? __might_fault+0x177/0x1b0 [ 1299.098610] 2*16kB [ 1299.099660] ion_ioctl+0xea/0x1f0 [ 1299.110157] (UE) [ 1299.110945] ? ion_query_heaps+0x360/0x360 [ 1299.110957] ? __alloc_fd+0x1be/0x490 [ 1299.110968] ? ion_query_heaps+0x360/0x360 [ 1299.110979] do_vfs_ioctl+0x75a/0xff0 [ 1299.116418] 1*32kB [ 1299.121259] ? ioctl_preallocate+0x1a0/0x1a0 [ 1299.121269] ? lock_downgrade+0x740/0x740 [ 1299.121282] ? __fget+0x225/0x360 [ 1299.121290] ? do_vfs_ioctl+0xff0/0xff0 [ 1299.121301] ? security_file_ioctl+0x83/0xb0 [ 1299.121311] SyS_ioctl+0x7f/0xb0 [ 1299.136707] (E) [ 1299.137066] ? do_vfs_ioctl+0xff0/0xff0 [ 1299.140816] 2*64kB [ 1299.146224] do_syscall_64+0x1d5/0x640 [ 1299.167295] (UE) [ 1299.171461] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1299.171470] RIP: 0033:0x465f69 [ 1299.171475] RSP: 002b:00007f978c555188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1299.171484] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1299.171493] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1299.175577] 6*128kB [ 1299.177803] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1299.177812] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1299.195387] (UE) [ 1299.195519] R13: 00007ffd7f926e0f R14: 00007f978c555300 R15: 0000000000022000 [ 1299.199315] 3*256kB [ 1299.215060] active_anon:28284 inactive_anon:7067 isolated_anon:0 [ 1299.215060] active_file:597 inactive_file:752 isolated_file:0 [ 1299.215060] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1299.215060] slab_reclaimable:13496 slab_unreclaimable:111465 [ 1299.215060] mapped:53362 shmem:8980 pagetables:775 bounce:0 [ 1299.215060] free:13877 free_pcp:57 free_cma:0 [ 1299.327705] (UE) [ 1299.347881] Node 0 active_anon:111984kB inactive_anon:20064kB active_file:2336kB inactive_file:2952kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210972kB dirty:0kB writeback:0kB shmem:27708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1299.391343] Node 1 active_anon:1152kB inactive_anon:8204kB active_file:152kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2476kB dirty:0kB writeback:0kB shmem:8212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1299.425207] warn_alloc_show_mem: 1 callbacks suppressed [ 1299.425211] Mem-Info: [ 1299.436143] 4*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10964kB [ 1299.439458] Node 0 [ 1299.450068] active_anon:28284 inactive_anon:7067 isolated_anon:0 [ 1299.450068] active_file:622 inactive_file:700 isolated_file:32 [ 1299.450068] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1299.450068] slab_reclaimable:13496 slab_unreclaimable:111440 [ 1299.450068] mapped:53362 shmem:8980 pagetables:775 bounce:0 [ 1299.450068] free:13877 free_pcp:58 free_cma:0 [ 1299.457973] Node 0 [ 1299.497862] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1299.529163] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1299.534397] Node 0 DMA32 free:17700kB min:36200kB low:45248kB high:54296kB active_anon:111984kB inactive_anon:20064kB active_file:2336kB inactive_file:2952kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:2888kB bounce:0kB free_pcp:232kB local_pcp:120kB free_cma:0kB [ 1299.576855] Node 0 active_anon:111984kB inactive_anon:20064kB active_file:2336kB inactive_file:2696kB unevictable:0kB isolated(anon):0kB isolated(file):256kB mapped:210972kB dirty:0kB writeback:0kB shmem:27708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1299.601853] DMA32: 1021*4kB (UME) 958*8kB (UME) 314*16kB (UME) 32*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17796kB [ 1299.612960] lowmem_reserve[]: 0 0 0 0 0 [ 1299.629489] Node 1 active_anon:1152kB inactive_anon:8204kB active_file:152kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2476kB dirty:0kB writeback:0kB shmem:8212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1299.641244] Node 0 [ 1299.660672] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1299.669144] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1299.693555] Normal: [ 1299.712955] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1299.749138] lowmem_reserve[]: 0 0 0 0 0 [ 1299.749266] syz-executor.2 cpuset= [ 1299.757151] Node 1 Normal free:26844kB min:53696kB low:67120kB high:80544kB active_anon:1152kB inactive_anon:8204kB active_file:152kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1299.788960] 0*4kB [ 1299.807623] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1299.813158] / mems_allowed=0-1 [ 1299.818165] CPU: 1 PID: 21094 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1299.826045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1299.830581] Node 0 [ 1299.835392] Call Trace: [ 1299.835414] dump_stack+0x1b2/0x281 [ 1299.835427] warn_alloc.cold+0x96/0x1cc [ 1299.835439] ? zone_watermark_ok_safe+0x220/0x220 [ 1299.835448] ? usleep_range+0x130/0x130 [ 1299.835457] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1299.835468] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1299.835479] ? run_timer_softirq+0x5a0/0x5a0 [ 1299.835494] __alloc_pages_nodemask+0x2127/0x2720 [ 1299.876509] ? lock_acquire+0x170/0x3f0 [ 1299.878733] DMA32 free:17700kB min:36200kB low:45248kB high:54296kB active_anon:111984kB inactive_anon:20064kB active_file:2336kB inactive_file:2908kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:2888kB bounce:0kB free_pcp:232kB local_pcp:120kB free_cma:0kB [ 1299.880489] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1299.914057] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1299.918587] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1299.924071] alloc_pages_current+0x155/0x260 [ 1299.928493] ion_page_pool_alloc+0x118/0x1b0 [ 1299.932918] ion_system_heap_allocate+0x133/0x8c0 [ 1299.937115] lowmem_reserve[]: 0 [ 1299.937767] ? _raw_spin_unlock+0x29/0x40 [ 1299.937781] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1299.947300] 0 [ 1299.950900] ? ion_system_contig_heap_create+0x130/0x130 [ 1299.950912] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1299.950923] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1299.950933] ion_alloc+0x27a/0x810 [ 1299.950948] ? ion_dma_buf_release+0x40/0x40 [ 1299.950959] ? __might_fault+0x177/0x1b0 [ 1299.950971] ion_ioctl+0xea/0x1f0 [ 1299.950981] ? ion_query_heaps+0x360/0x360 [ 1299.950991] ? __alloc_fd+0x1be/0x490 [ 1299.951001] ? ion_query_heaps+0x360/0x360 [ 1299.951011] do_vfs_ioctl+0x75a/0xff0 [ 1299.951022] ? ioctl_preallocate+0x1a0/0x1a0 [ 1299.994111] 0 [ 1299.995942] ? lock_downgrade+0x740/0x740 [ 1299.999716] 0 [ 1300.004119] ? __fget+0x225/0x360 [ 1300.004129] ? do_vfs_ioctl+0xff0/0xff0 [ 1300.004139] ? security_file_ioctl+0x83/0xb0 [ 1300.004152] SyS_ioctl+0x7f/0xb0 [ 1300.004160] ? do_vfs_ioctl+0xff0/0xff0 [ 1300.004177] do_syscall_64+0x1d5/0x640 [ 1300.004193] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1300.004202] RIP: 0033:0x465f69 [ 1300.004207] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1300.051114] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1300.052704] 0 [ 1300.058395] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1300.058404] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1300.067458] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1300.067464] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1300.119080] lowmem_reserve[]: 0 0 0 0 0 [ 1300.120221] 0*8kB [ 1300.135104] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1300.137609] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1300.199657] Node 0 DMA: 1*4kB (U) 2*8kB (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 6*128kB (UE) 3*256kB (UE) 4*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10964kB [ 1300.215413] Node 1 Normal: 187*4kB (UME) 56*8kB (UME) 37*16kB (UME) 43*32kB (UM) 40*64kB (M) 23*128kB (UM) 9*256kB (M) 31*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26844kB [ 1300.247742] lowmem_reserve[]: 0 0 0 0 0 [ 1300.256015] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1300.256227] Node 1 [ 1300.281751] Node 0 DMA32: 1021*4kB (UME) 961*8kB (UME) 316*16kB (UME) 32*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17852kB [ 1300.289425] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1300.311190] Normal free:26844kB min:53696kB low:67120kB high:80544kB active_anon:1152kB inactive_anon:8204kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1300.338495] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1300.345763] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1300.368622] lowmem_reserve[]: 0 0 0 0 0 [ 1300.372762] Node 1 Normal: 187*4kB (UME) 56*8kB (UME) 37*16kB (UME) 43*32kB (UM) 40*64kB (M) 23*128kB (UM) 9*256kB (M) 31*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26844kB [ 1300.373979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1300.394942] Node 0 DMA: 1*4kB (U) 2*8kB (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 6*128kB (UE) 3*256kB (UE) 4*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10964kB [ 1300.412935] 10343 total pagecache pages [ 1300.416926] 0 pages in swap cache [ 1300.418007] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1300.423939] Swap cache stats: add 0, delete 0, find 0/0 [ 1300.434561] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1300.446216] Node 0 DMA32: 1021*4kB (UME) 961*8kB (UME) 316*16kB (UME) 32*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17852kB [ 1300.447546] Free swap = 0kB [ 1300.472602] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1300.479423] Total swap = 0kB [ 1300.507003] 2097051 pages RAM [ 1300.510137] 0 pages HighMem/MovableOnly [ 1300.535678] 363840 pages reserved [ 1300.538529] Node 0 [ 1300.539161] 0 pages cma reserved [ 1300.539163] Normal: 0*4kB [ 1300.570671] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1300.604233] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1300.640681] Node 1 Normal: 94*4kB (UME) 51*8kB (UME) 31*16kB (ME) 40*32kB (UM) 1239*64kB (UM) 147*128kB (UM) 9*256kB (M) 26*512kB (UM) 276*1024kB (U) 38*2048kB (U) 5*4096kB (U) = 497216kB [ 1300.660774] 10380 total pagecache pages [ 1300.670813] 0 pages in swap cache [ 1300.674299] Swap cache stats: add 0, delete 0, find 0/0 [ 1300.679658] Free swap = 0kB [ 1300.710738] Total swap = 0kB [ 1300.713840] 2097051 pages RAM [ 1300.716965] 0 pages HighMem/MovableOnly [ 1300.724698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1300.744803] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1300.753952] 363840 pages reserved [ 1300.757724] 0 pages cma reserved [ 1300.765360] Out of memory (oom_kill_allocating_task): Kill process 21082 (rs:main Q:Reg) score 0 or sacrifice child [ 1300.766154] Mem-Info: [ 1300.785855] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1300.795793] Killed process 21079 (rsyslogd) total-vm:254332kB, anon-rss:832kB, file-rss:260kB, shmem-rss:0kB [ 1300.809505] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1300.818177] 11009 total pagecache pages [ 1300.821128] active_anon:28284 inactive_anon:7067 isolated_anon:0 [ 1300.821128] active_file:816 inactive_file:1078 isolated_file:0 [ 1300.821128] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1300.821128] slab_reclaimable:13495 slab_unreclaimable:113440 [ 1300.821128] mapped:53712 shmem:8980 pagetables:775 bounce:0 [ 1300.821128] free:170173 free_pcp:208 free_cma:0 [ 1300.837314] 0 pages in swap cache [ 1300.862533] oom_reaper: reaped process 21079 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1300.912708] Node 0 active_anon:111384kB inactive_anon:20064kB active_file:3592kB inactive_file:7848kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:178872kB dirty:0kB writeback:0kB shmem:27708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1300.951847] Swap cache stats: add 0, delete 0, find 0/0 [ 1300.957240] Free swap = 0kB [ 1300.960257] Total swap = 0kB [ 1300.968103] 2097051 pages RAM [ 1300.983919] 0 pages HighMem/MovableOnly [ 1300.992172] 363840 pages reserved [ 1300.997619] 0 pages cma reserved [ 1301.032839] Node 1 active_anon:716kB inactive_anon:8196kB active_file:68kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2640kB dirty:12kB writeback:0kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1301.089519] Node 0 DMA free:11160kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1301.118516] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1301.126983] Node 0 DMA32 free:80380kB min:36200kB low:45248kB high:54296kB active_anon:111612kB inactive_anon:20060kB active_file:5456kB inactive_file:8348kB unevictable:0kB writepending:32kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2900kB bounce:0kB free_pcp:1004kB local_pcp:384kB free_cma:0kB [ 1301.158151] lowmem_reserve[]: 0 0 0 0 0 [ 1301.164522] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1301.192339] lowmem_reserve[]: 0 0 0 0 0 [ 1301.197397] Node 1 Normal free:616532kB min:53696kB low:67120kB high:80544kB active_anon:620kB inactive_anon:8192kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:76kB bounce:0kB free_pcp:900kB local_pcp:640kB free_cma:0kB [ 1301.227481] lowmem_reserve[]: 0 0 0 0 0 [ 1301.233619] Node 0 DMA: 0*4kB 2*8kB (UE) 1*16kB (E) 2*32kB (UE) 3*64kB (UE) 1*128kB (E) 2*256kB (UE) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11168kB [ 1301.249565] Node 0 DMA32: 5156*4kB (UME) 283*8kB (UE) 173*16kB (UME) 78*32kB (UME) 171*64kB (U) 19*128kB (U) 35*256kB (U) 29*512kB (U) 0*1024kB 1*2048kB (U) 0*4096kB = 67384kB [ 1301.266641] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1301.291891] Node 1 Normal: 119*4kB (UME) 54*8kB (UME) 32*16kB (UME) 39*32kB (M) 1418*64kB (UM) 455*128kB (UM) 148*256kB (UM) 82*512kB (UM) 178*1024kB (U) 40*2048kB (U) 5*4096kB (U) = 516204kB [ 1301.328775] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1301.337930] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1301.347818] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1301.357367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1301.366809] 12770 total pagecache pages [ 1301.371375] 0 pages in swap cache [ 1301.374851] Swap cache stats: add 0, delete 0, find 0/0 [ 1301.380228] Free swap = 0kB [ 1301.384661] Total swap = 0kB [ 1301.387712] 2097051 pages RAM [ 1301.391698] 0 pages HighMem/MovableOnly [ 1301.395677] 363840 pages reserved [ 1301.399127] 0 pages cma reserved 08:35:43 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000005c0)) io_setup(0x5dfd, &(0x7f0000000140)=0x0) io_cancel(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000180), 0x0, 0x1}, &(0x7f0000000200)) 08:35:43 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x3e, 0x0, 0x0, "fb44afce86e36c4e4d48a0329145928c", "9c7dce2c799945391e0c1afdaceb01e6aa9b48c17b9aac7ec0829a45bada1b718b63a9d14d2b10b074"}, 0x3e, 0x0) 08:35:43 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000005c0)) io_setup(0x5dfd, &(0x7f0000000140)=0x0) io_cancel(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x0, r3, &(0x7f0000000180), 0x0, 0x1}, &(0x7f0000000200)) 08:35:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) socket$nl_route(0x10, 0x3, 0x0) 08:35:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB="005c323b7d1d38bca3480cb3"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 08:35:43 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000005c0)) 08:35:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB="005c323b7d1d38bca3480cb3"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 08:35:43 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x3e, 0x0, 0x0, "fb44afce86e36c4e4d48a0329145928c", "9c7dce2c799945391e0c1afdaceb01e6aa9b48c17b9aac7ec0829a45bada1b718b63a9d14d2b10b074"}, 0x3e, 0x0) 08:35:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB="005c323b7d1d38bca3480cb3"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 08:35:43 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x3e, 0x0, 0x0, "fb44afce86e36c4e4d48a0329145928c", "9c7dce2c799945391e0c1afdaceb01e6aa9b48c17b9aac7ec0829a45bada1b718b63a9d14d2b10b074"}, 0x3e, 0x0) 08:35:43 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB="005c323b7d1d38bca3480cb3"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 08:35:43 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x3f, 0x0, 0x0, "fb44afce86e36c4e4d48a0329145928c", "9c7dce2c799945391e0c1afdaceb01e6aa9b48c17b9aac7ec0829a45bada1b718b63a9d14d2b10b0744b"}, 0x3f, 0x0) [ 1303.200098] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1303.215432] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1303.228129] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1303.230331] syz-executor.0 cpuset= [ 1303.246189] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1303.257793] / mems_allowed=0-1 [ 1303.261157] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1303.265171] CPU: 1 PID: 21154 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1303.274288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1303.283643] Call Trace: [ 1303.286236] dump_stack+0x1b2/0x281 [ 1303.289864] warn_alloc.cold+0x96/0x1cc [ 1303.293861] ? zone_watermark_ok_safe+0x220/0x220 [ 1303.298737] __alloc_pages_nodemask+0x2127/0x2720 [ 1303.303600] ? lock_acquire+0x170/0x3f0 [ 1303.307591] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1303.312449] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1303.317920] ? __mutex_unlock_slowpath+0x75/0x770 [ 1303.322796] alloc_pages_current+0x155/0x260 [ 1303.327217] ion_page_pool_alloc+0x118/0x1b0 [ 1303.331642] ion_system_heap_allocate+0x133/0x8c0 [ 1303.336512] ? ion_alloc+0x187/0x810 [ 1303.340231] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1303.345692] ? ion_system_contig_heap_create+0x130/0x130 [ 1303.351147] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1303.356175] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1303.361637] ion_alloc+0x204/0x810 [ 1303.365189] ? ion_dma_buf_release+0x40/0x40 [ 1303.369595] ? __might_fault+0x177/0x1b0 [ 1303.373833] ion_ioctl+0xea/0x1f0 [ 1303.377279] ? ion_query_heaps+0x360/0x360 [ 1303.381516] ? __alloc_fd+0x1be/0x490 [ 1303.385320] ? ion_query_heaps+0x360/0x360 [ 1303.389559] do_vfs_ioctl+0x75a/0xff0 [ 1303.393357] ? ioctl_preallocate+0x1a0/0x1a0 [ 1303.397764] ? lock_downgrade+0x740/0x740 [ 1303.401909] ? __fget+0x225/0x360 [ 1303.405355] ? do_vfs_ioctl+0xff0/0xff0 [ 1303.409320] ? security_file_ioctl+0x83/0xb0 [ 1303.413737] SyS_ioctl+0x7f/0xb0 [ 1303.417097] ? do_vfs_ioctl+0xff0/0xff0 [ 1303.421066] do_syscall_64+0x1d5/0x640 [ 1303.424953] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1303.430139] RIP: 0033:0x465f69 [ 1303.433321] RSP: 002b:00007f978c555188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1303.441024] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1303.448293] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1303.455560] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1303.462829] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1303.470100] R13: 00007ffd7f926e0f R14: 00007f978c555300 R15: 0000000000022000 [ 1303.477393] CPU: 0 PID: 21158 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1303.485292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1303.494651] Call Trace: [ 1303.497252] dump_stack+0x1b2/0x281 [ 1303.500899] warn_alloc.cold+0x96/0x1cc [ 1303.504884] ? zone_watermark_ok_safe+0x220/0x220 [ 1303.509746] __alloc_pages_nodemask+0x2127/0x2720 [ 1303.514613] ? __schedule+0x893/0x1de0 [ 1303.518512] ? lock_acquire+0x170/0x3f0 [ 1303.522496] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1303.523516] Mem-Info: [ 1303.527367] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1303.527381] ? __mutex_unlock_slowpath+0x75/0x770 [ 1303.527400] alloc_pages_current+0x155/0x260 [ 1303.529913] active_anon:29727 inactive_anon:7065 isolated_anon:0 [ 1303.529913] active_file:2579 inactive_file:4848 isolated_file:12 [ 1303.529913] unevictable:0 dirty:22 writeback:0 unstable:0 [ 1303.529913] slab_reclaimable:13569 slab_unreclaimable:114574 [ 1303.529913] mapped:57411 shmem:8976 pagetables:755 bounce:0 [ 1303.529913] free:45080 free_pcp:194 free_cma:0 [ 1303.535257] ion_page_pool_alloc+0x118/0x1b0 [ 1303.535269] ion_system_heap_allocate+0x133/0x8c0 [ 1303.535278] ? ion_alloc+0x187/0x810 [ 1303.535288] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1303.535298] ? ion_system_contig_heap_create+0x130/0x130 [ 1303.535310] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1303.535320] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1303.535331] ion_alloc+0x204/0x810 [ 1303.541850] Node 0 active_anon:117876kB inactive_anon:20060kB active_file:10196kB inactive_file:19252kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:226860kB dirty:40kB writeback:0kB shmem:27704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1303.544573] ? ion_dma_buf_release+0x40/0x40 [ 1303.544588] ? __might_fault+0x177/0x1b0 [ 1303.544614] ion_ioctl+0xea/0x1f0 [ 1303.583551] Node 1 active_anon:1032kB inactive_anon:8200kB active_file:120kB inactive_file:140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2784kB dirty:48kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1303.587440] ? ion_query_heaps+0x360/0x360 [ 1303.587452] ? __alloc_fd+0x1be/0x490 [ 1303.587463] ? ion_query_heaps+0x360/0x360 [ 1303.587475] do_vfs_ioctl+0x75a/0xff0 [ 1303.591429] Node 0 [ 1303.597186] ? ioctl_preallocate+0x1a0/0x1a0 [ 1303.597196] ? lock_downgrade+0x740/0x740 [ 1303.597210] ? __fget+0x225/0x360 [ 1303.597222] ? do_vfs_ioctl+0xff0/0xff0 [ 1303.606910] DMA free:11092kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:56kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1303.607672] ? security_file_ioctl+0x83/0xb0 [ 1303.613357] lowmem_reserve[]: [ 1303.616030] SyS_ioctl+0x7f/0xb0 [ 1303.616040] ? do_vfs_ioctl+0xff0/0xff0 [ 1303.616052] do_syscall_64+0x1d5/0x640 [ 1303.616068] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1303.646364] 0 [ 1303.648850] RIP: 0033:0x465f69 [ 1303.648855] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1303.648866] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1303.648871] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1303.648877] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1303.648885] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1303.655323] 2717 [ 1303.656538] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1303.663645] CPU: 0 PID: 21153 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1303.686617] 2718 [ 1303.687979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1303.687983] Call Trace: [ 1303.688001] dump_stack+0x1b2/0x281 [ 1303.688018] warn_alloc.cold+0x96/0x1cc [ 1303.693779] 2718 [ 1303.696051] ? zone_watermark_ok_safe+0x220/0x220 [ 1303.696075] __alloc_pages_nodemask+0x2127/0x2720 [ 1303.696093] ? lock_acquire+0x170/0x3f0 [ 1303.699955] 2718 [ 1303.702104] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1303.702121] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1303.702134] ? __mutex_unlock_slowpath+0x75/0x770 [ 1303.702149] alloc_pages_current+0x155/0x260 [ 1303.702167] ion_page_pool_alloc+0x118/0x1b0 [ 1303.710710] ion_system_heap_allocate+0x133/0x8c0 [ 1303.710720] ? ion_alloc+0x187/0x810 [ 1303.710731] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1303.710741] ? ion_system_contig_heap_create+0x130/0x130 [ 1303.710755] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1303.715996] Node 0 [ 1303.718182] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1303.718197] ion_alloc+0x204/0x810 [ 1303.718216] ? ion_dma_buf_release+0x40/0x40 [ 1303.746506] DMA32 free:114356kB min:36200kB low:45248kB high:54296kB active_anon:117976kB inactive_anon:20060kB active_file:10004kB inactive_file:18984kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2912kB bounce:0kB free_pcp:648kB local_pcp:644kB free_cma:0kB [ 1303.748251] ? __might_fault+0x177/0x1b0 [ 1303.748268] ion_ioctl+0xea/0x1f0 [ 1303.748279] ? ion_query_heaps+0x360/0x360 [ 1303.752802] lowmem_reserve[]: [ 1303.754725] ? __alloc_fd+0x1be/0x490 [ 1303.754739] ? ion_query_heaps+0x360/0x360 [ 1303.754750] do_vfs_ioctl+0x75a/0xff0 [ 1303.754761] ? ioctl_preallocate+0x1a0/0x1a0 [ 1303.758792] 0 [ 1303.762600] ? lock_downgrade+0x740/0x740 [ 1303.762614] ? __fget+0x225/0x360 [ 1303.762624] ? do_vfs_ioctl+0xff0/0xff0 [ 1303.762634] ? security_file_ioctl+0x83/0xb0 [ 1303.762644] SyS_ioctl+0x7f/0xb0 [ 1303.762652] ? do_vfs_ioctl+0xff0/0xff0 [ 1303.762663] do_syscall_64+0x1d5/0x640 [ 1303.762679] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1303.772580] 0 [ 1303.772820] RIP: 0033:0x465f69 [ 1303.780693] 0 [ 1303.787804] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1303.787814] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1303.787819] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1303.787824] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1303.787829] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1303.787835] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1304.079148] 0 0 [ 1304.081194] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1304.106855] lowmem_reserve[]: 0 0 0 0 0 [ 1304.111514] Node 1 Normal free:53740kB min:53696kB low:67120kB high:80544kB active_anon:1032kB inactive_anon:8200kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:108kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1304.141582] lowmem_reserve[]: 0 0 0 0 0 [ 1304.145678] Node 0 DMA: 0*4kB 1*8kB (E) 1*16kB (E) 9*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11064kB [ 1304.160290] Node 0 DMA32: 1433*4kB (UME) 693*8kB (ME) 349*16kB (UME) 393*32kB (UME) 23*64kB (UM) 14*128kB (UM) 4*256kB (M) 4*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35772kB [ 1304.175935] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1304.187227] Node 1 Normal: 127*4kB (UME) 538*8kB (UME) 420*16kB (UME) 213*32kB (UM) 41*64kB (M) 23*128kB (M) 18*256kB (UM) 29*512kB (UM) 0*1024kB 1*2048kB (U) 2*4096kB (U) = 53612kB [ 1304.228483] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1304.247814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1304.279812] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1304.316833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1304.347933] 10448 total pagecache pages [ 1304.367026] 0 pages in swap cache [ 1304.381427] Swap cache stats: add 0, delete 0, find 0/0 [ 1304.417778] Free swap = 0kB [ 1304.427610] Total swap = 0kB [ 1304.434694] 2097051 pages RAM [ 1304.441166] 0 pages HighMem/MovableOnly [ 1304.449604] 363840 pages reserved [ 1304.462989] 0 pages cma reserved [ 1305.574295] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1305.630862] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1305.636042] CPU: 1 PID: 7968 Comm: syz-fuzzer Not tainted 4.14.225-syzkaller #0 [ 1305.643492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1305.652852] Call Trace: [ 1305.655455] dump_stack+0x1b2/0x281 [ 1305.659089] dump_header+0x178/0x82f [ 1305.662809] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1305.667912] ? ___ratelimit+0x2cd/0x530 [ 1305.671894] oom_kill_process.cold+0x10/0xb18 [ 1305.676401] out_of_memory+0xe3e/0x1190 [ 1305.680391] ? oom_killer_disable+0x1c0/0x1c0 [ 1305.684891] ? mutex_trylock+0x152/0x1a0 [ 1305.688983] __alloc_pages_nodemask+0x23e1/0x2720 [ 1305.693841] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1305.698701] alloc_pages_current+0x155/0x260 [ 1305.703110] filemap_fault+0xea3/0x1980 [ 1305.707224] ext4_filemap_fault+0x84/0xb0 [ 1305.711375] __do_fault+0xfa/0x380 [ 1305.714941] __handle_mm_fault+0x2497/0x4620 [ 1305.719353] ? vm_insert_page+0x7c0/0x7c0 [ 1305.723518] ? lock_downgrade+0x740/0x740 [ 1305.727678] handle_mm_fault+0x391/0x860 [ 1305.731739] __do_page_fault+0x549/0xad0 [ 1305.735804] ? spurious_fault+0x640/0x640 [ 1305.739955] ? do_page_fault+0x60/0x500 [ 1305.743926] ? page_fault+0x2f/0x50 [ 1305.747546] page_fault+0x45/0x50 [ 1305.750994] RIP: 0000:0x93f280 [ 1305.754174] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1305.946664] Mem-Info: [ 1305.954610] active_anon:29813 inactive_anon:7065 isolated_anon:0 [ 1305.954610] active_file:472 inactive_file:715 isolated_file:0 [ 1305.954610] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1305.954610] slab_reclaimable:13571 slab_unreclaimable:114536 [ 1305.954610] mapped:53330 shmem:8976 pagetables:799 bounce:0 [ 1305.954610] free:25119 free_pcp:0 free_cma:0 [ 1306.000711] Node 0 active_anon:118220kB inactive_anon:20060kB active_file:1868kB inactive_file:2868kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210616kB dirty:0kB writeback:0kB shmem:27704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1306.114838] Node 1 active_anon:1032kB inactive_anon:8200kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2704kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1306.236637] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1306.299976] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1306.305128] Node 0 DMA32 free:35936kB min:36200kB low:45248kB high:54296kB active_anon:118224kB inactive_anon:20060kB active_file:1952kB inactive_file:2836kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:3088kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1306.426019] lowmem_reserve[]: 0 0 0 0 0 [ 1306.430076] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1306.459615] Bluetooth: hci1 command 0x0409 tx timeout [ 1306.465065] lowmem_reserve[]: 0 0 0 0 0 [ 1306.469070] Node 1 Normal free:53680kB min:53696kB low:67120kB high:80544kB active_anon:1032kB inactive_anon:8200kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:108kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1306.501309] lowmem_reserve[]: 0 0 0 0 0 [ 1306.505322] Node 0 DMA: 0*4kB 1*8kB (E) 1*16kB (E) 9*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11064kB [ 1306.579881] Node 0 DMA32: 1612*4kB (UME) 1248*8kB (ME) 477*16kB (ME) 107*32kB (UME) 24*64kB (UM) 16*128kB (UM) 9*256kB (UM) 5*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35936kB [ 1306.683810] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1306.728896] Node 1 Normal: 152*4kB (UME) 537*8kB (UME) 420*16kB (UME) 213*32kB (UM) 41*64kB (M) 23*128kB (M) 18*256kB (UM) 29*512kB (UM) 0*1024kB 1*2048kB (U) 2*4096kB (U) = 53704kB [ 1306.769143] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1306.797441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1306.905313] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1306.963772] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1307.021168] 10219 total pagecache pages [ 1307.029346] 0 pages in swap cache [ 1307.042015] Swap cache stats: add 0, delete 0, find 0/0 [ 1307.047400] Free swap = 0kB [ 1307.050413] Total swap = 0kB [ 1307.093608] 2097051 pages RAM [ 1307.096747] 0 pages HighMem/MovableOnly [ 1307.113409] 363840 pages reserved [ 1307.116880] 0 pages cma reserved [ 1307.120250] Out of memory (oom_kill_allocating_task): Kill process 7968 (syz-fuzzer) score 0 or sacrifice child [ 1307.170293] Killed process 21187 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:44kB, shmem-rss:0kB [ 1307.199834] oom_reaper: reaped process 21187 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1307.313643] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 1307.376247] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1307.392459] CPU: 0 PID: 21177 Comm: rs:main Q:Reg Not tainted 4.14.225-syzkaller #0 [ 1307.400307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1307.409666] Call Trace: [ 1307.412264] dump_stack+0x1b2/0x281 [ 1307.415894] dump_header+0x178/0x82f [ 1307.419613] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1307.424744] ? ___ratelimit+0x2cd/0x530 [ 1307.428726] oom_kill_process.cold+0x10/0xb18 [ 1307.433234] out_of_memory+0xe3e/0x1190 [ 1307.437237] ? oom_killer_disable+0x1c0/0x1c0 [ 1307.441734] ? mutex_trylock+0x152/0x1a0 [ 1307.445805] __alloc_pages_nodemask+0x23e1/0x2720 [ 1307.450656] ? trace_hardirqs_on+0x10/0x10 [ 1307.454902] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1307.459749] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1307.464353] alloc_pages_current+0x155/0x260 [ 1307.468777] pagecache_get_page+0x3f5/0xab0 [ 1307.473116] grab_cache_page_write_begin+0x63/0x90 [ 1307.478055] ext4_da_write_begin+0x249/0xe70 [ 1307.482475] ? ext4_write_begin+0x1260/0x1260 [ 1307.486995] generic_perform_write+0x1c9/0x420 [ 1307.491589] ? __mnt_drop_write_file+0x5f/0x90 [ 1307.496196] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 1307.500870] ? current_time+0xb0/0xb0 [ 1307.504764] ? ext4_file_write_iter+0x1cc/0xd20 [ 1307.509448] __generic_file_write_iter+0x227/0x590 [ 1307.514382] ext4_file_write_iter+0x276/0xd20 [ 1307.518881] ? aa_file_perm+0x304/0xab0 [ 1307.522857] ? ext4_file_read_iter+0x330/0x330 [ 1307.527444] ? trace_hardirqs_on+0x10/0x10 [ 1307.531856] ? iov_iter_init+0xa6/0x1c0 [ 1307.535860] __vfs_write+0x44c/0x630 [ 1307.539578] ? kernel_read+0x110/0x110 [ 1307.543479] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1307.548510] vfs_write+0x17f/0x4d0 [ 1307.552054] SyS_write+0xf2/0x210 [ 1307.555529] ? SyS_read+0x210/0x210 [ 1307.559150] ? __do_page_fault+0x159/0xad0 [ 1307.563380] ? do_syscall_64+0x4c/0x640 [ 1307.567367] ? SyS_read+0x210/0x210 [ 1307.570988] do_syscall_64+0x1d5/0x640 [ 1307.574896] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1307.580083] RIP: 0033:0x7f38d3eba1cd [ 1307.583876] RSP: 002b:00007f38d1475590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1307.591582] RAX: ffffffffffffffda RBX: 00007f38c8002940 RCX: 00007f38d3eba1cd [ 1307.598857] RDX: 0000000000000082 RSI: 00007f38c8002940 RDI: 0000000000000006 [ 1307.606125] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1307.613393] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f38c8002680 [ 1307.620658] R13: 00007f38d14755b0 R14: 000055800455a3a0 R15: 0000000000000082 [ 1307.642143] Mem-Info: [ 1307.644619] active_anon:29814 inactive_anon:7065 isolated_anon:0 [ 1307.644619] active_file:491 inactive_file:661 isolated_file:64 [ 1307.644619] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1307.644619] slab_reclaimable:13568 slab_unreclaimable:114518 [ 1307.644619] mapped:53332 shmem:8976 pagetables:799 bounce:0 [ 1307.644619] free:25020 free_pcp:0 free_cma:0 [ 1307.678033] Node 0 active_anon:118224kB inactive_anon:20060kB active_file:1952kB inactive_file:2924kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210620kB dirty:0kB writeback:0kB shmem:27704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1307.706389] Node 1 active_anon:1032kB inactive_anon:8200kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2708kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1307.733412] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1307.781277] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1307.786356] Node 0 DMA32 free:35936kB min:36200kB low:45248kB high:54296kB active_anon:118224kB inactive_anon:20060kB active_file:1952kB inactive_file:2880kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:3088kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1307.870675] lowmem_reserve[]: 0 0 0 0 0 [ 1307.874707] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1307.903942] lowmem_reserve[]: 0 0 0 0 0 [ 1307.908067] Node 1 Normal free:53080kB min:53696kB low:67120kB high:80544kB active_anon:1032kB inactive_anon:8200kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:108kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1308.004554] lowmem_reserve[]: 0 0 0 0 0 [ 1308.008591] Node 0 DMA: 0*4kB 1*8kB (E) 1*16kB (E) 9*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11064kB [ 1308.040686] Node 0 DMA32: 1647*4kB (UME) 1251*8kB (UME) 476*16kB (ME) 110*32kB (UME) 24*64kB (UM) 16*128kB (UM) 9*256kB (UM) 5*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36180kB [ 1308.077193] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1308.106877] Node 1 Normal: 65*4kB (ME) 517*8kB (UME) 420*16kB (UME) 213*32kB (UM) 41*64kB (M) 23*128kB (M) 18*256kB (UM) 29*512kB (UM) 0*1024kB 1*2048kB (U) 2*4096kB (U) = 53196kB [ 1308.176733] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1308.204723] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1308.244366] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1308.260051] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1308.282253] 10219 total pagecache pages [ 1308.286278] 0 pages in swap cache [ 1308.289731] Swap cache stats: add 0, delete 0, find 0/0 [ 1308.297455] Free swap = 0kB [ 1308.300486] Total swap = 0kB [ 1308.325110] 2097051 pages RAM [ 1308.328246] 0 pages HighMem/MovableOnly [ 1308.343373] 363840 pages reserved [ 1308.346863] 0 pages cma reserved [ 1308.350229] Out of memory (oom_kill_allocating_task): Kill process 21177 (rs:main Q:Reg) score 0 or sacrifice child [ 1308.392934] Killed process 21144 (rsyslogd) total-vm:254332kB, anon-rss:416kB, file-rss:396kB, shmem-rss:0kB [ 1308.437575] oom_reaper: reaped process 21144 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1308.530717] Bluetooth: hci1 command 0x041b tx timeout [ 1308.703013] syz-executor.5 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1308.740665] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1308.745831] CPU: 1 PID: 7994 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1308.753627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1308.763009] Call Trace: [ 1308.765612] dump_stack+0x1b2/0x281 [ 1308.769250] dump_header+0x178/0x82f [ 1308.772981] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1308.778099] ? ___ratelimit+0x2cd/0x530 [ 1308.782082] oom_kill_process.cold+0x10/0xb18 [ 1308.786608] out_of_memory+0xe3e/0x1190 [ 1308.790595] ? oom_killer_disable+0x1c0/0x1c0 [ 1308.795116] ? mutex_trylock+0x152/0x1a0 [ 1308.799181] __alloc_pages_nodemask+0x23e1/0x2720 [ 1308.804039] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1308.808885] ? lock_page_memcg+0x11b/0x200 [ 1308.813145] ? cache_grow_begin+0x41/0x630 [ 1308.817407] cache_grow_begin+0x91/0x630 [ 1308.821488] ? cache_grow_begin+0x91/0x630 [ 1308.825734] fallback_alloc+0x207/0x2c0 [ 1308.829744] kmem_cache_alloc+0x1e5/0x3c0 [ 1308.833909] getname_flags+0xc8/0x550 [ 1308.837727] do_sys_open+0x1ce/0x410 [ 1308.841444] ? filp_open+0x60/0x60 [ 1308.844991] ? __do_page_fault+0x159/0xad0 [ 1308.849229] ? do_syscall_64+0x4c/0x640 [ 1308.853207] ? SyS_open+0x30/0x30 [ 1308.856664] do_syscall_64+0x1d5/0x640 [ 1308.860562] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1308.865755] RIP: 0033:0x465aa8 [ 1308.868943] RSP: 002b:00007ffeec2ed6b0 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 1308.876657] RAX: ffffffffffffffda RBX: 0000000000004050 RCX: 0000000000465aa8 [ 1308.884371] RDX: 0000000000090800 RSI: 00000000004be893 RDI: 00000000ffffff9c [ 1308.891645] RBP: 00007ffeec2ed78c R08: 0000000000090800 R09: 00000000004be893 [ 1308.898938] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000000 [ 1308.906211] R13: 000000000013e02d R14: 0000000000000009 R15: 00007ffeec2ed7f0 [ 1309.013201] Mem-Info: [ 1309.015657] active_anon:29654 inactive_anon:7065 isolated_anon:0 [ 1309.015657] active_file:472 inactive_file:726 isolated_file:32 [ 1309.015657] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1309.015657] slab_reclaimable:13566 slab_unreclaimable:114367 [ 1309.015657] mapped:53306 shmem:8976 pagetables:777 bounce:0 [ 1309.015657] free:25304 free_pcp:18 free_cma:0 [ 1309.064385] Node 0 active_anon:117784kB inactive_anon:20060kB active_file:1856kB inactive_file:2804kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:210520kB dirty:0kB writeback:0kB shmem:27704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1309.154832] Node 1 active_anon:764kB inactive_anon:8200kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2704kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1309.195207] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1309.225556] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1309.251753] Node 0 DMA32 free:35684kB min:36200kB low:45248kB high:54296kB active_anon:117708kB inactive_anon:20060kB active_file:1836kB inactive_file:2956kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2912kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1309.349147] lowmem_reserve[]: 0 0 0 0 0 [ 1309.353218] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1309.415927] lowmem_reserve[]: 0 0 0 0 0 [ 1309.420246] Node 1 Normal free:53592kB min:53696kB low:67120kB high:80544kB active_anon:764kB inactive_anon:8200kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:76kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1309.495993] lowmem_reserve[]: 0 0 0 0 0 [ 1309.500029] Node 0 DMA: 0*4kB 1*8kB (E) 1*16kB (E) 9*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11064kB [ 1309.576668] Node 0 DMA32: 1598*4kB (UME) 1273*8kB (UME) 481*16kB (ME) 89*32kB (ME) 14*64kB (UM) 17*128kB (UM) 7*256kB (UM) 4*512kB (M) 0*1024kB 1*2048kB (M) 0*4096kB = 36080kB [ 1309.636212] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1309.669205] Node 1 Normal: 80*4kB (UME) 515*8kB (UME) 432*16kB (UME) 212*32kB (UM) 42*64kB (UM) 22*128kB (M) 19*256kB (UM) 29*512kB (UM) 0*1024kB 1*2048kB (U) 2*4096kB (U) = 53592kB [ 1309.692147] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1309.701061] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1309.709672] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1309.718586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1309.727225] 10209 total pagecache pages [ 1309.731294] 0 pages in swap cache [ 1309.734754] Swap cache stats: add 0, delete 0, find 0/0 [ 1309.740108] Free swap = 0kB [ 1309.743180] Total swap = 0kB [ 1309.746196] 2097051 pages RAM [ 1309.749306] 0 pages HighMem/MovableOnly [ 1309.791526] 363840 pages reserved [ 1309.794987] 0 pages cma reserved [ 1309.798345] Out of memory (oom_kill_allocating_task): Kill process 7994 (syz-executor.5) score 0 or sacrifice child [ 1309.851632] Killed process 21158 (syz-executor.5) total-vm:93384kB, anon-rss:2200kB, file-rss:34928kB, shmem-rss:0kB [ 1309.897800] oom_reaper: reaped process 21158 (syz-executor.5), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 1309.952933] kworker/u4:5 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1309.980754] kworker/u4:5 cpuset=/ mems_allowed=0-1 [ 1309.986038] CPU: 1 PID: 21073 Comm: kworker/u4:5 Not tainted 4.14.225-syzkaller #0 [ 1309.993752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1310.003134] Workqueue: events_unbound call_usermodehelper_exec_work [ 1310.009566] Call Trace: [ 1310.012161] dump_stack+0x1b2/0x281 [ 1310.015832] dump_header+0x178/0x82f [ 1310.019548] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1310.024653] ? ___ratelimit+0x2cd/0x530 [ 1310.028629] oom_kill_process.cold+0x10/0xb18 [ 1310.033150] ? lock_downgrade+0x740/0x740 [ 1310.037300] out_of_memory+0x2dc/0x1190 [ 1310.041287] ? oom_killer_disable+0x1c0/0x1c0 [ 1310.045789] ? mutex_trylock+0x152/0x1a0 [ 1310.050120] __alloc_pages_nodemask+0x23e1/0x2720 [ 1310.054978] ? deref_stack_reg+0x124/0x1a0 [ 1310.059229] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1310.064089] ? kmem_cache_alloc_node+0x38b/0x410 [ 1310.068856] copy_process.part.0+0x265/0x71c0 [ 1310.073357] ? __lock_acquire+0x5fc/0x3f20 [ 1310.077607] ? kasan_slab_free+0xc3/0x1a0 [ 1310.081761] ? trace_hardirqs_on+0x10/0x10 [ 1310.085993] ? static_obj+0x50/0x50 [ 1310.089626] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1310.095079] ? __cleanup_sighand+0x40/0x40 [ 1310.099318] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1310.104944] _do_fork+0x184/0xc80 [ 1310.108402] ? fork_idle+0x270/0x270 [ 1310.112122] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1310.117238] ? process_one_work+0x6c4/0x14a0 [ 1310.121654] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1310.127133] kernel_thread+0x2f/0x40 [ 1310.130849] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1310.136128] ? call_usermodehelper+0x80/0x80 [ 1310.140541] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1310.146015] process_one_work+0x793/0x14a0 [ 1310.150261] ? work_busy+0x320/0x320 [ 1310.153977] ? worker_thread+0x158/0xff0 [ 1310.158085] ? _raw_spin_unlock_irq+0x24/0x80 [ 1310.162599] worker_thread+0x5cc/0xff0 [ 1310.166500] ? rescuer_thread+0xc80/0xc80 [ 1310.170656] kthread+0x30d/0x420 [ 1310.174024] ? kthread_create_on_node+0xd0/0xd0 [ 1310.178695] ret_from_fork+0x24/0x30 [ 1310.320442] Mem-Info: [ 1310.344100] active_anon:29083 inactive_anon:7065 isolated_anon:0 [ 1310.344100] active_file:461 inactive_file:697 isolated_file:64 [ 1310.344100] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1310.344100] slab_reclaimable:13546 slab_unreclaimable:114335 [ 1310.344100] mapped:53302 shmem:8976 pagetables:746 bounce:0 [ 1310.344100] free:13889 free_pcp:30 free_cma:0 [ 1310.465677] Node 0 active_anon:115568kB inactive_anon:20060kB active_file:1848kB inactive_file:2876kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:210504kB dirty:4kB writeback:0kB shmem:27704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1310.582578] Node 1 active_anon:764kB inactive_anon:8200kB active_file:0kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2704kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1310.610700] Bluetooth: hci1 command 0x040f tx timeout [ 1310.623907] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1310.657476] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1310.674940] Node 0 DMA32 free:17836kB min:36200kB low:45248kB high:54296kB active_anon:115568kB inactive_anon:20060kB active_file:1848kB inactive_file:2880kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2908kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1310.731990] lowmem_reserve[]: 0 0 0 0 0 [ 1310.736522] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1310.770002] lowmem_reserve[]: 0 0 0 0 0 [ 1310.774179] Node 1 Normal free:26884kB min:53696kB low:67120kB high:80544kB active_anon:764kB inactive_anon:8200kB active_file:0kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:76kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1310.869046] lowmem_reserve[]: 0 0 0 0 0 [ 1310.879783] Node 0 DMA: 0*4kB 1*8kB (E) 2*16kB (UE) 5*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10952kB [ 1310.901349] Node 0 DMA32: 1126*4kB (UME) 937*8kB (UME) 308*16kB (UME) 32*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17952kB [ 1310.915145] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1310.939347] Node 1 Normal: 73*4kB (UME) 50*8kB (UME) 54*16kB (ME) 34*32kB (UM) 41*64kB (UM) 23*128kB (UM) 11*256kB (UM) 11*512kB (UM) 0*1024kB 1*2048kB (U) 2*4096kB (U) = 26900kB [ 1310.962126] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1310.971682] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1310.980363] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1310.989260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1310.997925] 10193 total pagecache pages [ 1311.001949] 0 pages in swap cache [ 1311.005397] Swap cache stats: add 0, delete 0, find 0/0 [ 1311.010809] Free swap = 0kB [ 1311.013819] Total swap = 0kB [ 1311.016891] 2097051 pages RAM [ 1311.019991] 0 pages HighMem/MovableOnly [ 1311.024018] 363840 pages reserved [ 1311.027478] 0 pages cma reserved [ 1311.030924] Out of memory: Kill process 21149 (syz-executor.0) score 1005 or sacrifice child [ 1311.039705] Killed process 21154 (syz-executor.0) total-vm:94888kB, anon-rss:2196kB, file-rss:34928kB, shmem-rss:0kB [ 1311.124911] oom_reaper: reaped process 21154 (syz-executor.0), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 1311.169801] oom_reaper: reaped process 21153 (syz-executor.2), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 1311.236761] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1311.298396] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1311.312100] CPU: 0 PID: 7968 Comm: syz-fuzzer Not tainted 4.14.225-syzkaller #0 [ 1311.319579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1311.328935] Call Trace: [ 1311.331528] dump_stack+0x1b2/0x281 [ 1311.335157] dump_header+0x178/0x82f [ 1311.338872] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1311.344159] ? ___ratelimit+0x2cd/0x530 [ 1311.348143] oom_kill_process.cold+0x10/0xb18 [ 1311.352658] out_of_memory+0xe3e/0x1190 [ 1311.356677] ? oom_killer_disable+0x1c0/0x1c0 [ 1311.361188] ? mutex_trylock+0x152/0x1a0 [ 1311.365258] __alloc_pages_nodemask+0x23e1/0x2720 [ 1311.370142] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1311.375002] alloc_pages_current+0x155/0x260 [ 1311.379418] filemap_fault+0xea3/0x1980 [ 1311.383425] ext4_filemap_fault+0x84/0xb0 [ 1311.387578] __do_fault+0xfa/0x380 [ 1311.391119] __handle_mm_fault+0x2497/0x4620 [ 1311.395532] ? vm_insert_page+0x7c0/0x7c0 [ 1311.399683] ? lock_downgrade+0x740/0x740 [ 1311.403852] handle_mm_fault+0x391/0x860 [ 1311.407922] __do_page_fault+0x549/0xad0 [ 1311.412022] ? spurious_fault+0x640/0x640 [ 1311.416172] ? do_page_fault+0x60/0x500 [ 1311.420148] ? page_fault+0x2f/0x50 [ 1311.423783] page_fault+0x45/0x50 [ 1311.427233] RIP: 0000:0x93f280 [ 1311.430414] RSP: 2e000:000000c00003df00 EFLAGS: 0043b6a0 [ 1311.490891] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1311.521784] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1311.526951] CPU: 1 PID: 21153 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1311.534839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1311.544216] Call Trace: [ 1311.546822] dump_stack+0x1b2/0x281 [ 1311.550458] warn_alloc.cold+0x96/0x1cc [ 1311.554436] ? zone_watermark_ok_safe+0x220/0x220 [ 1311.559278] ? usleep_range+0x130/0x130 [ 1311.563259] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1311.568370] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1311.573395] ? run_timer_softirq+0x5a0/0x5a0 [ 1311.577820] __alloc_pages_nodemask+0x2127/0x2720 [ 1311.582680] ? lock_acquire+0x170/0x3f0 [ 1311.586671] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1311.591522] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1311.596024] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1311.601487] ? policy_node+0x13/0x110 [ 1311.605300] alloc_pages_current+0x155/0x260 [ 1311.609729] ion_page_pool_alloc+0x118/0x1b0 [ 1311.614148] ion_system_heap_allocate+0x133/0x8c0 [ 1311.619349] ? ion_alloc+0x187/0x810 [ 1311.620726] syz-executor.0: [ 1311.623085] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1311.623089] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1311.626112] ? ion_system_contig_heap_create+0x130/0x130 [ 1311.646642] (null) [ 1311.646978] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1311.649137] syz-executor.0 cpuset= [ 1311.654161] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1311.654174] ion_alloc+0x204/0x810 [ 1311.654189] ? ion_dma_buf_release+0x40/0x40 [ 1311.654207] ? __might_fault+0x177/0x1b0 [ 1311.654219] ion_ioctl+0xea/0x1f0 [ 1311.654228] ? ion_query_heaps+0x360/0x360 [ 1311.654238] ? __alloc_fd+0x1be/0x490 [ 1311.654248] ? ion_query_heaps+0x360/0x360 [ 1311.654257] do_vfs_ioctl+0x75a/0xff0 [ 1311.654269] ? ioctl_preallocate+0x1a0/0x1a0 [ 1311.654286] ? lock_downgrade+0x740/0x740 [ 1311.676716] / [ 1311.678076] ? __fget+0x225/0x360 [ 1311.698464] mems_allowed=0-1 [ 1311.698489] ? do_vfs_ioctl+0xff0/0xff0 [ 1311.714853] ? security_file_ioctl+0x83/0xb0 [ 1311.719267] SyS_ioctl+0x7f/0xb0 [ 1311.722633] ? do_vfs_ioctl+0xff0/0xff0 [ 1311.726632] do_syscall_64+0x1d5/0x640 [ 1311.730525] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1311.735721] RIP: 0033:0x465f69 [ 1311.738907] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1311.746614] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1311.753886] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1311.761158] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1311.768441] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1311.775730] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1311.790702] Mem-Info: [ 1311.793202] active_anon:28017 inactive_anon:7065 isolated_anon:0 [ 1311.793202] active_file:459 inactive_file:730 isolated_file:32 [ 1311.793202] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1311.793202] slab_reclaimable:13541 slab_unreclaimable:114335 [ 1311.793202] mapped:53302 shmem:8976 pagetables:746 bounce:0 [ 1311.793202] free:13858 free_pcp:0 free_cma:0 [ 1311.806897] CPU: 1 PID: 21154 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1311.834443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1311.843800] Call Trace: [ 1311.846398] dump_stack+0x1b2/0x281 [ 1311.850037] warn_alloc.cold+0x96/0x1cc [ 1311.854018] ? zone_watermark_ok_safe+0x220/0x220 [ 1311.858869] ? usleep_range+0x130/0x130 [ 1311.862848] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1311.867959] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1311.872980] ? run_timer_softirq+0x5a0/0x5a0 [ 1311.877400] __alloc_pages_nodemask+0x2127/0x2720 [ 1311.880607] Node 0 active_anon:111304kB inactive_anon:20060kB active_file:1848kB inactive_file:2880kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210504kB dirty:4kB writeback:0kB shmem:27704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1311.882257] ? lock_acquire+0x170/0x3f0 [ 1311.914346] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1311.919215] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1311.921980] Node 1 active_anon:764kB inactive_anon:8200kB active_file:0kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2704kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1311.923725] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1311.956081] alloc_pages_current+0x155/0x260 [ 1311.956722] syz-executor.5: page allocation failure: order:0 [ 1311.960493] ion_page_pool_alloc+0x118/0x1b0 [ 1311.960505] ion_system_heap_allocate+0x133/0x8c0 [ 1311.966943] Node 0 [ 1311.970698] ? ion_alloc+0x187/0x810 [ 1311.970709] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1311.970719] ? ion_system_contig_heap_create+0x130/0x130 [ 1311.970729] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1311.970740] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1311.970750] ion_alloc+0x204/0x810 [ 1311.970768] ? ion_dma_buf_release+0x40/0x40 [ 1311.970779] ? __might_fault+0x177/0x1b0 [ 1311.970792] ion_ioctl+0xea/0x1f0 [ 1311.970802] ? ion_query_heaps+0x360/0x360 [ 1311.970813] ? __alloc_fd+0x1be/0x490 [ 1311.970821] ? ion_query_heaps+0x360/0x360 [ 1311.970832] do_vfs_ioctl+0x75a/0xff0 [ 1311.970843] ? ioctl_preallocate+0x1a0/0x1a0 [ 1311.970851] ? lock_downgrade+0x740/0x740 [ 1311.970864] ? __fget+0x225/0x360 [ 1311.970873] ? do_vfs_ioctl+0xff0/0xff0 [ 1311.970883] ? security_file_ioctl+0x83/0xb0 [ 1311.970893] SyS_ioctl+0x7f/0xb0 [ 1311.970900] ? do_vfs_ioctl+0xff0/0xff0 [ 1311.970911] do_syscall_64+0x1d5/0x640 [ 1311.970928] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1311.970935] RIP: 0033:0x465f69 [ 1311.970940] RSP: 002b:00007f978c555188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1311.970949] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1311.970954] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1311.970959] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1311.970968] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1311.979768] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1311.981715] R13: 00007ffd7f926e0f R14: 00007f978c555300 R15: 0000000000022000 [ 1312.089818] warn_alloc_show_mem: 2 callbacks suppressed [ 1312.089822] Mem-Info: [ 1312.111517] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1312.155343] active_anon:28012 inactive_anon:7065 isolated_anon:0 [ 1312.155343] active_file:463 inactive_file:726 isolated_file:0 [ 1312.155343] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1312.155343] slab_reclaimable:13537 slab_unreclaimable:114333 [ 1312.155343] mapped:53302 shmem:8976 pagetables:744 bounce:0 [ 1312.155343] free:13925 free_pcp:0 free_cma:0 [ 1312.165448] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1312.204482] Node 0 DMA32 free:17856kB min:36200kB low:45248kB high:54296kB active_anon:111288kB inactive_anon:20060kB active_file:1848kB inactive_file:2496kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2900kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1312.244156] Node 0 active_anon:111288kB inactive_anon:20060kB active_file:1848kB inactive_file:2796kB unevictable:0kB isolated(anon):0kB isolated(file):256kB mapped:210504kB dirty:4kB writeback:0kB shmem:27704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1312.252721] lowmem_reserve[]: [ 1312.292746] (null) [ 1312.298017] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1312.309771] CPU: 0 PID: 21158 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1312.315373] Node 1 active_anon:760kB inactive_anon:8200kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2704kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1312.317679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1312.344363] Node 0 [ 1312.353686] Call Trace: [ 1312.353711] dump_stack+0x1b2/0x281 [ 1312.353730] warn_alloc.cold+0x96/0x1cc [ 1312.353742] ? zone_watermark_ok_safe+0x220/0x220 [ 1312.353755] ? usleep_range+0x130/0x130 [ 1312.355991] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1312.358567] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1312.358581] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1312.362247] lowmem_reserve[]: [ 1312.366173] ? run_timer_softirq+0x5a0/0x5a0 [ 1312.371031] 0 [ 1312.374965] __alloc_pages_nodemask+0x2127/0x2720 [ 1312.401793] 2717 [ 1312.406865] ? lock_acquire+0x170/0x3f0 [ 1312.406881] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1312.406892] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1312.406907] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1312.406927] alloc_pages_current+0x155/0x260 [ 1312.412069] 2718 [ 1312.415024] ion_page_pool_alloc+0x118/0x1b0 [ 1312.419398] 2718 [ 1312.421189] ion_system_heap_allocate+0x133/0x8c0 [ 1312.421198] ? ion_alloc+0x187/0x810 [ 1312.421208] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1312.421217] ? ion_system_contig_heap_create+0x130/0x130 [ 1312.421228] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1312.421240] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1312.426064] 2718 [ 1312.428131] ion_alloc+0x204/0x810 [ 1312.436925] ? ion_dma_buf_release+0x40/0x40 [ 1312.441456] Node 0 [ 1312.446863] ? __might_fault+0x177/0x1b0 [ 1312.451296] DMA32 free:17856kB min:36200kB low:45248kB high:54296kB active_anon:111288kB inactive_anon:20060kB active_file:1848kB inactive_file:2924kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7360kB pagetables:2900kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1312.453300] ion_ioctl+0xea/0x1f0 [ 1312.457714] lowmem_reserve[]: [ 1312.459773] ? ion_query_heaps+0x360/0x360 [ 1312.464626] 0 [ 1312.468304] ? __alloc_fd+0x1be/0x490 [ 1312.473764] 0 [ 1312.479362] ? ion_query_heaps+0x360/0x360 [ 1312.484389] 0 [ 1312.489190] do_vfs_ioctl+0x75a/0xff0 [ 1312.491258] 0 [ 1312.494750] ? ioctl_preallocate+0x1a0/0x1a0 [ 1312.499130] 0 [ 1312.501352] ? lock_downgrade+0x740/0x740 [ 1312.501365] ? __fget+0x225/0x360 [ 1312.501374] ? do_vfs_ioctl+0xff0/0xff0 [ 1312.501389] ? security_file_ioctl+0x83/0xb0 [ 1312.501399] SyS_ioctl+0x7f/0xb0 [ 1312.533799] ? do_vfs_ioctl+0xff0/0xff0 [ 1312.533813] do_syscall_64+0x1d5/0x640 [ 1312.533828] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1312.533837] RIP: 0033:0x465f69 [ 1312.533846] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 [ 1312.537317] Node 0 [ 1312.540408] ORIG_RAX: 0000000000000010 [ 1312.540417] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1312.544697] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1312.546428] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1312.550210] lowmem_reserve[]: [ 1312.551996] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1312.552001] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1312.552006] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1312.565095] 0 [ 1312.599219] 0 [ 1312.614803] 0 [ 1312.674764] 0 [ 1312.690680] Bluetooth: hci1 command 0x0419 tx timeout [ 1312.691199] 0 [ 1312.760677] 0 0 0 [ 1312.764652] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1312.770662] 0 0 [ 1312.892980] Node 1 Normal free:631884kB min:53696kB low:67120kB high:80544kB active_anon:760kB inactive_anon:8200kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:76kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1312.930719] lowmem_reserve[]: 0 0 0 0 0 [ 1312.944081] Node 1 Normal free:599116kB min:53696kB low:67120kB high:80544kB active_anon:760kB inactive_anon:8200kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:76kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 1312.948583] lowmem_reserve[]: 0 0 0 0 0 [ 1312.977193] Node 0 DMA: 0*4kB 1*8kB (E) 2*16kB (UE) 5*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10952kB [ 1313.034940] lowmem_reserve[]: 0 0 0 0 0 [ 1313.038971] Node 0 DMA: 0*4kB 1*8kB (E) 2*16kB (UE) 5*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10952kB [ 1313.074147] Node 0 DMA32: 803*4kB (UE) 5969*8kB (UME) 1818*16kB (UME) 267*32kB (UM) 421*64kB (UME) 222*128kB (UM) 72*256kB (UM) 23*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 174164kB [ 1313.090893] Node 0 DMA32: 821*4kB (UE) 5929*8kB (UME) 1818*16kB (UME) 267*32kB (UM) 421*64kB (UME) 222*128kB (UM) 72*256kB (UM) 23*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 173916kB [ 1313.120679] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1313.174031] Node 1 Normal: 71*4kB (ME) 50*8kB (ME) 54*16kB (ME) 34*32kB (UM) 3989*64kB (UM) 941*128kB (UM) 154*256kB (UM) 89*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 463372kB [ 1313.187382] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1313.207613] Node 1 Normal: 71*4kB (ME) 50*8kB (ME) 54*16kB (ME) 34*32kB (UM) 3464*64kB (UM) 941*128kB (UM) 154*256kB (UM) 89*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 429772kB [ 1313.213920] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1313.230393] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1313.243505] warn_alloc_show_mem: 1 callbacks suppressed [ 1313.243509] Mem-Info: [ 1313.252222] active_anon:28018 inactive_anon:7065 isolated_anon:0 [ 1313.252222] active_file:753 inactive_file:1739 isolated_file:0 [ 1313.252222] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1313.252222] slab_reclaimable:13548 slab_unreclaimable:114063 [ 1313.252222] mapped:45475 shmem:8976 pagetables:728 bounce:0 [ 1313.252222] free:116982 free_pcp:381 free_cma:0 [ 1313.260750] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1313.289130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1313.320724] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1313.340777] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1313.349753] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1313.351589] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1313.392696] 11821 total pagecache pages [ 1313.396722] 0 pages in swap cache [ 1313.400201] Swap cache stats: add 0, delete 0, find 0/0 [ 1313.400769] Node 0 active_anon:111512kB inactive_anon:20060kB active_file:3304kB inactive_file:7852kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180396kB dirty:4kB writeback:0kB shmem:27704kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1313.421971] Free swap = 0kB [ 1313.450681] 11895 total pagecache pages [ 1313.454700] 0 pages in swap cache [ 1313.458981] Swap cache stats: add 0, delete 0, find 0/0 [ 1313.463881] Total swap = 0kB [ 1313.467368] 2097051 pages RAM [ 1313.470500] 0 pages HighMem/MovableOnly [ 1313.470650] Free swap = 0kB [ 1313.482442] Total swap = 0kB [ 1313.483974] 363840 pages reserved [ 1313.486054] 2097051 pages RAM [ 1313.488928] 0 pages cma reserved [ 1313.488937] Out of memory (oom_kill_allocating_task): Kill process 7968 (syz-fuzzer) score 0 or sacrifice child [ 1313.488998] Killed process 19844 (syz-executor.4) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1313.516186] 0 pages HighMem/MovableOnly [ 1313.520205] 363840 pages reserved [ 1313.524392] Node 1 active_anon:660kB inactive_anon:8200kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2704kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1313.554673] 0 pages cma reserved [ 1313.594001] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1313.598659] Node 0 [ 1313.605962] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1313.623354] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1313.633857] syz-executor.2 cpuset= [ 1313.651255] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1313.657852] oom_reaper: reaped process 19844 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1313.670671] CPU: 1 PID: 21154 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1313.678563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1313.682513] / [ 1313.687913] Call Trace: [ 1313.687919] mems_allowed=0-1 [ 1313.695729] dump_stack+0x1b2/0x281 [ 1313.699355] warn_alloc.cold+0x96/0x1cc [ 1313.703355] ? zone_watermark_ok_safe+0x220/0x220 [ 1313.708321] __alloc_pages_nodemask+0x2127/0x2720 [ 1313.714482] ? lock_acquire+0x170/0x3f0 [ 1313.718452] ? lock_acquire+0x170/0x3f0 [ 1313.722427] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1313.727272] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1313.732720] ? __mutex_unlock_slowpath+0x75/0x770 [ 1313.737585] ? __list_del_entry_valid+0xb3/0xf0 [ 1313.742266] alloc_pages_current+0x155/0x260 [ 1313.746672] ion_page_pool_alloc+0x118/0x1b0 [ 1313.751077] ion_system_heap_allocate+0x133/0x8c0 [ 1313.755916] ? _raw_spin_unlock+0x29/0x40 [ 1313.760073] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1313.765010] ? ion_system_contig_heap_create+0x130/0x130 [ 1313.770457] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1313.775474] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1313.780317] ion_alloc+0x27a/0x810 [ 1313.783858] ? ion_dma_buf_release+0x40/0x40 [ 1313.788270] ? __might_fault+0x177/0x1b0 [ 1313.792350] ion_ioctl+0xea/0x1f0 [ 1313.795798] ? ion_query_heaps+0x360/0x360 [ 1313.800035] ? __alloc_fd+0x1be/0x490 [ 1313.803830] ? ion_query_heaps+0x360/0x360 [ 1313.808060] do_vfs_ioctl+0x75a/0xff0 [ 1313.811858] ? ioctl_preallocate+0x1a0/0x1a0 [ 1313.816270] ? lock_downgrade+0x740/0x740 [ 1313.820428] ? __fget+0x225/0x360 [ 1313.823881] ? do_vfs_ioctl+0xff0/0xff0 [ 1313.827857] ? security_file_ioctl+0x83/0xb0 [ 1313.832263] SyS_ioctl+0x7f/0xb0 [ 1313.835628] ? do_vfs_ioctl+0xff0/0xff0 [ 1313.839608] do_syscall_64+0x1d5/0x640 [ 1313.843503] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1313.848697] RIP: 0033:0x465f69 [ 1313.851878] RSP: 002b:00007f978c555188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1313.859584] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1313.867151] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1313.874433] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1313.881707] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1313.888995] R13: 00007ffd7f926e0f R14: 00007f978c555300 R15: 0000000000022000 [ 1313.901533] CPU: 0 PID: 21153 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1313.909474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1313.911836] lowmem_reserve[]: [ 1313.919352] Call Trace: [ 1313.919363] 0 [ 1313.922481] dump_stack+0x1b2/0x281 [ 1313.922494] warn_alloc.cold+0x96/0x1cc [ 1313.922506] ? zone_watermark_ok_safe+0x220/0x220 [ 1313.922525] __alloc_pages_nodemask+0x2127/0x2720 [ 1313.922536] ? lock_acquire+0x170/0x3f0 [ 1313.922547] ? lock_acquire+0x170/0x3f0 [ 1313.922561] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1313.922577] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1313.922587] ? __mutex_unlock_slowpath+0x75/0x770 [ 1313.922601] alloc_pages_current+0x155/0x260 [ 1313.922615] ion_page_pool_alloc+0x118/0x1b0 [ 1313.926113] 2717 [ 1313.927193] ion_system_heap_allocate+0x133/0x8c0 [ 1313.927206] ? _raw_spin_unlock+0x29/0x40 [ 1313.927215] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1313.927225] ? ion_system_contig_heap_create+0x130/0x130 [ 1313.927236] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1313.927247] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1313.927258] ion_alloc+0x27a/0x810 [ 1313.927272] ? ion_dma_buf_release+0x40/0x40 [ 1313.931508] 2718 [ 1313.934849] ? __might_fault+0x177/0x1b0 [ 1313.934864] ion_ioctl+0xea/0x1f0 [ 1313.934874] ? ion_query_heaps+0x360/0x360 [ 1313.934884] ? __alloc_fd+0x1be/0x490 [ 1313.934894] ? ion_query_heaps+0x360/0x360 [ 1313.934904] do_vfs_ioctl+0x75a/0xff0 [ 1313.934915] ? ioctl_preallocate+0x1a0/0x1a0 [ 1313.940498] 2718 [ 1313.944628] ? lock_downgrade+0x740/0x740 [ 1313.944643] ? __fget+0x225/0x360 [ 1313.944659] ? do_vfs_ioctl+0xff0/0xff0 [ 1313.944671] ? security_file_ioctl+0x83/0xb0 [ 1313.949362] 2718 [ 1313.952613] SyS_ioctl+0x7f/0xb0 [ 1313.952621] ? do_vfs_ioctl+0xff0/0xff0 [ 1313.952633] do_syscall_64+0x1d5/0x640 [ 1313.952650] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1313.952658] RIP: 0033:0x465f69 [ 1313.952663] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1313.952673] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1313.952678] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1313.952683] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1313.952688] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1313.952697] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1314.326033] Node 0 DMA32 free:70264kB min:36200kB low:45248kB high:54296kB active_anon:111468kB inactive_anon:20068kB active_file:2976kB inactive_file:5436kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2688kB bounce:0kB free_pcp:1000kB local_pcp:692kB free_cma:0kB [ 1314.359589] lowmem_reserve[]: 0 0 0 0 0 [ 1314.365323] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1314.435195] lowmem_reserve[]: 0 0 0 0 0 [ 1314.439240] Node 1 Normal free:26896kB min:53696kB low:67120kB high:80544kB active_anon:552kB inactive_anon:8200kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:76kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1314.467608] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1314.489020] systemd-journal cpuset=/ mems_allowed=0-1 [ 1314.507163] CPU: 0 PID: 19766 Comm: systemd-journal Not tainted 4.14.225-syzkaller #0 [ 1314.513337] lowmem_reserve[]: [ 1314.515188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1314.515198] 0 [ 1314.518289] Call Trace: [ 1314.532050] dump_stack+0x1b2/0x281 [ 1314.536034] dump_header+0x178/0x82f [ 1314.539761] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1314.542225] 0 [ 1314.544867] ? ___ratelimit+0x2cd/0x530 [ 1314.544869] 0 0 [ 1314.546689] oom_kill_process.cold+0x10/0xb18 [ 1314.557115] out_of_memory+0xe3e/0x1190 [ 1314.559556] 0 [ 1314.561099] ? oom_killer_disable+0x1c0/0x1c0 [ 1314.561108] ? mutex_trylock+0x152/0x1a0 [ 1314.561118] __alloc_pages_nodemask+0x23e1/0x2720 [ 1314.561137] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1314.567427] ? cache_grow_begin+0x41/0x630 [ 1314.583266] Node 0 DMA: [ 1314.585380] cache_grow_begin+0x91/0x630 [ 1314.585391] ? cache_grow_begin+0x91/0x630 [ 1314.588063] 0*4kB [ 1314.592121] fallback_alloc+0x207/0x2c0 [ 1314.592134] kmem_cache_alloc+0x1e5/0x3c0 [ 1314.592144] getname_flags+0xc8/0x550 [ 1314.592155] user_path_at_empty+0x2a/0x50 [ 1314.592167] SyS_faccessat+0x21b/0x680 [ 1314.617232] 1*8kB (E) 2*16kB [ 1314.618435] ? SyS_fallocate+0x80/0x80 [ 1314.618447] ? do_syscall_64+0x4c/0x640 [ 1314.621606] (UE) [ 1314.625448] ? SyS_faccessat+0x680/0x680 [ 1314.629393] 5*32kB [ 1314.631442] do_syscall_64+0x1d5/0x640 [ 1314.631457] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1314.631465] RIP: 0033:0x7fe9fcfcc9c7 [ 1314.631470] RSP: 002b:00007ffe837ca578 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1314.631481] RAX: ffffffffffffffda RBX: 00007ffe837cb1b0 RCX: 00007fe9fcfcc9c7 [ 1314.635522] (UE) [ 1314.637736] RDX: 00007fe9fda3da00 RSI: 0000000000000000 RDI: 000055c9c21ec9a3 [ 1314.637744] RBP: 00007ffe837ca5b0 R08: 0000000000000000 R09: 000000000000002b [ 1314.641668] 2*64kB [ 1314.646796] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000 [ 1314.646804] R13: 0000000000000000 R14: 00007ffe837cb1b0 R15: 000055c9c2ce5120 [ 1314.650501] (UE) [ 1314.662459] warn_alloc_show_mem: 1 callbacks suppressed [ 1314.662462] Mem-Info: [ 1314.688523] 1*128kB [ 1314.700114] active_anon:27980 inactive_anon:7067 isolated_anon:0 [ 1314.700114] active_file:690 inactive_file:715 isolated_file:0 [ 1314.700114] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1314.700114] slab_reclaimable:13580 slab_unreclaimable:116379 [ 1314.700114] mapped:36236 shmem:8980 pagetables:691 bounce:0 [ 1314.700114] free:13830 free_pcp:135 free_cma:0 [ 1314.728857] (E) [ 1314.749045] Node 0 active_anon:111368kB inactive_anon:20068kB active_file:2756kB inactive_file:2852kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:141992kB dirty:4kB writeback:0kB shmem:27720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1314.774172] 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10952kB [ 1314.782894] Node 1 active_anon:552kB inactive_anon:8200kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2952kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1314.813689] Node 0 DMA32: 1121*4kB (ME) 711*8kB [ 1314.817960] Mem-Info: [ 1314.818644] (ME) [ 1314.822796] active_anon:27980 inactive_anon:7067 isolated_anon:0 [ 1314.822796] active_file:690 inactive_file:715 isolated_file:32 [ 1314.822796] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1314.822796] slab_reclaimable:13580 slab_unreclaimable:116379 [ 1314.822796] mapped:36236 shmem:8980 pagetables:691 bounce:0 [ 1314.822796] free:13830 free_pcp:135 free_cma:0 [ 1314.822812] Node 0 active_anon:111368kB inactive_anon:20068kB active_file:2756kB inactive_file:2852kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:141992kB dirty:4kB writeback:0kB shmem:27720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1314.841222] 193*16kB [ 1314.864285] Node 0 [ 1314.895250] Node 1 active_anon:552kB inactive_anon:8200kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2952kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1314.927464] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1314.958616] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1314.988341] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1314.993463] Node 0 DMA32 free:17584kB min:36200kB low:45248kB high:54296kB active_anon:111468kB inactive_anon:20068kB active_file:2868kB inactive_file:2744kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7392kB pagetables:2688kB bounce:0kB free_pcp:420kB local_pcp:120kB free_cma:0kB [ 1315.026487] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1315.031685] Node 0 DMA32 free:17688kB min:36200kB low:45248kB high:54296kB active_anon:111312kB inactive_anon:20068kB active_file:2864kB inactive_file:3000kB unevictable:0kB writepending:8kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2616kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1315.038333] (ME) [ 1315.064484] lowmem_reserve[]: 0 0 0 0 0 [ 1315.070548] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1315.091157] 146*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17996kB [ 1315.128287] lowmem_reserve[]: 0 0 0 0 0 [ 1315.132539] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1315.134270] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1315.164315] Node 1 [ 1315.182957] lowmem_reserve[]: 0 0 0 0 0 [ 1315.189210] Node 1 Normal free:26792kB min:53696kB low:67120kB high:80544kB active_anon:552kB inactive_anon:8200kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:76kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1315.205895] Normal: 128*4kB (UME) 67*8kB (UME) 51*16kB (ME) 35*32kB (UM) 38*64kB (M) 19*128kB (M) 14*256kB (UM) 30*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26792kB [ 1315.240822] lowmem_reserve[]: 0 0 0 0 0 [ 1315.259196] Node 0 DMA: 0*4kB 1*8kB (E) 2*16kB (UE) 5*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10952kB [ 1315.276318] Node 0 DMA32: 1169*4kB (UME) 727*8kB (UME) 195*16kB (UME) 133*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17932kB [ 1315.303913] lowmem_reserve[]: 0 0 0 0 0 [ 1315.307946] Node 1 Normal free:26792kB min:53696kB low:67120kB high:80544kB active_anon:552kB inactive_anon:8200kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:76kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1315.316461] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1315.358889] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1315.375539] Node 1 Normal: 128*4kB (UME) 67*8kB (UME) 51*16kB (ME) 35*32kB (UM) 38*64kB (M) 19*128kB (M) 14*256kB (UM) 30*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26792kB [ 1315.385532] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1315.399647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1315.417653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1315.428395] lowmem_reserve[]: 0 0 0 0 0 [ 1315.435879] Node 0 DMA: 0*4kB 1*8kB (E) 2*16kB (UE) 5*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10952kB [ 1315.462348] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1315.469154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1315.477488] 10396 total pagecache pages [ 1315.483668] 0 pages in swap cache [ 1315.487152] Swap cache stats: add 0, delete 0, find 0/0 [ 1315.492654] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1315.492854] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1315.510894] Free swap = 0kB [ 1315.516449] Total swap = 0kB [ 1315.516612] Node 0 DMA32: [ 1315.519458] 2097051 pages RAM [ 1315.519464] 0 pages HighMem/MovableOnly [ 1315.528207] 1180*4kB (UME) 736*8kB (UME) 195*16kB (UME) 133*32kB (UM) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18048kB [ 1315.535709] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1315.554886] 363840 pages reserved [ 1315.558380] 0 pages cma reserved [ 1315.564160] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1315.570661] CPU: 1 PID: 21153 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1315.575189] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1315.582769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1315.582774] Call Trace: [ 1315.582801] dump_stack+0x1b2/0x281 [ 1315.582813] warn_alloc.cold+0x96/0x1cc [ 1315.582825] ? zone_watermark_ok_safe+0x220/0x220 [ 1315.582833] ? usleep_range+0x130/0x130 [ 1315.582842] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1315.582853] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1315.582864] ? run_timer_softirq+0x5a0/0x5a0 [ 1315.582879] __alloc_pages_nodemask+0x2127/0x2720 [ 1315.582894] ? lock_acquire+0x170/0x3f0 [ 1315.582908] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1315.614394] Node 1 [ 1315.615854] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1315.619825] Normal: [ 1315.624948] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1315.624961] ? retint_kernel+0x2d/0x2d [ 1315.624974] alloc_pages_current+0x155/0x260 [ 1315.624989] ion_page_pool_alloc+0x118/0x1b0 [ 1315.624999] ion_system_heap_allocate+0x133/0x8c0 [ 1315.625009] ? _raw_spin_unlock+0x29/0x40 [ 1315.625018] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1315.625028] ? ion_system_contig_heap_create+0x130/0x130 [ 1315.625042] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1315.630228] 10396 total pagecache pages [ 1315.634577] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1315.634591] ion_alloc+0x27a/0x810 [ 1315.634606] ? ion_dma_buf_release+0x40/0x40 [ 1315.634617] ? __might_fault+0x177/0x1b0 [ 1315.634628] ion_ioctl+0xea/0x1f0 [ 1315.634638] ? ion_query_heaps+0x360/0x360 [ 1315.634649] ? __alloc_fd+0x1be/0x490 [ 1315.634658] ? ion_query_heaps+0x360/0x360 [ 1315.634668] do_vfs_ioctl+0x75a/0xff0 [ 1315.634679] ? ioctl_preallocate+0x1a0/0x1a0 [ 1315.651392] 0 pages in swap cache [ 1315.655025] ? lock_downgrade+0x740/0x740 [ 1315.657358] Swap cache stats: add 0, delete 0, find 0/0 [ 1315.662806] ? __fget+0x225/0x360 [ 1315.662816] ? do_vfs_ioctl+0xff0/0xff0 [ 1315.662825] ? security_file_ioctl+0x83/0xb0 [ 1315.662833] SyS_ioctl+0x7f/0xb0 [ 1315.662842] ? do_vfs_ioctl+0xff0/0xff0 [ 1315.662852] do_syscall_64+0x1d5/0x640 [ 1315.662868] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1315.662877] RIP: 0033:0x465f69 [ 1315.662881] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1315.662891] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1315.662897] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1315.662902] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1315.662908] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1315.662912] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1315.837874] 158*4kB (UME) 67*8kB (UME) 51*16kB (ME) 35*32kB (UM) 1999*64kB (UM) 225*128kB (UM) 116*256kB (UM) 54*512kB (UM) 141*1024kB (U) 11*2048kB (U) 0*4096kB = 384096kB [ 1315.856761] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1315.865715] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1315.877604] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1315.900661] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1315.909320] 10396 total pagecache pages [ 1315.933091] 0 pages in swap cache [ 1315.936593] Swap cache stats: add 0, delete 0, find 0/0 [ 1315.941115] Mem-Info: [ 1315.953840] Free swap = 0kB [ 1315.956884] Total swap = 0kB [ 1315.959901] 2097051 pages RAM [ 1315.970782] 0 pages HighMem/MovableOnly [ 1315.970787] 363840 pages reserved [ 1315.970790] 0 pages cma reserved [ 1315.970798] Out of memory (oom_kill_allocating_task): Kill process 19766 (systemd-journal) score 0 or sacrifice child [ 1315.970967] Killed process 19766 (systemd-journal) total-vm:46096kB, anon-rss:484kB, file-rss:0kB, shmem-rss:2932kB [ 1315.985032] active_anon:27963 inactive_anon:7067 isolated_anon:0 [ 1315.985032] active_file:689 inactive_file:729 isolated_file:0 [ 1315.985032] unevictable:0 dirty:2 writeback:0 unstable:0 [ 1315.985032] slab_reclaimable:13606 slab_unreclaimable:116158 [ 1315.985032] mapped:36170 shmem:8980 pagetables:677 bounce:0 [ 1315.985032] free:208286 free_pcp:9 free_cma:0 [ 1315.993962] oom_reaper: reaped process 19766 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2932kB [ 1316.070911] Node 0 active_anon:111168kB inactive_anon:20068kB active_file:2644kB inactive_file:3168kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141560kB dirty:8kB writeback:0kB shmem:27720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1316.119725] Free swap = 0kB [ 1316.144352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1316.145398] Total swap = 0kB [ 1316.154742] 2097051 pages RAM [ 1316.156950] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1316.158686] 0 pages HighMem/MovableOnly [ 1316.171823] Node 1 active_anon:200kB inactive_anon:8200kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:88kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1316.186953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1316.200867] 363840 pages reserved [ 1316.211086] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1316.217490] 0 pages cma reserved [ 1316.258334] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1316.259253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1316.280365] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1316.287409] systemd[1]: Stopped Journal Service. [ 1316.295825] Node 0 DMA free:11404kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1316.316133] systemd[1]: Starting Journal Service... [ 1316.326465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1316.336465] systemd[1]: Stopped System Logging Service. [ 1316.359293] device bridge_slave_1 left promiscuous mode [ 1316.378830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.403577] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1316.408201] systemd[1]: Starting System Logging Service... [ 1316.419773] device bridge_slave_0 left promiscuous mode [ 1316.427434] Node 0 DMA32 free:44376kB min:36200kB low:45248kB high:54296kB active_anon:111168kB inactive_anon:20068kB active_file:3116kB inactive_file:8616kB unevictable:0kB writepending:8kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2632kB bounce:0kB free_pcp:628kB local_pcp:88kB free_cma:0kB [ 1316.463326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.504236] device veth1_macvtap left promiscuous mode [ 1316.509575] device veth0_macvtap left promiscuous mode [ 1316.543056] device veth1_vlan left promiscuous mode [ 1316.548170] device veth0_vlan left promiscuous mode [ 1316.563694] lowmem_reserve[]: 0 0 0 0 0 [ 1316.567723] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1316.654450] lowmem_reserve[]: 0 0 0 0 0 [ 1316.658508] Node 1 Normal free:274864kB min:53696kB low:67120kB high:80544kB active_anon:700kB inactive_anon:8200kB active_file:1100kB inactive_file:12704kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:224kB bounce:0kB free_pcp:528kB local_pcp:148kB free_cma:0kB [ 1316.762664] lowmem_reserve[]: 0 0 0 0 0 [ 1316.777892] Node 0 DMA: 1*4kB (U) 2*8kB (UE) 3*16kB (UE) 9*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11108kB [ 1316.857832] Node 0 DMA32: 1494*4kB (UME) 940*8kB (UME) 320*16kB (UME) 379*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 30744kB [ 1316.890208] rsyslogd invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1316.925985] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1316.935661] rsyslogd cpuset=/ mems_allowed=0-1 [ 1316.944954] device hsr_slave_1 left promiscuous mode [ 1316.957402] Node 1 Normal: 163*4kB (UM) 74*8kB (UME) 67*16kB (UME) 47*32kB (UM) 30*64kB (UM) 21*128kB (UM) 11*256kB (UM) 41*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 32236kB [ 1316.960693] CPU: 1 PID: 21213 Comm: rsyslogd Not tainted 4.14.225-syzkaller #0 [ 1316.980525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1316.989878] Call Trace: [ 1316.992479] dump_stack+0x1b2/0x281 [ 1316.996105] dump_header+0x178/0x82f [ 1316.998704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1316.999833] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1317.013753] ? ___ratelimit+0x2cd/0x530 [ 1317.017732] oom_kill_process.cold+0x10/0xb18 [ 1317.017881] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1317.022255] out_of_memory+0xe3e/0x1190 [ 1317.022268] ? oom_killer_disable+0x1c0/0x1c0 [ 1317.022276] ? mutex_trylock+0x152/0x1a0 [ 1317.022286] __alloc_pages_nodemask+0x23e1/0x2720 [ 1317.022299] ? dput.part.0+0x56f/0x710 [ 1317.045127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1317.048184] ? __fput+0x445/0x7a0 [ 1317.057946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1317.060885] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1317.060894] ? __lock_acquire+0x5fc/0x3f20 [ 1317.060906] ? __lock_acquire+0x5fc/0x3f20 [ 1317.060920] alloc_pages_vma+0xd2/0x6d0 [ 1317.060933] __handle_mm_fault+0x25fa/0x4620 [ 1317.060943] ? vm_insert_page+0x7c0/0x7c0 [ 1317.064395] 10896 total pagecache pages [ 1317.072968] ? lock_acquire+0x170/0x3f0 [ 1317.072977] ? task_work_run+0xfd/0x190 [ 1317.072993] handle_mm_fault+0x391/0x860 [ 1317.073005] __do_page_fault+0x549/0xad0 [ 1317.073016] ? spurious_fault+0x640/0x640 [ 1317.073023] ? do_page_fault+0x60/0x500 [ 1317.073033] ? page_fault+0x2f/0x50 [ 1317.073040] page_fault+0x45/0x50 [ 1317.073048] RIP: 5a052b58:0x56054187ffe0 [ 1317.073057] RSP: 005b:0000000000002710 EFLAGS: 00000020 [ 1317.078468] 0 pages in swap cache [ 1317.095480] device hsr_slave_0 left promiscuous mode [ 1317.099636] Swap cache stats: add 0, delete 0, find 0/0 [ 1317.140485] team0 (unregistering): Port device team_slave_1 removed [ 1317.193499] Free swap = 0kB [ 1317.194158] Mem-Info: [ 1317.196562] Total swap = 0kB [ 1317.198975] active_anon:27979 inactive_anon:7064 isolated_anon:0 [ 1317.198975] active_file:766 inactive_file:750 isolated_file:0 [ 1317.198975] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1317.198975] slab_reclaimable:13689 slab_unreclaimable:115989 [ 1317.198975] mapped:35542 shmem:8980 pagetables:696 bounce:0 [ 1317.198975] free:13879 free_pcp:313 free_cma:0 [ 1317.212935] 2097051 pages RAM [ 1317.241449] team0 (unregistering): Port device team_slave_0 removed [ 1317.281514] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1317.286472] 0 pages HighMem/MovableOnly [ 1317.309420] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1317.317519] CPU: 1 PID: 21158 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1317.320418] 363840 pages reserved [ 1317.325415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1317.325419] Call Trace: [ 1317.325442] dump_stack+0x1b2/0x281 [ 1317.325456] warn_alloc.cold+0x96/0x1cc [ 1317.325467] ? zone_watermark_ok_safe+0x220/0x220 [ 1317.325488] __alloc_pages_nodemask+0x2127/0x2720 [ 1317.325502] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1317.346764] 0 pages cma reserved [ 1317.348513] ? finish_task_switch+0x178/0x610 [ 1317.370567] ? finish_task_switch+0x14d/0x610 [ 1317.376127] ? lock_acquire+0x170/0x3f0 [ 1317.380128] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1317.384991] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1317.390467] ? __mutex_unlock_slowpath+0x75/0x770 [ 1317.395339] ? alloc_pages_current+0x37/0x260 [ 1317.399845] alloc_pages_current+0x155/0x260 [ 1317.404287] ion_page_pool_alloc+0x118/0x1b0 [ 1317.408708] ion_system_heap_allocate+0x133/0x8c0 [ 1317.413566] ? _raw_spin_unlock+0x29/0x40 [ 1317.417723] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1317.422680] ? ion_system_contig_heap_create+0x130/0x130 [ 1317.428143] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1317.433170] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1317.438041] ion_alloc+0x27a/0x810 [ 1317.441601] ? ion_dma_buf_release+0x40/0x40 [ 1317.446021] ? __might_fault+0x177/0x1b0 [ 1317.450101] ion_ioctl+0xea/0x1f0 [ 1317.453575] ? ion_query_heaps+0x360/0x360 [ 1317.457814] ? __alloc_fd+0x1be/0x490 [ 1317.461625] ? ion_query_heaps+0x360/0x360 [ 1317.465866] do_vfs_ioctl+0x75a/0xff0 [ 1317.469699] ? ioctl_preallocate+0x1a0/0x1a0 [ 1317.474128] ? lock_downgrade+0x740/0x740 [ 1317.478281] ? __fget+0x225/0x360 [ 1317.481742] ? do_vfs_ioctl+0xff0/0xff0 [ 1317.485739] ? security_file_ioctl+0x83/0xb0 [ 1317.490153] SyS_ioctl+0x7f/0xb0 [ 1317.493522] ? do_vfs_ioctl+0xff0/0xff0 [ 1317.497505] do_syscall_64+0x1d5/0x640 [ 1317.501424] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1317.506613] RIP: 0033:0x465f69 [ 1317.509799] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1317.517522] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1317.524801] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1317.532075] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1317.539351] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1317.546676] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1317.559355] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1317.567580] Node 0 active_anon:110788kB inactive_anon:20060kB active_file:2872kB inactive_file:2904kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142052kB dirty:0kB writeback:0kB shmem:27720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1317.599831] Node 1 active_anon:1128kB inactive_anon:8196kB active_file:80kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1317.610747] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1317.631403] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1317.661105] systemd-journald[21212]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1317.679408] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1317.684646] Node 0 DMA32 free:245176kB min:36200kB low:45248kB high:54296kB active_anon:110788kB inactive_anon:20060kB active_file:2872kB inactive_file:2932kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2608kB bounce:0kB free_pcp:712kB local_pcp:444kB free_cma:0kB [ 1317.720126] lowmem_reserve[]: 0 0 0 0 0 [ 1317.723233] bond0 (unregistering): Released all slaves [ 1317.726248] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1317.789983] lowmem_reserve[]: 0 0 0 0 0 [ 1317.820677] Node 1 Normal free:952332kB min:53696kB low:67120kB high:80544kB active_anon:1128kB inactive_anon:8196kB active_file:208kB inactive_file:192kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:176kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1317.889788] lowmem_reserve[]: 0 0 0 0 0 [ 1317.900671] Node 0 DMA: 1*4kB (U) 1*8kB (E) 2*16kB (UE) 7*32kB (UE) 3*64kB (UE) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11084kB [ 1317.930677] Node 0 DMA32: 744*4kB (UE) 2642*8kB (UME) 1405*16kB (UME) 16*32kB (U) 1469*64kB (UME) 251*128kB (U) 74*256kB (UM) 23*512kB (U) 50*1024kB (U) 15*2048kB (U) 1*4096kB (U) = 289984kB [ 1317.963769] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1317.980833] Mem-Info: [ 1317.983264] active_anon:28004 inactive_anon:9089 isolated_anon:0 [ 1317.983264] active_file:988 inactive_file:1406 isolated_file:0 [ 1317.983264] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1317.983264] slab_reclaimable:13689 slab_unreclaimable:115357 [ 1317.983264] mapped:37667 shmem:11005 pagetables:696 bounce:0 [ 1317.983264] free:307274 free_pcp:111 free_cma:0 [ 1318.030694] Node 1 Normal: 63*4kB (UM) 48*8kB (UME) 43*16kB (UME) 43*32kB (UM) 5668*64kB (UME) 1135*128kB (UME) 203*256kB (UM) 91*512kB (UME) 301*1024kB (U) 11*2048kB (U) 3*4096kB (U) = 952332kB [ 1318.061080] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1318.069970] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1318.091101] Node 0 active_anon:110992kB inactive_anon:28252kB active_file:3912kB inactive_file:5740kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175336kB dirty:44kB writeback:0kB shmem:35912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1318.119467] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1318.141079] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1318.149830] 13462 total pagecache pages [ 1318.170706] 0 pages in swap cache [ 1318.174193] Swap cache stats: add 0, delete 0, find 0/0 [ 1318.179551] Free swap = 0kB [ 1318.182642] Node 1 active_anon:1188kB inactive_anon:8136kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1318.213991] Total swap = 0kB [ 1318.217095] 2097051 pages RAM [ 1318.220196] 0 pages HighMem/MovableOnly [ 1318.241242] Node 0 DMA free:11084kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1318.250718] 363840 pages reserved [ 1318.303573] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1318.308654] Node 0 DMA32 free:130912kB min:36200kB low:45248kB high:54296kB active_anon:110992kB inactive_anon:28252kB active_file:3912kB inactive_file:5740kB unevictable:0kB writepending:44kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2816kB bounce:0kB free_pcp:816kB local_pcp:620kB free_cma:0kB [ 1318.341782] 0 pages cma reserved [ 1318.345173] Out of memory (oom_kill_allocating_task): Kill process 21213 (rsyslogd) score 0 or sacrifice child [ 1318.373430] systemd[1]: Started Journal Service. [ 1318.382285] Killed process 21213 (rsyslogd) total-vm:29964kB, anon-rss:280kB, file-rss:840kB, shmem-rss:0kB [ 1318.407129] oom_reaper: reaped process 21213 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1318.417465] lowmem_reserve[]: 0 0 0 0 0 [ 1318.433581] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1318.504690] lowmem_reserve[]: 0 0 0 0 0 [ 1318.512133] Node 1 Normal free:952332kB min:53696kB low:67120kB high:80544kB active_anon:988kB inactive_anon:8136kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:176kB bounce:0kB free_pcp:396kB local_pcp:112kB free_cma:0kB [ 1318.542323] lowmem_reserve[]: 0 0 0 0 0 [ 1318.547417] Node 0 DMA: 1*4kB (U) 1*8kB (E) 2*16kB (UE) 7*32kB (UE) 3*64kB (UE) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11084kB [ 1318.586780] Node 0 DMA32: 670*4kB (ME) 397*8kB (UME) 66*16kB (E) 2*32kB (UE) 4*64kB (UE) 2*128kB (UM) 1*256kB (M) 1*512kB (U) 7*1024kB (UM) 15*2048kB (U) 0*4096kB = 46144kB [ 1318.673035] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1318.724459] Node 1 Normal: 2*4kB (UM) 3*8kB (UME) 2*16kB (ME) 2*32kB (UM) 4821*64kB (UME) 1130*128kB (UME) 203*256kB (UM) 91*512kB (UME) 301*1024kB (U) 11*2048kB (U) 3*4096kB (U) = 894912kB [ 1318.792398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1318.820748] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1318.841322] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1318.850185] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1318.888986] 15201 total pagecache pages [ 1318.911621] 0 pages in swap cache [ 1318.915220] Swap cache stats: add 0, delete 0, find 0/0 [ 1318.920583] Free swap = 0kB [ 1318.925062] Total swap = 0kB [ 1318.928279] 2097051 pages RAM [ 1318.932847] 0 pages HighMem/MovableOnly [ 1318.937659] 363840 pages reserved [ 1318.942594] 0 pages cma reserved [ 1319.784402] syz-executor.3 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1319.825542] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1319.831912] CPU: 0 PID: 21215 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 1319.839825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1319.849185] Call Trace: [ 1319.851790] dump_stack+0x1b2/0x281 [ 1319.855445] dump_header+0x178/0x82f [ 1319.859161] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1319.864268] ? ___ratelimit+0x2cd/0x530 [ 1319.868251] oom_kill_process.cold+0x10/0xb18 [ 1319.872759] out_of_memory+0xe3e/0x1190 [ 1319.876751] ? oom_killer_disable+0x1c0/0x1c0 [ 1319.881254] ? mutex_trylock+0x152/0x1a0 [ 1319.885322] __alloc_pages_nodemask+0x23e1/0x2720 [ 1319.890182] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1319.895032] ? setup_net+0x22f/0x530 [ 1319.898801] ? mark_held_locks+0xa6/0xf0 [ 1319.902866] ? cache_grow_begin+0x41/0x630 [ 1319.907128] cache_grow_begin+0x91/0x630 [ 1319.911198] ? cache_grow_begin+0x91/0x630 [ 1319.915441] fallback_alloc+0x207/0x2c0 [ 1319.919422] __kmalloc_track_caller+0x20e/0x400 [ 1319.924090] ? __devinet_sysctl_register+0x83/0x250 [ 1319.929109] kmemdup+0x23/0x50 [ 1319.932328] __devinet_sysctl_register+0x83/0x250 [ 1319.937167] ? inet_netconf_notify_devconf+0x190/0x190 [ 1319.942441] ? __kmalloc_track_caller+0x39f/0x400 [ 1319.947278] ? devinet_init_net+0x88/0x450 [ 1319.951506] ? devinet_exit_net+0x280/0x280 [ 1319.955825] ? memcpy+0x35/0x50 [ 1319.959115] ? devinet_exit_net+0x280/0x280 [ 1319.963437] devinet_init_net+0x11e/0x450 [ 1319.967585] ? devinet_exit_net+0x280/0x280 [ 1319.971918] ops_init+0xaa/0x3e0 [ 1319.975301] setup_net+0x22f/0x530 [ 1319.978843] ? rtnl_net_dumpid_one+0x240/0x240 [ 1319.983426] ? kmem_cache_alloc+0x35f/0x3c0 [ 1319.987751] copy_net_ns+0x19b/0x440 [ 1319.991472] create_new_namespaces+0x375/0x720 [ 1319.996069] unshare_nsproxy_namespaces+0xa1/0x1d0 [ 1320.001007] SyS_unshare+0x308/0x7f0 [ 1320.004734] ? walk_process_tree+0x2a0/0x2a0 [ 1320.009147] ? task_work_run+0xfd/0x190 [ 1320.013230] ? do_syscall_64+0x4c/0x640 [ 1320.017223] ? walk_process_tree+0x2a0/0x2a0 [ 1320.021653] do_syscall_64+0x1d5/0x640 [ 1320.025554] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1320.031087] RIP: 0033:0x467517 [ 1320.034268] RSP: 002b:00007fffbec443a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 1320.041970] RAX: ffffffffffffffda RBX: 000000000056ca68 RCX: 0000000000467517 [ 1320.049241] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000040000000 [ 1320.056506] RBP: 00007fffbec443d0 R08: 0000000000000000 R09: 0000000000000000 [ 1320.063774] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000ffffffff [ 1320.071061] R13: 000000000056ca68 R14: 0000000000000000 R15: 0000000000400538 [ 1320.085209] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1320.088223] Mem-Info: [ 1320.097161] syz-executor.0: page allocation failure: order:0 [ 1320.099549] active_anon:28366 inactive_anon:9094 isolated_anon:0 [ 1320.099549] active_file:350 inactive_file:382 isolated_file:0 [ 1320.099549] unevictable:0 dirty:0 writeback:31 unstable:0 [ 1320.099549] slab_reclaimable:13776 slab_unreclaimable:117575 [ 1320.099549] mapped:44217 shmem:11023 pagetables:723 bounce:0 [ 1320.099549] free:13968 free_pcp:0 free_cma:0 [ 1320.099567] Node 0 active_anon:110876kB inactive_anon:28228kB active_file:1324kB inactive_file:1472kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176844kB dirty:0kB writeback:84kB shmem:35876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1320.139750] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1320.171741] Node 1 active_anon:2560kB inactive_anon:8152kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1320.182478] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1320.219683] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1320.228817] (null) [ 1320.262088] CPU: 1 PID: 21158 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1320.269991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1320.274763] lowmem_reserve[]: [ 1320.279364] Call Trace: [ 1320.279376] 0 [ 1320.282487] dump_stack+0x1b2/0x281 [ 1320.282500] warn_alloc.cold+0x96/0x1cc [ 1320.282512] ? zone_watermark_ok_safe+0x220/0x220 [ 1320.282521] ? usleep_range+0x130/0x130 [ 1320.282528] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1320.282540] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1320.282549] ? run_timer_softirq+0x5a0/0x5a0 [ 1320.282565] __alloc_pages_nodemask+0x2127/0x2720 [ 1320.282580] ? lock_acquire+0x170/0x3f0 [ 1320.282595] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1320.282611] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1320.303196] 2717 [ 1320.303441] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1320.308522] 2718 [ 1320.313545] alloc_pages_current+0x155/0x260 [ 1320.313561] ion_page_pool_alloc+0x118/0x1b0 [ 1320.313572] ion_system_heap_allocate+0x133/0x8c0 [ 1320.313584] ? _raw_spin_unlock+0x29/0x40 [ 1320.313592] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1320.313601] ? ion_system_contig_heap_create+0x130/0x130 [ 1320.313613] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1320.313622] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1320.313632] ion_alloc+0x27a/0x810 [ 1320.313646] ? ion_dma_buf_release+0x40/0x40 [ 1320.328239] syz-executor.0 cpuset= [ 1320.331728] ? __might_fault+0x177/0x1b0 [ 1320.331744] ion_ioctl+0xea/0x1f0 [ 1320.331762] ? ion_query_heaps+0x360/0x360 [ 1320.331772] ? __alloc_fd+0x1be/0x490 [ 1320.331781] ? ion_query_heaps+0x360/0x360 [ 1320.331790] do_vfs_ioctl+0x75a/0xff0 [ 1320.331801] ? ioctl_preallocate+0x1a0/0x1a0 [ 1320.336290] / [ 1320.338360] ? lock_downgrade+0x740/0x740 [ 1320.356669] 2718 [ 1320.359474] ? __fget+0x225/0x360 [ 1320.369601] 2718 [ 1320.373961] ? do_vfs_ioctl+0xff0/0xff0 [ 1320.373972] ? security_file_ioctl+0x83/0xb0 [ 1320.373981] SyS_ioctl+0x7f/0xb0 [ 1320.373989] ? do_vfs_ioctl+0xff0/0xff0 [ 1320.374000] do_syscall_64+0x1d5/0x640 [ 1320.374017] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1320.374026] RIP: 0033:0x465f69 [ 1320.374031] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1320.374041] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1320.374046] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1320.374051] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1320.374056] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1320.374062] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1320.386401] Mem-Info: [ 1320.394839] mems_allowed=0-1 [ 1320.407273] active_anon:28357 inactive_anon:9095 isolated_anon:0 [ 1320.407273] active_file:341 inactive_file:364 isolated_file:0 [ 1320.407273] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1320.407273] slab_reclaimable:13775 slab_unreclaimable:117571 [ 1320.407273] mapped:44211 shmem:11024 pagetables:725 bounce:0 [ 1320.407273] free:14034 free_pcp:0 free_cma:0 [ 1320.419324] Node 0 active_anon:110868kB inactive_anon:28228kB active_file:1324kB inactive_file:1420kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176844kB dirty:0kB writeback:0kB shmem:35876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1320.431594] CPU: 0 PID: 21154 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1320.448856] Node 1 active_anon:2560kB inactive_anon:8152kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1320.450106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1320.454109] Node 0 [ 1320.457940] Call Trace: [ 1320.463199] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1320.466328] dump_stack+0x1b2/0x281 [ 1320.474233] lowmem_reserve[]: [ 1320.481464] warn_alloc.cold+0x96/0x1cc [ 1320.481476] ? zone_watermark_ok_safe+0x220/0x220 [ 1320.481485] ? usleep_range+0x130/0x130 [ 1320.481499] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1320.488768] 0 [ 1320.496040] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1320.496051] ? run_timer_softirq+0x5a0/0x5a0 [ 1320.496067] __alloc_pages_nodemask+0x2127/0x2720 [ 1320.496082] ? lock_acquire+0x170/0x3f0 [ 1320.503380] 2717 [ 1320.510631] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1320.510644] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1320.510664] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1320.513058] 2718 [ 1320.516169] alloc_pages_current+0x155/0x260 [ 1320.549445] 2718 [ 1320.577518] ion_page_pool_alloc+0x118/0x1b0 [ 1320.577530] ion_system_heap_allocate+0x133/0x8c0 [ 1320.577542] ? _raw_spin_unlock+0x29/0x40 [ 1320.577556] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1320.586079] 2718 [ 1320.612764] ? ion_system_contig_heap_create+0x130/0x130 [ 1320.612776] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1320.612787] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1320.612801] ion_alloc+0x27a/0x810 [ 1320.624418] ? ion_dma_buf_release+0x40/0x40 [ 1320.626965] Node 0 [ 1320.652470] ? __might_fault+0x177/0x1b0 [ 1320.652486] ion_ioctl+0xea/0x1f0 [ 1320.652496] ? ion_query_heaps+0x360/0x360 [ 1320.652510] ? __alloc_fd+0x1be/0x490 [ 1320.656162] DMA32 free:18364kB min:36200kB low:45248kB high:54296kB active_anon:110868kB inactive_anon:28228kB active_file:1324kB inactive_file:1408kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2688kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1320.659248] ? ion_query_heaps+0x360/0x360 [ 1320.659260] do_vfs_ioctl+0x75a/0xff0 [ 1320.659272] ? ioctl_preallocate+0x1a0/0x1a0 [ 1320.663598] lowmem_reserve[]: [ 1320.668400] ? lock_downgrade+0x740/0x740 [ 1320.672397] 0 [ 1320.677450] ? __fget+0x225/0x360 [ 1320.679233] 0 [ 1320.684242] ? do_vfs_ioctl+0xff0/0xff0 [ 1320.684253] ? security_file_ioctl+0x83/0xb0 [ 1320.684261] SyS_ioctl+0x7f/0xb0 [ 1320.684270] ? do_vfs_ioctl+0xff0/0xff0 [ 1320.684282] do_syscall_64+0x1d5/0x640 [ 1320.688681] 0 [ 1320.693521] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1320.693530] RIP: 0033:0x465f69 [ 1320.693535] RSP: 002b:00007f978c555188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1320.693544] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1320.693549] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1320.693558] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1320.700660] 0 [ 1320.704419] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1320.708899] 0 [ 1320.714330] R13: 00007ffd7f926e0f R14: 00007f978c555300 R15: 0000000000022000 [ 1320.721957] Node 0 [ 1320.747675] DMA32 free:18364kB min:36200kB low:45248kB high:54296kB active_anon:110868kB inactive_anon:28228kB active_file:1324kB inactive_file:1408kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7296kB pagetables:2688kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1320.748963] Node 0 [ 1320.754018] lowmem_reserve[]: 0 0 0 0 0 [ 1320.754038] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1320.754056] lowmem_reserve[]: 0 0 0 0 0 [ 1320.754075] Node 1 Normal free:26800kB min:53696kB low:67120kB high:80544kB active_anon:2560kB inactive_anon:8152kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1320.775240] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1320.780821] lowmem_reserve[]: [ 1320.790038] lowmem_reserve[]: [ 1320.817486] 0 [ 1320.839833] 0 [ 1320.840701] 0 [ 1320.852207] 0 [ 1320.860126] 0 [ 1320.876232] 0 [ 1320.881840] 0 [ 1320.903712] 0 [ 1320.910137] 0 [ 1320.910430] 0 [ 1320.985074] Node 0 [ 1321.031685] Node 1 [ 1321.041997] DMA: [ 1321.062804] Normal free:26800kB min:53696kB low:67120kB high:80544kB active_anon:2560kB inactive_anon:8152kB active_file:44kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1321.068352] 1*4kB [ 1321.068503] lowmem_reserve[]: [ 1321.100691] (U) 1*8kB (E) 1*16kB (E) 4*32kB (UE) 3*64kB (UE) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10972kB [ 1321.134843] 0 0 0 0 0 [ 1321.138625] Node 0 DMA: 1*4kB (U) 1*8kB (E) 1*16kB (E) 4*32kB (UE) 3*64kB (UE) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10972kB [ 1321.140843] Node 0 DMA32: 1237*4kB (UME) 528*8kB (ME) 190*16kB (UME) 42*32kB (UME) 22*64kB (UME) 5*128kB (UM) 1*256kB (M) 1*512kB (U) 2*1024kB (UM) 0*2048kB 0*4096kB = 18420kB [ 1321.170868] Node 0 DMA32: 1237*4kB (UME) 528*8kB (ME) 190*16kB (UME) 42*32kB (UME) 22*64kB (UME) 5*128kB (UM) 1*256kB (M) 1*512kB (U) 2*1024kB (UM) 0*2048kB 0*4096kB = 18420kB [ 1321.215048] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1321.217628] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1321.241561] Node 1 Normal: 1*4kB (E) 1*8kB (E) 2*16kB (ME) 0*32kB 4*64kB (UE) 15*128kB (UME) 14*256kB (UM) 3*512kB (ME) 94*1024kB (U) 25*2048kB (U) 3*4096kB (U) = 167084kB [ 1321.257534] Bluetooth: hci1 command 0x0409 tx timeout [ 1321.273975] Node 1 Normal: 1*4kB (M) 1*8kB (U) 2*16kB (UM) 2*32kB (UE) 1*64kB (E) 13*128kB (ME) 13*256kB (M) 3*512kB (ME) 92*1024kB (U) 30*2048kB (U) 3*4096kB (U) = 174636kB [ 1321.290207] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1321.310914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1321.319891] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1321.320716] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1321.350685] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1321.350883] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1321.359553] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1321.400688] 13045 total pagecache pages [ 1321.403574] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1321.404706] 0 pages in swap cache [ 1321.423380] 13045 total pagecache pages [ 1321.427418] 0 pages in swap cache [ 1321.434734] Swap cache stats: add 0, delete 0, find 0/0 [ 1321.440121] Free swap = 0kB [ 1321.440708] Swap cache stats: add 0, delete 0, find 0/0 [ 1321.447187] Total swap = 0kB [ 1321.448514] Free swap = 0kB [ 1321.452800] 2097051 pages RAM [ 1321.457739] 0 pages HighMem/MovableOnly [ 1321.460719] Total swap = 0kB [ 1321.464733] 2097051 pages RAM [ 1321.465672] 363840 pages reserved [ 1321.467837] 0 pages HighMem/MovableOnly [ 1321.473020] 0 pages cma reserved [ 1321.490692] 363840 pages reserved [ 1321.494182] 0 pages cma reserved [ 1321.497565] Out of memory (oom_kill_allocating_task): Kill process 21215 (syz-executor.3) score 0 or sacrifice child [ 1321.510351] Killed process 21215 (syz-executor.3) total-vm:93120kB, anon-rss:72kB, file-rss:34320kB, shmem-rss:0kB [ 1321.528558] oom_reaper: reaped process 21215 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1321.542968] IPVS: ftp: loaded support on port[0] = 21 08:36:03 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x3f, 0x0, 0x0, "fb44afce86e36c4e4d48a0329145928c", "9c7dce2c799945391e0c1afdaceb01e6aa9b48c17b9aac7ec0829a45bada1b718b63a9d14d2b10b0744b"}, 0x3f, 0x0) 08:36:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000005c0)) io_setup(0x5dfd, &(0x7f0000000140)) [ 1324.083040] IPVS: ftp: loaded support on port[0] = 21 [ 1324.187787] chnl_net:caif_netlink_parms(): no params data found [ 1324.363859] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.370415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.378321] device bridge_slave_0 entered promiscuous mode [ 1324.385184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.392119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.399069] device bridge_slave_1 entered promiscuous mode [ 1324.416989] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1324.425889] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1324.445201] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1324.452582] team0: Port device team_slave_0 added [ 1324.458043] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1324.465413] team0: Port device team_slave_1 added [ 1324.482649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1324.488910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.514231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1324.525440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1324.531825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1324.557073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.567693] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1324.575341] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1324.595948] device hsr_slave_0 entered promiscuous mode [ 1324.601863] device hsr_slave_1 entered promiscuous mode [ 1324.607833] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1324.615170] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1324.684527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.691027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1324.697795] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.704216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1324.734466] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1324.741379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1324.749311] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1324.758206] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1324.766366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.775432] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.796912] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1324.803203] 8021q: adding VLAN 0 to HW filter on device team0 [ 1324.831904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1324.836194] IPVS: ftp: loaded support on port[0] = 21 [ 1324.840034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.851325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1324.866414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1324.875261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.881638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1324.909680] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1324.919782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1324.930772] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1324.943516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1324.951493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1324.959087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1324.967465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1324.975339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1324.982320] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1325.016538] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1325.034274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1325.041570] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1325.056595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1325.148605] chnl_net:caif_netlink_parms(): no params data found [ 1325.172773] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1325.212734] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1325.223692] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1325.232373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1325.244968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1325.275089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.282307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.289638] device bridge_slave_0 entered promiscuous mode [ 1325.297498] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.304126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.311830] device bridge_slave_1 entered promiscuous mode [ 1325.336763] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1325.344811] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1325.352478] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1325.360228] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1325.371947] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1325.395979] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1325.404430] team0: Port device team_slave_0 added [ 1325.410094] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1325.418125] team0: Port device team_slave_1 added [ 1325.425549] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1325.445647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1325.453143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1325.462411] device veth0_vlan entered promiscuous mode [ 1325.471111] device veth1_vlan entered promiscuous mode [ 1325.476909] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1325.485226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.491841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.517815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1325.528393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1325.535802] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1325.545152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1325.554346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1325.562463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.588511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1325.600201] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1325.609867] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1325.621014] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1325.648620] device hsr_slave_0 entered promiscuous mode [ 1325.654880] device hsr_slave_1 entered promiscuous mode [ 1325.662274] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1325.669431] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1325.677579] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1325.687677] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1325.701213] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1325.708660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1325.716830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1325.726778] device veth0_macvtap entered promiscuous mode [ 1325.733486] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1325.760438] device veth1_macvtap entered promiscuous mode [ 1325.767146] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1325.791863] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1325.818450] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1325.839924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1325.850503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.860775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1325.870489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.880397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1325.890975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.900084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1325.909872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.920241] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1325.927632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1325.938723] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1325.946183] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1325.953632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1325.962213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1325.972631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1325.982438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1325.993030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1326.003019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.012240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1326.022040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.031251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1326.041044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.052280] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1326.059187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1326.073352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1326.081162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1326.096306] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1326.131006] Bluetooth: hci1 command 0x0409 tx timeout [ 1326.146420] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1326.153146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1326.166609] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1326.176497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1326.184488] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1326.194724] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1326.201909] 8021q: adding VLAN 0 to HW filter on device team0 [ 1326.211930] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1326.218986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1326.227644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1326.235948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.242711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1326.250099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1326.260759] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1326.270201] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1326.277396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1326.285583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1326.293768] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.300186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1326.307735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1326.325400] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1326.332650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1326.346494] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1326.354912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1326.363246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1326.371811] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1326.380274] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1326.391031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1326.399359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1326.408737] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1326.417608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1326.425598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1326.444261] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1326.451220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1326.459678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1326.473791] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1326.479954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1326.506213] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1326.514295] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1326.520551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1326.529806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1326.542074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1326.597809] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1326.607956] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1326.616342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1326.625889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1326.657056] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1326.665527] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1326.672945] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1326.682248] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1326.688811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1326.697469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1326.705919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1326.713233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1326.725185] device veth0_vlan entered promiscuous mode [ 1326.735516] device veth1_vlan entered promiscuous mode [ 1326.741778] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1326.750364] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1326.763986] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1326.773644] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1326.780517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1326.789111] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1326.796741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1326.804926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1326.816694] device veth0_macvtap entered promiscuous mode [ 1326.823367] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1326.832002] device veth1_macvtap entered promiscuous mode [ 1326.837991] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1326.847008] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1326.855571] Bluetooth: hci2 command 0x0409 tx timeout [ 1326.857430] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1326.869186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1326.879922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.889135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1326.898958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.908158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1326.917929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.927417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1326.937689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.946929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1326.956682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1326.966791] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1326.973861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1326.981624] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1326.988924] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1326.996326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1327.004448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1327.017841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1327.028371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.037585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1327.047353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.056532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1327.066782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.075938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1327.085719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.095301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1327.105087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1327.115129] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1327.122103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1327.129555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1327.137766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 08:36:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) 08:36:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000005c0)) 08:36:08 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB="005c323b7d1d38bca3480cb3"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 08:36:08 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000005c0)) 08:36:08 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x3f, 0x0, 0x0, "fb44afce86e36c4e4d48a0329145928c", "9c7dce2c799945391e0c1afdaceb01e6aa9b48c17b9aac7ec0829a45bada1b718b63a9d14d2b10b0744b"}, 0x3f, 0x0) 08:36:08 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000005c0)) io_setup(0x5dfd, &(0x7f0000000140)) 08:36:08 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) socket$nl_route(0x10, 0x3, 0x0) 08:36:08 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB="005c323b7d1d38bca3480cb3"], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 08:36:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r0, 0x0, 0x0) 08:36:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r0, 0x0, 0x0) 08:36:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r0, 0x0, 0x0) 08:36:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) [ 1328.211376] Bluetooth: hci1 command 0x041b tx timeout [ 1328.277410] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1328.283948] syz-executor.0: [ 1328.296975] syz-executor.2: [ 1328.301312] syz-executor.3: [ 1328.304870] page allocation failure: order:4 [ 1328.308083] page allocation failure: order:4 [ 1328.313029] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1328.317628] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1328.328054] page allocation failure: order:4 [ 1328.340419] (null) [ 1328.340859] syz-executor.4: [ 1328.345457] (null) [ 1328.348349] syz-executor.5 cpuset= [ 1328.350201] syz-executor.2 cpuset= [ 1328.356506] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1328.360250] syz-executor.3 cpuset= [ 1328.361033] page allocation failure: order:4 [ 1328.368442] / [ 1328.375760] (null) [ 1328.379765] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1328.379864] / [ 1328.385333] / [ 1328.387204] mems_allowed=0-1 [ 1328.392475] mems_allowed=0-1 [ 1328.395738] CPU: 1 PID: 21766 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1328.396850] mems_allowed=0-1 [ 1328.403615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1328.403619] Call Trace: [ 1328.403639] dump_stack+0x1b2/0x281 [ 1328.403653] warn_alloc.cold+0x96/0x1cc [ 1328.403664] ? zone_watermark_ok_safe+0x220/0x220 [ 1328.403686] __alloc_pages_nodemask+0x2127/0x2720 [ 1328.403698] ? __schedule+0x893/0x1de0 [ 1328.409365] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1328.416164] ? lock_acquire+0x170/0x3f0 [ 1328.416179] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1328.416194] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1328.416206] ? __mutex_unlock_slowpath+0x75/0x770 [ 1328.416227] alloc_pages_current+0x155/0x260 [ 1328.416243] ion_page_pool_alloc+0x118/0x1b0 [ 1328.416255] ion_system_heap_allocate+0x133/0x8c0 [ 1328.416265] ? ion_alloc+0x187/0x810 [ 1328.416275] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1328.416287] ? ion_system_contig_heap_create+0x130/0x130 [ 1328.445287] (null) [ 1328.447082] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1328.479336] syz-executor.4 cpuset= [ 1328.479739] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1328.511645] ion_alloc+0x204/0x810 [ 1328.515189] ? ion_dma_buf_release+0x40/0x40 [ 1328.519597] ? __might_fault+0x177/0x1b0 [ 1328.523660] ion_ioctl+0xea/0x1f0 [ 1328.527105] ? ion_query_heaps+0x360/0x360 [ 1328.531332] ? __alloc_fd+0x1be/0x490 [ 1328.535129] ? ion_query_heaps+0x360/0x360 [ 1328.539354] do_vfs_ioctl+0x75a/0xff0 [ 1328.543410] ? ioctl_preallocate+0x1a0/0x1a0 [ 1328.547835] ? lock_downgrade+0x740/0x740 [ 1328.551994] ? __fget+0x225/0x360 [ 1328.555444] ? do_vfs_ioctl+0xff0/0xff0 [ 1328.559412] ? security_file_ioctl+0x83/0xb0 [ 1328.563821] SyS_ioctl+0x7f/0xb0 [ 1328.567202] ? do_vfs_ioctl+0xff0/0xff0 [ 1328.571178] do_syscall_64+0x1d5/0x640 [ 1328.575073] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1328.580282] RIP: 0033:0x465f69 [ 1328.583487] RSP: 002b:00007f978c555188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1328.591195] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1328.598487] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1328.605752] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1328.613017] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1328.620374] R13: 00007ffd7f926e0f R14: 00007f978c555300 R15: 0000000000022000 [ 1328.630540] / mems_allowed=0-1 [ 1328.634643] CPU: 1 PID: 21771 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 1328.642530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1328.651879] Call Trace: [ 1328.654464] dump_stack+0x1b2/0x281 [ 1328.658088] warn_alloc.cold+0x96/0x1cc [ 1328.662065] ? zone_watermark_ok_safe+0x220/0x220 [ 1328.666916] __alloc_pages_nodemask+0x2127/0x2720 [ 1328.671762] ? lock_acquire+0x170/0x3f0 [ 1328.675741] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1328.680591] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1328.686047] ? __mutex_unlock_slowpath+0x75/0x770 [ 1328.690896] alloc_pages_current+0x155/0x260 [ 1328.695316] ion_page_pool_alloc+0x118/0x1b0 [ 1328.699742] ion_system_heap_allocate+0x133/0x8c0 [ 1328.704621] ? ion_alloc+0x187/0x810 [ 1328.708336] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1328.713790] ? ion_system_contig_heap_create+0x130/0x130 [ 1328.719245] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1328.724262] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1328.729105] ion_alloc+0x204/0x810 [ 1328.732650] ? ion_dma_buf_release+0x40/0x40 [ 1328.737055] ? __might_fault+0x177/0x1b0 [ 1328.741115] ion_ioctl+0xea/0x1f0 [ 1328.744565] ? ion_query_heaps+0x360/0x360 [ 1328.748799] ? __alloc_fd+0x1be/0x490 [ 1328.752601] ? ion_query_heaps+0x360/0x360 [ 1328.756838] do_vfs_ioctl+0x75a/0xff0 [ 1328.760638] ? ioctl_preallocate+0x1a0/0x1a0 [ 1328.765049] ? lock_downgrade+0x740/0x740 [ 1328.770162] ? __fget+0x225/0x360 [ 1328.773619] ? do_vfs_ioctl+0xff0/0xff0 [ 1328.777592] ? security_file_ioctl+0x83/0xb0 [ 1328.781998] SyS_ioctl+0x7f/0xb0 [ 1328.785362] ? do_vfs_ioctl+0xff0/0xff0 [ 1328.789330] do_syscall_64+0x1d5/0x640 [ 1328.793226] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1328.798408] RIP: 0033:0x465f69 [ 1328.801590] RSP: 002b:00007f2758795188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1328.809291] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1328.816555] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1328.823818] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1328.831081] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1328.838356] R13: 00007fff98c6ba8f R14: 00007f2758795300 R15: 0000000000022000 [ 1328.845652] CPU: 0 PID: 21768 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1328.853546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1328.862916] Call Trace: [ 1328.865503] dump_stack+0x1b2/0x281 [ 1328.869152] warn_alloc.cold+0x96/0x1cc [ 1328.873119] ? zone_watermark_ok_safe+0x220/0x220 [ 1328.877962] __alloc_pages_nodemask+0x2127/0x2720 [ 1328.883070] ? lock_acquire+0x170/0x3f0 [ 1328.887072] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1328.891917] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1328.897389] ? __mutex_unlock_slowpath+0x75/0x770 [ 1328.902234] alloc_pages_current+0x155/0x260 [ 1328.906648] ion_page_pool_alloc+0x118/0x1b0 [ 1328.911048] ion_system_heap_allocate+0x133/0x8c0 [ 1328.915884] ? ion_alloc+0x187/0x810 [ 1328.919608] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1328.925058] ? ion_system_contig_heap_create+0x130/0x130 [ 1328.930510] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1328.935516] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1328.940352] ion_alloc+0x204/0x810 [ 1328.943904] ? ion_dma_buf_release+0x40/0x40 [ 1328.948305] ? __might_fault+0x177/0x1b0 [ 1328.952377] ion_ioctl+0xea/0x1f0 [ 1328.955820] ? ion_query_heaps+0x360/0x360 [ 1328.960046] ? __alloc_fd+0x1be/0x490 [ 1328.963837] ? ion_query_heaps+0x360/0x360 [ 1328.968064] do_vfs_ioctl+0x75a/0xff0 [ 1328.971859] ? ioctl_preallocate+0x1a0/0x1a0 [ 1328.976279] ? lock_downgrade+0x740/0x740 [ 1328.980421] ? __fget+0x225/0x360 [ 1328.983869] ? do_vfs_ioctl+0xff0/0xff0 [ 1328.987866] ? security_file_ioctl+0x83/0xb0 [ 1328.992285] SyS_ioctl+0x7f/0xb0 [ 1328.995663] ? do_vfs_ioctl+0xff0/0xff0 [ 1328.999633] do_syscall_64+0x1d5/0x640 [ 1329.003519] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1329.008702] RIP: 0033:0x465f69 [ 1329.011885] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1329.019608] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1329.026871] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1329.034132] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1329.041394] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1329.048654] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1329.056045] CPU: 1 PID: 21772 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1329.060916] Bluetooth: hci2 command 0x041b tx timeout [ 1329.063953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1329.078484] Call Trace: [ 1329.081082] dump_stack+0x1b2/0x281 [ 1329.084716] warn_alloc.cold+0x96/0x1cc [ 1329.088684] ? zone_watermark_ok_safe+0x220/0x220 [ 1329.093541] __alloc_pages_nodemask+0x2127/0x2720 [ 1329.098410] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1329.103259] ? migrate_swap_stop+0x880/0x880 [ 1329.107665] ? lock_acquire+0x170/0x3f0 [ 1329.111645] ? wake_up_q+0x82/0xd0 [ 1329.115191] ? __mutex_unlock_slowpath+0x261/0x770 [ 1329.120136] alloc_pages_current+0x155/0x260 [ 1329.124562] ion_page_pool_alloc+0x118/0x1b0 [ 1329.128966] ion_system_heap_allocate+0x133/0x8c0 [ 1329.133806] ? ion_alloc+0x187/0x810 [ 1329.137524] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1329.142982] ? ion_system_contig_heap_create+0x130/0x130 [ 1329.148425] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1329.153444] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1329.158284] ion_alloc+0x204/0x810 [ 1329.161825] ? ion_dma_buf_release+0x40/0x40 [ 1329.166239] ? __might_fault+0x177/0x1b0 [ 1329.170307] ion_ioctl+0xea/0x1f0 [ 1329.173767] ? ion_query_heaps+0x360/0x360 [ 1329.178002] ? __alloc_fd+0x1be/0x490 [ 1329.181818] ? ion_query_heaps+0x360/0x360 [ 1329.186050] do_vfs_ioctl+0x75a/0xff0 [ 1329.189846] ? ioctl_preallocate+0x1a0/0x1a0 [ 1329.194253] ? lock_downgrade+0x740/0x740 [ 1329.198401] ? __fget+0x225/0x360 [ 1329.201859] ? do_vfs_ioctl+0xff0/0xff0 [ 1329.205846] ? security_file_ioctl+0x83/0xb0 [ 1329.210256] SyS_ioctl+0x7f/0xb0 [ 1329.213719] ? do_vfs_ioctl+0xff0/0xff0 [ 1329.217707] do_syscall_64+0x1d5/0x640 [ 1329.221603] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1329.226804] RIP: 0033:0x465f69 [ 1329.229996] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1329.237714] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1329.244978] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1329.252257] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1329.259534] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1329.266801] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1329.281636] CPU: 0 PID: 21781 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 1329.284324] warn_alloc_show_mem: 1 callbacks suppressed [ 1329.284328] Mem-Info: [ 1329.289534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1329.289538] Call Trace: [ 1329.289557] dump_stack+0x1b2/0x281 [ 1329.289572] warn_alloc.cold+0x96/0x1cc [ 1329.289584] ? zone_watermark_ok_safe+0x220/0x220 [ 1329.289605] __alloc_pages_nodemask+0x2127/0x2720 [ 1329.295226] active_anon:31022 inactive_anon:9098 isolated_anon:0 [ 1329.295226] active_file:1580 inactive_file:3401 isolated_file:32 [ 1329.295226] unevictable:0 dirty:121 writeback:0 unstable:0 [ 1329.295226] slab_reclaimable:13691 slab_unreclaimable:120084 [ 1329.295226] mapped:55818 shmem:11028 pagetables:851 bounce:0 [ 1329.295226] free:49543 free_pcp:265 free_cma:0 [ 1329.297382] ? lock_acquire+0x170/0x3f0 [ 1329.297401] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1329.297418] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1329.297430] ? __mutex_unlock_slowpath+0x75/0x770 [ 1329.307575] Node 0 active_anon:121772kB inactive_anon:28256kB active_file:5424kB inactive_file:12520kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:221352kB dirty:396kB writeback:0kB shmem:35912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 22528kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1329.309362] alloc_pages_current+0x155/0x260 [ 1329.309378] ion_page_pool_alloc+0x118/0x1b0 [ 1329.309390] ion_system_heap_allocate+0x133/0x8c0 [ 1329.309400] ? ion_alloc+0x187/0x810 [ 1329.313493] Node 1 active_anon:2316kB inactive_anon:8136kB active_file:896kB inactive_file:1084kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:1920kB dirty:88kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1329.316981] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1329.316996] ? ion_system_contig_heap_create+0x130/0x130 [ 1329.317007] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1329.317018] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1329.317030] ion_alloc+0x204/0x810 [ 1329.322307] Node 0 [ 1329.326789] ? ion_dma_buf_release+0x40/0x40 [ 1329.326803] ? __might_fault+0x177/0x1b0 [ 1329.326816] ion_ioctl+0xea/0x1f0 [ 1329.326826] ? ion_query_heaps+0x360/0x360 [ 1329.326853] ? __alloc_fd+0x1be/0x490 [ 1329.361173] DMA free:11116kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1329.364591] ? ion_query_heaps+0x360/0x360 [ 1329.364604] do_vfs_ioctl+0x75a/0xff0 [ 1329.364618] ? ioctl_preallocate+0x1a0/0x1a0 [ 1329.364627] ? lock_downgrade+0x740/0x740 [ 1329.364640] ? __fget+0x225/0x360 [ 1329.370137] lowmem_reserve[]: [ 1329.375461] ? do_vfs_ioctl+0xff0/0xff0 [ 1329.375472] ? security_file_ioctl+0x83/0xb0 [ 1329.375481] SyS_ioctl+0x7f/0xb0 [ 1329.375489] ? do_vfs_ioctl+0xff0/0xff0 [ 1329.375501] do_syscall_64+0x1d5/0x640 [ 1329.375519] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1329.375527] RIP: 0033:0x465f69 [ 1329.375532] RSP: 002b:00007fd58f6e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1329.375542] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1329.375551] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1329.383159] 0 [ 1329.408687] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1329.408693] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1329.408698] R13: 00007ffefda7c1ff R14: 00007fd58f6e3300 R15: 0000000000022000 [ 1329.627152] 2717 2718 2718 2718 [ 1329.630602] Node 0 DMA32 free:48472kB min:36200kB low:45248kB high:54296kB active_anon:121772kB inactive_anon:28256kB active_file:5424kB inactive_file:12720kB unevictable:0kB writepending:100kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3192kB bounce:0kB free_pcp:264kB local_pcp:100kB free_cma:0kB [ 1329.714892] lowmem_reserve[]: 0 0 0 0 0 [ 1329.741378] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1329.836763] lowmem_reserve[]: 0 0 0 0 0 [ 1329.845523] Node 1 Normal free:53556kB min:53696kB low:67120kB high:80544kB active_anon:2316kB inactive_anon:8136kB active_file:508kB inactive_file:464kB unevictable:0kB writepending:88kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1329.908629] lowmem_reserve[]: 0 0 0 0 0 [ 1329.912834] Node 0 DMA: 1*4kB (U) 8*8kB (UE) 2*16kB (UE) 9*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11076kB [ 1329.927831] Node 0 DMA32: 1157*4kB (ME) 663*8kB (UME) 235*16kB (ME) 569*32kB (UME) 25*64kB (UM) 5*128kB (UM) 2*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 36188kB [ 1329.951572] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1329.962493] Node 1 Normal: 126*4kB (UME) 63*8kB (UME) 287*16kB (UME) 229*32kB (UME) 30*64kB (UME) 17*128kB (UME) 16*256kB (UME) 64*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 53888kB [ 1329.978814] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1329.987709] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1329.996351] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1330.025056] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1330.040807] 11773 total pagecache pages [ 1330.044812] 0 pages in swap cache [ 1330.048260] Swap cache stats: add 0, delete 0, find 0/0 [ 1330.072054] Free swap = 0kB [ 1330.075120] Total swap = 0kB [ 1330.078232] 2097051 pages RAM [ 1330.089171] 0 pages HighMem/MovableOnly [ 1330.093322] 363840 pages reserved [ 1330.096772] 0 pages cma reserved [ 1330.290849] Bluetooth: hci1 command 0x040f tx timeout [ 1330.487980] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1330.512685] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1330.517871] CPU: 0 PID: 7994 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1330.525754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1330.535388] Call Trace: [ 1330.537981] dump_stack+0x1b2/0x281 [ 1330.541638] dump_header+0x178/0x82f [ 1330.545349] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1330.550461] ? ___ratelimit+0x2cd/0x530 [ 1330.554434] oom_kill_process.cold+0x10/0xb18 [ 1330.558947] out_of_memory+0xe3e/0x1190 [ 1330.562927] ? oom_killer_disable+0x1c0/0x1c0 [ 1330.567445] ? mutex_trylock+0x152/0x1a0 [ 1330.571528] __alloc_pages_nodemask+0x23e1/0x2720 [ 1330.576389] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1330.581247] alloc_pages_current+0x155/0x260 [ 1330.585658] filemap_fault+0xea3/0x1980 [ 1330.589638] ext4_filemap_fault+0x84/0xb0 [ 1330.593790] __do_fault+0xfa/0x380 [ 1330.597332] __handle_mm_fault+0x2497/0x4620 [ 1330.601748] ? vm_insert_page+0x7c0/0x7c0 [ 1330.605896] ? nanosleep_copyout+0x100/0x100 [ 1330.610318] handle_mm_fault+0x391/0x860 [ 1330.614379] __do_page_fault+0x549/0xad0 [ 1330.618469] ? spurious_fault+0x640/0x640 [ 1330.622613] ? do_page_fault+0x60/0x500 [ 1330.630063] ? page_fault+0x2f/0x50 [ 1330.633691] page_fault+0x45/0x50 [ 1330.637155] RIP: 144426:0x9 [ 1330.640075] RSP: 4053:00007ffeec2ed78c EFLAGS: 00000032 [ 1330.668589] Mem-Info: [ 1330.681795] active_anon:31062 inactive_anon:9098 isolated_anon:0 [ 1330.681795] active_file:307 inactive_file:299 isolated_file:64 [ 1330.681795] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1330.681795] slab_reclaimable:13691 slab_unreclaimable:119600 [ 1330.681795] mapped:52958 shmem:11028 pagetables:851 bounce:0 [ 1330.681795] free:25048 free_pcp:0 free_cma:0 [ 1330.719712] Node 0 active_anon:121932kB inactive_anon:28256kB active_file:1224kB inactive_file:1392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211828kB dirty:24kB writeback:0kB shmem:35912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 22528kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1330.769472] Node 1 active_anon:2316kB inactive_anon:8136kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1330.871499] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1330.899167] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1330.904520] Node 0 DMA32 free:35776kB min:36200kB low:45248kB high:54296kB active_anon:121932kB inactive_anon:28256kB active_file:1360kB inactive_file:1320kB unevictable:0kB writepending:24kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3192kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1330.933992] lowmem_reserve[]: 0 0 0 0 0 [ 1330.938009] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1330.963648] lowmem_reserve[]: 0 0 0 0 0 [ 1330.967654] Node 1 Normal free:53340kB min:53696kB low:67120kB high:80544kB active_anon:2316kB inactive_anon:8136kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1330.997460] lowmem_reserve[]: 0 0 0 0 0 [ 1331.006543] Node 0 DMA: 1*4kB (U) 8*8kB (UE) 2*16kB (UE) 9*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11076kB [ 1331.051604] Node 0 DMA32: 1167*4kB (UME) 659*8kB (UME) 237*16kB (UME) 558*32kB (UME) 25*64kB (UM) 5*128kB (UM) 3*256kB (M) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 36132kB [ 1331.075043] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1331.085910] Node 1 Normal: 122*4kB (ME) 62*8kB (ME) 258*16kB (UME) 227*32kB (UME) 28*64kB (UME) 19*128kB (UME) 16*256kB (UME) 64*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 53464kB [ 1331.102327] Bluetooth: hci2 command 0x040f tx timeout [ 1331.107713] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1331.145670] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1331.170713] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1331.179590] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1331.216323] 11717 total pagecache pages [ 1331.220357] 0 pages in swap cache [ 1331.236130] Swap cache stats: add 0, delete 0, find 0/0 [ 1331.241586] Free swap = 0kB [ 1331.244601] Total swap = 0kB [ 1331.247611] 2097051 pages RAM [ 1331.308037] 0 pages HighMem/MovableOnly [ 1331.337713] 363840 pages reserved [ 1331.341290] 0 pages cma reserved [ 1331.344669] Out of memory (oom_kill_allocating_task): Kill process 7994 (syz-executor.5) score 0 or sacrifice child [ 1331.355452] Killed process 21768 (syz-executor.5) total-vm:93384kB, anon-rss:2200kB, file-rss:34824kB, shmem-rss:0kB [ 1331.373706] oom_reaper: reaped process 21768 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1331.421624] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1331.446040] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1331.465364] CPU: 1 PID: 9736 Comm: syz-fuzzer Not tainted 4.14.225-syzkaller #0 [ 1331.472845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1331.482214] Call Trace: [ 1331.484813] dump_stack+0x1b2/0x281 [ 1331.488452] dump_header+0x178/0x82f [ 1331.492179] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1331.497293] ? ___ratelimit+0x2cd/0x530 [ 1331.501307] oom_kill_process.cold+0x10/0xb18 [ 1331.505829] out_of_memory+0xe3e/0x1190 [ 1331.509823] ? oom_killer_disable+0x1c0/0x1c0 [ 1331.514330] ? mutex_trylock+0x152/0x1a0 [ 1331.518410] __alloc_pages_nodemask+0x23e1/0x2720 [ 1331.523279] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1331.528164] alloc_pages_current+0x155/0x260 [ 1331.532582] filemap_fault+0xea3/0x1980 [ 1331.536571] ext4_filemap_fault+0x84/0xb0 [ 1331.540763] __do_fault+0xfa/0x380 [ 1331.544308] __handle_mm_fault+0x2497/0x4620 [ 1331.548722] ? vm_insert_page+0x7c0/0x7c0 [ 1331.552880] handle_mm_fault+0x391/0x860 [ 1331.556949] __do_page_fault+0x549/0xad0 [ 1331.561018] ? spurious_fault+0x640/0x640 [ 1331.565166] ? do_page_fault+0x60/0x500 [ 1331.569144] ? page_fault+0x2f/0x50 [ 1331.572775] page_fault+0x45/0x50 [ 1331.576231] RIP: 0001:0x13615e42626 [ 1331.579853] RSP: 03e7:000000c005567e40 EFLAGS: 13615e42626 [ 1331.587471] Mem-Info: [ 1331.606990] active_anon:30531 inactive_anon:9098 isolated_anon:0 [ 1331.606990] active_file:314 inactive_file:344 isolated_file:0 [ 1331.606990] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1331.606990] slab_reclaimable:13684 slab_unreclaimable:119566 [ 1331.606990] mapped:52931 shmem:11028 pagetables:851 bounce:0 [ 1331.606990] free:18578 free_pcp:8 free_cma:0 [ 1331.658702] Node 0 active_anon:119808kB inactive_anon:28256kB active_file:1248kB inactive_file:1380kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211724kB dirty:24kB writeback:0kB shmem:35912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 22528kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1331.706476] Node 1 active_anon:2316kB inactive_anon:8136kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1331.753669] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1331.789384] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1331.794686] Node 0 DMA32 free:17888kB min:36200kB low:45248kB high:54296kB active_anon:119808kB inactive_anon:28256kB active_file:1248kB inactive_file:1504kB unevictable:0kB writepending:24kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3192kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1331.840393] lowmem_reserve[]: 0 0 0 0 0 [ 1331.868017] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1331.919937] lowmem_reserve[]: 0 0 0 0 0 [ 1331.941569] Node 1 Normal free:26836kB min:53696kB low:67120kB high:80544kB active_anon:2316kB inactive_anon:8136kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1331.973994] lowmem_reserve[]: 0 0 0 0 0 [ 1331.978014] Node 0 DMA: 1*4kB (U) 2*8kB (UE) 2*16kB (UE) 7*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 1332.001223] Node 0 DMA32: 1167*4kB (UME) 660*8kB (UME) 238*16kB (UME) 62*32kB (UME) 20*64kB (UM) 3*128kB (M) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17916kB [ 1332.019851] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1332.038206] Node 1 Normal: 122*4kB (ME) 62*8kB (ME) 45*16kB (ME) 38*32kB (ME) 26*64kB (ME) 18*128kB (ME) 14*256kB (ME) 32*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 26856kB [ 1332.073381] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1332.100261] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1332.118405] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1332.137345] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1332.160141] 11717 total pagecache pages [ 1332.174240] 0 pages in swap cache [ 1332.177754] Swap cache stats: add 0, delete 0, find 0/0 [ 1332.192125] Free swap = 0kB [ 1332.195164] Total swap = 0kB [ 1332.210003] 2097051 pages RAM [ 1332.215289] 0 pages HighMem/MovableOnly [ 1332.234163] 363840 pages reserved [ 1332.237647] 0 pages cma reserved [ 1332.245955] Out of memory (oom_kill_allocating_task): Kill process 9736 (syz-fuzzer) score 0 or sacrifice child [ 1332.256363] Killed process 21275 (syz-executor.4) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1332.318104] oom_reaper: reaped process 21772 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1332.356054] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1332.371018] Bluetooth: hci1 command 0x0419 tx timeout [ 1332.394838] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1332.400303] CPU: 1 PID: 19850 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1332.408223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1332.417583] Call Trace: [ 1332.420185] dump_stack+0x1b2/0x281 [ 1332.423818] dump_header+0x178/0x82f [ 1332.427530] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1332.432632] ? ___ratelimit+0x2cd/0x530 [ 1332.436632] oom_kill_process.cold+0x10/0xb18 [ 1332.441140] out_of_memory+0xe3e/0x1190 [ 1332.445121] ? oom_killer_disable+0x1c0/0x1c0 [ 1332.449614] ? mutex_trylock+0x152/0x1a0 [ 1332.453679] __alloc_pages_nodemask+0x23e1/0x2720 [ 1332.458539] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1332.463417] alloc_pages_current+0x155/0x260 [ 1332.467834] filemap_fault+0xea3/0x1980 [ 1332.471825] ext4_filemap_fault+0x84/0xb0 [ 1332.476236] __do_fault+0xfa/0x380 [ 1332.479801] __handle_mm_fault+0x2497/0x4620 [ 1332.484218] ? vm_insert_page+0x7c0/0x7c0 [ 1332.488375] ? nanosleep_copyout+0x100/0x100 [ 1332.492801] handle_mm_fault+0x391/0x860 [ 1332.497216] __do_page_fault+0x549/0xad0 [ 1332.501315] ? spurious_fault+0x640/0x640 [ 1332.505469] ? do_page_fault+0x60/0x500 [ 1332.509444] ? page_fault+0x2f/0x50 [ 1332.513067] page_fault+0x45/0x50 [ 1332.516517] RIP: 14441f:0x9 [ 1332.519438] RSP: 000f:00007ffd7f9270cc EFLAGS: 00000032 [ 1332.527606] Mem-Info: [ 1332.535701] active_anon:29996 inactive_anon:9098 isolated_anon:0 [ 1332.535701] active_file:313 inactive_file:295 isolated_file:64 [ 1332.535701] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1332.535701] slab_reclaimable:13684 slab_unreclaimable:119221 [ 1332.535701] mapped:52931 shmem:11028 pagetables:850 bounce:0 [ 1332.535701] free:13866 free_pcp:0 free_cma:0 [ 1332.591669] Node 0 active_anon:117668kB inactive_anon:28256kB active_file:1248kB inactive_file:1380kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211724kB dirty:24kB writeback:0kB shmem:35912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 20480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1332.643404] Node 1 active_anon:2316kB inactive_anon:8136kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1332.784867] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1332.838273] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1332.843409] Node 0 DMA32 free:17668kB min:36200kB low:45248kB high:54296kB active_anon:117668kB inactive_anon:28256kB active_file:1248kB inactive_file:1504kB unevictable:0kB writepending:24kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:3188kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1332.900825] lowmem_reserve[]: 0 0 0 0 0 [ 1332.904908] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1332.946920] lowmem_reserve[]: 0 0 0 0 0 [ 1332.961526] Node 1 Normal free:26832kB min:53696kB low:67120kB high:80544kB active_anon:2316kB inactive_anon:8136kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1332.993903] lowmem_reserve[]: 0 0 0 0 0 [ 1332.997918] Node 0 DMA: 1*4kB (U) 2*8kB (UE) 2*16kB (UE) 7*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 1333.045435] Node 0 DMA32: 1159*4kB (UME) 667*8kB (UME) 235*16kB (UME) 62*32kB (UME) 20*64kB (UM) 3*128kB (M) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17892kB [ 1333.093234] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1333.106182] Node 1 Normal: 122*4kB (ME) 63*8kB (UME) 46*16kB (UME) 39*32kB (UME) 27*64kB (UME) 19*128kB (UME) 15*256kB (UME) 31*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 26848kB [ 1333.126423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1333.135347] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1333.148415] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1333.157345] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1333.170412] 11717 total pagecache pages [ 1333.170842] Bluetooth: hci2 command 0x0419 tx timeout [ 1333.174452] 0 pages in swap cache [ 1333.187182] Swap cache stats: add 0, delete 0, find 0/0 [ 1333.197349] Free swap = 0kB [ 1333.200419] Total swap = 0kB [ 1333.207612] 2097051 pages RAM [ 1333.241284] 0 pages HighMem/MovableOnly [ 1333.245310] 363840 pages reserved [ 1333.248759] 0 pages cma reserved [ 1333.269962] Out of memory (oom_kill_allocating_task): Kill process 19850 (syz-executor.0) score 0 or sacrifice child [ 1333.299026] Killed process 21766 (syz-executor.0) total-vm:93384kB, anon-rss:2196kB, file-rss:34828kB, shmem-rss:0kB [ 1333.348791] oom_reaper: reaped process 21766 (syz-executor.0), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 1333.420016] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1333.463958] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1333.469117] CPU: 1 PID: 19850 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1333.477005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1333.486369] Call Trace: [ 1333.488965] dump_stack+0x1b2/0x281 [ 1333.492626] dump_header+0x178/0x82f [ 1333.496386] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1333.501501] ? ___ratelimit+0x2cd/0x530 [ 1333.505479] oom_kill_process.cold+0x10/0xb18 [ 1333.509984] out_of_memory+0xe3e/0x1190 [ 1333.513959] ? oom_killer_disable+0x1c0/0x1c0 [ 1333.518448] ? mutex_trylock+0x152/0x1a0 [ 1333.522598] __alloc_pages_nodemask+0x23e1/0x2720 [ 1333.527453] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1333.532322] alloc_pages_current+0x155/0x260 [ 1333.536731] filemap_fault+0xea3/0x1980 [ 1333.540720] ext4_filemap_fault+0x84/0xb0 [ 1333.544872] __do_fault+0xfa/0x380 [ 1333.548414] __handle_mm_fault+0x2497/0x4620 [ 1333.552823] ? vm_insert_page+0x7c0/0x7c0 [ 1333.556991] ? nanosleep_copyout+0x100/0x100 [ 1333.561411] handle_mm_fault+0x391/0x860 [ 1333.565474] __do_page_fault+0x549/0xad0 [ 1333.569536] ? spurious_fault+0x640/0x640 [ 1333.573682] ? do_page_fault+0x60/0x500 [ 1333.577669] ? page_fault+0x2f/0x50 [ 1333.581291] page_fault+0x45/0x50 [ 1333.584742] RIP: 14441f:0x9 [ 1333.587662] RSP: 000f:00007ffd7f9270cc EFLAGS: 00000032 [ 1333.622427] Mem-Info: [ 1333.630235] active_anon:29449 inactive_anon:9098 isolated_anon:0 [ 1333.630235] active_file:313 inactive_file:353 isolated_file:0 [ 1333.630235] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1333.630235] slab_reclaimable:13681 slab_unreclaimable:119221 [ 1333.630235] mapped:52931 shmem:11028 pagetables:827 bounce:0 [ 1333.630235] free:13968 free_pcp:0 free_cma:0 [ 1333.680620] Node 0 active_anon:115480kB inactive_anon:28256kB active_file:1248kB inactive_file:1192kB unevictable:0kB isolated(anon):0kB isolated(file):256kB mapped:211724kB dirty:24kB writeback:0kB shmem:35912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1333.718979] Node 1 active_anon:2316kB inactive_anon:8136kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1333.759845] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1333.809800] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1333.817861] Node 0 DMA32 free:18080kB min:36200kB low:45248kB high:54296kB active_anon:115480kB inactive_anon:28256kB active_file:1248kB inactive_file:1376kB unevictable:0kB writepending:24kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:3096kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1333.840703] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1333.872252] lowmem_reserve[]: 0 0 0 0 0 [ 1333.876276] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1333.883870] syz-executor.2 cpuset= [ 1333.906044] lowmem_reserve[]: 0 0 0 0 0 [ 1333.913969] Node 1 Normal free:26828kB min:53696kB low:67120kB high:80544kB active_anon:2316kB inactive_anon:8136kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1333.918769] / [ 1333.953094] lowmem_reserve[]: 0 0 0 0 0 [ 1333.958282] mems_allowed=0-1 [ 1333.958821] Node 0 DMA: 1*4kB (U) 2*8kB (UE) 2*16kB (UE) 7*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 1333.966800] CPU: 0 PID: 21772 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1333.981134] Node 0 [ 1333.988937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1333.988946] DMA32: [ 1333.991160] Call Trace: [ 1333.991181] dump_stack+0x1b2/0x281 [ 1333.991194] warn_alloc.cold+0x96/0x1cc [ 1333.991206] ? zone_watermark_ok_safe+0x220/0x220 [ 1333.991217] ? usleep_range+0x130/0x130 [ 1334.000561] 1160*4kB [ 1334.002792] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1334.002805] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1334.002814] ? run_timer_softirq+0x5a0/0x5a0 [ 1334.002833] __alloc_pages_nodemask+0x2127/0x2720 [ 1334.005415] (UME) [ 1334.009030] ? lock_acquire+0x170/0x3f0 [ 1334.013012] 665*8kB [ 1334.017833] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1334.021815] (ME) [ 1334.024177] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1334.029247] 237*16kB [ 1334.034262] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1334.034282] alloc_pages_current+0x155/0x260 [ 1334.034297] ion_page_pool_alloc+0x118/0x1b0 [ 1334.038691] (UME) [ 1334.043525] ion_system_heap_allocate+0x133/0x8c0 [ 1334.043535] ? ion_alloc+0x187/0x810 [ 1334.043545] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1334.043555] ? ion_system_contig_heap_create+0x130/0x130 [ 1334.043569] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1334.045698] 64*32kB [ 1334.049662] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1334.051994] (UME) [ 1334.056790] ion_alloc+0x204/0x810 [ 1334.058823] 19*64kB [ 1334.063308] ? ion_dma_buf_release+0x40/0x40 [ 1334.063320] ? __might_fault+0x177/0x1b0 [ 1334.063332] ion_ioctl+0xea/0x1f0 [ 1334.063342] ? ion_query_heaps+0x360/0x360 [ 1334.065730] (M) [ 1334.071164] ? __alloc_fd+0x1be/0x490 [ 1334.071175] ? ion_query_heaps+0x360/0x360 [ 1334.071184] do_vfs_ioctl+0x75a/0xff0 [ 1334.071197] ? ioctl_preallocate+0x1a0/0x1a0 [ 1334.075592] 4*128kB [ 1334.079989] ? lock_downgrade+0x740/0x740 [ 1334.080004] ? __fget+0x225/0x360 [ 1334.082202] (UM) [ 1334.086985] ? do_vfs_ioctl+0xff0/0xff0 [ 1334.090717] 1*256kB [ 1334.096131] ? security_file_ioctl+0x83/0xb0 [ 1334.101606] (M) [ 1334.106608] SyS_ioctl+0x7f/0xb0 [ 1334.108905] 1*512kB [ 1334.113741] ? do_vfs_ioctl+0xff0/0xff0 [ 1334.113754] do_syscall_64+0x1d5/0x640 [ 1334.113770] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1334.113780] RIP: 0033:0x465f69 [ 1334.113788] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 [ 1334.115950] (U) [ 1334.119466] ORIG_RAX: 0000000000000010 [ 1334.121810] 0*1024kB [ 1334.126154] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1334.126162] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1334.130208] 0*2048kB [ 1334.133638] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1334.133643] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1334.133648] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1334.145635] warn_alloc_show_mem: 4 callbacks suppressed [ 1334.145639] Mem-Info: [ 1334.178463] 0*4096kB [ 1334.183955] active_anon:29445 inactive_anon:9098 isolated_anon:0 [ 1334.183955] active_file:313 inactive_file:362 isolated_file:0 [ 1334.183955] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1334.183955] slab_reclaimable:13681 slab_unreclaimable:119052 [ 1334.183955] mapped:52931 shmem:11028 pagetables:826 bounce:0 [ 1334.183955] free:13969 free_pcp:0 free_cma:0 [ 1334.205605] = 18296kB [ 1334.211948] Node 0 active_anon:115464kB inactive_anon:28256kB active_file:1248kB inactive_file:1448kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211724kB dirty:24kB writeback:0kB shmem:35912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1334.246995] Node 0 [ 1334.252933] Node 1 active_anon:2316kB inactive_anon:8136kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1334.289282] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1334.418944] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1334.419666] Node 1 Normal: 122*4kB (ME) 63*8kB (UME) 46*16kB (UME) 39*32kB (UME) 27*64kB (UME) 19*128kB (UME) 15*256kB (UME) 31*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 26848kB [ 1334.472358] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1334.480429] Node 0 DMA32 free:18064kB min:36200kB low:45248kB high:54296kB active_anon:115464kB inactive_anon:28256kB active_file:1248kB inactive_file:1504kB unevictable:0kB writepending:24kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:3092kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1334.505194] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1334.509749] syz-executor.5: [ 1334.518493] lowmem_reserve[]: [ 1334.536277] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1334.549972] 0 0 0 0 0 [ 1334.561569] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1334.570323] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1334.596012] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1334.601235] CPU: 0 PID: 21768 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1334.608150] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1334.609117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1334.618021] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1334.627307] Call Trace: [ 1334.627330] dump_stack+0x1b2/0x281 [ 1334.627343] warn_alloc.cold+0x96/0x1cc [ 1334.627355] ? zone_watermark_ok_safe+0x220/0x220 [ 1334.627369] ? usleep_range+0x130/0x130 [ 1334.636082] 11717 total pagecache pages [ 1334.638623] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1334.642282] 0 pages in swap cache [ 1334.646204] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1334.651060] Swap cache stats: add 0, delete 0, find 0/0 [ 1334.654988] ? run_timer_softirq+0x5a0/0x5a0 [ 1334.658934] Free swap = 0kB [ 1334.664032] __alloc_pages_nodemask+0x2127/0x2720 [ 1334.664049] ? lock_acquire+0x170/0x3f0 [ 1334.664064] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1334.664077] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1334.667526] Total swap = 0kB [ 1334.672551] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1334.672570] alloc_pages_current+0x155/0x260 [ 1334.672588] ion_page_pool_alloc+0x118/0x1b0 [ 1334.677932] 2097051 pages RAM [ 1334.682334] ion_system_heap_allocate+0x133/0x8c0 [ 1334.682344] ? ion_alloc+0x187/0x810 [ 1334.682354] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1334.682363] ? ion_system_contig_heap_create+0x130/0x130 [ 1334.682374] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1334.682386] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1334.685381] 0 pages HighMem/MovableOnly [ 1334.690231] ion_alloc+0x204/0x810 [ 1334.694219] 363840 pages reserved [ 1334.699025] ? ion_dma_buf_release+0x40/0x40 [ 1334.703536] 0 pages cma reserved [ 1334.706510] ? __might_fault+0x177/0x1b0 [ 1334.711979] Out of memory (oom_kill_allocating_task): Kill process 19850 (syz-executor.0) score 0 or sacrifice child [ 1334.716344] ion_ioctl+0xea/0x1f0 [ 1334.720788] Killed process 19850 (syz-executor.0) total-vm:93120kB, anon-rss:104kB, file-rss:33888kB, shmem-rss:0kB [ 1334.723829] ? ion_query_heaps+0x360/0x360 [ 1334.737759] oom_reaper: reaped process 19850 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1334.737794] ? __alloc_fd+0x1be/0x490 [ 1334.812906] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1334.815605] ? ion_query_heaps+0x360/0x360 [ 1334.819406] (null) [ 1334.829465] do_vfs_ioctl+0x75a/0xff0 [ 1334.829478] ? ioctl_preallocate+0x1a0/0x1a0 [ 1334.829487] ? lock_downgrade+0x740/0x740 [ 1334.829499] ? __fget+0x225/0x360 [ 1334.829510] ? do_vfs_ioctl+0xff0/0xff0 [ 1334.833766] , order=0, oom_score_adj=0 [ 1334.835876] ? security_file_ioctl+0x83/0xb0 [ 1334.839654] syz-executor.0 cpuset= [ 1334.844054] SyS_ioctl+0x7f/0xb0 [ 1334.844064] ? do_vfs_ioctl+0xff0/0xff0 [ 1334.844074] do_syscall_64+0x1d5/0x640 [ 1334.844090] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1334.844099] RIP: 0033:0x465f69 [ 1334.848227] / [ 1334.851676] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1334.851687] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1334.851692] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1334.851696] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1334.851700] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1334.851705] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1334.877006] lowmem_reserve[]: [ 1334.890381] syz-executor.0: [ 1334.905370] 0 [ 1334.987163] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1334.999496] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1335.018455] mems_allowed=0-1 [ 1335.024631] 0 0 0 0 [ 1335.026095] CPU: 1 PID: 19850 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1335.026990] Node 1 [ 1335.034860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1335.034864] Call Trace: [ 1335.034884] dump_stack+0x1b2/0x281 [ 1335.034895] dump_header+0x178/0x82f [ 1335.034906] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1335.034914] ? ___ratelimit+0x2cd/0x530 [ 1335.034923] oom_kill_process.cold+0x10/0xb18 [ 1335.034940] out_of_memory+0xe3e/0x1190 [ 1335.034952] ? oom_killer_disable+0x1c0/0x1c0 [ 1335.034959] ? mutex_trylock+0x152/0x1a0 [ 1335.034969] __alloc_pages_nodemask+0x23e1/0x2720 [ 1335.034988] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1335.035010] alloc_pages_current+0x155/0x260 [ 1335.035020] filemap_fault+0xea3/0x1980 [ 1335.035039] ext4_filemap_fault+0x84/0xb0 [ 1335.035050] __do_fault+0xfa/0x380 [ 1335.035060] __handle_mm_fault+0x2497/0x4620 [ 1335.060223] Normal free:26848kB min:53696kB low:67120kB high:80544kB active_anon:2316kB inactive_anon:8136kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1335.061662] ? vm_insert_page+0x7c0/0x7c0 [ 1335.061672] ? nanosleep_copyout+0x100/0x100 [ 1335.061690] handle_mm_fault+0x391/0x860 [ 1335.061701] __do_page_fault+0x549/0xad0 [ 1335.061714] ? spurious_fault+0x640/0x640 [ 1335.061722] ? do_page_fault+0x60/0x500 [ 1335.061736] ? page_fault+0x2f/0x50 [ 1335.084639] lowmem_reserve[]: [ 1335.087542] page_fault+0x45/0x50 [ 1335.119383] 0 [ 1335.140770] RIP: 14441f:0x9 [ 1335.140775] RSP: 000f:00007ffd7f9270cc EFLAGS: 00000032 [ 1335.167500] CPU: 1 PID: 21766 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1335.181384] 0 [ 1335.186123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1335.204202] 0 [ 1335.205173] Call Trace: [ 1335.205175] 0 0 [ 1335.207010] dump_stack+0x1b2/0x281 [ 1335.211565] warn_alloc.cold+0x96/0x1cc [ 1335.211577] ? zone_watermark_ok_safe+0x220/0x220 [ 1335.211586] ? usleep_range+0x130/0x130 [ 1335.211594] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1335.211605] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1335.211614] ? run_timer_softirq+0x5a0/0x5a0 [ 1335.211630] __alloc_pages_nodemask+0x2127/0x2720 [ 1335.211644] ? lock_acquire+0x170/0x3f0 [ 1335.218275] Node 0 [ 1335.219245] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1335.229418] DMA: [ 1335.233109] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1335.233125] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1335.233143] alloc_pages_current+0x155/0x260 [ 1335.233156] ion_page_pool_alloc+0x118/0x1b0 [ 1335.233167] ion_system_heap_allocate+0x133/0x8c0 [ 1335.233178] ? ion_alloc+0x187/0x810 [ 1335.238182] 1*4kB [ 1335.242586] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1335.242598] ? ion_system_contig_heap_create+0x130/0x130 [ 1335.242608] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1335.242618] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1335.242629] ion_alloc+0x204/0x810 [ 1335.242642] ? ion_dma_buf_release+0x40/0x40 [ 1335.242654] ? __might_fault+0x177/0x1b0 [ 1335.242666] ion_ioctl+0xea/0x1f0 [ 1335.242675] ? ion_query_heaps+0x360/0x360 [ 1335.242684] ? __alloc_fd+0x1be/0x490 [ 1335.242697] ? ion_query_heaps+0x360/0x360 [ 1335.255277] (U) [ 1335.258542] do_vfs_ioctl+0x75a/0xff0 [ 1335.260604] 2*8kB [ 1335.265117] ? ioctl_preallocate+0x1a0/0x1a0 [ 1335.270546] (UE) [ 1335.274949] ? lock_downgrade+0x740/0x740 [ 1335.274964] ? __fget+0x225/0x360 [ 1335.274972] ? do_vfs_ioctl+0xff0/0xff0 [ 1335.274981] ? security_file_ioctl+0x83/0xb0 [ 1335.274990] SyS_ioctl+0x7f/0xb0 [ 1335.274998] ? do_vfs_ioctl+0xff0/0xff0 [ 1335.275009] do_syscall_64+0x1d5/0x640 [ 1335.275025] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1335.275034] RIP: 0033:0x465f69 [ 1335.275043] RSP: 002b:00007f978c555188 EFLAGS: 00000246 [ 1335.285409] 2*16kB [ 1335.287978] ORIG_RAX: 0000000000000010 [ 1335.290115] (UE) [ 1335.295550] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1335.295556] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1335.295560] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1335.295565] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1335.295569] R13: 00007ffd7f926e0f R14: 00007f978c555300 R15: 0000000000022000 [ 1335.327553] Mem-Info: [ 1335.452896] Mem-Info: [ 1335.455341] active_anon:29424 inactive_anon:9098 isolated_anon:0 [ 1335.455341] active_file:314 inactive_file:315 isolated_file:64 [ 1335.455341] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1335.455341] slab_reclaimable:13656 slab_unreclaimable:119025 [ 1335.455341] mapped:52931 shmem:11028 pagetables:826 bounce:0 [ 1335.455341] free:14092 free_pcp:0 free_cma:0 [ 1335.497765] Node 0 active_anon:115380kB inactive_anon:28256kB active_file:1248kB inactive_file:1348kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:211724kB dirty:24kB writeback:0kB shmem:35912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1335.527817] 7*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 1335.535576] Node 1 active_anon:2316kB inactive_anon:8136kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1335.558564] Node 0 [ 1335.582881] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1335.598762] DMA32: [ 1335.618093] active_anon:29424 inactive_anon:9098 isolated_anon:0 [ 1335.618093] active_file:314 inactive_file:304 isolated_file:64 [ 1335.618093] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1335.618093] slab_reclaimable:13656 slab_unreclaimable:119025 [ 1335.618093] mapped:52931 shmem:11028 pagetables:826 bounce:0 [ 1335.618093] free:14092 free_pcp:0 free_cma:0 [ 1335.658612] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1335.663728] Node 0 DMA32 free:18556kB min:36200kB low:45248kB high:54296kB active_anon:115380kB inactive_anon:28256kB active_file:1248kB inactive_file:1404kB unevictable:0kB writepending:24kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:3092kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1335.720731] Node 0 active_anon:115380kB inactive_anon:28256kB active_file:1248kB inactive_file:1308kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:211724kB dirty:24kB writeback:0kB shmem:35912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1335.740692] 1110*4kB (ME) 669*8kB (ME) 238*16kB (UME) 62*32kB (ME) 20*64kB (M) 4*128kB (UM) 1*256kB (M) 1*512kB (U) 72*1024kB (U) 6*2048kB (U) 0*4096kB = 104160kB [ 1335.830809] lowmem_reserve[]: 0 0 0 0 0 [ 1335.834907] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1335.858735] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1335.861745] Node 1 active_anon:2316kB inactive_anon:8136kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1335.930802] Node 1 Normal: 123*4kB (UME) 65*8kB (UME) 47*16kB (UME) 40*32kB (UME) 90*64kB (UME) 19*128kB (UME) 17*256kB (UME) 45*512kB (UME) 400*1024kB (U) 58*2048kB (U) 9*4096kB (U) = 603876kB [ 1335.972130] lowmem_reserve[]: 0 0 0 0 0 [ 1335.976824] Node 1 Normal free:577252kB min:53696kB low:67120kB high:80544kB active_anon:2316kB inactive_anon:8136kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:212kB bounce:0kB free_pcp:664kB local_pcp:0kB free_cma:0kB [ 1336.019765] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1336.083015] lowmem_reserve[]: 0 0 0 0 0 [ 1336.090715] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1336.095480] Node 0 [ 1336.099575] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1336.099583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1336.099589] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1336.099593] 13023 total pagecache pages [ 1336.099603] 0 pages in swap cache [ 1336.099608] Swap cache stats: add 0, delete 0, find 0/0 [ 1336.099612] Free swap = 0kB [ 1336.099615] Total swap = 0kB [ 1336.099622] 2097051 pages RAM [ 1336.099625] 0 pages HighMem/MovableOnly [ 1336.099628] 363840 pages reserved [ 1336.099632] 0 pages cma reserved [ 1336.165708] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1336.179877] Node 0 DMA32 free:70732kB min:36200kB low:45248kB high:54296kB active_anon:115332kB inactive_anon:28256kB active_file:2280kB inactive_file:5544kB unevictable:0kB writepending:172kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:3000kB bounce:0kB free_pcp:588kB local_pcp:240kB free_cma:0kB [ 1336.258877] lowmem_reserve[]: 0 0 0 0 0 [ 1336.267563] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1336.364437] DMA: 1*4kB (U) 2*8kB (UE) 2*16kB (UE) 7*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 1336.400462] lowmem_reserve[]: 0 0 0 0 0 [ 1336.411461] Node 1 Normal free:132920kB min:53696kB low:67120kB high:80544kB active_anon:2316kB inactive_anon:8136kB active_file:404kB inactive_file:1000kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:212kB bounce:0kB free_pcp:280kB local_pcp:72kB free_cma:0kB [ 1336.474833] Node 0 DMA32: 814*4kB (UME) 371*8kB (UME) 132*16kB (UME) 63*32kB (ME) 21*64kB (UM) 4*128kB (UM) 2*256kB (UM) 13*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 19376kB [ 1336.503214] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1336.515217] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1336.529985] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1336.535681] lowmem_reserve[]: 0 0 0 0 0 [ 1336.539776] Node 0 DMA: 1*4kB (U) 2*8kB (UE) 2*16kB (UE) 7*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 1336.559326] CPU: 1 PID: 21772 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1336.567226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1336.576580] Call Trace: [ 1336.579172] dump_stack+0x1b2/0x281 [ 1336.580961] Node 1 Normal: [ 1336.582813] warn_alloc.cold+0x96/0x1cc [ 1336.582826] ? zone_watermark_ok_safe+0x220/0x220 [ 1336.585742] 127*4kB [ 1336.589729] __alloc_pages_nodemask+0x2127/0x2720 [ 1336.601697] ? lock_acquire+0x170/0x3f0 [ 1336.602345] syz-executor.5: page allocation failure: order:4 [ 1336.605679] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1336.605690] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1336.611500] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1336.611512] ? __mutex_unlock_slowpath+0x75/0x770 [ 1336.611526] alloc_pages_current+0x155/0x260 [ 1336.611541] ion_page_pool_alloc+0x118/0x1b0 [ 1336.611551] ion_system_heap_allocate+0x133/0x8c0 [ 1336.611562] ? _raw_spin_unlock+0x29/0x40 [ 1336.611571] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1336.611581] ? ion_system_contig_heap_create+0x130/0x130 [ 1336.611593] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1336.611603] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1336.611613] ion_alloc+0x27a/0x810 [ 1336.611626] ? ion_dma_buf_release+0x40/0x40 [ 1336.611637] ? __might_fault+0x177/0x1b0 [ 1336.624154] (null) [ 1336.629007] ion_ioctl+0xea/0x1f0 [ 1336.649203] (UME) [ 1336.651595] ? ion_query_heaps+0x360/0x360 [ 1336.651606] ? __alloc_fd+0x1be/0x490 [ 1336.651616] ? ion_query_heaps+0x360/0x360 [ 1336.651626] do_vfs_ioctl+0x75a/0xff0 [ 1336.651638] ? ioctl_preallocate+0x1a0/0x1a0 [ 1336.651648] ? lock_downgrade+0x740/0x740 [ 1336.651660] ? __fget+0x225/0x360 [ 1336.651670] ? do_vfs_ioctl+0xff0/0xff0 [ 1336.651680] ? security_file_ioctl+0x83/0xb0 [ 1336.651689] SyS_ioctl+0x7f/0xb0 [ 1336.651695] ? do_vfs_ioctl+0xff0/0xff0 [ 1336.651707] do_syscall_64+0x1d5/0x640 [ 1336.666409] 65*8kB [ 1336.667091] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1336.680253] syz-executor.5 cpuset= [ 1336.683884] RIP: 0033:0x465f69 [ 1336.683889] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1336.683898] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1336.683903] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1336.683907] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1336.683912] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1336.683917] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1336.689088] Node 0 [ 1336.696979] (UME) [ 1336.699855] DMA32: [ 1336.707399] / [ 1336.710771] 1278*4kB [ 1336.723219] 43*16kB [ 1336.725716] (UME) [ 1336.728150] (UME) 41*32kB (UME) 28*64kB [ 1336.731691] 644*8kB [ 1336.739375] mems_allowed=0-1 [ 1336.739480] (UME) [ 1336.748953] CPU: 0 PID: 21768 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1336.755094] 235*16kB [ 1336.761339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1336.761344] Call Trace: [ 1336.761366] dump_stack+0x1b2/0x281 [ 1336.761379] warn_alloc.cold+0x96/0x1cc [ 1336.761395] ? zone_watermark_ok_safe+0x220/0x220 [ 1336.768664] (UME) [ 1336.775945] __alloc_pages_nodemask+0x2127/0x2720 [ 1336.775963] ? lock_acquire+0x170/0x3f0 [ 1336.775977] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1336.775994] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1336.783480] 60*32kB [ 1336.790532] ? __mutex_unlock_slowpath+0x75/0x770 [ 1336.797981] (UME) [ 1336.800026] alloc_pages_current+0x155/0x260 [ 1336.802171] 21*64kB [ 1336.804370] ion_page_pool_alloc+0x118/0x1b0 [ 1336.806050] (M) [ 1336.808479] ion_system_heap_allocate+0x133/0x8c0 [ 1336.810812] 5*128kB [ 1336.812906] ? _raw_spin_unlock+0x29/0x40 [ 1336.817040] (M) [ 1336.819383] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1336.822523] warn_alloc_show_mem: 1 callbacks suppressed [ 1336.822527] Mem-Info: [ 1336.824614] ? ion_system_contig_heap_create+0x130/0x130 [ 1336.832525] 0*256kB [ 1336.834875] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1336.844487] active_anon:29312 inactive_anon:9098 isolated_anon:0 [ 1336.844487] active_file:377 inactive_file:348 isolated_file:0 [ 1336.844487] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1336.844487] slab_reclaimable:13581 slab_unreclaimable:119695 [ 1336.844487] mapped:53056 shmem:11028 pagetables:803 bounce:0 [ 1336.844487] free:13813 free_pcp:0 free_cma:0 [ 1336.846789] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1336.850405] Node 0 active_anon:114932kB inactive_anon:28256kB active_file:1412kB inactive_file:1420kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212224kB dirty:0kB writeback:0kB shmem:35912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1336.854366] ion_alloc+0x27a/0x810 [ 1336.854382] ? ion_dma_buf_release+0x40/0x40 [ 1336.854393] ? __might_fault+0x177/0x1b0 [ 1336.854405] ion_ioctl+0xea/0x1f0 [ 1336.854414] ? ion_query_heaps+0x360/0x360 [ 1336.854424] ? __alloc_fd+0x1be/0x490 [ 1336.854435] ? ion_query_heaps+0x360/0x360 [ 1336.859482] 0*512kB [ 1336.861519] do_vfs_ioctl+0x75a/0xff0 [ 1336.861531] ? ioctl_preallocate+0x1a0/0x1a0 [ 1336.861540] ? lock_downgrade+0x740/0x740 [ 1336.861552] ? __fget+0x225/0x360 [ 1336.861560] ? do_vfs_ioctl+0xff0/0xff0 [ 1336.861570] ? security_file_ioctl+0x83/0xb0 [ 1336.861580] SyS_ioctl+0x7f/0xb0 [ 1336.866575] 0*1024kB [ 1336.870395] ? do_vfs_ioctl+0xff0/0xff0 [ 1336.875400] Node 1 active_anon:2316kB inactive_anon:8136kB active_file:96kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1336.880659] do_syscall_64+0x1d5/0x640 [ 1336.880676] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1336.880686] RIP: 0033:0x465f69 [ 1336.883009] Node 0 [ 1336.887830] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1336.890154] 0*2048kB [ 1336.894359] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1336.894365] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1336.894369] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1336.894374] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1336.894378] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1336.907133] (UME) [ 1336.917485] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1336.927761] 18*128kB [ 1336.957148] 0*4096kB [ 1336.984925] (ME) [ 1337.023500] lowmem_reserve[]: [ 1337.056015] 14*256kB [ 1337.069280] 0 [ 1337.087150] (ME) [ 1337.114492] = 17928kB [ 1337.137342] 3*512kB [ 1337.156328] 2717 [ 1337.219679] (ME) [ 1337.227959] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1337.230297] 0*1024kB [ 1337.245688] Node 1 Normal: 127*4kB (UME) 65*8kB (UME) 43*16kB (UME) 41*32kB (UME) 28*64kB (UME) 18*128kB (ME) 14*256kB (ME) 3*512kB (ME) 0*1024kB 1*2048kB (U) 3*4096kB (U) = 26580kB [ 1337.269715] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1337.275461] 1*2048kB (U) 3*4096kB (U) = 26580kB [ 1337.278809] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1337.297101] 2718 2718 2718 [ 1337.300093] Node 0 DMA32 free:18028kB min:36200kB low:45248kB high:54296kB active_anon:114956kB inactive_anon:28256kB active_file:1244kB inactive_file:1520kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:2912kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1337.307793] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1337.335478] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1337.351393] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1337.360022] 11733 total pagecache pages [ 1337.368995] 0 pages in swap cache [ 1337.372705] lowmem_reserve[]: 0 0 0 0 0 [ 1337.376731] Swap cache stats: add 0, delete 0, find 0/0 [ 1337.386236] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1337.387033] Node 0 [ 1337.395043] Free swap = 0kB [ 1337.400350] Total swap = 0kB [ 1337.414110] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1337.429748] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1337.444029] 2097051 pages RAM [ 1337.456007] 0 pages HighMem/MovableOnly [ 1337.459998] 363840 pages reserved [ 1337.465132] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1337.467794] 0 pages cma reserved [ 1337.484972] Out of memory (oom_kill_allocating_task): Kill process 19850 (syz-executor.0) score 0 or sacrifice child [ 1337.497233] lowmem_reserve[]: 0 0 0 0 0 [ 1337.503620] Node 1 Normal free:26580kB min:53696kB low:67120kB high:80544kB active_anon:2320kB inactive_anon:8136kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:228kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1337.505472] 11733 total pagecache pages [ 1337.547643] Killed process 19850 (syz-executor.0) total-vm:93120kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1337.558173] syz-executor.0: page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 1337.586908] 0 pages in swap cache [ 1337.590395] Swap cache stats: add 0, delete 0, find 0/0 [ 1337.598280] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1337.603056] oom_reaper: reaped process 21781 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1337.616271] lowmem_reserve[]: 0 0 0 0 0 [ 1337.620291] Node 0 DMA: 1*4kB (U) 2*8kB (UE) 2*16kB (UE) 7*32kB (UE) 1*64kB (E) 1*128kB (E) 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 1337.627754] Free swap = 0kB [ 1337.644266] CPU: 1 PID: 19850 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1337.648866] Total swap = 0kB [ 1337.652162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1337.652207] Call Trace: [ 1337.652234] dump_stack+0x1b2/0x281 [ 1337.652246] warn_alloc.cold+0x96/0x1cc [ 1337.655258] 2097051 pages RAM [ 1337.664614] ? zone_watermark_ok_safe+0x220/0x220 [ 1337.664631] ? wait_for_completion_io+0x10/0x10 [ 1337.664641] __alloc_pages_nodemask+0x2127/0x2720 [ 1337.664660] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1337.664682] alloc_pages_current+0x155/0x260 [ 1337.664693] filemap_fault+0xea3/0x1980 [ 1337.664710] ext4_filemap_fault+0x84/0xb0 [ 1337.687319] in:imklog invoked oom-killer: gfp_mask=0x14280ca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), nodemask= [ 1337.687481] __do_fault+0xfa/0x380 [ 1337.692388] 0 pages HighMem/MovableOnly [ 1337.697119] __handle_mm_fault+0x2497/0x4620 [ 1337.701964] (null) [ 1337.705472] ? vm_insert_page+0x7c0/0x7c0 [ 1337.709593] , order=0, oom_score_adj=0 [ 1337.719205] ? nanosleep_copyout+0x100/0x100 [ 1337.719230] handle_mm_fault+0x391/0x860 [ 1337.719242] __do_page_fault+0x549/0xad0 [ 1337.719257] ? spurious_fault+0x640/0x640 [ 1337.719265] ? do_page_fault+0x60/0x500 [ 1337.719274] ? page_fault+0x2f/0x50 [ 1337.719281] page_fault+0x45/0x50 [ 1337.719289] RIP: 14441f:0x9 [ 1337.719293] RSP: 000f:00007ffd7f9270cc EFLAGS: 00000032 [ 1337.728021] Node 0 [ 1337.752303] 363840 pages reserved [ 1337.759396] DMA32: [ 1337.770507] 0 pages cma reserved [ 1337.772775] 1270*4kB (UME) 628*8kB (UME) 247*16kB (UME) 58*32kB (UME) 21*64kB (UM) 5*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17896kB [ 1337.814974] in:imklog cpuset=/ mems_allowed=0-1 [ 1337.843261] warn_alloc_show_mem: 1 callbacks suppressed [ 1337.843265] Mem-Info: [ 1337.845406] CPU: 0 PID: 21229 Comm: in:imklog Not tainted 4.14.225-syzkaller #0 [ 1337.853347] Node 0 [ 1337.860617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1337.860621] Call Trace: [ 1337.860642] dump_stack+0x1b2/0x281 [ 1337.860653] dump_header+0x178/0x82f [ 1337.860663] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1337.860671] ? ___ratelimit+0x2cd/0x530 [ 1337.860680] oom_kill_process.cold+0x10/0xb18 [ 1337.860695] out_of_memory+0xe3e/0x1190 [ 1337.860707] ? oom_killer_disable+0x1c0/0x1c0 [ 1337.860721] ? mutex_trylock+0x152/0x1a0 [ 1337.860732] __alloc_pages_nodemask+0x23e1/0x2720 [ 1337.860750] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1337.860757] ? lock_acquire+0x170/0x3f0 [ 1337.860770] ? __lock_acquire+0x5fc/0x3f20 [ 1337.863404] active_anon:28777 inactive_anon:9098 isolated_anon:0 [ 1337.863404] active_file:317 inactive_file:367 isolated_file:0 [ 1337.863404] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1337.863404] slab_reclaimable:13576 slab_unreclaimable:119733 [ 1337.863404] mapped:44309 shmem:11028 pagetables:785 bounce:0 [ 1337.863404] free:57785 free_pcp:674 free_cma:0 [ 1337.872474] alloc_pages_vma+0xd2/0x6d0 [ 1337.872487] __handle_mm_fault+0x25fa/0x4620 [ 1337.872496] ? vm_insert_page+0x7c0/0x7c0 [ 1337.872505] ? lock_downgrade+0x740/0x740 [ 1337.872522] handle_mm_fault+0x391/0x860 [ 1337.878205] Normal: [ 1337.878709] __do_page_fault+0x549/0xad0 [ 1337.883133] 0*4kB [ 1337.887522] ? spurious_fault+0x640/0x640 [ 1337.887530] ? do_page_fault+0x60/0x500 [ 1337.887540] ? page_fault+0x2f/0x50 [ 1337.887547] page_fault+0x45/0x50 [ 1337.887554] RIP: ce9d5e80:0x55c2ccd4a770 [ 1337.887558] RSP: ce9d5d70:00007f1956c39430 EFLAGS: 55c2ccf78520 [ 1338.021310] Node 0 active_anon:112788kB inactive_anon:28256kB active_file:788kB inactive_file:2504kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177536kB dirty:0kB writeback:0kB shmem:35912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1338.071797] Node 1 active_anon:2320kB inactive_anon:8136kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1338.099967] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1338.126230] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1338.131494] Node 0 DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:112760kB inactive_anon:28256kB active_file:196kB inactive_file:1440kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:2908kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1338.139837] syz-executor.0: [ 1338.173396] Mem-Info: [ 1338.178873] active_anon:28770 inactive_anon:9098 isolated_anon:0 [ 1338.178873] active_file:55 inactive_file:342 isolated_file:32 [ 1338.178873] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1338.178873] slab_reclaimable:13557 slab_unreclaimable:119905 [ 1338.178873] mapped:44073 shmem:11028 pagetables:784 bounce:0 [ 1338.178873] free:13966 free_pcp:0 free_cma:0 [ 1338.187012] 0*8kB [ 1338.220679] lowmem_reserve[]: 0 0 0 0 0 [ 1338.226846] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1338.246254] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1338.260686] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1338.260708] CPU: 0 PID: 21766 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1338.260714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1338.260717] Call Trace: [ 1338.260738] dump_stack+0x1b2/0x281 [ 1338.260752] warn_alloc.cold+0x96/0x1cc [ 1338.260765] ? zone_watermark_ok_safe+0x220/0x220 [ 1338.260787] __alloc_pages_nodemask+0x2127/0x2720 [ 1338.313371] ? lock_acquire+0x170/0x3f0 [ 1338.314072] 0*16kB 0*32kB [ 1338.317342] ? lock_acquire+0x170/0x3f0 [ 1338.317358] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1338.320195] 0*64kB [ 1338.324176] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1338.324188] ? __mutex_unlock_slowpath+0x75/0x770 [ 1338.324208] alloc_pages_current+0x155/0x260 [ 1338.324226] ion_page_pool_alloc+0x118/0x1b0 [ 1338.350377] ion_system_heap_allocate+0x133/0x8c0 [ 1338.354660] lowmem_reserve[]: 0 0 [ 1338.355232] ? _raw_spin_unlock+0x29/0x40 [ 1338.355246] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1338.358686] 0 [ 1338.362841] ? ion_system_contig_heap_create+0x130/0x130 [ 1338.362853] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1338.362863] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1338.362874] ion_alloc+0x27a/0x810 [ 1338.362889] ? ion_dma_buf_release+0x40/0x40 [ 1338.371638] 0*128kB [ 1338.375044] ? __might_fault+0x177/0x1b0 [ 1338.380036] 0*256kB [ 1338.384874] ion_ioctl+0xea/0x1f0 [ 1338.384884] ? ion_query_heaps+0x360/0x360 [ 1338.384894] ? __alloc_fd+0x1be/0x490 [ 1338.384908] ? ion_query_heaps+0x360/0x360 [ 1338.397866] 0 [ 1338.399215] do_vfs_ioctl+0x75a/0xff0 [ 1338.401540] 0 [ 1338.404951] ? ioctl_preallocate+0x1a0/0x1a0 [ 1338.404960] ? lock_downgrade+0x740/0x740 [ 1338.404978] ? __fget+0x225/0x360 [ 1338.404987] ? do_vfs_ioctl+0xff0/0xff0 [ 1338.405001] ? security_file_ioctl+0x83/0xb0 [ 1338.412094] 0*512kB [ 1338.413023] SyS_ioctl+0x7f/0xb0 [ 1338.417257] 0*1024kB 0*2048kB [ 1338.419076] ? do_vfs_ioctl+0xff0/0xff0 [ 1338.424672] do_syscall_64+0x1d5/0x640 [ 1338.429053] Node 1 [ 1338.433197] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1338.433206] RIP: 0033:0x465f69 [ 1338.433211] RSP: 002b:00007f978c555188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1338.433224] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1338.436706] 0*4096kB [ 1338.440645] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1338.440650] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1338.440655] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1338.440660] R13: 00007ffd7f926e0f R14: 00007f978c555300 R15: 0000000000022000 [ 1338.520709] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1338.525064] syz-executor.5: [ 1338.537517] Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:2320kB inactive_anon:8136kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:228kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1338.543597] syz-executor.4 cpuset= [ 1338.573104] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1338.582121] Node 0 active_anon:112760kB inactive_anon:28256kB active_file:196kB inactive_file:1420kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176292kB dirty:12kB writeback:0kB shmem:35912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1338.595492] syz-executor.5 cpuset= [ 1338.624283] lowmem_reserve[]: 0 0 0 0 0 [ 1338.636406] / mems_allowed=0-1 [ 1338.639627] CPU: 1 PID: 21768 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1338.647506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1338.656862] Call Trace: [ 1338.659458] dump_stack+0x1b2/0x281 [ 1338.659969] / [ 1338.663081] warn_alloc.cold+0x96/0x1cc [ 1338.668765] ? zone_watermark_ok_safe+0x220/0x220 [ 1338.669276] mems_allowed=0-1 [ 1338.673606] ? usleep_range+0x130/0x130 [ 1338.673614] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1338.673626] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1338.673635] ? run_timer_softirq+0x5a0/0x5a0 [ 1338.673650] __alloc_pages_nodemask+0x2127/0x2720 [ 1338.673665] ? lock_acquire+0x170/0x3f0 [ 1338.673679] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1338.673690] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1338.673704] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1338.713786] Node 1 active_anon:2320kB inactive_anon:8136kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1338.714324] alloc_pages_current+0x155/0x260 [ 1338.719770] Node 0 [ 1338.746493] ion_page_pool_alloc+0x118/0x1b0 [ 1338.746504] ion_system_heap_allocate+0x133/0x8c0 [ 1338.746516] ? _raw_spin_unlock+0x29/0x40 [ 1338.746525] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1338.746534] ? ion_system_contig_heap_create+0x130/0x130 [ 1338.746544] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1338.746554] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1338.746565] ion_alloc+0x27a/0x810 [ 1338.746579] ? ion_dma_buf_release+0x40/0x40 [ 1338.746590] ? __might_fault+0x177/0x1b0 [ 1338.746602] ion_ioctl+0xea/0x1f0 [ 1338.746616] ? ion_query_heaps+0x360/0x360 [ 1338.806474] ? __alloc_fd+0x1be/0x490 [ 1338.810307] ? ion_query_heaps+0x360/0x360 [ 1338.814543] do_vfs_ioctl+0x75a/0xff0 [ 1338.818346] ? ioctl_preallocate+0x1a0/0x1a0 [ 1338.822751] ? lock_downgrade+0x740/0x740 [ 1338.826905] ? __fget+0x225/0x360 [ 1338.830356] ? do_vfs_ioctl+0xff0/0xff0 [ 1338.834326] ? security_file_ioctl+0x83/0xb0 [ 1338.838733] SyS_ioctl+0x7f/0xb0 [ 1338.840725] syz-executor.0: [ 1338.842094] ? do_vfs_ioctl+0xff0/0xff0 [ 1338.842098] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1338.845111] do_syscall_64+0x1d5/0x640 [ 1338.849072] (null) [ 1338.859042] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1338.859052] RIP: 0033:0x465f69 [ 1338.859056] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1338.859065] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1338.859070] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1338.859075] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1338.859079] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1338.859084] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1338.869267] Node 0 [ 1338.873821] CPU: 0 PID: 21781 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 1338.883314] DMA: [ 1338.888638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1338.896126] 1*4kB [ 1338.903152] Call Trace: [ 1338.903178] dump_stack+0x1b2/0x281 [ 1338.903192] warn_alloc.cold+0x96/0x1cc [ 1338.910476] = 0kB [ 1338.917733] ? zone_watermark_ok_safe+0x220/0x220 [ 1338.917743] ? usleep_range+0x130/0x130 [ 1338.917751] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1338.917763] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1338.917774] ? run_timer_softirq+0x5a0/0x5a0 [ 1338.920004] (U) [ 1338.928016] __alloc_pages_nodemask+0x2127/0x2720 [ 1338.928040] ? lock_acquire+0x170/0x3f0 [ 1338.928054] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1338.930115] Node 1 [ 1338.939455] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1338.939471] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1338.939495] alloc_pages_current+0x155/0x260 [ 1338.941650] 2*8kB [ 1338.944193] ion_page_pool_alloc+0x118/0x1b0 [ 1338.947795] (UE) [ 1338.951764] ion_system_heap_allocate+0x133/0x8c0 [ 1338.951774] ? ion_alloc+0x187/0x810 [ 1338.951783] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1338.951793] ? ion_system_contig_heap_create+0x130/0x130 [ 1338.951806] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1338.953864] Normal: [ 1338.958684] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1338.962695] 2*16kB [ 1338.967735] ion_alloc+0x204/0x810 [ 1338.972772] 122*4kB [ 1338.977154] ? ion_dma_buf_release+0x40/0x40 [ 1338.979096] (ME) [ 1338.983930] ? __might_fault+0x177/0x1b0 [ 1338.983944] ion_ioctl+0xea/0x1f0 [ 1338.983955] ? ion_query_heaps+0x360/0x360 [ 1338.983965] ? __alloc_fd+0x1be/0x490 [ 1338.987932] (UE) [ 1338.992758] ? ion_query_heaps+0x360/0x360 [ 1338.992769] do_vfs_ioctl+0x75a/0xff0 [ 1338.992781] ? ioctl_preallocate+0x1a0/0x1a0 [ 1338.992792] ? lock_downgrade+0x740/0x740 [ 1338.995015] 118*8kB [ 1338.999494] ? __fget+0x225/0x360 [ 1339.004973] 7*32kB [ 1339.009331] ? do_vfs_ioctl+0xff0/0xff0 [ 1339.011479] (UE) [ 1339.015845] ? security_file_ioctl+0x83/0xb0 [ 1339.017897] 1*64kB [ 1339.022734] SyS_ioctl+0x7f/0xb0 [ 1339.022743] ? do_vfs_ioctl+0xff0/0xff0 [ 1339.022755] do_syscall_64+0x1d5/0x640 [ 1339.022772] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1339.026478] (UME) [ 1339.031901] RIP: 0033:0x465f69 [ 1339.031906] RSP: 002b:00007fd58f6e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1339.031915] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1339.031920] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1339.031925] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1339.031930] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1339.031939] R13: 00007ffefda7c1ff R14: 00007fd58f6e3300 R15: 0000000000022000 [ 1339.037392] 105*16kB [ 1339.052746] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1339.059929] (E) [ 1339.062781] lowmem_reserve[]: [ 1339.067014] 1*128kB [ 1339.068378] 0 [ 1339.077281] (E) [ 1339.079978] syz-executor.0 cpuset= [ 1339.082064] 1*256kB (E) 4*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 1339.082092] Node 0 DMA32: 1298*4kB [ 1339.088216] / [ 1339.090131] (UME) [ 1339.097247] mems_allowed=0-1 [ 1339.109956] (UME) [ 1339.114886] 2717 [ 1339.117221] 41*32kB (UME) [ 1339.119452] 2718 [ 1339.128611] 671*8kB [ 1339.134928] CPU: 0 PID: 21766 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1339.136080] 153*64kB [ 1339.138139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1339.141367] (UME) [ 1339.149274] Call Trace: [ 1339.156613] (UME) [ 1339.163834] dump_stack+0x1b2/0x281 [ 1339.163848] warn_alloc.cold+0x96/0x1cc [ 1339.163864] ? zone_watermark_ok_safe+0x220/0x220 [ 1339.171172] 245*16kB [ 1339.178405] ? usleep_range+0x130/0x130 [ 1339.185734] 19*128kB [ 1339.188093] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1339.213640] (UME) [ 1339.215572] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1339.218732] 48*32kB [ 1339.221040] ? run_timer_softirq+0x5a0/0x5a0 [ 1339.221057] __alloc_pages_nodemask+0x2127/0x2720 [ 1339.221074] ? lock_acquire+0x170/0x3f0 [ 1339.221089] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1339.222871] (ME) [ 1339.224832] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1339.228343] 12*64kB [ 1339.236230] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1339.236248] alloc_pages_current+0x155/0x260 [ 1339.236264] ion_page_pool_alloc+0x118/0x1b0 [ 1339.236275] ion_system_heap_allocate+0x133/0x8c0 [ 1339.239923] (UME) [ 1339.241610] ? _raw_spin_unlock+0x29/0x40 [ 1339.241621] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1339.241631] ? ion_system_contig_heap_create+0x130/0x130 [ 1339.241647] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1339.243776] 14*256kB [ 1339.246871] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1339.248990] (ME) [ 1339.251064] ion_alloc+0x27a/0x810 [ 1339.251078] ? ion_dma_buf_release+0x40/0x40 [ 1339.251090] ? __might_fault+0x177/0x1b0 [ 1339.251103] ion_ioctl+0xea/0x1f0 [ 1339.253946] (UM) [ 1339.255978] ? ion_query_heaps+0x360/0x360 [ 1339.258273] 2*128kB [ 1339.266144] ? __alloc_fd+0x1be/0x490 [ 1339.266156] ? ion_query_heaps+0x360/0x360 [ 1339.266165] do_vfs_ioctl+0x75a/0xff0 [ 1339.266177] ? ioctl_preallocate+0x1a0/0x1a0 [ 1339.266189] ? lock_downgrade+0x740/0x740 [ 1339.268593] 3*512kB [ 1339.277940] ? __fget+0x225/0x360 [ 1339.277951] ? do_vfs_ioctl+0xff0/0xff0 [ 1339.277961] ? security_file_ioctl+0x83/0xb0 [ 1339.277970] SyS_ioctl+0x7f/0xb0 [ 1339.277978] ? do_vfs_ioctl+0xff0/0xff0 [ 1339.277992] do_syscall_64+0x1d5/0x640 [ 1339.280144] (M) [ 1339.282706] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1339.282715] RIP: 0033:0x465f69 [ 1339.282720] RSP: 002b:00007f978c555188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1339.282733] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1339.284865] 1*256kB [ 1339.288488] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1339.288496] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1339.292516] (ME) [ 1339.297276] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1339.297285] R13: 00007ffd7f926e0f R14: 00007f978c555300 R15: 0000000000022000 [ 1339.299683] 1*1024kB [ 1339.315769] 2718 [ 1339.335562] (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB [ 1339.355468] 2718 [ 1339.380149] (U) [ 1339.410512] warn_alloc_show_mem: 1 callbacks suppressed [ 1339.410517] Mem-Info: [ 1339.456703] Node 0 [ 1339.464834] = 18320kB [ 1339.487855] DMA32 free:18320kB min:36200kB low:45248kB high:54296kB active_anon:112764kB inactive_anon:28256kB active_file:240kB inactive_file:1448kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:2912kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1339.503342] 0*2048kB [ 1339.526411] lowmem_reserve[]: [ 1339.530532] Node 0 [ 1339.558659] 0 [ 1339.564766] 1*4096kB [ 1339.596367] 0 [ 1339.611091] active_anon:28771 inactive_anon:9098 isolated_anon:0 [ 1339.611091] active_file:66 inactive_file:353 isolated_file:0 [ 1339.611091] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1339.611091] slab_reclaimable:13552 slab_unreclaimable:119877 [ 1339.611091] mapped:44055 shmem:11028 pagetables:785 bounce:0 [ 1339.611091] free:25563 free_pcp:0 free_cma:0 [ 1339.621166] 0 [ 1339.647039] Normal: [ 1339.649910] (U) [ 1339.656322] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1339.679352] = 26888kB [ 1339.681934] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1339.694567] Node 1 Normal: 2*4kB (ME) 2*8kB (ME) 25*16kB (ME) 38*32kB (UME) 49*64kB (UME) 19*128kB (UME) 14*256kB (ME) 3*512kB (ME) 88*1024kB (U) 0*2048kB 1*4096kB (U) = 106536kB [ 1339.711294] 0 0 [ 1339.713294] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1339.714671] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1339.752909] Node 0 active_anon:112764kB inactive_anon:28256kB active_file:240kB inactive_file:1392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176220kB dirty:12kB writeback:0kB shmem:35912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1339.802448] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1339.810770] lowmem_reserve[]: 0 0 0 0 0 [ 1339.815367] Node 1 Normal free:69840kB min:53696kB low:67120kB high:80544kB active_anon:2320kB inactive_anon:8136kB active_file:224kB inactive_file:1120kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:228kB bounce:0kB free_pcp:304kB local_pcp:168kB free_cma:0kB [ 1339.830669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1339.860686] Node 1 active_anon:2320kB inactive_anon:8136kB active_file:224kB inactive_file:1120kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:700kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1339.888640] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1339.898292] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1339.915572] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1339.924460] lowmem_reserve[]: 0 0 0 0 0 [ 1339.924482] Node 0 DMA: 1*4kB (U) 2*8kB (ME) 2*16kB (ME) 2*32kB (ME) 8*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11380kB [ 1339.924550] Node 0 DMA32: 1111*4kB (UME) 669*8kB (ME) 245*16kB (UME) 49*32kB (UME) 473*64kB (UME) [ 1339.933296] 11906 total pagecache pages [ 1339.965158] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1339.980902] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1340.013238] 11580 total pagecache pages [ 1340.017233] 0 pages in swap cache [ 1340.021080] 0 pages in swap cache [ 1340.024575] Swap cache stats: add 0, delete 0, find 0/0 [ 1340.028348] 66*128kB [ 1340.029932] Free swap = 0kB [ 1340.029940] (UM) [ 1340.036772] Swap cache stats: add 0, delete 0, find 0/0 [ 1340.040980] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1340.044309] Total swap = 0kB [ 1340.062793] Free swap = 0kB [ 1340.066088] Total swap = 0kB [ 1340.069140] 2097051 pages RAM [ 1340.073745] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1340.074600] 35*256kB [ 1340.078793] Node 0 [ 1340.078802] (U) [ 1340.081319] 2097051 pages RAM [ 1340.088600] 0 pages HighMem/MovableOnly [ 1340.097047] DMA32 free:19068kB min:36200kB low:45248kB high:54296kB active_anon:112740kB inactive_anon:28256kB active_file:444kB inactive_file:1504kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2908kB bounce:0kB free_pcp:176kB local_pcp:32kB free_cma:0kB [ 1340.107662] 2*512kB [ 1340.128335] 0 pages HighMem/MovableOnly [ 1340.136885] 363840 pages reserved [ 1340.140338] 0 pages cma reserved [ 1340.140980] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1340.143928] 363840 pages reserved [ 1340.148837] CPU: 0 PID: 21781 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 1340.152322] 0 pages cma reserved [ 1340.160151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.163556] lowmem_reserve[]: [ 1340.172838] Call Trace: [ 1340.172862] dump_stack+0x1b2/0x281 [ 1340.172875] warn_alloc.cold+0x96/0x1cc [ 1340.172888] ? zone_watermark_ok_safe+0x220/0x220 [ 1340.188752] 0 [ 1340.190990] __alloc_pages_nodemask+0x2127/0x2720 [ 1340.191007] ? lock_acquire+0x170/0x3f0 [ 1340.192789] 0 [ 1340.197634] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1340.208219] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1340.213809] ? __mutex_unlock_slowpath+0x75/0x770 [ 1340.215384] 0 0 [ 1340.218680] ? __list_del_entry_valid+0xb3/0xf0 [ 1340.218694] alloc_pages_current+0x155/0x260 [ 1340.220693] 0 [ 1340.225339] ion_page_pool_alloc+0x118/0x1b0 [ 1340.231505] ion_system_heap_allocate+0x133/0x8c0 [ 1340.231518] ? _raw_spin_unlock+0x29/0x40 [ 1340.231528] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1340.231540] ? ion_system_contig_heap_create+0x130/0x130 [ 1340.255368] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1340.255413] Node 0 [ 1340.260400] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1340.260417] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1340.260423] lowmem_reserve[]: [ 1340.262652] ion_alloc+0x27a/0x810 [ 1340.262667] ? ion_dma_buf_release+0x40/0x40 [ 1340.262679] ? __might_fault+0x177/0x1b0 [ 1340.262691] ion_ioctl+0xea/0x1f0 [ 1340.279455] 0 [ 1340.292443] ? ion_query_heaps+0x360/0x360 [ 1340.292454] ? __alloc_fd+0x1be/0x490 [ 1340.292463] ? ion_query_heaps+0x360/0x360 [ 1340.292473] do_vfs_ioctl+0x75a/0xff0 [ 1340.292485] ? ioctl_preallocate+0x1a0/0x1a0 [ 1340.313631] 0 [ 1340.317135] ? lock_downgrade+0x740/0x740 [ 1340.324156] 0 [ 1340.325258] ? __fget+0x225/0x360 [ 1340.329027] 0 [ 1340.333434] ? do_vfs_ioctl+0xff0/0xff0 [ 1340.333444] ? security_file_ioctl+0x83/0xb0 [ 1340.333453] SyS_ioctl+0x7f/0xb0 [ 1340.333462] ? do_vfs_ioctl+0xff0/0xff0 [ 1340.333477] do_syscall_64+0x1d5/0x640 [ 1340.335294] 0 [ 1340.339535] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1340.344869] RIP: 0033:0x465f69 [ 1340.346652] Node 1 [ 1340.350614] RSP: 002b:00007fd58f6e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1340.350624] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1340.350629] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1340.350633] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1340.350638] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1340.350643] R13: 00007ffefda7c1ff R14: 00007fd58f6e3300 R15: 0000000000022000 [ 1340.363852] (U) [ 1340.370533] syz-executor.2: [ 1340.380438] 0*1024kB [ 1340.402902] Normal free:26388kB min:53696kB low:67120kB high:80544kB active_anon:2304kB inactive_anon:8136kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:212kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1340.413433] 0*2048kB [ 1340.422832] page allocation failure: order:0 [ 1340.427390] 0*4096kB [ 1340.428351] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1340.435266] = 63988kB [ 1340.474988] lowmem_reserve[]: 0 0 0 0 0 [ 1340.486502] Node 0 DMA: 2*4kB (UM) 2*8kB (ME) 3*16kB (UME) 2*32kB (ME) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10952kB [ 1340.488351] Node 0 [ 1340.506833] Node 0 DMA32: 1277*4kB (ME) 671*8kB (UME) 245*16kB (ME) 49*32kB (UME) 16*64kB (ME) 3*128kB (UM) 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17884kB [ 1340.510977] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1340.528593] (null) [ 1340.540554] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1340.546940] Node 1 Normal: 121*4kB (UME) 62*8kB (ME) 42*16kB (ME) 37*32kB (UME) 188*64kB (UME) 42*128kB (UME) 16*256kB (UME) 4*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 26388kB [ 1340.549861] Node 0 [ 1340.567421] CPU: 1 PID: 21772 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1340.571512] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1340.577547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1340.590482] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1340.595742] Call Trace: [ 1340.595765] dump_stack+0x1b2/0x281 [ 1340.595777] warn_alloc.cold+0x96/0x1cc [ 1340.595789] ? zone_watermark_ok_safe+0x220/0x220 [ 1340.595797] ? usleep_range+0x130/0x130 [ 1340.595805] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1340.595817] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1340.595827] ? run_timer_softirq+0x5a0/0x5a0 [ 1340.595842] __alloc_pages_nodemask+0x2127/0x2720 [ 1340.616314] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1340.619411] ? lock_acquire+0x170/0x3f0 [ 1340.629252] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1340.633635] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1340.633647] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1340.633662] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1340.633680] alloc_pages_current+0x155/0x260 [ 1340.633693] ion_page_pool_alloc+0x118/0x1b0 [ 1340.633711] ion_system_heap_allocate+0x133/0x8c0 [ 1340.633722] ? _raw_spin_unlock+0x29/0x40 [ 1340.633734] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1340.645219] 11527 total pagecache pages [ 1340.651938] ? ion_system_contig_heap_create+0x130/0x130 [ 1340.651951] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1340.651961] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1340.651972] ion_alloc+0x27a/0x810 [ 1340.651987] ? ion_dma_buf_release+0x40/0x40 [ 1340.651998] ? __might_fault+0x177/0x1b0 [ 1340.652010] ion_ioctl+0xea/0x1f0 [ 1340.652020] ? ion_query_heaps+0x360/0x360 [ 1340.652029] ? __alloc_fd+0x1be/0x490 [ 1340.652041] ? ion_query_heaps+0x360/0x360 [ 1340.659250] 0 pages in swap cache [ 1340.664581] do_vfs_ioctl+0x75a/0xff0 [ 1340.664594] ? ioctl_preallocate+0x1a0/0x1a0 [ 1340.664602] ? lock_downgrade+0x740/0x740 [ 1340.664614] ? __fget+0x225/0x360 [ 1340.664622] ? do_vfs_ioctl+0xff0/0xff0 [ 1340.664632] ? security_file_ioctl+0x83/0xb0 [ 1340.664640] SyS_ioctl+0x7f/0xb0 [ 1340.664647] ? do_vfs_ioctl+0xff0/0xff0 [ 1340.664658] do_syscall_64+0x1d5/0x640 [ 1340.664674] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1340.664685] RIP: 0033:0x465f69 [ 1340.674951] Swap cache stats: add 0, delete 0, find 0/0 [ 1340.679428] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 [ 1340.686949] warn_alloc_show_mem: 2 callbacks suppressed [ 1340.686952] Mem-Info: [ 1340.688213] ORIG_RAX: 0000000000000010 [ 1340.697445] Free swap = 0kB [ 1340.702207] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1340.702213] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1340.702218] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1340.702222] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1340.702227] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1340.716852] Normal: [ 1340.726236] active_anon:28761 inactive_anon:9098 isolated_anon:0 [ 1340.726236] active_file:118 inactive_file:367 isolated_file:0 [ 1340.726236] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1340.726236] slab_reclaimable:13552 slab_unreclaimable:119357 [ 1340.726236] mapped:44035 shmem:11028 pagetables:780 bounce:0 [ 1340.726236] free:13794 free_pcp:100 free_cma:0 [ 1340.729766] 0*4kB [ 1340.738033] Node 0 active_anon:112740kB inactive_anon:28256kB active_file:448kB inactive_file:1448kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176140kB dirty:12kB writeback:0kB shmem:35912kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1340.745968] 0*8kB [ 1340.754966] Node 1 active_anon:2304kB inactive_anon:8136kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1340.757099] 0*16kB [ 1340.765429] Node 0 [ 1340.767926] 0*32kB [ 1340.769186] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1340.775241] 0*64kB [ 1340.792353] Total swap = 0kB [ 1340.806106] 0*128kB [ 1340.815151] lowmem_reserve[]: [ 1340.816062] 0*256kB [ 1340.820027] 0 [ 1340.831215] 0*512kB [ 1340.846610] 2097051 pages RAM [ 1340.864081] 0*1024kB [ 1340.908388] 2717 [ 1340.938516] 0*2048kB 0*4096kB = 0kB [ 1341.017213] Node 1 Normal: 59*4kB (UME) 63*8kB (UME) 43*16kB (UME) 37*32kB (UME) 26*64kB (ME) 24*128kB (UME) 16*256kB (UME) 4*512kB (UME) 148*1024kB (U) 0*2048kB 0*4096kB = 165044kB [ 1341.020772] 0 pages HighMem/MovableOnly [ 1341.039217] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.049244] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1341.056267] 363840 pages reserved [ 1341.061735] 2718 2718 2718 [ 1341.064682] Node 0 DMA32 free:31324kB min:36200kB low:45248kB high:54296kB active_anon:112740kB inactive_anon:28256kB active_file:444kB inactive_file:1348kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2908kB bounce:0kB free_pcp:280kB local_pcp:152kB free_cma:0kB [ 1341.071600] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.095550] 0 pages cma reserved [ 1341.107675] Out of memory (oom_kill_allocating_task): Kill process 21229 (in:imklog) score 0 or sacrifice child [ 1341.118405] Killed process 21221 (rsyslogd) total-vm:254332kB, anon-rss:1316kB, file-rss:0kB, shmem-rss:0kB [ 1341.128508] lowmem_reserve[]: 0 0 0 0 0 [ 1341.132571] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1341.161339] oom_reaper: reaped process 21221 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1341.180875] lowmem_reserve[]: 0 0 0 0 0 [ 1341.185620] Node 1 Normal free:200656kB min:53696kB low:67120kB high:80544kB active_anon:904kB inactive_anon:8136kB active_file:832kB inactive_file:3528kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:64kB bounce:0kB free_pcp:596kB local_pcp:464kB free_cma:0kB [ 1341.217735] lowmem_reserve[]: 0 0 0 0 0 [ 1341.222060] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1341.258501] 13208 total pagecache pages [ 1341.260868] Node 0 DMA: 2*4kB (UM) 2*8kB (ME) 3*16kB (UME) 2*32kB (ME) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10952kB [ 1341.293958] 0 pages in swap cache [ 1341.321185] Swap cache stats: add 0, delete 0, find 0/0 [ 1341.326583] Free swap = 0kB [ 1341.329599] Total swap = 0kB [ 1341.354329] 2097051 pages RAM [ 1341.357533] 0 pages HighMem/MovableOnly [ 1341.366971] Node 0 DMA32: 1126*4kB (ME) 681*8kB (UME) 945*16kB (UME) 207*32kB (UME) 21*64kB (UME) 10*128kB (UM) 3*256kB (U) 6*512kB (U) 6*1024kB (U) 2*2048kB (U) 0*4096kB = 48400kB [ 1341.402899] 363840 pages reserved [ 1341.406379] 0 pages cma reserved [ 1341.425346] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1341.487760] Node 1 Normal: 2*4kB (ME) 1*8kB (E) 3*16kB (UME) 4*32kB (UME) 3*64kB (UE) 4*128kB (UME) 4*256kB (UME) 3*512kB (ME) 115*1024kB (U) 16*2048kB (U) 1*4096kB (U) = 158080kB [ 1341.540956] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.550076] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1341.580678] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1341.589668] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1341.607225] 14392 total pagecache pages [ 1341.611320] 0 pages in swap cache [ 1341.614809] Swap cache stats: add 0, delete 0, find 0/0 [ 1341.620170] Free swap = 0kB [ 1341.645098] Total swap = 0kB [ 1341.648153] 2097051 pages RAM [ 1341.658335] 0 pages HighMem/MovableOnly [ 1341.692929] 363840 pages reserved [ 1341.699861] 0 pages cma reserved [ 1341.883518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1341.914664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1341.956128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1341.996278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1342.022995] device bridge_slave_1 left promiscuous mode [ 1342.040838] bridge0: port 2(bridge_slave_1) entered disabled state [ 1342.081573] device bridge_slave_0 left promiscuous mode [ 1342.087134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1342.117654] device veth1_macvtap left promiscuous mode [ 1342.134777] device veth0_macvtap left promiscuous mode [ 1342.140227] device veth1_vlan left promiscuous mode [ 1342.170729] device veth0_vlan left promiscuous mode [ 1342.379351] device hsr_slave_1 left promiscuous mode [ 1342.399408] device hsr_slave_0 left promiscuous mode [ 1342.437330] team0 (unregistering): Port device team_slave_1 removed [ 1342.464490] team0 (unregistering): Port device team_slave_0 removed [ 1342.485307] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1342.521645] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1342.577337] bond0 (unregistering): Released all slaves [ 1342.937357] oom_reaper: reaped process 21771 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1342.957120] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1342.972824] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1342.979440] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1342.985967] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1342.996531] CPU: 1 PID: 21771 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 1343.010817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1343.011908] systemd-journal cpuset= [ 1343.020175] Call Trace: [ 1343.020198] dump_stack+0x1b2/0x281 [ 1343.029994] warn_alloc.cold+0x96/0x1cc [ 1343.033990] ? zone_watermark_ok_safe+0x220/0x220 [ 1343.038826] ? usleep_range+0x130/0x130 [ 1343.042795] ? try_to_free_pages+0x23f/0x6e0 [ 1343.047195] ? _find_next_bit+0xdb/0x100 [ 1343.051256] ? run_timer_softirq+0x5a0/0x5a0 [ 1343.055669] __alloc_pages_nodemask+0x2127/0x2720 [ 1343.060533] ? lock_acquire+0x170/0x3f0 [ 1343.064511] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1343.069348] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1343.073843] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1343.079296] ? check_preemption_disabled+0x35/0x240 [ 1343.084668] alloc_pages_current+0x155/0x260 [ 1343.089094] ion_page_pool_alloc+0x118/0x1b0 [ 1343.093502] ion_system_heap_allocate+0x133/0x8c0 [ 1343.098345] ? ion_alloc+0x187/0x810 [ 1343.102068] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1343.107527] ? ion_system_contig_heap_create+0x130/0x130 [ 1343.112973] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1343.117994] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1343.122842] ion_alloc+0x204/0x810 [ 1343.126378] ? ion_dma_buf_release+0x40/0x40 [ 1343.130785] ? __might_fault+0x177/0x1b0 [ 1343.134858] ion_ioctl+0xea/0x1f0 [ 1343.138333] ? ion_query_heaps+0x360/0x360 [ 1343.142558] ? __alloc_fd+0x1be/0x490 [ 1343.146377] ? ion_query_heaps+0x360/0x360 [ 1343.150604] do_vfs_ioctl+0x75a/0xff0 [ 1343.154399] ? ioctl_preallocate+0x1a0/0x1a0 [ 1343.159408] ? lock_downgrade+0x740/0x740 [ 1343.163553] ? __fget+0x225/0x360 [ 1343.167010] ? do_vfs_ioctl+0xff0/0xff0 [ 1343.170975] ? security_file_ioctl+0x83/0xb0 [ 1343.175378] SyS_ioctl+0x7f/0xb0 [ 1343.178756] ? do_vfs_ioctl+0xff0/0xff0 [ 1343.182731] do_syscall_64+0x1d5/0x640 [ 1343.186616] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1343.191821] RIP: 0033:0x465f69 [ 1343.195037] RSP: 002b:00007f2758795188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1343.202739] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1343.210786] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1343.218088] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1343.225358] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1343.232622] R13: 00007fff98c6ba8f R14: 00007f2758795300 R15: 0000000000022000 [ 1343.240785] / mems_allowed=0-1 [ 1343.244004] CPU: 0 PID: 21212 Comm: systemd-journal Not tainted 4.14.225-syzkaller #0 [ 1343.250203] syz-executor.4 cpuset= [ 1343.251961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1343.251965] Call Trace: [ 1343.251984] dump_stack+0x1b2/0x281 [ 1343.251995] dump_header+0x178/0x82f [ 1343.252006] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1343.252018] ? ___ratelimit+0x2cd/0x530 [ 1343.255550] / [ 1343.264910] oom_kill_process.cold+0x10/0xb18 [ 1343.280674] mems_allowed=0-1 [ 1343.283926] out_of_memory+0xe3e/0x1190 [ 1343.297147] ? oom_killer_disable+0x1c0/0x1c0 [ 1343.301897] ? mutex_trylock+0x152/0x1a0 [ 1343.305975] __alloc_pages_nodemask+0x23e1/0x2720 [ 1343.310830] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1343.315684] alloc_pages_current+0x155/0x260 [ 1343.320117] filemap_fault+0xea3/0x1980 [ 1343.324106] ext4_filemap_fault+0x84/0xb0 [ 1343.328255] __do_fault+0xfa/0x380 [ 1343.331789] __handle_mm_fault+0x2497/0x4620 [ 1343.336193] ? ep_poll+0x1ab/0xa50 [ 1343.339748] ? vm_insert_page+0x7c0/0x7c0 [ 1343.343904] handle_mm_fault+0x391/0x860 [ 1343.347975] __do_page_fault+0x549/0xad0 [ 1343.352033] ? spurious_fault+0x640/0x640 [ 1343.356173] ? do_page_fault+0x60/0x500 [ 1343.360138] ? page_fault+0x2f/0x50 [ 1343.363755] page_fault+0x45/0x50 [ 1343.367195] RIP: 0001:0xffffffffffffffff [ 1343.371240] RSP: e7f0a1e0:00007ffdd596c4a0 EFLAGS: 7ffdd596c2b0 [ 1343.374364] Mem-Info: [ 1343.382891] CPU: 0 PID: 21781 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 1343.390768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1343.400146] Call Trace: [ 1343.402738] dump_stack+0x1b2/0x281 [ 1343.406366] warn_alloc.cold+0x96/0x1cc [ 1343.410340] ? zone_watermark_ok_safe+0x220/0x220 [ 1343.415183] ? usleep_range+0x130/0x130 [ 1343.419153] ? try_to_free_pages+0x23f/0x6e0 [ 1343.423584] ? _find_next_bit+0xdb/0x100 [ 1343.427644] ? run_timer_softirq+0x5a0/0x5a0 [ 1343.432057] __alloc_pages_nodemask+0x2127/0x2720 [ 1343.436904] ? lock_acquire+0x170/0x3f0 [ 1343.440898] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1343.445743] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1343.450348] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1343.455813] alloc_pages_current+0x155/0x260 [ 1343.460231] ion_page_pool_alloc+0x118/0x1b0 [ 1343.464645] ion_system_heap_allocate+0x133/0x8c0 [ 1343.469489] ? _raw_spin_unlock+0x29/0x40 [ 1343.473643] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1343.478575] ? ion_system_contig_heap_create+0x130/0x130 [ 1343.484026] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1343.489042] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1343.493892] ion_alloc+0x27a/0x810 [ 1343.497440] ? ion_dma_buf_release+0x40/0x40 [ 1343.501871] ? __might_fault+0x177/0x1b0 [ 1343.505940] ion_ioctl+0xea/0x1f0 [ 1343.509396] ? ion_query_heaps+0x360/0x360 [ 1343.513635] ? __alloc_fd+0x1be/0x490 [ 1343.517439] ? ion_query_heaps+0x360/0x360 [ 1343.521675] do_vfs_ioctl+0x75a/0xff0 [ 1343.525484] ? ioctl_preallocate+0x1a0/0x1a0 [ 1343.529897] ? lock_downgrade+0x740/0x740 [ 1343.534052] ? __fget+0x225/0x360 [ 1343.537504] ? do_vfs_ioctl+0xff0/0xff0 [ 1343.541478] ? security_file_ioctl+0x83/0xb0 [ 1343.545884] SyS_ioctl+0x7f/0xb0 [ 1343.549246] ? do_vfs_ioctl+0xff0/0xff0 [ 1343.553216] do_syscall_64+0x1d5/0x640 [ 1343.557126] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1343.560668] warn_alloc_show_mem: 1 callbacks suppressed [ 1343.560672] Mem-Info: [ 1343.562308] RIP: 0033:0x465f69 [ 1343.567679] active_anon:28225 inactive_anon:9097 isolated_anon:0 [ 1343.567679] active_file:17 inactive_file:17 isolated_file:0 [ 1343.567679] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1343.567679] slab_reclaimable:13449 slab_unreclaimable:117484 [ 1343.567679] mapped:35416 shmem:11024 pagetables:682 bounce:0 [ 1343.567679] free:13897 free_pcp:0 free_cma:0 [ 1343.570069] RSP: 002b:00007fd58f6e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1343.580673] Node 0 active_anon:111432kB inactive_anon:28252kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141664kB dirty:0kB writeback:0kB shmem:35896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1343.606215] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1343.606221] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1343.606225] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1343.606230] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1343.606234] R13: 00007ffefda7c1ff R14: 00007fd58f6e3300 R15: 0000000000022000 [ 1343.609338] active_anon:28225 inactive_anon:9097 isolated_anon:0 [ 1343.609338] active_file:17 inactive_file:17 isolated_file:0 [ 1343.609338] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1343.609338] slab_reclaimable:13449 slab_unreclaimable:117484 [ 1343.609338] mapped:35416 shmem:11024 pagetables:682 bounce:0 [ 1343.609338] free:13897 free_pcp:0 free_cma:0 [ 1343.676029] Node 1 active_anon:1468kB inactive_anon:8136kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1343.680582] Node 0 active_anon:111432kB inactive_anon:28252kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141664kB dirty:0kB writeback:0kB shmem:35896kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1343.760652] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1343.768822] Node 1 active_anon:1468kB inactive_anon:8136kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1343.819645] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1343.845887] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1343.860710] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1343.864584] Node 0 DMA32 free:18208kB min:36200kB low:45248kB high:54296kB active_anon:111432kB inactive_anon:28252kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2548kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 1343.865906] Node 0 [ 1343.942041] lowmem_reserve[]: 0 0 0 0 0 [ 1343.962050] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1344.000698] DMA32 free:18208kB min:36200kB low:45248kB high:54296kB active_anon:111432kB inactive_anon:28252kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7328kB pagetables:2548kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB [ 1344.031264] lowmem_reserve[]: 0 0 0 0 0 [ 1344.035309] Node 1 Normal free:334244kB min:53696kB low:67120kB high:80544kB active_anon:1468kB inactive_anon:8136kB active_file:40kB inactive_file:3140kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:180kB bounce:0kB free_pcp:108kB local_pcp:64kB free_cma:0kB [ 1344.050664] lowmem_reserve[]: 0 0 0 0 0 [ 1344.094780] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1344.124618] lowmem_reserve[]: 0 0 0 0 0 [ 1344.128635] Node 0 DMA: 0*4kB 2*8kB (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10960kB [ 1344.143639] lowmem_reserve[]: 0 0 0 0 0 [ 1344.147637] Node 1 Normal free:574884kB min:53696kB low:67120kB high:80544kB active_anon:1468kB inactive_anon:8136kB active_file:40kB inactive_file:3156kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:180kB bounce:0kB free_pcp:108kB local_pcp:64kB free_cma:0kB [ 1344.177167] Node 0 DMA32: 1222*4kB (ME) 654*8kB (UME) 280*16kB (UME) 54*32kB (UME) 17*64kB (UME) 5*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18312kB [ 1344.192485] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1344.203315] Node 1 Normal: 1*4kB (E) 2*8kB (ME) 3*16kB (UME) 3*32kB (UE) 36*64kB (UME) 24*128kB (UME) 8*256kB (ME) 6*512kB (ME) 465*1024kB (UM) 93*2048kB (UM) 16*4096kB (U) = 742820kB [ 1344.220094] lowmem_reserve[]: 0 0 0 0 0 [ 1344.224163] Node 0 DMA: 0*4kB 2*8kB (UE) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10960kB [ 1344.239177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1344.248121] Node 0 DMA32: 1222*4kB (ME) 654*8kB (UME) 280*16kB (UME) 54*32kB (UME) 17*64kB (UME) 5*128kB (UM) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18312kB [ 1344.263476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1344.272160] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1344.281109] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1344.291940] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1344.300561] 11865 total pagecache pages [ 1344.305273] Node 1 Normal: 1*4kB (E) 2*8kB (ME) 3*16kB (UME) 3*32kB (UE) 36*64kB (UME) 24*128kB (UME) 8*256kB (ME) 6*512kB (ME) 508*1024kB (UM) 132*2048kB (UM) 32*4096kB (U) = 932260kB [ 1344.322149] 0 pages in swap cache [ 1344.325647] Swap cache stats: add 0, delete 0, find 0/0 [ 1344.331060] Free swap = 0kB [ 1344.334128] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1344.343151] Total swap = 0kB [ 1344.346175] 2097051 pages RAM [ 1344.349267] 0 pages HighMem/MovableOnly [ 1344.353305] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1344.362030] 363840 pages reserved [ 1344.365483] 0 pages cma reserved [ 1344.368848] Out of memory (oom_kill_allocating_task): Kill process 21212 (systemd-journal) score 0 or sacrifice child [ 1344.379742] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1344.388679] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1344.397363] Killed process 21212 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:2388kB [ 1344.408082] 11865 total pagecache pages [ 1344.412124] 0 pages in swap cache [ 1344.415576] Swap cache stats: add 0, delete 0, find 0/0 [ 1344.422848] oom_reaper: reaped process 21212 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2388kB [ 1344.437962] Free swap = 0kB [ 1344.441558] Total swap = 0kB [ 1344.445064] 2097051 pages RAM [ 1344.448187] 0 pages HighMem/MovableOnly [ 1344.452358] 363840 pages reserved [ 1344.455832] 0 pages cma reserved [ 1344.506994] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1344.531347] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1344.590524] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1344.612086] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1344.618968] systemd[1]: Stopped Journal Service. [ 1344.639631] systemd[1]: Starting Journal Service... [ 1344.866478] systemd-journald[21826]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1345.186640] systemd[1]: Started Journal Service. [ 1345.674489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1345.681892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1345.692871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1345.700535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1345.716383] device bridge_slave_1 left promiscuous mode [ 1345.722457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.730466] device bridge_slave_0 left promiscuous mode [ 1345.737870] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.759182] device veth1_macvtap left promiscuous mode [ 1345.769533] device veth0_macvtap left promiscuous mode [ 1345.776329] device veth1_vlan left promiscuous mode [ 1345.786283] device veth0_vlan left promiscuous mode [ 1345.921296] device hsr_slave_1 left promiscuous mode [ 1345.929653] device hsr_slave_0 left promiscuous mode [ 1345.948070] team0 (unregistering): Port device team_slave_1 removed [ 1345.962717] team0 (unregistering): Port device team_slave_0 removed [ 1345.974953] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1345.985939] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1346.020870] bond0 (unregistering): Released all slaves 08:36:28 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) 08:36:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) 08:36:28 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) socket$nl_route(0x10, 0x3, 0x0) 08:36:28 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000005c0)) 08:36:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) socket$nl_route(0x10, 0x3, 0x0) 08:36:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) 08:36:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000005c0)) 08:36:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 08:36:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 08:36:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 08:36:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 08:36:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) [ 1347.998106] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1348.018451] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1348.019247] syz-executor.3: [ 1348.033641] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1348.042885] CPU: 0 PID: 21850 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1348.043616] syz-executor.2 cpuset= [ 1348.050786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1348.050791] Call Trace: [ 1348.050812] dump_stack+0x1b2/0x281 [ 1348.050826] warn_alloc.cold+0x96/0x1cc [ 1348.050837] ? zone_watermark_ok_safe+0x220/0x220 [ 1348.050859] __alloc_pages_nodemask+0x2127/0x2720 [ 1348.050875] ? lock_acquire+0x170/0x3f0 [ 1348.050890] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1348.065248] / [ 1348.066390] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1348.075511] mems_allowed=0-1 [ 1348.078789] ? __mutex_unlock_slowpath+0x75/0x770 [ 1348.078801] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 1348.112719] alloc_pages_current+0x155/0x260 [ 1348.117151] ion_page_pool_alloc+0x118/0x1b0 [ 1348.121564] ion_system_heap_allocate+0x133/0x8c0 [ 1348.126412] ? ion_alloc+0x187/0x810 [ 1348.130125] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1348.135593] ? ion_system_contig_heap_create+0x130/0x130 [ 1348.141041] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1348.146052] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1348.150901] ion_alloc+0x204/0x810 [ 1348.154444] ? ion_dma_buf_release+0x40/0x40 [ 1348.158864] ? __might_fault+0x177/0x1b0 [ 1348.162948] ion_ioctl+0xea/0x1f0 [ 1348.166507] ? ion_query_heaps+0x360/0x360 [ 1348.170738] ? __alloc_fd+0x1be/0x490 [ 1348.174539] ? ion_query_heaps+0x360/0x360 [ 1348.178773] do_vfs_ioctl+0x75a/0xff0 [ 1348.182576] ? ioctl_preallocate+0x1a0/0x1a0 [ 1348.187153] ? lock_downgrade+0x740/0x740 [ 1348.191303] ? __fget+0x225/0x360 [ 1348.194750] ? do_vfs_ioctl+0xff0/0xff0 [ 1348.198760] ? security_file_ioctl+0x83/0xb0 [ 1348.203227] SyS_ioctl+0x7f/0xb0 [ 1348.206606] ? do_vfs_ioctl+0xff0/0xff0 [ 1348.210581] do_syscall_64+0x1d5/0x640 [ 1348.214472] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1348.219677] RIP: 0033:0x465f69 [ 1348.222863] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1348.230571] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1348.237858] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1348.245120] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1348.252386] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1348.259657] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1348.267369] CPU: 1 PID: 21842 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1348.269022] page allocation failure: order:4 [ 1348.275279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1348.275284] Call Trace: [ 1348.275306] dump_stack+0x1b2/0x281 [ 1348.275321] warn_alloc.cold+0x96/0x1cc [ 1348.275332] ? zone_watermark_ok_safe+0x220/0x220 [ 1348.275353] __alloc_pages_nodemask+0x2127/0x2720 [ 1348.275368] ? lock_acquire+0x170/0x3f0 [ 1348.275382] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1348.275398] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1348.275410] ? __mutex_unlock_slowpath+0x75/0x770 [ 1348.275424] alloc_pages_current+0x155/0x260 [ 1348.279949] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1348.289197] ion_page_pool_alloc+0x118/0x1b0 [ 1348.289208] ion_system_heap_allocate+0x133/0x8c0 [ 1348.289217] ? ion_alloc+0x187/0x810 [ 1348.289227] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1348.289236] ? ion_system_contig_heap_create+0x130/0x130 [ 1348.289247] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1348.289258] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1348.289268] ion_alloc+0x204/0x810 [ 1348.289282] ? ion_dma_buf_release+0x40/0x40 [ 1348.289294] ? __might_fault+0x177/0x1b0 [ 1348.289305] ion_ioctl+0xea/0x1f0 [ 1348.289318] ? ion_query_heaps+0x360/0x360 [ 1348.292415] (null) [ 1348.295570] ? __alloc_fd+0x1be/0x490 [ 1348.295584] ? ion_query_heaps+0x360/0x360 [ 1348.295595] do_vfs_ioctl+0x75a/0xff0 [ 1348.295607] ? ioctl_preallocate+0x1a0/0x1a0 [ 1348.299673] syz-executor.3 cpuset= [ 1348.304422] ? lock_downgrade+0x740/0x740 [ 1348.304439] ? __fget+0x225/0x360 [ 1348.304448] ? do_vfs_ioctl+0xff0/0xff0 [ 1348.304458] ? security_file_ioctl+0x83/0xb0 [ 1348.304467] SyS_ioctl+0x7f/0xb0 [ 1348.304476] ? do_vfs_ioctl+0xff0/0xff0 [ 1348.304487] do_syscall_64+0x1d5/0x640 [ 1348.304505] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1348.304513] RIP: 0033:0x465f69 [ 1348.304518] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1348.304527] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1348.304532] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1348.304537] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1348.304542] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1348.304552] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1348.309527] / [ 1348.334946] warn_alloc_show_mem: 1 callbacks suppressed [ 1348.334951] Mem-Info: [ 1348.340773] mems_allowed=0-1 [ 1348.348247] active_anon:29233 inactive_anon:11125 isolated_anon:0 [ 1348.348247] active_file:1797 inactive_file:4549 isolated_file:0 [ 1348.348247] unevictable:0 dirty:8 writeback:3 unstable:0 [ 1348.348247] slab_reclaimable:13340 slab_unreclaimable:115008 [ 1348.348247] mapped:39246 shmem:13068 pagetables:711 bounce:0 [ 1348.348247] free:78112 free_pcp:188 free_cma:0 [ 1348.360849] CPU: 0 PID: 21839 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 1348.368103] Node 0 active_anon:116060kB inactive_anon:36368kB active_file:7188kB inactive_file:18340kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157384kB dirty:28kB writeback:12kB shmem:44072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1348.369159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1348.369164] Call Trace: [ 1348.369183] dump_stack+0x1b2/0x281 [ 1348.369197] warn_alloc.cold+0x96/0x1cc [ 1348.369209] ? zone_watermark_ok_safe+0x220/0x220 [ 1348.369232] __alloc_pages_nodemask+0x2127/0x2720 [ 1348.369241] ? __schedule+0x893/0x1de0 [ 1348.369256] ? lock_acquire+0x170/0x3f0 [ 1348.375358] Node 1 active_anon:872kB inactive_anon:8132kB active_file:0kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1348.377642] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1348.377660] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1348.377671] ? __mutex_unlock_slowpath+0x75/0x770 [ 1348.377685] alloc_pages_current+0x155/0x260 [ 1348.377699] ion_page_pool_alloc+0x118/0x1b0 [ 1348.377709] ion_system_heap_allocate+0x133/0x8c0 [ 1348.377734] ? ion_alloc+0x187/0x810 [ 1348.377747] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1348.383746] Node 0 [ 1348.386228] ? ion_system_contig_heap_create+0x130/0x130 [ 1348.389679] DMA free:11092kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1348.393891] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1348.393908] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1348.393921] ion_alloc+0x204/0x810 [ 1348.393936] ? ion_dma_buf_release+0x40/0x40 [ 1348.393947] ? __might_fault+0x177/0x1b0 [ 1348.393959] ion_ioctl+0xea/0x1f0 [ 1348.396898] lowmem_reserve[]: [ 1348.399886] ? ion_query_heaps+0x360/0x360 [ 1348.404519] 0 [ 1348.407893] ? sock_ioctl+0x16c/0x4c0 [ 1348.412314] 2717 [ 1348.415810] ? ion_query_heaps+0x360/0x360 [ 1348.420535] 2718 [ 1348.423383] do_vfs_ioctl+0x75a/0xff0 [ 1348.423395] ? ioctl_preallocate+0x1a0/0x1a0 [ 1348.423405] ? lock_downgrade+0x740/0x740 [ 1348.423417] ? __fget+0x225/0x360 [ 1348.423425] ? do_vfs_ioctl+0xff0/0xff0 [ 1348.423434] ? security_file_ioctl+0x83/0xb0 [ 1348.423443] SyS_ioctl+0x7f/0xb0 [ 1348.423450] ? do_vfs_ioctl+0xff0/0xff0 [ 1348.423461] do_syscall_64+0x1d5/0x640 [ 1348.423477] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1348.423486] RIP: 0033:0x465f69 [ 1348.423491] RSP: 002b:00007f2758795188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1348.423501] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1348.423506] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1348.423511] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1348.423519] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1348.427845] 2718 [ 1348.431882] R13: 00007fff98c6ba8f R14: 00007f2758795300 R15: 0000000000022000 [ 1348.881140] 2718 [ 1348.883242] Node 0 DMA32 free:36576kB min:36200kB low:45248kB high:54296kB active_anon:116060kB inactive_anon:36368kB active_file:9708kB inactive_file:8320kB unevictable:0kB writepending:40kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:2752kB bounce:0kB free_pcp:504kB local_pcp:0kB free_cma:0kB [ 1348.989253] lowmem_reserve[]: 0 0 0 0 0 [ 1348.993376] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1349.019554] lowmem_reserve[]: 0 0 0 0 0 [ 1349.023840] Node 1 Normal free:53696kB min:53696kB low:67120kB high:80544kB active_anon:872kB inactive_anon:8132kB active_file:0kB inactive_file:56kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1349.052407] lowmem_reserve[]: 0 0 0 0 0 [ 1349.056604] Node 0 DMA: 0*4kB 11*8kB (UE) 4*16kB (UE) 13*32kB (UE) 2*64kB (UE) 1*128kB (E) 4*256kB (UE) 4*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11064kB [ 1349.071544] Node 0 DMA32: 1157*4kB (UME) 649*8kB (UME) 243*16kB (ME) 352*32kB (UME) 38*64kB (UM) 20*128kB (M) 12*256kB (M) 6*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36108kB [ 1349.091366] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1349.105390] Node 1 Normal: 62*4kB (UME) 254*8kB (UME) 476*16kB (UME) 278*32kB (UME) 34*64kB (UME) 20*128kB (UME) 16*256kB (UME) 51*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 53736kB [ 1349.126656] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1349.137838] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1349.146568] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1349.155466] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1349.164170] 13129 total pagecache pages [ 1349.168163] 0 pages in swap cache [ 1349.171856] Swap cache stats: add 0, delete 0, find 0/0 [ 1349.177230] Free swap = 0kB [ 1349.180246] Total swap = 0kB [ 1349.183327] 2097051 pages RAM [ 1349.186435] 0 pages HighMem/MovableOnly [ 1349.190407] 363840 pages reserved [ 1349.193912] 0 pages cma reserved [ 1349.226736] syz-executor.4 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1349.351959] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1349.357126] CPU: 1 PID: 21873 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 1349.365006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1349.374406] Call Trace: [ 1349.377029] dump_stack+0x1b2/0x281 [ 1349.380665] dump_header+0x178/0x82f [ 1349.384411] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1349.389520] ? ___ratelimit+0x2cd/0x530 [ 1349.393496] oom_kill_process.cold+0x10/0xb18 [ 1349.398035] out_of_memory+0xe3e/0x1190 [ 1349.402018] ? oom_killer_disable+0x1c0/0x1c0 [ 1349.406512] ? mutex_trylock+0x152/0x1a0 [ 1349.410593] __alloc_pages_nodemask+0x23e1/0x2720 [ 1349.415443] ? __lock_acquire+0x5fc/0x3f20 [ 1349.419686] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1349.424548] alloc_pages_current+0x155/0x260 [ 1349.428964] __vmalloc_area_node+0x40a/0x680 [ 1349.433383] ? __vmalloc_node_range+0x150/0x150 [ 1349.438051] ? __get_vm_area_node+0x27d/0x340 [ 1349.442550] __vmalloc_node_range+0xbe/0x150 [ 1349.446961] vmalloc_user+0x47/0xa0 [ 1349.450619] ? kcov_mmap+0x2b/0x120 [ 1349.454250] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1349.459271] kcov_mmap+0x2b/0x120 [ 1349.462727] ? kmem_cache_alloc+0x35f/0x3c0 [ 1349.467045] mmap_region+0xa1a/0x1220 [ 1349.470855] do_mmap+0x5b3/0xcb0 [ 1349.474224] vm_mmap_pgoff+0x14e/0x1a0 [ 1349.478118] ? vma_is_stack_for_current+0xb0/0xb0 [ 1349.482958] ? __fget+0x225/0x360 [ 1349.486411] SyS_mmap_pgoff+0x249/0x510 [ 1349.490393] ? find_mergeable_anon_vma+0x230/0x230 [ 1349.495320] ? do_syscall_64+0x4c/0x640 [ 1349.499289] ? align_vdso_addr+0x250/0x250 [ 1349.503521] do_syscall_64+0x1d5/0x640 [ 1349.507410] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1349.512598] RIP: 0033:0x465fb2 [ 1349.515783] RSP: 002b:00007fffa6e31ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1349.523487] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000465fb2 [ 1349.530753] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000000000000 [ 1349.538111] RBP: 0000000000000000 R08: 00000000000000f0 R09: 0000000000000000 [ 1349.545384] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000000f1 [ 1349.552652] R13: 000000000056ca68 R14: 0000000000000000 R15: 0000000000400538 [ 1350.071760] Mem-Info: [ 1350.074217] active_anon:29339 inactive_anon:11125 isolated_anon:0 [ 1350.074217] active_file:14 inactive_file:6 isolated_file:0 [ 1350.074217] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1350.074217] slab_reclaimable:13332 slab_unreclaimable:114126 [ 1350.074217] mapped:40808 shmem:13068 pagetables:732 bounce:0 [ 1350.074217] free:25077 free_pcp:123 free_cma:0 [ 1350.339643] Node 0 active_anon:116484kB inactive_anon:36368kB active_file:108kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162160kB dirty:0kB writeback:0kB shmem:44072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1350.388521] Node 1 active_anon:872kB inactive_anon:8132kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1072kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1350.467212] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1350.660261] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1350.686821] Node 0 DMA32 free:35664kB min:36200kB low:45248kB high:54296kB active_anon:116484kB inactive_anon:36368kB active_file:88kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:2836kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1350.920121] lowmem_reserve[]: 0 0 0 0 0 [ 1350.938245] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1351.151241] lowmem_reserve[]: 0 0 0 0 0 [ 1351.155404] Node 1 Normal free:53704kB min:53696kB low:67120kB high:80544kB active_anon:872kB inactive_anon:8132kB active_file:0kB inactive_file:104kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:92kB bounce:0kB free_pcp:176kB local_pcp:136kB free_cma:0kB [ 1351.186600] lowmem_reserve[]: 0 0 0 0 0 [ 1351.190686] Node 0 DMA: 0*4kB 11*8kB (UE) 4*16kB (UE) 13*32kB (UE) 2*64kB (UE) 1*128kB (E) 4*256kB (UE) 4*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11064kB [ 1351.208218] Node 0 DMA32: 1322*4kB (UME) 756*8kB (UME) 259*16kB (ME) 266*32kB (UME) 39*64kB (UM) 20*128kB (M) 14*256kB (M) 7*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 36216kB [ 1351.226431] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1351.237271] Node 1 Normal: 2*4kB (ME) 211*8kB (UME) 473*16kB (UME) 278*32kB (UME) 34*64kB (UME) 20*128kB (UME) 16*256kB (UME) 51*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 53104kB [ 1351.253673] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1351.345569] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1351.406751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1351.474736] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1351.539660] 13100 total pagecache pages [ 1351.563337] 0 pages in swap cache [ 1351.566816] Swap cache stats: add 0, delete 0, find 0/0 [ 1351.632437] Free swap = 0kB [ 1351.635482] Total swap = 0kB [ 1351.638503] 2097051 pages RAM [ 1351.711998] 0 pages HighMem/MovableOnly [ 1351.716000] 363840 pages reserved [ 1351.719479] 0 pages cma reserved [ 1351.795272] Out of memory (oom_kill_allocating_task): Kill process 21873 (syz-executor.4) score 0 or sacrifice child [ 1351.828047] Killed process 21873 (syz-executor.4) total-vm:66492kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1351.938441] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1351.952303] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1351.957440] CPU: 0 PID: 21278 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 1351.965322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1351.974683] Call Trace: [ 1351.977799] dump_stack+0x1b2/0x281 [ 1351.981437] dump_header+0x178/0x82f [ 1351.985174] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1351.990542] ? ___ratelimit+0x2cd/0x530 [ 1351.994520] oom_kill_process.cold+0x10/0xb18 [ 1351.999025] out_of_memory+0xe3e/0x1190 [ 1352.003039] ? oom_killer_disable+0x1c0/0x1c0 [ 1352.007535] ? mutex_trylock+0x152/0x1a0 [ 1352.011599] __alloc_pages_nodemask+0x23e1/0x2720 [ 1352.016459] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1352.021321] alloc_pages_current+0x155/0x260 [ 1352.025736] filemap_fault+0xea3/0x1980 [ 1352.029723] ext4_filemap_fault+0x84/0xb0 [ 1352.033882] __do_fault+0xfa/0x380 [ 1352.037433] __handle_mm_fault+0x2497/0x4620 [ 1352.041847] ? vm_insert_page+0x7c0/0x7c0 [ 1352.046002] ? nanosleep_copyout+0x100/0x100 [ 1352.050446] handle_mm_fault+0x391/0x860 [ 1352.054518] __do_page_fault+0x549/0xad0 [ 1352.058591] ? spurious_fault+0x640/0x640 [ 1352.062756] ? do_page_fault+0x60/0x500 [ 1352.066737] ? page_fault+0x2f/0x50 [ 1352.070482] page_fault+0x45/0x50 [ 1352.073955] RIP: 1490e8:0x6 [ 1352.076887] RSP: 0007:00007fff98c6bd4c EFLAGS: 00000032 [ 1352.077767] Mem-Info: [ 1352.085596] active_anon:29339 inactive_anon:11125 isolated_anon:0 [ 1352.085596] active_file:12 inactive_file:11 isolated_file:0 [ 1352.085596] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1352.085596] slab_reclaimable:13331 slab_unreclaimable:114115 [ 1352.085596] mapped:41320 shmem:13068 pagetables:733 bounce:0 [ 1352.085596] free:25182 free_pcp:13 free_cma:0 [ 1352.118944] Node 0 active_anon:116484kB inactive_anon:36368kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164204kB dirty:0kB writeback:0kB shmem:44072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1352.146891] Node 1 active_anon:872kB inactive_anon:8132kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:1076kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1352.173593] Node 0 DMA free:11064kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1352.200154] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1352.215581] Node 0 DMA32 free:35980kB min:36200kB low:45248kB high:54296kB active_anon:116484kB inactive_anon:36368kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:2840kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1352.250544] lowmem_reserve[]: 0 0 0 0 0 [ 1352.254615] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1352.284406] lowmem_reserve[]: 0 0 0 0 0 [ 1352.288431] Node 1 Normal free:53684kB min:53696kB low:67120kB high:80544kB active_anon:872kB inactive_anon:8132kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:92kB bounce:0kB free_pcp:40kB local_pcp:40kB free_cma:0kB [ 1352.318850] lowmem_reserve[]: 0 0 0 0 0 [ 1352.322957] Node 0 DMA: 0*4kB 11*8kB (UE) 4*16kB (UE) 13*32kB (UE) 2*64kB (UE) 1*128kB (E) 4*256kB (UE) 4*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11064kB [ 1352.340480] Node 0 DMA32: 1313*4kB (UME) 737*8kB (UME) 260*16kB (UME) 264*32kB (UME) 39*64kB (UM) 20*128kB (M) 14*256kB (M) 7*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35980kB [ 1352.356264] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1352.367046] Node 1 Normal: 63*4kB (UME) 247*8kB (UME) 476*16kB (UME) 278*32kB (UME) 34*64kB (UME) 20*128kB (UME) 16*256kB (UME) 51*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 53684kB [ 1352.383409] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1352.392329] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1352.407126] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1352.416018] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1352.430547] 13091 total pagecache pages [ 1352.446890] 0 pages in swap cache [ 1352.450372] Swap cache stats: add 0, delete 0, find 0/0 [ 1352.457941] Free swap = 0kB [ 1352.474409] Total swap = 0kB [ 1352.477475] 2097051 pages RAM [ 1352.480562] 0 pages HighMem/MovableOnly [ 1352.495391] 363840 pages reserved [ 1352.499006] 0 pages cma reserved [ 1352.507811] Out of memory (oom_kill_allocating_task): Kill process 21278 (syz-executor.3) score 0 or sacrifice child [ 1352.524708] Killed process 21839 (syz-executor.3) total-vm:93252kB, anon-rss:2192kB, file-rss:34816kB, shmem-rss:0kB [ 1352.549711] oom_reaper: reaped process 21839 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1352.614718] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1352.695503] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1352.700847] CPU: 0 PID: 19851 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1352.708738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1352.718122] Call Trace: [ 1352.720717] dump_stack+0x1b2/0x281 [ 1352.724381] dump_header+0x178/0x82f [ 1352.728098] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1352.733204] ? ___ratelimit+0x2cd/0x530 [ 1352.737201] oom_kill_process.cold+0x10/0xb18 [ 1352.741710] out_of_memory+0xe3e/0x1190 [ 1352.745689] ? oom_killer_disable+0x1c0/0x1c0 [ 1352.750186] ? mutex_trylock+0x152/0x1a0 [ 1352.754255] __alloc_pages_nodemask+0x23e1/0x2720 [ 1352.759133] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1352.763994] alloc_pages_current+0x155/0x260 [ 1352.768585] filemap_fault+0xea3/0x1980 [ 1352.772577] ext4_filemap_fault+0x84/0xb0 [ 1352.776720] __do_fault+0xfa/0x380 [ 1352.780244] __handle_mm_fault+0x2497/0x4620 [ 1352.784659] ? vm_insert_page+0x7c0/0x7c0 [ 1352.788790] ? nanosleep_copyout+0x100/0x100 [ 1352.793187] handle_mm_fault+0x391/0x860 [ 1352.797253] __do_page_fault+0x549/0xad0 [ 1352.801299] ? spurious_fault+0x640/0x640 [ 1352.805435] ? do_page_fault+0x60/0x500 [ 1352.809394] ? page_fault+0x2f/0x50 [ 1352.813023] page_fault+0x45/0x50 [ 1352.816472] RIP: 14912e:0x9 [ 1352.819378] RSP: 000f:00007fff1438b58c EFLAGS: 00000050 [ 1352.822835] Mem-Info: [ 1352.826061] syz-executor.3: [ 1352.828225] active_anon:28808 inactive_anon:11125 isolated_anon:0 [ 1352.828225] active_file:30 inactive_file:0 isolated_file:0 [ 1352.828225] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1352.828225] slab_reclaimable:13331 slab_unreclaimable:114115 [ 1352.828225] mapped:37270 shmem:13068 pagetables:733 bounce:0 [ 1352.828225] free:13866 free_pcp:30 free_cma:0 [ 1352.847293] page allocation failure: order:0 [ 1352.869110] Node 0 active_anon:114360kB inactive_anon:36368kB active_file:92kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149004kB dirty:0kB writeback:0kB shmem:44072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1352.894920] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1352.903648] Node 1 active_anon:872kB inactive_anon:8132kB active_file:28kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1352.923325] (null) [ 1352.939538] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1352.961054] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1352.968512] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1352.976033] Node 0 DMA32 free:18056kB min:36200kB low:45248kB high:54296kB active_anon:114360kB inactive_anon:36368kB active_file:380kB inactive_file:108kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:2840kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1352.992293] CPU: 1 PID: 21839 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 1353.007081] lowmem_reserve[]: [ 1353.012735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1353.012740] Call Trace: [ 1353.012761] dump_stack+0x1b2/0x281 [ 1353.012774] warn_alloc.cold+0x96/0x1cc [ 1353.012785] ? zone_watermark_ok_safe+0x220/0x220 [ 1353.012795] ? usleep_range+0x130/0x130 [ 1353.012803] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1353.012814] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1353.012824] ? run_timer_softirq+0x5a0/0x5a0 [ 1353.012841] __alloc_pages_nodemask+0x2127/0x2720 [ 1353.012857] ? lock_acquire+0x170/0x3f0 [ 1353.012870] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1353.012882] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1353.012894] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1353.012914] alloc_pages_current+0x155/0x260 [ 1353.012927] ion_page_pool_alloc+0x118/0x1b0 [ 1353.012938] ion_system_heap_allocate+0x133/0x8c0 [ 1353.012948] ? ion_alloc+0x187/0x810 [ 1353.012957] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1353.012967] ? ion_system_contig_heap_create+0x130/0x130 [ 1353.012978] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1353.012989] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1353.013000] ion_alloc+0x204/0x810 [ 1353.013013] ? ion_dma_buf_release+0x40/0x40 [ 1353.016111] 0 [ 1353.025994] ? __might_fault+0x177/0x1b0 [ 1353.026010] ion_ioctl+0xea/0x1f0 [ 1353.026019] ? ion_query_heaps+0x360/0x360 [ 1353.026032] ? sock_ioctl+0x16c/0x4c0 [ 1353.026040] ? ion_query_heaps+0x360/0x360 [ 1353.026049] do_vfs_ioctl+0x75a/0xff0 [ 1353.026060] ? ioctl_preallocate+0x1a0/0x1a0 [ 1353.026069] ? lock_downgrade+0x740/0x740 [ 1353.026082] ? __fget+0x225/0x360 [ 1353.026092] ? do_vfs_ioctl+0xff0/0xff0 [ 1353.030972] 0 [ 1353.032986] ? security_file_ioctl+0x83/0xb0 [ 1353.036938] 0 [ 1353.041778] SyS_ioctl+0x7f/0xb0 [ 1353.041787] ? do_vfs_ioctl+0xff0/0xff0 [ 1353.041798] do_syscall_64+0x1d5/0x640 [ 1353.041814] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1353.041823] RIP: 0033:0x465f69 [ 1353.041827] RSP: 002b:00007f2758795188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1353.041837] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1353.041845] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1353.045825] 0 [ 1353.050938] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1353.050944] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1353.050948] R13: 00007fff98c6ba8f R14: 00007f2758795300 R15: 0000000000022000 [ 1353.073653] warn_alloc_show_mem: 2 callbacks suppressed [ 1353.073657] Mem-Info: [ 1353.076212] 0 [ 1353.078666] active_anon:28808 inactive_anon:11125 isolated_anon:0 [ 1353.078666] active_file:30 inactive_file:12 isolated_file:0 [ 1353.078666] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1353.078666] slab_reclaimable:13331 slab_unreclaimable:114115 [ 1353.078666] mapped:37270 shmem:13068 pagetables:733 bounce:0 [ 1353.078666] free:13937 free_pcp:22 free_cma:0 [ 1353.084160] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1353.084179] lowmem_reserve[]: 0 0 0 0 0 [ 1353.084199] Node 1 Normal free:26456kB min:53696kB low:67120kB high:80544kB active_anon:872kB inactive_anon:8132kB active_file:28kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1353.084218] lowmem_reserve[]: 0 0 0 0 0 [ 1353.084244] Node 0 DMA: 0*4kB 1*8kB (E) 2*16kB (UE) 13*32kB (UE) 2*64kB (UE) 1*128kB [ 1353.098905] Node 0 active_anon:114360kB inactive_anon:36368kB active_file:92kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149004kB dirty:0kB writeback:0kB shmem:44072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1353.116280] (E) [ 1353.128272] Node 1 active_anon:872kB inactive_anon:8132kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1353.144153] 4*256kB [ 1353.154447] Node 0 [ 1353.169659] (UE) [ 1353.183241] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1353.197361] 4*512kB [ 1353.208914] lowmem_reserve[]: [ 1353.228572] (UE) [ 1353.241406] 0 [ 1353.260515] 1*1024kB [ 1353.301891] 2717 [ 1353.328321] (E) [ 1353.357435] 2718 [ 1353.372371] 3*2048kB [ 1353.397148] 2718 [ 1353.429930] (UME) [ 1353.452131] 2718 [ 1353.476273] 0*4096kB = 10952kB [ 1353.481535] Node 0 DMA32 free:18500kB min:36200kB low:45248kB high:54296kB active_anon:114276kB inactive_anon:36368kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:2784kB bounce:0kB free_pcp:104kB local_pcp:88kB free_cma:0kB [ 1353.497484] Node 0 [ 1353.519441] lowmem_reserve[]: 0 0 0 0 0 [ 1353.525742] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1353.527026] DMA32: [ 1353.561551] lowmem_reserve[]: [ 1353.566781] 1294*4kB (UME) 695*8kB (UME) 220*16kB (UME) 32*32kB (UME) 18*64kB (UM) 9*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18608kB [ 1353.570695] 0 [ 1353.599274] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1353.619599] 0 0 0 0 [ 1353.628799] Node 1 Normal: 58*4kB (ME) 45*8kB (UME) 42*16kB (UME) 39*32kB (UME) 33*64kB (ME) 20*128kB (UME) 14*256kB (ME) 31*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 26640kB [ 1353.635451] Node 1 Normal free:26640kB min:53696kB low:67120kB high:80544kB active_anon:872kB inactive_anon:8132kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1353.666146] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1353.694424] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1353.700387] lowmem_reserve[]: [ 1353.703064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1353.703072] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1353.703076] 13091 total pagecache pages [ 1353.703085] 0 pages in swap cache [ 1353.703089] Swap cache stats: add 0, delete 0, find 0/0 [ 1353.703092] Free swap = 0kB [ 1353.703095] Total swap = 0kB [ 1353.705576] 2097051 pages RAM [ 1353.711957] 0 [ 1353.718960] 0 pages HighMem/MovableOnly [ 1353.735805] 0 [ 1353.747990] 363840 pages reserved [ 1353.758895] 0 pages cma reserved [ 1353.763740] 0 0 0 [ 1353.765912] Node 0 DMA: 0*4kB 1*8kB (E) 2*16kB (UE) 13*32kB (UE) 2*64kB (UE) 1*128kB (E) 4*256kB (UE) 4*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10952kB [ 1353.773805] Out of memory (oom_kill_allocating_task): Kill process 19851 (syz-executor.2) score 0 or sacrifice child [ 1353.790848] Node 0 DMA32: 1301*4kB (UME) 698*8kB (UME) 220*16kB (UME) 32*32kB (UME) 18*64kB (UM) 9*128kB (UM) 4*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18660kB [ 1353.802629] Killed process 21842 (syz-executor.2) total-vm:93384kB, anon-rss:2196kB, file-rss:34820kB, shmem-rss:0kB [ 1353.834517] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1353.840278] oom_reaper: reaped process 21842 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1353.859483] Node 1 Normal: 58*4kB (ME) 45*8kB (UME) 42*16kB (UME) 39*32kB (UME) 33*64kB (ME) 20*128kB (UME) 14*256kB (ME) 31*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 26640kB [ 1353.872602] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1353.885334] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1353.899303] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1353.906542] CPU: 0 PID: 7969 Comm: syz-fuzzer Not tainted 4.14.225-syzkaller #0 [ 1353.912943] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1353.913996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1353.924194] syz-executor.2 cpuset= [ 1353.932179] Call Trace: [ 1353.932199] dump_stack+0x1b2/0x281 [ 1353.932211] dump_header+0x178/0x82f [ 1353.932222] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1353.932240] ? ___ratelimit+0x2cd/0x530 [ 1353.935777] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1353.938330] oom_kill_process.cold+0x10/0xb18 [ 1353.942004] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1353.945665] out_of_memory+0xe3e/0x1190 [ 1353.950802] / [ 1353.954720] ? oom_killer_disable+0x1c0/0x1c0 [ 1353.963344] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1353.967781] ? mutex_trylock+0x152/0x1a0 [ 1353.976652] mems_allowed=0-1 [ 1353.980567] __alloc_pages_nodemask+0x23e1/0x2720 [ 1353.990673] 13091 total pagecache pages [ 1353.995329] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1353.999363] 0 pages in swap cache [ 1354.002470] alloc_pages_current+0x155/0x260 [ 1354.002483] filemap_fault+0xea3/0x1980 [ 1354.002503] ext4_filemap_fault+0x84/0xb0 [ 1354.020669] Swap cache stats: add 0, delete 0, find 0/0 [ 1354.023975] __do_fault+0xfa/0x380 [ 1354.027930] Free swap = 0kB [ 1354.032069] __handle_mm_fault+0x2497/0x4620 [ 1354.032078] ? vm_insert_page+0x7c0/0x7c0 [ 1354.032096] handle_mm_fault+0x391/0x860 [ 1354.032108] __do_page_fault+0x549/0xad0 [ 1354.032120] ? spurious_fault+0x640/0x640 [ 1354.050671] Total swap = 0kB [ 1354.052563] ? do_page_fault+0x60/0x500 [ 1354.056606] 2097051 pages RAM [ 1354.060684] ? page_fault+0x2f/0x50 [ 1354.060692] page_fault+0x45/0x50 [ 1354.060701] RIP: 0900:0x1480679ef03 [ 1354.060704] RSP: 0001:000000c000047a58 EFLAGS: 00000003 [ 1354.073983] Mem-Info: [ 1354.085999] CPU: 1 PID: 21842 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1354.097638] active_anon:28252 inactive_anon:11125 isolated_anon:0 [ 1354.097638] active_file:12 inactive_file:11 isolated_file:0 [ 1354.097638] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1354.097638] slab_reclaimable:13312 slab_unreclaimable:114082 [ 1354.097638] mapped:37224 shmem:13068 pagetables:718 bounce:0 [ 1354.097638] free:13893 free_pcp:54 free_cma:0 [ 1354.101907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1354.101912] Call Trace: [ 1354.101933] dump_stack+0x1b2/0x281 [ 1354.101946] warn_alloc.cold+0x96/0x1cc [ 1354.101957] ? zone_watermark_ok_safe+0x220/0x220 [ 1354.101965] ? usleep_range+0x130/0x130 [ 1354.101974] ? try_to_free_pages+0x23f/0x6e0 [ 1354.101983] ? _find_next_bit+0xdb/0x100 [ 1354.102009] ? run_timer_softirq+0x5a0/0x5a0 [ 1354.146955] Node 0 active_anon:112136kB inactive_anon:36368kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:148880kB dirty:0kB writeback:0kB shmem:44072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1354.147110] __alloc_pages_nodemask+0x2127/0x2720 [ 1354.154555] Node 1 active_anon:872kB inactive_anon:8132kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1354.154692] ? lock_acquire+0x170/0x3f0 [ 1354.159502] Node 0 [ 1354.163481] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1354.163493] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1354.163508] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1354.163526] alloc_pages_current+0x155/0x260 [ 1354.163539] ion_page_pool_alloc+0x118/0x1b0 [ 1354.163550] ion_system_heap_allocate+0x133/0x8c0 [ 1354.163561] ? ion_alloc+0x187/0x810 [ 1354.163571] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1354.163582] ? ion_system_contig_heap_create+0x130/0x130 [ 1354.163591] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1354.163602] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1354.179253] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1354.204192] ion_alloc+0x204/0x810 [ 1354.204207] ? ion_dma_buf_release+0x40/0x40 [ 1354.204219] ? __might_fault+0x177/0x1b0 [ 1354.204230] ion_ioctl+0xea/0x1f0 [ 1354.204239] ? ion_query_heaps+0x360/0x360 [ 1354.204249] ? __alloc_fd+0x1be/0x490 [ 1354.204258] ? ion_query_heaps+0x360/0x360 [ 1354.204269] do_vfs_ioctl+0x75a/0xff0 [ 1354.204280] ? ioctl_preallocate+0x1a0/0x1a0 [ 1354.204290] ? lock_downgrade+0x740/0x740 [ 1354.204303] ? __fget+0x225/0x360 [ 1354.204311] ? do_vfs_ioctl+0xff0/0xff0 [ 1354.204320] ? security_file_ioctl+0x83/0xb0 [ 1354.204329] SyS_ioctl+0x7f/0xb0 [ 1354.204336] ? do_vfs_ioctl+0xff0/0xff0 [ 1354.204348] do_syscall_64+0x1d5/0x640 [ 1354.204364] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1354.220724] lowmem_reserve[]: [ 1354.235672] RIP: 0033:0x465f69 [ 1354.235677] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1354.235686] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1354.235691] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1354.235695] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1354.235700] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1354.235705] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1354.251444] 0 pages HighMem/MovableOnly [ 1354.264668] 0 [ 1354.277713] 363840 pages reserved [ 1354.286472] 2717 [ 1354.305405] 0 pages cma reserved [ 1354.328597] 2718 2718 2718 [ 1354.459922] Node 0 DMA32 free:183388kB min:36200kB low:45248kB high:54296kB active_anon:112136kB inactive_anon:36368kB active_file:44kB inactive_file:2344kB unevictable:0kB writepending:148kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:2780kB bounce:0kB free_pcp:152kB local_pcp:80kB free_cma:0kB [ 1354.501547] lowmem_reserve[]: 0 0 0 0 0 [ 1354.506100] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1354.574185] lowmem_reserve[]: 0 0 0 0 0 [ 1354.583855] Node 1 Normal free:287760kB min:53696kB low:67120kB high:80544kB active_anon:872kB inactive_anon:8132kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:92kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1354.649354] lowmem_reserve[]: 0 0 0 0 0 [ 1354.658684] Node 0 DMA: 0*4kB 1*8kB (E) 2*16kB (UE) 13*32kB (UE) 2*64kB (UE) 1*128kB (E) 4*256kB (UE) 4*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10952kB [ 1354.684366] Mem-Info: [ 1354.697599] active_anon:28177 inactive_anon:11125 isolated_anon:0 [ 1354.697599] active_file:237 inactive_file:1597 isolated_file:0 [ 1354.697599] unevictable:0 dirty:25 writeback:0 unstable:0 [ 1354.697599] slab_reclaimable:13312 slab_unreclaimable:114132 [ 1354.697599] mapped:44949 shmem:13068 pagetables:718 bounce:0 [ 1354.697599] free:111228 free_pcp:189 free_cma:0 [ 1354.718808] Node 0 DMA32: 620*4kB (UE) 309*8kB (E) 113*16kB (UME) 11*32kB (E) 841*64kB (UM) 80*128kB (UM) 18*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 76296kB [ 1354.820727] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1354.820948] Node 0 active_anon:111836kB inactive_anon:36368kB active_file:1344kB inactive_file:8388kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:181580kB dirty:100kB writeback:0kB shmem:44072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1354.860676] Node 1 active_anon:872kB inactive_anon:8132kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:316kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1354.949118] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1354.989366] Node 1 Normal: 57*4kB (ME) 44*8kB (UME) 41*16kB (UME) 39*32kB (UME) 33*64kB (UME) 20*128kB (ME) 14*256kB (ME) 33*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 27636kB [ 1355.015655] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1355.027871] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1355.045890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1355.055516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1355.064150] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1355.064175] Node 0 DMA32 free:20636kB min:36200kB low:45248kB high:54296kB active_anon:111872kB inactive_anon:36368kB active_file:1752kB inactive_file:2016kB unevictable:0kB writepending:160kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7552kB pagetables:2828kB bounce:0kB free_pcp:664kB local_pcp:664kB free_cma:0kB [ 1355.064198] lowmem_reserve[]: 0 0 0 0 0 [ 1355.064224] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1355.064243] lowmem_reserve[]: 0 0 0 0 0 [ 1355.064266] Node 1 [ 1355.076285] 13871 total pagecache pages [ 1355.146223] 0 pages in swap cache [ 1355.149836] Swap cache stats: add 0, delete 0, find 0/0 [ 1355.164850] Normal free:26868kB min:53696kB low:67120kB high:80544kB active_anon:868kB inactive_anon:8132kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1355.168967] Free swap = 0kB [ 1355.198419] Total swap = 0kB [ 1355.201528] 2097051 pages RAM [ 1355.204629] 0 pages HighMem/MovableOnly [ 1355.208618] 363840 pages reserved [ 1355.215062] 0 pages cma reserved [ 1355.216400] lowmem_reserve[]: [ 1355.218439] Out of memory (oom_kill_allocating_task): Kill process 7969 (syz-fuzzer) score 0 or sacrifice child [ 1355.218447] 0 [ 1355.221769] Killed process 21874 (syz-executor.0) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1355.234327] 0 0 0 0 [ 1355.246375] Node 0 DMA: 0*4kB 1*8kB (E) 2*16kB (UE) 13*32kB (UE) 2*64kB (UE) 1*128kB (E) 4*256kB (UE) 4*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10952kB [ 1355.253777] oom_reaper: reaped process 21874 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1355.263571] Node 0 DMA32: 1360*4kB (UME) 736*8kB (UME) 231*16kB (UME) 41*32kB (UME) 18*64kB (M) 22*128kB (UM) 17*256kB (UM) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 25168kB [ 1355.298822] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1355.312112] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1355.316124] Node 1 Normal: 57*4kB (ME) 44*8kB (UME) 41*16kB (UME) 39*32kB (UME) 33*64kB (UME) 20*128kB (ME) 15*256kB (UME) 31*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 26868kB [ 1355.336100] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1355.341901] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1355.364422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1355.365247] systemd-journal cpuset= [ 1355.373329] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1355.382001] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1355.388822] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1355.403217] / mems_allowed=0-1 [ 1355.406463] CPU: 1 PID: 21826 Comm: systemd-journal Not tainted 4.14.225-syzkaller #0 [ 1355.409048] 13151 total pagecache pages [ 1355.414425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1355.414430] Call Trace: [ 1355.414451] dump_stack+0x1b2/0x281 [ 1355.414462] dump_header+0x178/0x82f [ 1355.414472] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1355.414481] ? ___ratelimit+0x2cd/0x530 [ 1355.414490] oom_kill_process.cold+0x10/0xb18 [ 1355.414506] out_of_memory+0xe3e/0x1190 [ 1355.418486] 0 pages in swap cache [ 1355.427852] ? oom_killer_disable+0x1c0/0x1c0 [ 1355.427862] ? mutex_trylock+0x152/0x1a0 [ 1355.427872] __alloc_pages_nodemask+0x23e1/0x2720 [ 1355.427891] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1355.427909] ? cache_grow_begin+0x41/0x630 [ 1355.427918] cache_grow_begin+0x91/0x630 [ 1355.427925] ? cache_grow_begin+0x91/0x630 [ 1355.427935] fallback_alloc+0x207/0x2c0 [ 1355.427947] kmem_cache_alloc+0x1e5/0x3c0 [ 1355.427959] getname_flags+0xc8/0x550 [ 1355.427970] SyS_mkdirat+0x83/0x270 [ 1355.427980] ? SyS_mknod+0x30/0x30 [ 1355.427989] ? do_syscall_64+0x4c/0x640 [ 1355.427995] ? SyS_mkdirat+0x270/0x270 [ 1355.428003] do_syscall_64+0x1d5/0x640 [ 1355.428016] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1355.439345] Swap cache stats: add 0, delete 0, find 0/0 [ 1355.442985] RIP: 0033:0x7ff82b6a8687 [ 1355.442990] RSP: 002b:00007ffe36307ab8 EFLAGS: 00000293 ORIG_RAX: 0000000000000053 [ 1355.442999] RAX: ffffffffffffffda RBX: 00007ffe3630ab20 RCX: 00007ff82b6a8687 [ 1355.443003] RDX: 0000000000000000 RSI: 00000000000001ed RDI: 000055c42078d860 [ 1355.443008] RBP: 00007ffe36307af0 R08: 000055c41fbcd3e5 R09: 0000000000000018 [ 1355.443012] R10: 0000000000000069 R11: 0000000000000293 R12: 0000000000000000 [ 1355.443016] R13: 0000000000000001 R14: 000055c42078d860 R15: 00007ffe36308130 [ 1355.461079] CPU: 1 PID: 21839 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 1355.469805] Free swap = 0kB [ 1355.472543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1355.472547] Call Trace: [ 1355.472569] dump_stack+0x1b2/0x281 [ 1355.472583] warn_alloc.cold+0x96/0x1cc [ 1355.472595] ? zone_watermark_ok_safe+0x220/0x220 [ 1355.472616] __alloc_pages_nodemask+0x2127/0x2720 [ 1355.477438] Total swap = 0kB [ 1355.481670] ? lock_acquire+0x170/0x3f0 [ 1355.481686] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1355.481703] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1355.481714] ? __mutex_unlock_slowpath+0x75/0x770 [ 1355.481727] alloc_pages_current+0x155/0x260 [ 1355.481743] ion_page_pool_alloc+0x118/0x1b0 [ 1355.481753] ion_system_heap_allocate+0x133/0x8c0 [ 1355.481773] ? _raw_spin_unlock+0x29/0x40 [ 1355.492161] 2097051 pages RAM [ 1355.494018] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1355.498134] 0 pages HighMem/MovableOnly [ 1355.501924] ? ion_system_contig_heap_create+0x130/0x130 [ 1355.501935] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1355.501946] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1355.501957] ion_alloc+0x27a/0x810 [ 1355.501971] ? ion_dma_buf_release+0x40/0x40 [ 1355.501983] ? __might_fault+0x177/0x1b0 [ 1355.501995] ion_ioctl+0xea/0x1f0 [ 1355.502006] ? ion_query_heaps+0x360/0x360 [ 1355.508153] 363840 pages reserved [ 1355.509154] ? sock_ioctl+0x16c/0x4c0 [ 1355.517297] 0 pages cma reserved [ 1355.520844] ? ion_query_heaps+0x360/0x360 [ 1355.520855] do_vfs_ioctl+0x75a/0xff0 [ 1355.520867] ? ioctl_preallocate+0x1a0/0x1a0 [ 1355.520877] ? lock_downgrade+0x740/0x740 [ 1355.520890] ? __fget+0x225/0x360 [ 1355.520900] ? do_vfs_ioctl+0xff0/0xff0 [ 1355.690736] Mem-Info: [ 1355.690916] ? security_file_ioctl+0x83/0xb0 [ 1355.695316] active_anon:28173 inactive_anon:11125 isolated_anon:0 [ 1355.695316] active_file:65 inactive_file:10 isolated_file:0 [ 1355.695316] unevictable:0 dirty:35 writeback:0 unstable:0 [ 1355.695316] slab_reclaimable:13297 slab_unreclaimable:114824 [ 1355.695316] mapped:43915 shmem:13068 pagetables:730 bounce:0 [ 1355.695316] free:18599 free_pcp:226 free_cma:0 [ 1355.699356] SyS_ioctl+0x7f/0xb0 [ 1355.709220] syz-executor.2: [ 1355.710444] ? do_vfs_ioctl+0xff0/0xff0 [ 1355.714282] page allocation failure: order:4 [ 1355.717581] do_syscall_64+0x1d5/0x640 [ 1355.721875] Node 0 active_anon:111824kB inactive_anon:36368kB active_file:260kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175288kB dirty:140kB writeback:0kB shmem:44072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1355.725586] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1355.729970] Node 1 active_anon:868kB inactive_anon:8132kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:372kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1355.734373] RIP: 0033:0x465f69 [ 1355.734378] RSP: 002b:00007f2758795188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1355.734387] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1355.734392] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1355.734397] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1355.734401] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1355.734406] R13: 00007fff98c6ba8f R14: 00007f2758795300 R15: 0000000000022000 [ 1355.753704] Mem-Info: [ 1355.786772] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1355.821816] active_anon:28173 inactive_anon:11125 isolated_anon:0 [ 1355.821816] active_file:65 inactive_file:16 isolated_file:0 [ 1355.821816] unevictable:0 dirty:35 writeback:0 unstable:0 [ 1355.821816] slab_reclaimable:13297 slab_unreclaimable:114824 [ 1355.821816] mapped:43915 shmem:13068 pagetables:730 bounce:0 [ 1355.821816] free:15472 free_pcp:0 free_cma:0 [ 1355.839808] (null) [ 1355.883093] Node 0 active_anon:111824kB inactive_anon:36368kB active_file:252kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175288kB dirty:140kB writeback:0kB shmem:44072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1355.892807] Node 0 [ 1355.912987] Node 1 active_anon:868kB inactive_anon:8132kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:372kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1355.924266] DMA free:11012kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1355.972399] Node 0 [ 1355.986903] syz-executor.2 cpuset= [ 1356.032749] DMA free:11012kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1356.041533] lowmem_reserve[]: [ 1356.047275] lowmem_reserve[]: [ 1356.074867] / [ 1356.076285] 0 [ 1356.078003] mems_allowed=0-1 [ 1356.079726] 2717 [ 1356.081589] CPU: 0 PID: 21842 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1356.081597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1356.086932] 2718 [ 1356.094628] Call Trace: [ 1356.094652] dump_stack+0x1b2/0x281 [ 1356.094665] warn_alloc.cold+0x96/0x1cc [ 1356.094677] ? zone_watermark_ok_safe+0x220/0x220 [ 1356.094698] __alloc_pages_nodemask+0x2127/0x2720 [ 1356.104086] 2718 [ 1356.106109] ? lock_acquire+0x170/0x3f0 [ 1356.108662] 2718 [ 1356.112282] ? lock_acquire+0x170/0x3f0 [ 1356.112298] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1356.112314] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1356.112326] ? __mutex_unlock_slowpath+0x75/0x770 [ 1356.121249] alloc_pages_current+0x155/0x260 [ 1356.121270] ion_page_pool_alloc+0x118/0x1b0 [ 1356.121286] ion_system_heap_allocate+0x133/0x8c0 [ 1356.126236] Node 0 [ 1356.128289] ? _raw_spin_unlock+0x29/0x40 [ 1356.132291] DMA32 free:23916kB min:36200kB low:45248kB high:54296kB active_anon:111792kB inactive_anon:36368kB active_file:84kB inactive_file:176kB unevictable:0kB writepending:140kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:2740kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1356.134290] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1356.138238] lowmem_reserve[]: [ 1356.143081] ? ion_system_contig_heap_create+0x130/0x130 [ 1356.143093] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1356.143103] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1356.143115] ion_alloc+0x27a/0x810 [ 1356.143129] ? ion_dma_buf_release+0x40/0x40 [ 1356.148764] 0 [ 1356.153598] ? __might_fault+0x177/0x1b0 [ 1356.153614] ion_ioctl+0xea/0x1f0 [ 1356.153624] ? ion_query_heaps+0x360/0x360 [ 1356.153634] ? __alloc_fd+0x1be/0x490 [ 1356.153645] ? ion_query_heaps+0x360/0x360 [ 1356.158042] 0 [ 1356.162442] do_vfs_ioctl+0x75a/0xff0 [ 1356.162455] ? ioctl_preallocate+0x1a0/0x1a0 [ 1356.162463] ? lock_downgrade+0x740/0x740 [ 1356.162476] ? __fget+0x225/0x360 [ 1356.162486] ? do_vfs_ioctl+0xff0/0xff0 [ 1356.167323] 0 [ 1356.169574] ? security_file_ioctl+0x83/0xb0 [ 1356.173736] 0 [ 1356.201977] SyS_ioctl+0x7f/0xb0 [ 1356.201988] ? do_vfs_ioctl+0xff0/0xff0 [ 1356.201999] do_syscall_64+0x1d5/0x640 [ 1356.202016] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1356.202028] RIP: 0033:0x465f69 [ 1356.207222] 0 [ 1356.210308] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1356.220792] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1356.220798] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1356.220803] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1356.220808] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1356.220812] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1356.226000] 0 [ 1356.229420] Node 0 [ 1356.233660] 2717 2718 2718 2718 [ 1356.233677] Node 0 DMA32 free:23916kB min:36200kB low:45248kB high:54296kB active_anon:111792kB inactive_anon:36368kB active_file:76kB inactive_file:176kB unevictable:0kB writepending:140kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:2740kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1356.233696] lowmem_reserve[]: 0 0 0 0 0 [ 1356.233713] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1356.233729] lowmem_reserve[]: 0 0 0 0 0 [ 1356.233747] Node 1 Normal free:27060kB min:53696kB low:67120kB high:80544kB active_anon:868kB inactive_anon:8132kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1356.233763] lowmem_reserve[]: 0 0 0 0 0 [ 1356.233781] Node 0 DMA: 0*4kB 1*8kB (E) 2*16kB (UE) 13*32kB (UE) 3*64kB (UE) 1*128kB (E) 4*256kB (UE) 4*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11016kB [ 1356.233847] Node 0 DMA32: 1433*4kB (UME) 841*8kB (UME) 250*16kB (UME) 213*32kB (UME) 2*64kB (U) 0*128kB 0*256kB [ 1356.250446] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1356.274915] 1*512kB [ 1356.306558] lowmem_reserve[]: [ 1356.311680] (U) [ 1356.345338] 0 [ 1356.356210] 0*1024kB [ 1356.373116] 0 [ 1356.392315] 0*2048kB [ 1356.427543] 0 [ 1356.454308] 0*4096kB [ 1356.487438] 0 [ 1356.533925] = 23916kB [ 1356.538144] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1356.555180] Node 1 Normal: 65*4kB (UME) 72*8kB (UME) 41*16kB (UME) 39*32kB (UME) 32*64kB (ME) 20*128kB (ME) 15*256kB (UME) 31*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 27060kB [ 1356.577961] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1356.587094] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1356.598126] 0 [ 1356.599952] Node 1 Normal free:26812kB min:53696kB low:67120kB high:80544kB active_anon:868kB inactive_anon:8132kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:92kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1356.600674] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1356.646046] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1356.651782] lowmem_reserve[]: 0 0 0 0 0 [ 1356.667450] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1356.675451] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1356.677367] Node 0 [ 1356.696947] CPU: 0 PID: 21842 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1356.699440] DMA: [ 1356.707080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1356.707085] Call Trace: [ 1356.707108] dump_stack+0x1b2/0x281 [ 1356.707121] warn_alloc.cold+0x96/0x1cc [ 1356.707133] ? zone_watermark_ok_safe+0x220/0x220 [ 1356.707146] ? usleep_range+0x130/0x130 [ 1356.709201] 0*4kB [ 1356.718555] ? try_to_free_pages+0x23f/0x6e0 [ 1356.718565] ? _find_next_bit+0xdb/0x100 [ 1356.718575] ? run_timer_softirq+0x5a0/0x5a0 [ 1356.718591] __alloc_pages_nodemask+0x2127/0x2720 [ 1356.718610] ? lock_acquire+0x170/0x3f0 [ 1356.721208] 2*8kB [ 1356.724809] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1356.728768] (UE) [ 1356.733627] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1356.733643] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1356.733662] alloc_pages_current+0x155/0x260 [ 1356.733675] ion_page_pool_alloc+0x118/0x1b0 [ 1356.737634] 2*16kB [ 1356.739782] ion_system_heap_allocate+0x133/0x8c0 [ 1356.744207] (UE) [ 1356.748228] ? _raw_spin_unlock+0x29/0x40 [ 1356.752648] 11*32kB [ 1356.757449] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1356.761425] (UE) [ 1356.763534] ? ion_system_contig_heap_create+0x130/0x130 [ 1356.768350] 3*64kB [ 1356.770415] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1356.774915] (UE) [ 1356.780365] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1356.784774] 1*128kB [ 1356.789141] ion_alloc+0x27a/0x810 [ 1356.791382] (E) [ 1356.796188] ? ion_dma_buf_release+0x40/0x40 [ 1356.798219] 4*256kB [ 1356.802354] ? __might_fault+0x177/0x1b0 [ 1356.802368] ion_ioctl+0xea/0x1f0 [ 1356.802381] ? ion_query_heaps+0x360/0x360 [ 1356.802391] ? __alloc_fd+0x1be/0x490 [ 1356.804713] (UE) [ 1356.809633] ? ion_query_heaps+0x360/0x360 [ 1356.811709] 4*512kB [ 1356.817112] do_vfs_ioctl+0x75a/0xff0 [ 1356.819320] (UE) [ 1356.824419] ? ioctl_preallocate+0x1a0/0x1a0 [ 1356.824428] ? lock_downgrade+0x740/0x740 [ 1356.824440] ? __fget+0x225/0x360 [ 1356.824451] ? do_vfs_ioctl+0xff0/0xff0 [ 1356.826495] 1*1024kB [ 1356.831326] ? security_file_ioctl+0x83/0xb0 [ 1356.831336] SyS_ioctl+0x7f/0xb0 [ 1356.831343] ? do_vfs_ioctl+0xff0/0xff0 [ 1356.831354] do_syscall_64+0x1d5/0x640 [ 1356.831372] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1356.833667] (E) [ 1356.837206] RIP: 0033:0x465f69 [ 1356.839158] 3*2048kB [ 1356.843544] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1356.843553] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1356.843558] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1356.843562] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1356.843567] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1356.843572] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1356.853798] 13136 total pagecache pages [ 1356.875848] (UME) [ 1356.889381] 0 pages in swap cache [ 1356.919579] 0*4096kB [ 1356.934088] Swap cache stats: add 0, delete 0, find 0/0 [ 1356.957957] = 10960kB [ 1356.978760] Free swap = 0kB [ 1356.993168] Node 0 DMA32: 1270*4kB (ME) 690*8kB (UME) 201*16kB (UME) 104*32kB (UME) 2*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17784kB [ 1357.007851] Total swap = 0kB [ 1357.018617] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1357.018975] 2097051 pages RAM [ 1357.034217] Node 1 Normal: 57*4kB (ME) 45*8kB (UME) 41*16kB (UME) 39*32kB (UME) 32*64kB (ME) 20*128kB (ME) 15*256kB (UME) 31*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 26812kB [ 1357.048601] 0 pages HighMem/MovableOnly [ 1357.065525] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1357.069275] 363840 pages reserved [ 1357.087676] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1357.093578] 0 pages cma reserved [ 1357.109708] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1357.113492] Out of memory (oom_kill_allocating_task): Kill process 21826 (systemd-journal) score 0 or sacrifice child [ 1357.120806] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1357.140787] Killed process 21826 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:4kB, shmem-rss:1500kB [ 1357.150727] 13136 total pagecache pages [ 1357.155367] 0 pages in swap cache [ 1357.158817] Swap cache stats: add 0, delete 0, find 0/0 [ 1357.163146] oom_reaper: reaped process 21826 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1500kB [ 1357.176812] Free swap = 0kB [ 1357.179860] Total swap = 0kB [ 1357.189630] kworker/u4:3 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1357.196053] warn_alloc_show_mem: 1 callbacks suppressed [ 1357.196057] Mem-Info: [ 1357.211192] 2097051 pages RAM [ 1357.214309] 0 pages HighMem/MovableOnly [ 1357.218277] 363840 pages reserved [ 1357.225288] active_anon:28065 inactive_anon:11125 isolated_anon:0 [ 1357.225288] active_file:57 inactive_file:15 isolated_file:0 [ 1357.225288] unevictable:0 dirty:35 writeback:0 unstable:0 [ 1357.225288] slab_reclaimable:13284 slab_unreclaimable:114776 [ 1357.225288] mapped:43900 shmem:13068 pagetables:708 bounce:0 [ 1357.225288] free:13915 free_pcp:206 free_cma:0 [ 1357.226156] kworker/u4:3 cpuset= [ 1357.268273] 0 pages cma reserved [ 1357.277492] / mems_allowed=0-1 [ 1357.279872] Node 0 active_anon:111392kB inactive_anon:36368kB active_file:208kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175228kB dirty:140kB writeback:0kB shmem:44072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1357.288933] CPU: 1 PID: 16322 Comm: kworker/u4:3 Not tainted 4.14.225-syzkaller #0 [ 1357.316580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1357.325950] Workqueue: events_unbound call_usermodehelper_exec_work [ 1357.327633] Node 1 active_anon:868kB inactive_anon:8132kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:372kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1357.332355] Call Trace: [ 1357.332375] dump_stack+0x1b2/0x281 [ 1357.332387] dump_header+0x178/0x82f [ 1357.332397] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1357.332406] ? ___ratelimit+0x2cd/0x530 [ 1357.332415] oom_kill_process.cold+0x10/0xb18 [ 1357.332427] ? lock_downgrade+0x740/0x740 [ 1357.332441] out_of_memory+0x2dc/0x1190 [ 1357.332454] ? oom_killer_disable+0x1c0/0x1c0 [ 1357.332461] ? mutex_trylock+0x152/0x1a0 [ 1357.332472] __alloc_pages_nodemask+0x23e1/0x2720 [ 1357.332491] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1357.409079] ? fs_reclaim_release+0xd0/0x110 [ 1357.413503] ? kmem_cache_alloc_node+0x38b/0x410 [ 1357.418260] copy_process.part.0+0x265/0x71c0 [ 1357.422764] ? __lock_acquire+0x5fc/0x3f20 [ 1357.426999] ? debug_object_activate+0x292/0x490 [ 1357.431757] ? static_obj+0x50/0x50 [ 1357.435376] ? lock_acquire+0x170/0x3f0 [ 1357.439354] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1357.444813] ? __cleanup_sighand+0x40/0x40 [ 1357.449049] ? mod_timer+0x4e7/0xf70 [ 1357.452770] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1357.458316] _do_fork+0x184/0xc80 [ 1357.461779] ? fork_idle+0x270/0x270 [ 1357.465493] ? lock_downgrade+0x740/0x740 [ 1357.469649] ? process_one_work+0x6c4/0x14a0 [ 1357.474054] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1357.479509] kernel_thread+0x2f/0x40 [ 1357.483233] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1357.488436] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1357.488547] ? call_usermodehelper+0x80/0x80 [ 1357.488560] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1357.524518] process_one_work+0x793/0x14a0 [ 1357.528763] ? work_busy+0x320/0x320 [ 1357.532475] ? worker_thread+0x158/0xff0 [ 1357.536539] ? _raw_spin_unlock_irq+0x24/0x80 [ 1357.539129] lowmem_reserve[]: [ 1357.541039] worker_thread+0x5cc/0xff0 [ 1357.541055] ? rescuer_thread+0xc80/0xc80 [ 1357.541063] kthread+0x30d/0x420 [ 1357.541069] ? kthread_create_on_node+0xd0/0xd0 [ 1357.541079] ret_from_fork+0x24/0x30 [ 1357.556817] Mem-Info: [ 1357.579891] active_anon:28065 inactive_anon:11125 isolated_anon:0 [ 1357.579891] active_file:57 inactive_file:2 isolated_file:0 [ 1357.579891] unevictable:0 dirty:35 writeback:0 unstable:0 [ 1357.579891] slab_reclaimable:13284 slab_unreclaimable:114776 [ 1357.579891] mapped:43900 shmem:13068 pagetables:708 bounce:0 [ 1357.579891] free:13929 free_pcp:90 free_cma:0 [ 1357.590976] 0 2717 2718 2718 2718 [ 1357.627967] Node 0 DMA32 free:17948kB min:36200kB low:45248kB high:54296kB active_anon:111392kB inactive_anon:36368kB active_file:56kB inactive_file:116kB unevictable:0kB writepending:140kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:2740kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 1357.630510] Node 0 active_anon:111392kB inactive_anon:36368kB active_file:28kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175228kB dirty:140kB writeback:0kB shmem:44072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1357.666517] lowmem_reserve[]: 0 0 0 0 0 [ 1357.700591] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1357.701349] Node 1 active_anon:868kB inactive_anon:8132kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:372kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1357.739797] Node 0 [ 1357.762585] lowmem_reserve[]: 0 0 0 0 0 [ 1357.767677] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1357.768891] Node 1 Normal free:26808kB min:53696kB low:67120kB high:80544kB active_anon:868kB inactive_anon:8132kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:92kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1357.809840] lowmem_reserve[]: [ 1357.836466] lowmem_reserve[]: 0 0 0 0 0 [ 1357.843666] Node 0 DMA: 0*4kB 2*8kB (UE) 2*16kB (UE) 11*32kB (UE) 3*64kB (UE) 1*128kB (E) 4*256kB (UE) 4*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10960kB [ 1357.847113] 0 [ 1357.863110] Node 0 [ 1357.864913] syz-executor.3: [ 1357.864930] DMA32: [ 1357.867162] page allocation failure: order:0 [ 1357.870158] 1297*4kB (ME) 700*8kB (UME) 214*16kB (ME) 92*32kB (UME) 3*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17860kB [ 1357.878374] 2717 [ 1357.897887] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1357.902699] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1357.917410] Node 1 Normal: 58*4kB (UME) 45*8kB (UME) 41*16kB (UME) 39*32kB (UME) 32*64kB (ME) 20*128kB (ME) 15*256kB (UME) 31*512kB (UME) 0*1024kB 0*2048kB 0*4096kB [ 1357.918478] 2718 [ 1357.918490] = 26816kB [ 1357.933587] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1357.943158] CPU: 1 PID: 21839 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 1357.951036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1357.955518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1357.960388] Call Trace: [ 1357.971979] dump_stack+0x1b2/0x281 [ 1357.975613] warn_alloc.cold+0x96/0x1cc [ 1357.979591] ? zone_watermark_ok_safe+0x220/0x220 [ 1357.984435] ? usleep_range+0x130/0x130 [ 1357.988412] ? try_to_free_pages+0x23f/0x6e0 [ 1357.992860] ? _find_next_bit+0xdb/0x100 [ 1357.996921] ? run_timer_softirq+0x5a0/0x5a0 [ 1358.001348] __alloc_pages_nodemask+0x2127/0x2720 [ 1358.006202] ? lock_acquire+0x170/0x3f0 [ 1358.007720] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1358.010175] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1358.023599] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1358.028192] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1358.033655] alloc_pages_current+0x155/0x260 [ 1358.038066] ion_page_pool_alloc+0x118/0x1b0 [ 1358.038148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1358.042474] ion_system_heap_allocate+0x133/0x8c0 [ 1358.042487] ? _raw_spin_unlock+0x29/0x40 [ 1358.042495] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1358.042505] ? ion_system_contig_heap_create+0x130/0x130 [ 1358.042517] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1358.042527] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1358.042539] ion_alloc+0x27a/0x810 [ 1358.042553] ? ion_dma_buf_release+0x40/0x40 [ 1358.042566] ? __might_fault+0x177/0x1b0 [ 1358.042578] ion_ioctl+0xea/0x1f0 [ 1358.042588] ? ion_query_heaps+0x360/0x360 [ 1358.042600] ? sock_ioctl+0x16c/0x4c0 [ 1358.042608] ? ion_query_heaps+0x360/0x360 [ 1358.042617] do_vfs_ioctl+0x75a/0xff0 [ 1358.042627] ? ioctl_preallocate+0x1a0/0x1a0 [ 1358.042636] ? lock_downgrade+0x740/0x740 [ 1358.042650] ? __fget+0x225/0x360 [ 1358.042660] ? do_vfs_ioctl+0xff0/0xff0 [ 1358.042670] ? security_file_ioctl+0x83/0xb0 [ 1358.042681] SyS_ioctl+0x7f/0xb0 [ 1358.042688] ? do_vfs_ioctl+0xff0/0xff0 [ 1358.042700] do_syscall_64+0x1d5/0x640 [ 1358.042715] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1358.042723] RIP: 0033:0x465f69 [ 1358.042727] RSP: 002b:00007f2758795188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1358.099311] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1358.101277] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1358.101283] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1358.101288] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1358.101292] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1358.101297] R13: 00007fff98c6ba8f R14: 00007f2758795300 R15: 0000000000022000 [ 1358.107086] 2718 [ 1358.128941] 13136 total pagecache pages [ 1358.134748] 2718 [ 1358.179653] 0 pages in swap cache [ 1358.226268] Node 0 DMA32 free:17976kB min:36200kB low:45248kB high:54296kB active_anon:111320kB inactive_anon:36368kB active_file:204kB inactive_file:36kB unevictable:0kB writepending:140kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:2740kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1358.259471] Swap cache stats: add 0, delete 0, find 0/0 [ 1358.261380] lowmem_reserve[]: 0 0 0 0 0 [ 1358.268882] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1358.298948] lowmem_reserve[]: 0 0 0 0 0 [ 1358.303044] Node 1 Normal free:26928kB min:53696kB low:67120kB high:80544kB active_anon:868kB inactive_anon:8132kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:92kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1358.309285] Free swap = 0kB [ 1358.338208] Mem-Info: [ 1358.340718] active_anon:28047 inactive_anon:11125 isolated_anon:0 [ 1358.340718] active_file:30 inactive_file:8 isolated_file:0 [ 1358.340718] unevictable:0 dirty:35 writeback:0 unstable:0 [ 1358.340718] slab_reclaimable:13272 slab_unreclaimable:114738 [ 1358.340718] mapped:43900 shmem:13068 pagetables:708 bounce:0 [ 1358.340718] free:13966 free_pcp:30 free_cma:0 [ 1358.358547] Total swap = 0kB [ 1358.379113] lowmem_reserve[]: 0 0 0 0 0 [ 1358.388141] 2097051 pages RAM [ 1358.391697] Node 0 DMA: 0*4kB 2*8kB (UE) 2*16kB (UE) 11*32kB (UE) 3*64kB (UE) 1*128kB (E) 4*256kB (UE) 4*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 10960kB [ 1358.393488] 0 pages HighMem/MovableOnly [ 1358.419718] Node 0 active_anon:111320kB inactive_anon:36368kB active_file:160kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:175228kB dirty:140kB writeback:0kB shmem:44072kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1358.421165] 363840 pages reserved [ 1358.459099] 0 pages cma reserved [ 1358.466864] Node 1 active_anon:868kB inactive_anon:8132kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:372kB dirty:0kB writeback:0kB shmem:8200kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1358.471030] Node 0 DMA32: 1298*4kB (UME) 700*8kB (UME) 215*16kB (UME) 95*32kB (UME) 3*64kB (U) 0*128kB 0*256kB 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17976kB [ 1358.541409] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1358.549358] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1358.618172] Node 1 Normal: 2*4kB (UE) 17*8kB (UE) 7*16kB (UME) 4*32kB (UE) 3*64kB (ME) 2*128kB (E) 7*256kB (UME) 31*512kB (UME) 391*1024kB (U) 26*2048kB (U) 2*4096kB (U) = 480320kB [ 1358.691966] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1358.713484] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1358.718559] Node 0 DMA32 free:81024kB min:36200kB low:45248kB high:54296kB active_anon:111320kB inactive_anon:36368kB active_file:116kB inactive_file:1428kB unevictable:0kB writepending:140kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:2740kB bounce:0kB free_pcp:344kB local_pcp:116kB free_cma:0kB [ 1358.772097] lowmem_reserve[]: 0 0 0 0 0 [ 1358.772822] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1358.776145] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1358.776166] lowmem_reserve[]: 0 0 0 0 0 [ 1358.776187] Node 1 Normal free:844432kB min:53696kB low:67120kB high:80544kB active_anon:868kB inactive_anon:8132kB active_file:0kB inactive_file:12304kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:240kB bounce:0kB free_pcp:348kB local_pcp:80kB free_cma:0kB [ 1358.776209] lowmem_reserve[]: 0 0 0 0 0 [ 1358.776229] Node 0 DMA: 1*4kB (E) 1*8kB (U) 2*16kB (UE) 4*32kB (UE) 5*64kB (UME) 1*128kB (E) 5*256kB [ 1358.820673] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1358.863242] (UME) 4*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 12140kB [ 1358.913797] Node 0 DMA32: 606*4kB (E) 324*8kB (ME) 215*16kB (UME) 101*32kB (UME) 2266*64kB (UE) 86*128kB (U) 19*256kB (U) 1*512kB (U) 1*1024kB (U) 1*2048kB (U) 0*4096kB = 176168kB [ 1358.953337] IPVS: ftp: loaded support on port[0] = 21 [ 1358.969097] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1358.972978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1358.990902] 18536 total pagecache pages [ 1359.003250] Node 1 Normal: 2*4kB (UE) 3*8kB (UME) 3*16kB (UME) 2*32kB (E) 248*64kB (UME) 20*128kB (UME) 12*256kB (UME) 37*512kB (UE) 701*1024kB (U) 40*2048kB (UM) 1*4096kB (U) = 844432kB [ 1359.005714] 0 pages in swap cache [ 1359.043340] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1359.064808] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1359.071702] Swap cache stats: add 0, delete 0, find 0/0 [ 1359.088701] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1359.089103] Free swap = 0kB [ 1359.109101] Total swap = 0kB [ 1359.112308] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1359.112314] 18607 total pagecache pages [ 1359.112324] 0 pages in swap cache [ 1359.112330] Swap cache stats: add 0, delete 0, find 0/0 [ 1359.112333] Free swap = 0kB [ 1359.112337] Total swap = 0kB [ 1359.112344] 2097051 pages RAM [ 1359.112347] 0 pages HighMem/MovableOnly [ 1359.112350] 363840 pages reserved [ 1359.112354] 0 pages cma reserved [ 1359.179632] 2097051 pages RAM [ 1359.183045] 0 pages HighMem/MovableOnly [ 1359.187031] 363840 pages reserved [ 1359.190492] 0 pages cma reserved [ 1359.211810] Out of memory: Kill process 21848 (syz-executor.5) score 1004 or sacrifice child [ 1359.229652] Killed process 21850 (syz-executor.5) total-vm:93384kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 1359.294629] oom_reaper: reaped process 21850 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1359.323427] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1359.338563] chnl_net:caif_netlink_parms(): no params data found 08:36:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 08:36:40 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) socket$nl_route(0x10, 0x3, 0x0) [ 1359.364930] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1359.421423] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1359.473204] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1359.491476] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1359.498336] systemd[1]: Stopped Journal Service. [ 1359.540317] systemd[1]: Starting Journal Service... [ 1359.668555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.694049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.715325] device bridge_slave_0 entered promiscuous mode [ 1359.722756] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.729249] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.754893] device bridge_slave_1 entered promiscuous mode [ 1359.818347] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1359.834230] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1360.086952] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1360.107785] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1360.122180] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1360.127379] CPU: 1 PID: 21990 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1360.135270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1360.144628] Call Trace: [ 1360.147257] dump_stack+0x1b2/0x281 [ 1360.150892] warn_alloc.cold+0x96/0x1cc [ 1360.154959] ? zone_watermark_ok_safe+0x220/0x220 [ 1360.159844] __alloc_pages_nodemask+0x2127/0x2720 [ 1360.164698] ? retint_kernel+0x2d/0x2d [ 1360.167111] syz-executor.2 cpuset= [ 1360.168584] ? ion_page_pool_alloc+0x28/0x1b0 [ 1360.168591] / [ 1360.172124] ? lock_acquire+0x170/0x3f0 [ 1360.179434] mems_allowed=0-1 [ 1360.182439] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1360.182456] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1360.182467] ? __mutex_unlock_slowpath+0x75/0x770 [ 1360.182476] ? retint_kernel+0x2d/0x2d [ 1360.182490] alloc_pages_current+0x155/0x260 [ 1360.182506] ion_page_pool_alloc+0x118/0x1b0 [ 1360.182516] ion_system_heap_allocate+0x133/0x8c0 [ 1360.182527] ? ion_alloc+0x187/0x810 [ 1360.182540] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1360.227552] ? ion_system_contig_heap_create+0x130/0x130 [ 1360.233011] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1360.238026] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1360.242869] ion_alloc+0x204/0x810 [ 1360.246412] ? ion_dma_buf_release+0x40/0x40 [ 1360.250820] ? __might_fault+0x177/0x1b0 [ 1360.254891] ion_ioctl+0xea/0x1f0 [ 1360.259558] ? ion_query_heaps+0x360/0x360 [ 1360.263793] ? __alloc_fd+0x1be/0x490 [ 1360.267650] ? ion_query_heaps+0x360/0x360 [ 1360.271879] do_vfs_ioctl+0x75a/0xff0 [ 1360.275683] ? ioctl_preallocate+0x1a0/0x1a0 [ 1360.280091] ? lock_downgrade+0x740/0x740 [ 1360.284250] ? __fget+0x225/0x360 [ 1360.287699] ? do_vfs_ioctl+0xff0/0xff0 [ 1360.291671] ? security_file_ioctl+0x83/0xb0 [ 1360.296085] SyS_ioctl+0x7f/0xb0 [ 1360.299449] ? do_vfs_ioctl+0xff0/0xff0 [ 1360.303423] do_syscall_64+0x1d5/0x640 [ 1360.307317] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1360.312528] RIP: 0033:0x465f69 [ 1360.315737] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1360.323461] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1360.330801] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1360.338079] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1360.345359] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1360.352628] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1360.359924] CPU: 0 PID: 21984 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1360.367814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1360.377250] Call Trace: [ 1360.379862] dump_stack+0x1b2/0x281 [ 1360.383489] dump_header+0x178/0x82f [ 1360.387201] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1360.392317] ? ___ratelimit+0x2cd/0x530 [ 1360.396324] oom_kill_process.cold+0x10/0xb18 [ 1360.400836] out_of_memory+0xe3e/0x1190 [ 1360.402455] Mem-Info: [ 1360.404814] ? oom_killer_disable+0x1c0/0x1c0 [ 1360.404823] ? mutex_trylock+0x152/0x1a0 [ 1360.404833] __alloc_pages_nodemask+0x23e1/0x2720 [ 1360.404851] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1360.404878] alloc_pages_current+0x155/0x260 [ 1360.407410] active_anon:28257 inactive_anon:11111 isolated_anon:0 [ 1360.407410] active_file:46 inactive_file:37 isolated_file:0 [ 1360.407410] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1360.407410] slab_reclaimable:13297 slab_unreclaimable:115204 [ 1360.407410] mapped:43552 shmem:13071 pagetables:703 bounce:0 [ 1360.407410] free:13831 free_pcp:31 free_cma:0 [ 1360.411800] filemap_fault+0xea3/0x1980 [ 1360.411818] ext4_filemap_fault+0x84/0xb0 [ 1360.411828] __do_fault+0xfa/0x380 [ 1360.411837] __handle_mm_fault+0x2497/0x4620 [ 1360.411846] ? vm_insert_page+0x7c0/0x7c0 [ 1360.411858] ? nanosleep_copyout+0x100/0x100 [ 1360.415916] Node 0 active_anon:111344kB inactive_anon:36312kB active_file:72kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:173744kB dirty:0kB writeback:0kB shmem:44088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1360.420763] handle_mm_fault+0x391/0x860 [ 1360.420776] __do_page_fault+0x549/0xad0 [ 1360.420788] ? spurious_fault+0x640/0x640 [ 1360.420798] ? do_page_fault+0x60/0x500 [ 1360.425671] Node 1 active_anon:1684kB inactive_anon:8132kB active_file:112kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:464kB dirty:0kB writeback:0kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1360.430066] ? page_fault+0x2f/0x50 [ 1360.463268] Node 0 [ 1360.467189] page_fault+0x45/0x50 [ 1360.471366] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1360.474830] RIP: 56c9e0:0x56bf60 [ 1360.479242] lowmem_reserve[]: [ 1360.483377] RSP: 14c166:0000000000000001 EFLAGS: 0056bf60 [ 1360.486167] syz-executor.5: [ 1360.500987] 0 [ 1360.526372] page allocation failure: order:0 [ 1360.539337] 2717 [ 1360.569171] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1360.606909] 2718 [ 1360.613453] (null) [ 1360.625291] 2718 [ 1360.627925] syz-executor.5 cpuset= [ 1360.627965] 2718 [ 1360.630193] / [ 1360.644090] mems_allowed=0-1 [ 1360.647232] CPU: 0 PID: 21850 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1360.654335] Node 0 [ 1360.655126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1360.655148] DMA32 free:18024kB min:36200kB low:45248kB high:54296kB active_anon:111296kB inactive_anon:36312kB active_file:72kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2524kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1360.657354] Call Trace: [ 1360.666757] lowmem_reserve[]: [ 1360.694744] dump_stack+0x1b2/0x281 [ 1360.694758] warn_alloc.cold+0x96/0x1cc [ 1360.694770] ? zone_watermark_ok_safe+0x220/0x220 [ 1360.694780] ? usleep_range+0x130/0x130 [ 1360.694793] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1360.697408] 0 [ 1360.700511] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1360.704172] 0 [ 1360.708704] ? run_timer_softirq+0x5a0/0x5a0 [ 1360.713564] 0 [ 1360.717497] __alloc_pages_nodemask+0x2127/0x2720 [ 1360.722633] 0 [ 1360.724388] ? lock_acquire+0x170/0x3f0 [ 1360.729373] 0 [ 1360.731183] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1360.731195] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1360.731211] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1360.731230] alloc_pages_current+0x155/0x260 [ 1360.735621] Node 0 [ 1360.737412] ion_page_pool_alloc+0x118/0x1b0 [ 1360.742292] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1360.744024] ion_system_heap_allocate+0x133/0x8c0 [ 1360.747966] lowmem_reserve[]: [ 1360.749759] ? ion_alloc+0x187/0x810 [ 1360.754723] 0 [ 1360.759171] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1360.764638] 0 [ 1360.769002] ? ion_system_contig_heap_create+0x130/0x130 [ 1360.771264] 0 [ 1360.775622] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1360.800540] 0 [ 1360.805352] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1360.805366] ion_alloc+0x204/0x810 [ 1360.805385] ? ion_dma_buf_release+0x40/0x40 [ 1360.808479] 0 [ 1360.812186] ? __might_fault+0x177/0x1b0 [ 1360.812200] ion_ioctl+0xea/0x1f0 [ 1360.812209] ? ion_query_heaps+0x360/0x360 [ 1360.812222] ? __alloc_fd+0x1be/0x490 [ 1360.819459] ? ion_query_heaps+0x360/0x360 [ 1360.821294] Node 1 [ 1360.826687] do_vfs_ioctl+0x75a/0xff0 [ 1360.828479] Normal free:26328kB min:53696kB low:67120kB high:80544kB active_anon:1684kB inactive_anon:8132kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:280kB bounce:0kB free_pcp:124kB local_pcp:4kB free_cma:0kB [ 1360.833476] ? ioctl_preallocate+0x1a0/0x1a0 [ 1360.833486] ? lock_downgrade+0x740/0x740 [ 1360.833498] ? __fget+0x225/0x360 [ 1360.833507] ? do_vfs_ioctl+0xff0/0xff0 [ 1360.833519] ? security_file_ioctl+0x83/0xb0 [ 1360.835306] lowmem_reserve[]: [ 1360.840138] SyS_ioctl+0x7f/0xb0 [ 1360.843698] 0 [ 1360.848058] ? do_vfs_ioctl+0xff0/0xff0 [ 1360.849833] 0 [ 1360.853887] do_syscall_64+0x1d5/0x640 [ 1360.853903] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1360.853912] RIP: 0033:0x465f69 [ 1360.853921] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 [ 1360.857383] 0 [ 1360.861608] ORIG_RAX: 0000000000000010 [ 1360.861614] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1360.861618] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1360.861623] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1360.861627] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1360.861632] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1360.868261] Mem-Info: [ 1360.869679] 0 [ 1360.871967] active_anon:28257 inactive_anon:11111 isolated_anon:0 [ 1360.871967] active_file:46 inactive_file:37 isolated_file:0 [ 1360.871967] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1360.871967] slab_reclaimable:13297 slab_unreclaimable:115204 [ 1360.871967] mapped:43552 shmem:13071 pagetables:703 bounce:0 [ 1360.871967] free:13831 free_pcp:31 free_cma:0 [ 1360.871982] Node 0 active_anon:111344kB inactive_anon:36312kB active_file:72kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:173744kB dirty:0kB writeback:0kB shmem:44088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1360.871996] Node 1 active_anon:1684kB inactive_anon:8132kB active_file:112kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:464kB dirty:0kB writeback:0kB shmem:8196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1360.872000] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1360.872017] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1360.872037] Node 0 DMA32 free:18024kB min:36200kB low:45248kB high:54296kB active_anon:111296kB inactive_anon:36312kB active_file:72kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2524kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1360.872055] lowmem_reserve[]: 0 0 0 0 0 [ 1360.872074] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1360.872090] lowmem_reserve[]: 0 0 0 0 0 [ 1360.872108] Node 1 Normal free:26328kB min:53696kB low:67120kB high:80544kB active_anon:1684kB inactive_anon:8132kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:280kB bounce:0kB free_pcp:124kB local_pcp:120kB free_cma:0kB [ 1360.872125] lowmem_reserve[]: 0 0 0 0 0 [ 1360.872141] Node 0 DMA: 5*4kB (ME) 7*8kB (UM) 5*16kB (UME) 6*32kB (ME) 4*64kB (ME) 3*128kB (ME) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB [ 1360.872213] Node 0 DMA32: 1300*4kB (ME) 718*8kB (ME) 220*16kB (ME) 34*32kB (UME) 19*64kB (UME) 7*128kB (UM) 2*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18176kB [ 1360.872277] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1360.872329] Node 1 Normal: 106*4kB (ME) 82*8kB (ME) 63*16kB (UME) 38*32kB (ME) 42*64kB (ME) 30*128kB (UME) 20*256kB [ 1360.900759] 0 [ 1360.909968] (ME) [ 1360.936908] 7*512kB [ 1360.948502] Node 0 [ 1360.956946] (ME) [ 1360.964701] DMA: [ 1360.969636] 0*1024kB [ 1360.987763] 5*4kB [ 1360.998084] 4*2048kB [ 1361.008525] (ME) [ 1361.036566] Bluetooth: hci1 command 0x0409 tx timeout [ 1361.042619] (UM) [ 1361.080199] 7*8kB [ 1361.098013] 0*4096kB [ 1361.125997] (UM) [ 1361.168563] = 26728kB [ 1361.189920] 5*16kB [ 1361.229999] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1361.271335] (UME) [ 1361.278401] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1361.283315] 6*32kB [ 1361.285662] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1361.294415] (ME) [ 1361.304077] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1361.325964] 4*64kB [ 1361.337547] 14104 total pagecache pages [ 1361.364543] (ME) 3*128kB (ME) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10972kB [ 1361.374987] systemd-journald[22008]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1361.382439] Node 0 DMA32: 1269*4kB (ME) 718*8kB (ME) 220*16kB (ME) 34*32kB (UME) 21*64kB (UME) 9*128kB (UM) 2*256kB [ 1361.402199] 0 pages in swap cache [ 1361.402224] Swap cache stats: add 0, delete 0, find 0/0 [ 1361.435825] (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18436kB [ 1361.447370] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1361.474876] Free swap = 0kB [ 1361.478690] Node 1 Normal: 2*4kB (ME) 3*8kB (UME) 1*16kB (E) 3*32kB (ME) 3*64kB (ME) 4*128kB (UME) 3*256kB (ME) 3*512kB (ME) 261*1024kB (U) 23*2048kB (UM) 0*4096kB = 317520kB [ 1361.500943] Total swap = 0kB [ 1361.507445] 2097051 pages RAM [ 1361.517756] 0 pages HighMem/MovableOnly [ 1361.526246] 363840 pages reserved [ 1361.533068] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1361.542660] 0 pages cma reserved [ 1361.546050] Out of memory (oom_kill_allocating_task): Kill process 21984 (syz-executor.2) score 0 or sacrifice child [ 1361.571742] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1361.591898] Killed process 21984 (syz-executor.2) total-vm:93384kB, anon-rss:104kB, file-rss:33880kB, shmem-rss:0kB [ 1361.594634] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1361.639438] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1361.664927] oom_reaper: reaped process 21984 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1361.670670] 17486 total pagecache pages [ 1361.693150] 0 pages in swap cache [ 1361.703276] Swap cache stats: add 0, delete 0, find 0/0 [ 1361.722713] Free swap = 0kB [ 1361.736339] Total swap = 0kB [ 1361.750699] 2097051 pages RAM [ 1361.753841] 0 pages HighMem/MovableOnly [ 1361.757815] 363840 pages reserved [ 1361.790688] 0 pages cma reserved [ 1362.435903] systemd[1]: Started Journal Service. [ 1363.090809] Bluetooth: hci1 command 0x041b tx timeout [ 1363.783077] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1363.790835] team0: Port device team_slave_0 added [ 1363.796274] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1363.803649] team0: Port device team_slave_1 added [ 1363.822323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1363.828585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.854099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1363.865139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1363.871468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.896870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1363.907749] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1363.915418] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1363.936417] device hsr_slave_0 entered promiscuous mode [ 1363.942152] device hsr_slave_1 entered promiscuous mode [ 1363.948095] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1363.955428] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1364.059674] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1364.087221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1364.095397] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1364.105067] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1364.111985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1364.118903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1364.129351] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1364.135630] 8021q: adding VLAN 0 to HW filter on device team0 [ 1364.144346] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1364.151501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1364.159300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1364.167023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.173431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1364.182086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1364.190251] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1364.197505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1364.205942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1364.214108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.220448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1364.229469] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1364.236677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1364.246302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1364.253394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1364.263868] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1364.271090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1364.278848] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1364.286806] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1364.295978] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1364.303173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1364.311190] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1364.325868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1364.335679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1364.346771] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1364.354305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1364.366486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1364.378652] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1364.388210] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1364.395787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1364.406472] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1364.413419] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1364.425160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1364.479499] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1364.491995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1364.526434] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1364.534427] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1364.541614] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1364.550521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1364.558622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1364.566225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1364.575800] device veth0_vlan entered promiscuous mode [ 1364.585827] device veth1_vlan entered promiscuous mode [ 1364.592197] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1364.600575] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1364.613972] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1364.623157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1364.630379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1364.638454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1364.648076] device veth0_macvtap entered promiscuous mode [ 1364.654604] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1364.663360] device veth1_macvtap entered promiscuous mode [ 1364.672135] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1364.681527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1364.690020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1364.700325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.709764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1364.719580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.729097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1364.738909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.748106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1364.757925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.768005] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1364.784906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1364.812888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1364.823824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.833848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1364.844652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.855682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1364.865542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.874880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1364.884855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.895482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1364.902973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1364.911566] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1364.918941] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1364.927681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1364.944735] IPVS: ftp: loaded support on port[0] = 21 [ 1365.099098] chnl_net:caif_netlink_parms(): no params data found [ 1365.171499] Bluetooth: hci1 command 0x040f tx timeout [ 1365.199788] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.206609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.214290] device bridge_slave_0 entered promiscuous mode [ 1365.222290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.228701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.237147] device bridge_slave_1 entered promiscuous mode [ 1365.265581] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1365.275689] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1365.302842] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1365.311581] team0: Port device team_slave_0 added [ 1365.317393] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1365.326034] team0: Port device team_slave_1 added [ 1365.354828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1365.363308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1365.393328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1365.405319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1365.412678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1365.438114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1365.451155] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1365.462457] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1365.499769] device hsr_slave_0 entered promiscuous mode [ 1365.507148] device hsr_slave_1 entered promiscuous mode [ 1365.517092] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1365.524707] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1365.645646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.652116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1365.658845] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.665297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1365.713908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1365.725012] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1365.737738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1365.746465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.753660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.766536] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1365.772994] 8021q: adding VLAN 0 to HW filter on device team0 [ 1365.783899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1365.792499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.798922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1365.822307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1365.830486] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.836974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1365.849829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1365.868919] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1365.883278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1365.896709] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1365.907096] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1365.917507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1365.927837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1365.938913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1365.976865] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1365.988025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1365.999069] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1366.006908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1366.014782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1366.027702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1366.118897] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1366.140390] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1366.148724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1366.160366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1366.210029] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1366.225953] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1366.234847] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1366.249801] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1366.258681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1366.268827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1366.279666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1366.289919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1366.301379] device veth0_vlan entered promiscuous mode [ 1366.313687] device veth1_vlan entered promiscuous mode [ 1366.319740] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1366.330815] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1366.346932] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1366.357832] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1366.365133] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1366.374177] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1366.381719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1366.389543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1366.400295] device veth0_macvtap entered promiscuous mode [ 1366.408224] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1366.419820] device veth1_macvtap entered promiscuous mode [ 1366.426636] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1366.436721] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1366.448334] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1366.458987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1366.469436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.479366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1366.489507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.501124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1366.510941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.520771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1366.530501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.540313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1366.550713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.561606] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1366.568606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1366.576966] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1366.585186] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1366.593039] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1366.601253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1366.611441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1366.622801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.632330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1366.642578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.652201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1366.662151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.671575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1366.681424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.691020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1366.701352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.712181] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1366.719092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1366.726973] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1366.735581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1366.851149] Bluetooth: hci5 command 0x0409 tx timeout [ 1367.251313] Bluetooth: hci1 command 0x0419 tx timeout 08:36:49 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) 08:36:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) socket$nl_route(0x10, 0x3, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) 08:36:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[], 0x24}}, 0x0) 08:36:49 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) socket$nl_route(0x10, 0x3, 0x0) 08:36:49 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) socket$nl_route(0x10, 0x3, 0x0) 08:36:49 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000005c0)) 08:36:49 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) socket$nl_route(0x10, 0x3, 0x0) [ 1368.028062] syz-executor.1: [ 1368.028071] syz-executor.2: [ 1368.028076] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1368.034455] syz-executor.4: [ 1368.035569] syz-executor.0: [ 1368.052961] page allocation failure: order:4 [ 1368.064043] (null) [ 1368.064222] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1368.070567] syz-executor.5: [ 1368.071332] syz-executor.3: [ 1368.080450] page allocation failure: order:4 [ 1368.087967] page allocation failure: order:4 [ 1368.091968] syz-executor.1 cpuset= [ 1368.094919] (null) [ 1368.098546] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1368.102899] syz-executor.2 cpuset= [ 1368.102956] page allocation failure: order:4 [ 1368.112398] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1368.118842] (null) [ 1368.119469] page allocation failure: order:4 [ 1368.126693] / [ 1368.128682] (null) [ 1368.141367] mems_allowed=0-1 [ 1368.142409] syz-executor.4 cpuset= [ 1368.144634] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1368.145767] / [ 1368.148327] syz-executor.5 cpuset= [ 1368.156657] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1368.161127] / [ 1368.163557] CPU: 1 PID: 22404 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 1368.173042] (null) [ 1368.177826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1368.177831] Call Trace: [ 1368.177852] dump_stack+0x1b2/0x281 [ 1368.177867] warn_alloc.cold+0x96/0x1cc [ 1368.177879] ? zone_watermark_ok_safe+0x220/0x220 [ 1368.177899] __alloc_pages_nodemask+0x2127/0x2720 [ 1368.184451] mems_allowed=0-1 [ 1368.189391] ? lock_acquire+0x170/0x3f0 [ 1368.189411] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1368.189428] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1368.189440] ? __mutex_unlock_slowpath+0x75/0x770 [ 1368.194441] mems_allowed=0-1 [ 1368.195671] alloc_pages_current+0x155/0x260 [ 1368.195690] ion_page_pool_alloc+0x118/0x1b0 [ 1368.195702] ion_system_heap_allocate+0x133/0x8c0 [ 1368.195713] ? ion_alloc+0x187/0x810 [ 1368.199795] syz-executor.3 cpuset= [ 1368.204512] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1368.204525] ? ion_system_contig_heap_create+0x130/0x130 [ 1368.204535] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1368.204545] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1368.204557] ion_alloc+0x204/0x810 [ 1368.204573] ? ion_dma_buf_release+0x40/0x40 [ 1368.204585] ? __might_fault+0x177/0x1b0 [ 1368.204598] ion_ioctl+0xea/0x1f0 [ 1368.204608] ? ion_query_heaps+0x360/0x360 [ 1368.204620] ? __alloc_fd+0x1be/0x490 [ 1368.222289] / [ 1368.226928] ? ion_query_heaps+0x360/0x360 [ 1368.263771] mems_allowed=0-1 [ 1368.266656] do_vfs_ioctl+0x75a/0xff0 [ 1368.266672] ? ioctl_preallocate+0x1a0/0x1a0 [ 1368.266681] ? lock_downgrade+0x740/0x740 [ 1368.266695] ? __fget+0x225/0x360 [ 1368.266705] ? do_vfs_ioctl+0xff0/0xff0 [ 1368.328878] ? security_file_ioctl+0x83/0xb0 [ 1368.333297] SyS_ioctl+0x7f/0xb0 [ 1368.336654] ? do_vfs_ioctl+0xff0/0xff0 [ 1368.340633] do_syscall_64+0x1d5/0x640 [ 1368.344534] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1368.349745] RIP: 0033:0x465f69 [ 1368.352930] RSP: 002b:00007f6547c30188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1368.360635] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1368.367927] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1368.375204] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1368.382471] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1368.389756] R13: 00007ffe59ae816f R14: 00007f6547c30300 R15: 0000000000022000 [ 1368.397090] CPU: 0 PID: 22395 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1368.404988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1368.414026] (null) [ 1368.414345] Call Trace: [ 1368.418866] syz-executor.0 cpuset=/ [ 1368.419059] dump_stack+0x1b2/0x281 [ 1368.419073] warn_alloc.cold+0x96/0x1cc [ 1368.424036] / [ 1368.426300] ? zone_watermark_ok_safe+0x220/0x220 [ 1368.436076] mems_allowed=0-1 [ 1368.436826] __alloc_pages_nodemask+0x2127/0x2720 [ 1368.444765] ? lock_acquire+0x170/0x3f0 [ 1368.446828] mems_allowed=0-1 [ 1368.448764] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1368.448784] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1368.448796] ? __mutex_unlock_slowpath+0x75/0x770 [ 1368.448810] alloc_pages_current+0x155/0x260 [ 1368.471445] ion_page_pool_alloc+0x118/0x1b0 [ 1368.475871] ion_system_heap_allocate+0x133/0x8c0 [ 1368.481009] ? ion_alloc+0x187/0x810 [ 1368.484732] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1368.490192] ? ion_system_contig_heap_create+0x130/0x130 [ 1368.495646] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1368.500674] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1368.505537] ion_alloc+0x204/0x810 [ 1368.509083] ? ion_dma_buf_release+0x40/0x40 [ 1368.513512] ? __might_fault+0x177/0x1b0 [ 1368.517574] ion_ioctl+0xea/0x1f0 [ 1368.521023] ? ion_query_heaps+0x360/0x360 [ 1368.525264] ? do_vfs_ioctl+0x76/0xff0 [ 1368.529148] ? ion_query_heaps+0x360/0x360 [ 1368.533378] do_vfs_ioctl+0x75a/0xff0 [ 1368.537177] ? ioctl_preallocate+0x1a0/0x1a0 [ 1368.541581] ? lock_downgrade+0x740/0x740 [ 1368.545726] ? __fget+0x225/0x360 [ 1368.549195] ? do_vfs_ioctl+0xff0/0xff0 [ 1368.553164] ? security_file_ioctl+0x83/0xb0 [ 1368.557565] SyS_ioctl+0x7f/0xb0 [ 1368.560925] ? do_vfs_ioctl+0xff0/0xff0 [ 1368.564898] do_syscall_64+0x1d5/0x640 [ 1368.568790] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1368.573974] RIP: 0033:0x465f69 [ 1368.577155] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1368.585073] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1368.592337] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1368.599602] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1368.606869] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1368.614136] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1368.624915] CPU: 1 PID: 22392 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 1368.632819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1368.642167] Call Trace: [ 1368.644766] dump_stack+0x1b2/0x281 [ 1368.648402] warn_alloc.cold+0x96/0x1cc [ 1368.652380] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1368.657413] ? zone_watermark_ok_safe+0x220/0x220 [ 1368.662286] __alloc_pages_nodemask+0x2127/0x2720 [ 1368.667154] ? __schedule+0x893/0x1de0 [ 1368.671071] ? lock_acquire+0x170/0x3f0 [ 1368.675090] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1368.679954] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1368.685436] ? __mutex_unlock_slowpath+0x75/0x770 [ 1368.690292] alloc_pages_current+0x155/0x260 [ 1368.694723] ion_page_pool_alloc+0x118/0x1b0 [ 1368.699163] ion_system_heap_allocate+0x133/0x8c0 [ 1368.704032] ? ion_alloc+0x187/0x810 [ 1368.707749] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1368.713206] ? ion_system_contig_heap_create+0x130/0x130 [ 1368.718836] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1368.723881] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1368.728739] ion_alloc+0x204/0x810 [ 1368.732299] ? ion_dma_buf_release+0x40/0x40 [ 1368.736704] ? __might_fault+0x177/0x1b0 [ 1368.740775] ion_ioctl+0xea/0x1f0 [ 1368.744243] ? ion_query_heaps+0x360/0x360 [ 1368.748477] ? __alloc_fd+0x1be/0x490 [ 1368.752303] ? ion_query_heaps+0x360/0x360 [ 1368.756554] do_vfs_ioctl+0x75a/0xff0 [ 1368.760372] ? ioctl_preallocate+0x1a0/0x1a0 [ 1368.764811] ? lock_downgrade+0x740/0x740 [ 1368.768978] ? __fget+0x225/0x360 [ 1368.772427] ? do_vfs_ioctl+0xff0/0xff0 [ 1368.777091] ? security_file_ioctl+0x83/0xb0 [ 1368.781494] SyS_ioctl+0x7f/0xb0 [ 1368.784858] ? do_vfs_ioctl+0xff0/0xff0 [ 1368.788845] do_syscall_64+0x1d5/0x640 [ 1368.792743] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1368.797930] RIP: 0033:0x465f69 [ 1368.801119] RSP: 002b:00007f5ba2c45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1368.808840] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1368.816105] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1368.823392] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1368.830659] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1368.837928] R13: 00007ffec1e0e6ff R14: 00007f5ba2c45300 R15: 0000000000022000 [ 1368.846722] CPU: 1 PID: 22396 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1368.854613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1368.863975] Call Trace: [ 1368.866565] dump_stack+0x1b2/0x281 [ 1368.870199] warn_alloc.cold+0x96/0x1cc [ 1368.874194] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1368.879216] ? zone_watermark_ok_safe+0x220/0x220 [ 1368.884072] __alloc_pages_nodemask+0x2127/0x2720 [ 1368.888933] ? lock_acquire+0x170/0x3f0 [ 1368.892923] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1368.897773] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1368.903225] ? __mutex_unlock_slowpath+0x75/0x770 [ 1368.908074] ? ion_page_pool_alloc+0x28/0x1b0 [ 1368.912606] alloc_pages_current+0x155/0x260 [ 1368.917024] ion_page_pool_alloc+0x118/0x1b0 [ 1368.921440] ion_system_heap_allocate+0x133/0x8c0 [ 1368.926295] ? ion_alloc+0x187/0x810 [ 1368.930010] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1368.935467] ? ion_system_contig_heap_create+0x130/0x130 [ 1368.941012] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1368.946035] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1368.950885] ion_alloc+0x204/0x810 [ 1368.954430] ? ion_dma_buf_release+0x40/0x40 [ 1368.958839] ? __might_fault+0x177/0x1b0 [ 1368.962948] ion_ioctl+0xea/0x1f0 [ 1368.966493] ? ion_query_heaps+0x360/0x360 [ 1368.970739] ? __alloc_fd+0x1be/0x490 [ 1368.974540] ? ion_query_heaps+0x360/0x360 [ 1368.978778] do_vfs_ioctl+0x75a/0xff0 [ 1368.982582] ? ioctl_preallocate+0x1a0/0x1a0 [ 1368.986993] ? lock_downgrade+0x740/0x740 [ 1368.991151] ? __fget+0x225/0x360 [ 1368.994617] ? do_vfs_ioctl+0xff0/0xff0 [ 1368.998598] ? security_file_ioctl+0x83/0xb0 [ 1369.003013] SyS_ioctl+0x7f/0xb0 [ 1369.006377] ? do_vfs_ioctl+0xff0/0xff0 [ 1369.010463] do_syscall_64+0x1d5/0x640 [ 1369.014800] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1369.019999] RIP: 0033:0x465f69 [ 1369.023191] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1369.030907] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1369.038177] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1369.045450] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1369.052728] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1369.060002] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1369.068288] Bluetooth: hci5 command 0x041b tx timeout [ 1369.075716] CPU: 1 PID: 22388 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1369.083617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1369.092966] Call Trace: [ 1369.095559] dump_stack+0x1b2/0x281 [ 1369.099197] warn_alloc.cold+0x96/0x1cc [ 1369.103174] ? zone_watermark_ok_safe+0x220/0x220 [ 1369.108030] __alloc_pages_nodemask+0x2127/0x2720 [ 1369.112910] ? lock_acquire+0x170/0x3f0 [ 1369.116892] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1369.121741] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1369.127195] ? __mutex_unlock_slowpath+0x75/0x770 [ 1369.132128] alloc_pages_current+0x155/0x260 [ 1369.136541] ion_page_pool_alloc+0x118/0x1b0 [ 1369.140978] ion_system_heap_allocate+0x133/0x8c0 [ 1369.145844] ? ion_alloc+0x187/0x810 [ 1369.149564] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1369.155016] ? ion_system_contig_heap_create+0x130/0x130 [ 1369.160470] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1369.165494] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1369.170345] ion_alloc+0x204/0x810 [ 1369.173913] ? ion_dma_buf_release+0x40/0x40 [ 1369.178324] ? __might_fault+0x177/0x1b0 [ 1369.182392] ion_ioctl+0xea/0x1f0 [ 1369.185861] ? ion_query_heaps+0x360/0x360 [ 1369.190093] ? __alloc_fd+0x1be/0x490 [ 1369.193891] ? ion_query_heaps+0x360/0x360 [ 1369.198129] do_vfs_ioctl+0x75a/0xff0 [ 1369.201931] ? ioctl_preallocate+0x1a0/0x1a0 [ 1369.206342] ? lock_downgrade+0x740/0x740 [ 1369.210510] ? __fget+0x225/0x360 [ 1369.213960] ? do_vfs_ioctl+0xff0/0xff0 [ 1369.217928] ? security_file_ioctl+0x83/0xb0 [ 1369.222335] SyS_ioctl+0x7f/0xb0 [ 1369.225789] ? do_vfs_ioctl+0xff0/0xff0 [ 1369.229770] do_syscall_64+0x1d5/0x640 [ 1369.233661] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1369.238633] warn_alloc_show_mem: 1 callbacks suppressed [ 1369.238636] Mem-Info: [ 1369.238840] RIP: 0033:0x465f69 [ 1369.238846] RSP: 002b:00007f0a724bf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1369.238857] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1369.238863] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1369.238868] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1369.238877] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1369.267467] active_anon:28975 inactive_anon:13160 isolated_anon:0 [ 1369.267467] active_file:2158 inactive_file:2169 isolated_file:0 [ 1369.267467] unevictable:0 dirty:107 writeback:0 unstable:0 [ 1369.267467] slab_reclaimable:13157 slab_unreclaimable:118422 [ 1369.267467] mapped:55767 shmem:15124 pagetables:853 bounce:0 [ 1369.267467] free:418201 free_pcp:179 free_cma:0 [ 1369.272131] R13: 00007fffce0e3c8f R14: 00007f0a724bf300 R15: 0000000000022000 [ 1369.339990] CPU: 0 PID: 22390 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 1369.347921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1369.357282] Call Trace: [ 1369.360150] dump_stack+0x1b2/0x281 [ 1369.363808] warn_alloc.cold+0x96/0x1cc [ 1369.367792] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1369.372818] ? zone_watermark_ok_safe+0x220/0x220 [ 1369.377684] __alloc_pages_nodemask+0x2127/0x2720 [ 1369.382543] ? lock_acquire+0x170/0x3f0 [ 1369.386526] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1369.391384] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1369.396845] ? __mutex_unlock_slowpath+0x75/0x770 [ 1369.401697] alloc_pages_current+0x155/0x260 [ 1369.406122] ion_page_pool_alloc+0x118/0x1b0 [ 1369.410540] ion_system_heap_allocate+0x133/0x8c0 [ 1369.415410] ? ion_alloc+0x187/0x810 [ 1369.419127] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1369.424582] ? ion_system_contig_heap_create+0x130/0x130 [ 1369.430038] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1369.435064] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1369.439921] ion_alloc+0x204/0x810 [ 1369.443477] ? ion_dma_buf_release+0x40/0x40 [ 1369.447900] ? __might_fault+0x177/0x1b0 [ 1369.451974] ion_ioctl+0xea/0x1f0 [ 1369.455527] ? ion_query_heaps+0x360/0x360 [ 1369.459778] ? ion_query_heaps+0x360/0x360 [ 1369.464021] do_vfs_ioctl+0x75a/0xff0 [ 1369.467829] ? ioctl_preallocate+0x1a0/0x1a0 [ 1369.472241] ? lock_downgrade+0x740/0x740 [ 1369.476418] ? __fget+0x225/0x360 [ 1369.479877] ? do_vfs_ioctl+0xff0/0xff0 [ 1369.483863] ? security_file_ioctl+0x83/0xb0 [ 1369.488276] SyS_ioctl+0x7f/0xb0 [ 1369.491645] ? do_vfs_ioctl+0xff0/0xff0 [ 1369.495628] do_syscall_64+0x1d5/0x640 [ 1369.499525] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1369.504716] RIP: 0033:0x465f69 [ 1369.507902] RSP: 002b:00007f2758795188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1369.515605] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1369.522874] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1369.530154] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1369.537426] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1369.544698] R13: 00007fff98c6ba8f R14: 00007f2758795300 R15: 0000000000022000 [ 1369.651349] Node 0 active_anon:114448kB inactive_anon:36328kB active_file:4336kB inactive_file:4920kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:203376kB dirty:360kB writeback:0kB shmem:44112kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1369.745299] Node 1 active_anon:1452kB inactive_anon:16320kB active_file:4296kB inactive_file:3804kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:19760kB dirty:152kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1369.804202] Node 0 DMA free:11116kB min:204kB low:252kB high:300kB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1369.861102] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1369.872025] Node 0 DMA32 free:45120kB min:36200kB low:45248kB high:54296kB active_anon:114400kB inactive_anon:36328kB active_file:4336kB inactive_file:4916kB unevictable:0kB writepending:360kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7680kB pagetables:3192kB bounce:0kB free_pcp:428kB local_pcp:312kB free_cma:0kB [ 1369.902905] lowmem_reserve[]: 0 0 0 0 0 [ 1369.913750] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1369.982200] lowmem_reserve[]: 0 0 0 0 0 [ 1370.013774] Node 1 Normal free:1709652kB min:53696kB low:67120kB high:80544kB active_anon:1452kB inactive_anon:16320kB active_file:4696kB inactive_file:3804kB unevictable:0kB writepending:152kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:212kB bounce:0kB free_pcp:660kB local_pcp:476kB free_cma:0kB [ 1370.057372] lowmem_reserve[]: 0 0 0 0 0 [ 1370.109539] Node 0 DMA: 16*4kB (UME) 22*8kB (UM) 14*16kB (UME) 15*32kB (UME) 13*64kB (UME) 5*128kB (UME) 6*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 11120kB [ 1370.193788] Node 0 DMA32: 1222*4kB (UME) 727*8kB (UME) 243*16kB (UME) 896*32kB (UME) 30*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45184kB [ 1370.236236] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1370.286968] Node 1 Normal: 1*4kB (E) 2*8kB (UE) 2*16kB (UE) 3*32kB (ME) 3*64kB (ME) 3*128kB (ME) 3*256kB (ME) 2*512kB (E) 1*1024kB (M) 1*2048kB (M) 363*4096kB (U) = 1492436kB [ 1370.315151] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1370.340704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1370.368683] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1370.410135] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1370.431236] 17906 total pagecache pages [ 1370.450588] 0 pages in swap cache [ 1370.460440] Swap cache stats: add 0, delete 0, find 0/0 [ 1370.475552] Free swap = 0kB [ 1370.485793] Total swap = 0kB [ 1370.490982] 2097051 pages RAM [ 1370.495099] 0 pages HighMem/MovableOnly [ 1370.506013] 363840 pages reserved [ 1370.518487] 0 pages cma reserved [ 1371.091211] Bluetooth: hci5 command 0x040f tx timeout [ 1371.729935] oom_reaper: reaped process 22392 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1371.807316] oom_reaper: reaped process 22390 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1371.832908] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1371.859387] in:imklog cpuset=/ mems_allowed=0-1 [ 1371.864174] CPU: 0 PID: 21817 Comm: in:imklog Not tainted 4.14.225-syzkaller #0 [ 1371.871624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1371.881588] Call Trace: [ 1371.884186] dump_stack+0x1b2/0x281 [ 1371.887817] dump_header+0x178/0x82f [ 1371.891532] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1371.896642] ? ___ratelimit+0x2cd/0x530 [ 1371.900641] oom_kill_process.cold+0x10/0xb18 [ 1371.905153] out_of_memory+0xe3e/0x1190 [ 1371.909452] ? oom_killer_disable+0x1c0/0x1c0 [ 1371.913953] ? mutex_trylock+0x152/0x1a0 [ 1371.918012] __alloc_pages_nodemask+0x23e1/0x2720 [ 1371.922897] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1371.927745] alloc_pages_current+0x155/0x260 [ 1371.932155] filemap_fault+0xea3/0x1980 [ 1371.936143] ext4_filemap_fault+0x84/0xb0 [ 1371.940294] __do_fault+0xfa/0x380 [ 1371.940752] syz-executor.3: page allocation failure: order:0 [ 1371.943826] __handle_mm_fault+0x2497/0x4620 [ 1371.943837] ? vm_insert_page+0x7c0/0x7c0 [ 1371.949642] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1371.954087] ? lock_downgrade+0x740/0x740 [ 1371.954106] handle_mm_fault+0x391/0x860 [ 1371.954119] __do_page_fault+0x549/0xad0 [ 1371.954129] ? spurious_fault+0x640/0x640 [ 1371.954137] ? do_page_fault+0x60/0x500 [ 1371.954146] ? page_fault+0x2f/0x50 [ 1371.954153] page_fault+0x45/0x50 [ 1371.954160] RIP: 1fa0:0x1f9f [ 1371.954165] RSP: 0000:000055856db8e9d0 EFLAGS: 7f6064011da0 [ 1371.960666] syz-executor.4: [ 1371.969770] (null) [ 1371.993632] Mem-Info: [ 1372.001074] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1372.015069] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1372.017178] CPU: 1 PID: 22390 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 1372.027696] active_anon:28847 inactive_anon:13161 isolated_anon:0 [ 1372.027696] active_file:18 inactive_file:11 isolated_file:0 [ 1372.027696] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1372.027696] slab_reclaimable:13138 slab_unreclaimable:117563 [ 1372.027696] mapped:52731 shmem:15123 pagetables:832 bounce:0 [ 1372.027696] free:13914 free_pcp:145 free_cma:0 [ 1372.033412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1372.033417] Call Trace: [ 1372.033438] dump_stack+0x1b2/0x281 [ 1372.033451] warn_alloc.cold+0x96/0x1cc [ 1372.033478] ? zone_watermark_ok_safe+0x220/0x220 [ 1372.066761] syz-executor.4 cpuset= [ 1372.076064] ? usleep_range+0x130/0x130 [ 1372.076074] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1372.076086] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1372.076096] ? run_timer_softirq+0x5a0/0x5a0 [ 1372.076112] __alloc_pages_nodemask+0x2127/0x2720 [ 1372.078689] / [ 1372.082324] ? lock_acquire+0x170/0x3f0 [ 1372.086320] mems_allowed=0-1 [ 1372.091119] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1372.091131] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1372.091151] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1372.100688] Node 0 active_anon:113912kB inactive_anon:36324kB active_file:4kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198784kB dirty:0kB writeback:0kB shmem:44108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1372.104068] ? alloc_pages_current+0x123/0x260 [ 1372.109074] Node 1 active_anon:1476kB inactive_anon:16320kB active_file:68kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12140kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1372.113478] alloc_pages_current+0x155/0x260 [ 1372.113494] ion_page_pool_alloc+0x118/0x1b0 [ 1372.113504] ion_system_heap_allocate+0x133/0x8c0 [ 1372.113518] ? ion_alloc+0x187/0x810 [ 1372.140670] Node 0 [ 1372.141872] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1372.200714] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1372.201359] ? ion_system_contig_heap_create+0x130/0x130 [ 1372.205750] lowmem_reserve[]: [ 1372.210162] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1372.230674] 0 [ 1372.251937] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1372.251951] ion_alloc+0x204/0x810 [ 1372.251967] ? ion_dma_buf_release+0x40/0x40 [ 1372.251978] ? __might_fault+0x177/0x1b0 [ 1372.280673] 2717 2718 [ 1372.284089] ion_ioctl+0xea/0x1f0 [ 1372.284101] ? ion_query_heaps+0x360/0x360 [ 1372.286590] 2718 [ 1372.290042] ? ion_query_heaps+0x360/0x360 [ 1372.300516] do_vfs_ioctl+0x75a/0xff0 [ 1372.304315] ? ioctl_preallocate+0x1a0/0x1a0 [ 1372.308721] ? lock_downgrade+0x740/0x740 [ 1372.310671] 2718 [ 1372.312870] ? __fget+0x225/0x360 [ 1372.312881] ? do_vfs_ioctl+0xff0/0xff0 [ 1372.314931] Node 0 [ 1372.318379] ? security_file_ioctl+0x83/0xb0 [ 1372.328990] SyS_ioctl+0x7f/0xb0 [ 1372.330678] DMA32 free:17944kB min:36200kB low:45248kB high:54296kB active_anon:113864kB inactive_anon:36324kB active_file:4kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:3108kB bounce:0kB free_pcp:420kB local_pcp:300kB free_cma:0kB [ 1372.332353] ? do_vfs_ioctl+0xff0/0xff0 [ 1372.364964] do_syscall_64+0x1d5/0x640 [ 1372.368944] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1372.374141] RIP: 0033:0x465f69 [ 1372.377323] RSP: 002b:00007f2758795188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1372.385045] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1372.390670] lowmem_reserve[]: [ 1372.392309] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1372.392317] 0 [ 1372.395406] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1372.410659] 0 [ 1372.411753] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1372.411761] R13: 00007fff98c6ba8f R14: 00007f2758795300 R15: 0000000000022000 [ 1372.413549] 0 0 0 [ 1372.428246] CPU: 1 PID: 22392 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 1372.430317] Node 0 [ 1372.438195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1372.438200] Call Trace: [ 1372.438220] dump_stack+0x1b2/0x281 [ 1372.438232] warn_alloc.cold+0x96/0x1cc [ 1372.438244] ? zone_watermark_ok_safe+0x220/0x220 [ 1372.438253] ? usleep_range+0x130/0x130 [ 1372.438261] ? try_to_free_pages+0x23f/0x6e0 [ 1372.438270] ? _find_next_bit+0xdb/0x100 [ 1372.438280] ? run_timer_softirq+0x5a0/0x5a0 [ 1372.438295] __alloc_pages_nodemask+0x2127/0x2720 [ 1372.438311] ? lock_acquire+0x170/0x3f0 [ 1372.438326] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1372.438337] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1372.438359] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1372.438378] alloc_pages_current+0x155/0x260 [ 1372.438389] ion_page_pool_alloc+0x118/0x1b0 [ 1372.438400] ion_system_heap_allocate+0x133/0x8c0 [ 1372.438411] ? ion_alloc+0x187/0x810 [ 1372.438421] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1372.438431] ? ion_system_contig_heap_create+0x130/0x130 [ 1372.438442] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1372.438452] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1372.438463] ion_alloc+0x204/0x810 [ 1372.438478] ? ion_dma_buf_release+0x40/0x40 [ 1372.438490] ? __might_fault+0x177/0x1b0 [ 1372.438500] ion_ioctl+0xea/0x1f0 [ 1372.438509] ? ion_query_heaps+0x360/0x360 [ 1372.438519] ? __alloc_fd+0x1be/0x490 [ 1372.438529] ? ion_query_heaps+0x360/0x360 [ 1372.438540] do_vfs_ioctl+0x75a/0xff0 [ 1372.438551] ? ioctl_preallocate+0x1a0/0x1a0 [ 1372.438558] ? lock_downgrade+0x740/0x740 [ 1372.438571] ? __fget+0x225/0x360 [ 1372.438579] ? do_vfs_ioctl+0xff0/0xff0 [ 1372.438589] ? security_file_ioctl+0x83/0xb0 [ 1372.438599] SyS_ioctl+0x7f/0xb0 [ 1372.438607] ? do_vfs_ioctl+0xff0/0xff0 [ 1372.438618] do_syscall_64+0x1d5/0x640 [ 1372.438633] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1372.438641] RIP: 0033:0x465f69 [ 1372.438645] RSP: 002b:00007f5ba2c45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1372.438656] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1372.438661] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1372.438666] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1372.438671] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1372.438676] R13: 00007ffec1e0e6ff R14: 00007f5ba2c45300 R15: 0000000000022000 [ 1372.447447] warn_alloc_show_mem: 5 callbacks suppressed [ 1372.447451] Mem-Info: [ 1372.459778] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1372.464991] active_anon:28824 inactive_anon:13161 isolated_anon:0 [ 1372.464991] active_file:16 inactive_file:16 isolated_file:0 [ 1372.464991] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1372.464991] slab_reclaimable:13138 slab_unreclaimable:117565 [ 1372.464991] mapped:52714 shmem:15123 pagetables:832 bounce:0 [ 1372.464991] free:13914 free_pcp:146 free_cma:0 [ 1372.469564] lowmem_reserve[]: [ 1372.504459] Node 0 active_anon:113820kB inactive_anon:36324kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198776kB dirty:0kB writeback:0kB shmem:44108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1372.506858] 0 [ 1372.544450] Node 1 active_anon:1476kB inactive_anon:16320kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12080kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1372.545587] 0 [ 1372.548372] Node 0 [ 1372.553854] 0 [ 1372.570682] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1372.630681] 0 0 [ 1372.842759] Node 1 Normal free:167976kB min:53696kB low:67120kB high:80544kB active_anon:1476kB inactive_anon:16320kB active_file:456kB inactive_file:2096kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:212kB bounce:0kB free_pcp:680kB local_pcp:208kB free_cma:0kB [ 1372.864591] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1372.877201] Node 0 DMA32 free:45200kB min:36200kB low:45248kB high:54296kB active_anon:113772kB inactive_anon:36324kB active_file:8kB inactive_file:108kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:3108kB bounce:0kB free_pcp:284kB local_pcp:52kB free_cma:0kB [ 1372.974676] lowmem_reserve[]: 0 0 0 0 0 [ 1372.978726] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1372.980674] lowmem_reserve[]: [ 1373.040675] lowmem_reserve[]: 0 0 0 0 0 [ 1373.047824] Node 1 Normal free:58216kB min:53696kB low:67120kB high:80544kB active_anon:1476kB inactive_anon:16320kB active_file:1464kB inactive_file:1076kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:212kB bounce:0kB free_pcp:900kB local_pcp:704kB free_cma:0kB [ 1373.097069] 0 0 0 0 0 [ 1373.099617] Node 0 DMA: 5*4kB (ME) 6*8kB (M) 5*16kB (UME) 7*32kB (UME) 5*64kB (UME) 5*128kB (UME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11060kB [ 1373.122278] Node 0 DMA32: 1368*4kB (UME) 784*8kB (UME) 263*16kB (UME) 20*32kB (ME) 6*64kB (UM) 39*128kB (U) 12*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 25040kB [ 1373.139512] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1373.141813] Node 0 [ 1373.157735] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1373.165179] CPU: 1 PID: 22392 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 1373.166170] Normal: [ 1373.173061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1373.173065] Call Trace: [ 1373.173087] dump_stack+0x1b2/0x281 [ 1373.173101] warn_alloc.cold+0x96/0x1cc [ 1373.173113] ? zone_watermark_ok_safe+0x220/0x220 [ 1373.173133] __alloc_pages_nodemask+0x2127/0x2720 [ 1373.175439] 0*4kB [ 1373.185235] ? lock_acquire+0x170/0x3f0 [ 1373.185247] ? lock_acquire+0x170/0x3f0 [ 1373.185263] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1373.185281] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1373.187854] 0*8kB [ 1373.191468] ? __mutex_unlock_slowpath+0x75/0x770 [ 1373.191483] alloc_pages_current+0x155/0x260 [ 1373.191499] ion_page_pool_alloc+0x118/0x1b0 [ 1373.195454] 0*16kB [ 1373.200306] ion_system_heap_allocate+0x133/0x8c0 [ 1373.205192] 0*32kB [ 1373.207287] ? _raw_spin_unlock+0x29/0x40 [ 1373.211264] 0*64kB [ 1373.215221] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1373.220062] 0*128kB [ 1373.225509] ? ion_system_contig_heap_create+0x130/0x130 [ 1373.225521] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1373.225532] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1373.225543] ion_alloc+0x27a/0x810 [ 1373.227676] 0*256kB [ 1373.232512] ? ion_dma_buf_release+0x40/0x40 [ 1373.232525] ? __might_fault+0x177/0x1b0 [ 1373.232537] ion_ioctl+0xea/0x1f0 [ 1373.232547] ? ion_query_heaps+0x360/0x360 [ 1373.236937] 0*512kB [ 1373.241336] ? __alloc_fd+0x1be/0x490 [ 1373.241348] ? ion_query_heaps+0x360/0x360 [ 1373.241363] do_vfs_ioctl+0x75a/0xff0 [ 1373.241375] ? ioctl_preallocate+0x1a0/0x1a0 [ 1373.243593] 0*1024kB [ 1373.248423] ? lock_downgrade+0x740/0x740 [ 1373.248437] ? __fget+0x225/0x360 [ 1373.250687] 0*2048kB [ 1373.254787] ? do_vfs_ioctl+0xff0/0xff0 [ 1373.256999] 0*4096kB [ 1373.261920] ? security_file_ioctl+0x83/0xb0 [ 1373.261931] SyS_ioctl+0x7f/0xb0 [ 1373.261939] ? do_vfs_ioctl+0xff0/0xff0 [ 1373.261950] do_syscall_64+0x1d5/0x640 [ 1373.261967] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1373.264669] = 0kB [ 1373.269716] RIP: 0033:0x465f69 [ 1373.274773] Node 1 [ 1373.279566] RSP: 002b:00007f5ba2c45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1373.283149] Normal: [ 1373.285426] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1373.289814] 94*4kB [ 1373.293858] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1373.293864] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1373.293869] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1373.293873] R13: 00007ffec1e0e6ff R14: 00007f5ba2c45300 R15: 0000000000022000 [ 1373.294384] Bluetooth: hci5 command 0x0419 tx timeout [ 1373.297351] (UME) [ 1373.306526] lowmem_reserve[]: [ 1373.329086] 78*8kB [ 1373.330766] 0 [ 1373.340668] (UME) [ 1373.343914] 0 [ 1373.347260] 67*16kB [ 1373.351278] 0 0 0 [ 1373.351292] Node 0 DMA: 5*4kB (ME) 6*8kB [ 1373.367355] (UME) [ 1373.368031] (M) [ 1373.383947] 58*32kB [ 1373.385490] 5*16kB [ 1373.387666] (UME) [ 1373.394968] (UME) 7*32kB (UME) 4*64kB (ME) 5*128kB (UME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10996kB [ 1373.395025] Node 0 DMA32: 1368*4kB (UME) 784*8kB (UME) 263*16kB (UME) 20*32kB (ME) 6*64kB (UM) 0*128kB 5*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18256kB [ 1373.416644] 46*64kB [ 1373.417353] Node 0 [ 1373.436633] (ME) [ 1373.437825] Normal: [ 1373.439970] 20*128kB [ 1373.444207] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1373.455240] (ME) [ 1373.467067] Node 1 Normal: 93*4kB (UME) 77*8kB (UME) 66*16kB (UME) 59*32kB (UME) 46*64kB (ME) 20*128kB (ME) 8*256kB (ME) 6*512kB (ME) 0*1024kB 2*2048kB (UM) 2*4096kB (U) = 26844kB [ 1373.467149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1373.467156] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1373.467166] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1373.496848] 8*256kB [ 1373.502897] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1373.516942] (ME) [ 1373.520890] warn_alloc_show_mem: 1 callbacks suppressed [ 1373.520893] Mem-Info: [ 1373.520915] active_anon:28824 inactive_anon:13161 isolated_anon:0 [ 1373.520915] active_file:34 inactive_file:3 isolated_file:0 [ 1373.520915] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1373.520915] slab_reclaimable:13088 slab_unreclaimable:118137 [ 1373.520915] mapped:52739 shmem:15123 pagetables:832 bounce:0 [ 1373.520915] free:13900 free_pcp:0 free_cma:0 [ 1373.520935] Node 0 active_anon:113820kB inactive_anon:36324kB active_file:8kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198776kB dirty:0kB writeback:0kB shmem:44108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1373.541152] 6*512kB [ 1373.547323] 15206 total pagecache pages [ 1373.549549] (ME) [ 1373.558166] 0 pages in swap cache [ 1373.558172] Swap cache stats: add 0, delete 0, find 0/0 [ 1373.558176] Free swap = 0kB [ 1373.558179] Total swap = 0kB [ 1373.558185] 2097051 pages RAM [ 1373.558189] 0 pages HighMem/MovableOnly [ 1373.558192] 363840 pages reserved [ 1373.558195] 0 pages cma reserved [ 1373.580737] Node 1 active_anon:1476kB inactive_anon:16320kB active_file:128kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12180kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1373.714127] Node 0 DMA free:10996kB min:204kB low:252kB high:300kB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1373.788486] 0*1024kB 2*2048kB (UM) 2*4096kB (U) = 26840kB [ 1373.803558] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1373.820707] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1373.860691] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1373.869558] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1373.870891] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1373.920674] 16180 total pagecache pages [ 1373.924681] 0 pages in swap cache [ 1373.928124] Swap cache stats: add 0, delete 0, find 0/0 [ 1373.934474] Node 0 DMA32 free:44568kB min:36200kB low:45248kB high:54296kB active_anon:113772kB inactive_anon:36324kB active_file:108kB inactive_file:1480kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:3108kB bounce:0kB free_pcp:496kB local_pcp:116kB free_cma:0kB [ 1373.970816] Free swap = 0kB [ 1373.973888] Total swap = 0kB [ 1373.976905] 2097051 pages RAM [ 1374.010708] 0 pages HighMem/MovableOnly [ 1374.014713] 363840 pages reserved [ 1374.018158] 0 pages cma reserved [ 1374.058557] Out of memory (oom_kill_allocating_task): Kill process 21817 (in:imklog) score 0 or sacrifice child [ 1374.069126] lowmem_reserve[]: 0 0 0 0 0 [ 1374.083560] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1374.102508] Killed process 21813 (rsyslogd) total-vm:254332kB, anon-rss:1076kB, file-rss:0kB, shmem-rss:0kB [ 1374.125953] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1374.142524] oom_reaper: reaped process 21813 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1374.145680] lowmem_reserve[]: 0 0 0 0 0 [ 1374.160453] kworker/u4:4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1374.172842] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1374.173385] Node 1 Normal free:26956kB min:53696kB low:67120kB high:80544kB active_anon:972kB inactive_anon:16320kB active_file:428kB inactive_file:368kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:212kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1374.185313] CPU: 0 PID: 22390 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 1374.216075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1374.220688] kworker/u4:4 cpuset= [ 1374.225439] Call Trace: [ 1374.225449] / [ 1374.228823] dump_stack+0x1b2/0x281 [ 1374.228838] warn_alloc.cold+0x96/0x1cc [ 1374.240805] ? zone_watermark_ok_safe+0x220/0x220 [ 1374.242436] mems_allowed=0-1 [ 1374.245660] __alloc_pages_nodemask+0x2127/0x2720 [ 1374.253607] ? lock_acquire+0x170/0x3f0 [ 1374.257589] ? lock_acquire+0x170/0x3f0 [ 1374.261563] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1374.266411] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1374.271870] ? __mutex_unlock_slowpath+0x75/0x770 [ 1374.275072] lowmem_reserve[]: [ 1374.276708] ? __mutex_lock+0x3aa/0x1310 [ 1374.276716] 0 [ 1374.279812] alloc_pages_current+0x155/0x260 [ 1374.283922] 0 [ 1374.285685] ion_page_pool_alloc+0x118/0x1b0 [ 1374.290058] 0 [ 1374.291852] ion_system_heap_allocate+0x133/0x8c0 [ 1374.291869] ? _raw_spin_unlock+0x29/0x40 [ 1374.291878] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1374.291887] ? ion_system_contig_heap_create+0x130/0x130 [ 1374.291898] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1374.291908] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1374.291920] ion_alloc+0x27a/0x810 [ 1374.291934] ? ion_dma_buf_release+0x40/0x40 [ 1374.291946] ? __might_fault+0x177/0x1b0 [ 1374.313596] 0 [ 1374.317491] ion_ioctl+0xea/0x1f0 [ 1374.335125] 0 [ 1374.335540] ? ion_query_heaps+0x360/0x360 [ 1374.341373] ? ion_query_heaps+0x360/0x360 [ 1374.341383] do_vfs_ioctl+0x75a/0xff0 [ 1374.341395] ? ioctl_preallocate+0x1a0/0x1a0 [ 1374.341404] ? lock_downgrade+0x740/0x740 [ 1374.341416] ? __fget+0x225/0x360 [ 1374.341425] ? do_vfs_ioctl+0xff0/0xff0 [ 1374.341434] ? security_file_ioctl+0x83/0xb0 [ 1374.341444] SyS_ioctl+0x7f/0xb0 [ 1374.341453] ? do_vfs_ioctl+0xff0/0xff0 [ 1374.355067] Node 0 [ 1374.355227] do_syscall_64+0x1d5/0x640 [ 1374.359004] DMA: [ 1374.363428] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1374.363437] RIP: 0033:0x465f69 [ 1374.363441] RSP: 002b:00007f2758795188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1374.363451] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1374.363456] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1374.363460] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1374.363465] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1374.363470] R13: 00007fff98c6ba8f R14: 00007f2758795300 R15: 0000000000022000 [ 1374.450619] CPU: 0 PID: 2848 Comm: kworker/u4:4 Not tainted 4.14.225-syzkaller #0 [ 1374.452440] 6*4kB [ 1374.458258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1374.458267] (UME) [ 1374.460441] Workqueue: events_unbound call_usermodehelper_exec_work [ 1374.475545] 7*8kB [ 1374.479534] Call Trace: [ 1374.479542] (UM) [ 1374.481686] dump_stack+0x1b2/0x281 [ 1374.481697] dump_header+0x178/0x82f [ 1374.481707] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1374.481715] ? ___ratelimit+0x2cd/0x530 [ 1374.481724] oom_kill_process.cold+0x10/0xb18 [ 1374.481734] ? lock_downgrade+0x740/0x740 [ 1374.481747] out_of_memory+0x2dc/0x1190 [ 1374.481759] ? oom_killer_disable+0x1c0/0x1c0 [ 1374.481767] ? mutex_trylock+0x152/0x1a0 [ 1374.481777] __alloc_pages_nodemask+0x23e1/0x2720 [ 1374.481791] ? deref_stack_reg+0x124/0x1a0 [ 1374.484691] 5*16kB [ 1374.486435] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1374.490044] (UME) [ 1374.493744] ? fs_reclaim_release+0xd0/0x110 [ 1374.493761] ? kmem_cache_alloc_node+0x38b/0x410 [ 1374.493772] copy_process.part.0+0x265/0x71c0 [ 1374.493783] ? __lock_acquire+0x5fc/0x3f20 [ 1374.493794] ? debug_object_activate+0x292/0x490 [ 1374.493800] ? trace_hardirqs_on+0x10/0x10 [ 1374.493807] ? static_obj+0x50/0x50 [ 1374.493820] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1374.493828] ? __cleanup_sighand+0x40/0x40 [ 1374.493840] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1374.493854] _do_fork+0x184/0xc80 [ 1374.493871] ? fork_idle+0x270/0x270 [ 1374.493885] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1374.502667] 6*32kB [ 1374.502962] ? process_one_work+0x6c4/0x14a0 [ 1374.507432] (ME) 4*64kB [ 1374.511582] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1374.511592] kernel_thread+0x2f/0x40 [ 1374.511601] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1374.511607] ? call_usermodehelper+0x80/0x80 [ 1374.511615] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1374.511624] process_one_work+0x793/0x14a0 [ 1374.511636] ? work_busy+0x320/0x320 [ 1374.511642] ? worker_thread+0x158/0xff0 [ 1374.511653] ? _raw_spin_unlock_irq+0x24/0x80 [ 1374.511663] worker_thread+0x5cc/0xff0 [ 1374.511677] ? rescuer_thread+0xc80/0xc80 [ 1374.516709] (ME) [ 1374.520128] kthread+0x30d/0x420 [ 1374.526486] 5*128kB [ 1374.529018] ? kthread_create_on_node+0xd0/0xd0 [ 1374.536895] (UME) [ 1374.540297] ret_from_fork+0x24/0x30 [ 1374.544661] 6*256kB [ 1374.556868] syz-executor.3: [ 1374.569164] (UME) [ 1374.589803] page allocation failure: order:0 [ 1374.600074] 2*512kB [ 1374.600545] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1374.602812] (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10976kB [ 1374.602838] Node 0 DMA32: 1378*4kB (UME) 820*8kB (UME) 268*16kB (UME) 22*32kB (ME) 13*64kB (UME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17896kB [ 1374.602895] Node 0 Normal: 0*4kB 0*8kB 0*16kB [ 1374.616165] (null) [ 1374.627322] 0*32kB [ 1374.634902] syz-executor.3 cpuset= [ 1374.640029] 0*64kB [ 1374.647363] / [ 1374.659071] 0*128kB [ 1374.670355] mems_allowed=0-1 [ 1374.682497] 0*256kB [ 1374.690964] CPU: 0 PID: 22390 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 1374.698415] 0*512kB [ 1374.701583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1374.701587] Call Trace: [ 1374.701607] dump_stack+0x1b2/0x281 [ 1374.701620] warn_alloc.cold+0x96/0x1cc [ 1374.701631] ? zone_watermark_ok_safe+0x220/0x220 [ 1374.701641] ? usleep_range+0x130/0x130 [ 1374.701653] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1374.709226] 0*1024kB [ 1374.722016] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1374.722026] ? run_timer_softirq+0x5a0/0x5a0 [ 1374.722042] __alloc_pages_nodemask+0x2127/0x2720 [ 1374.722056] ? lock_acquire+0x170/0x3f0 [ 1374.722070] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1374.722080] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1374.722097] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1374.722109] ? __mutex_lock+0x3aa/0x1310 [ 1374.722123] alloc_pages_current+0x155/0x260 [ 1374.722134] ion_page_pool_alloc+0x118/0x1b0 [ 1374.722144] ion_system_heap_allocate+0x133/0x8c0 [ 1374.722157] ? _raw_spin_unlock+0x29/0x40 [ 1374.733607] 0*2048kB [ 1374.734613] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1374.736820] 0*4096kB [ 1374.738526] ? ion_system_contig_heap_create+0x130/0x130 [ 1374.744612] = 0kB [ 1374.746233] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1374.758523] Node 1 [ 1374.765757] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1374.765771] ion_alloc+0x27a/0x810 [ 1374.765785] ? ion_dma_buf_release+0x40/0x40 [ 1374.765797] ? __might_fault+0x177/0x1b0 [ 1374.765808] ion_ioctl+0xea/0x1f0 [ 1374.765818] ? ion_query_heaps+0x360/0x360 [ 1374.765832] ? ion_query_heaps+0x360/0x360 [ 1374.765841] do_vfs_ioctl+0x75a/0xff0 [ 1374.765860] ? ioctl_preallocate+0x1a0/0x1a0 [ 1374.765869] ? lock_downgrade+0x740/0x740 [ 1374.765881] ? __fget+0x225/0x360 [ 1374.777610] Normal: [ 1374.780857] ? do_vfs_ioctl+0xff0/0xff0 [ 1374.780868] ? security_file_ioctl+0x83/0xb0 [ 1374.780877] SyS_ioctl+0x7f/0xb0 [ 1374.780885] ? do_vfs_ioctl+0xff0/0xff0 [ 1374.780896] do_syscall_64+0x1d5/0x640 [ 1374.780914] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1374.780922] RIP: 0033:0x465f69 [ 1374.780930] RSP: 002b:00007f2758795188 EFLAGS: 00000246 [ 1374.786746] 55*4kB [ 1374.789998] ORIG_RAX: 0000000000000010 [ 1374.798626] (UME) [ 1374.801773] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1374.801779] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1374.801784] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1374.801788] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1374.801794] R13: 00007fff98c6ba8f R14: 00007f2758795300 R15: 0000000000022000 [ 1374.818632] Mem-Info: [ 1374.824487] 45*8kB [ 1374.827609] active_anon:28549 inactive_anon:13161 isolated_anon:0 [ 1374.827609] active_file:39 inactive_file:38 isolated_file:0 [ 1374.827609] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1374.827609] slab_reclaimable:13074 slab_unreclaimable:118584 [ 1374.827609] mapped:52791 shmem:15123 pagetables:832 bounce:0 [ 1374.827609] free:13875 free_pcp:36 free_cma:0 [ 1374.831601] (ME) [ 1374.840403] Node 0 active_anon:113320kB inactive_anon:36324kB active_file:24kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198852kB dirty:0kB writeback:0kB shmem:44108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1374.850020] 44*16kB [ 1374.863222] Node 1 active_anon:876kB inactive_anon:16320kB active_file:132kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12312kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1374.874158] (UME) [ 1374.884648] Node 0 [ 1374.888794] 38*32kB [ 1374.889159] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1374.896965] (ME) [ 1374.916561] lowmem_reserve[]: [ 1374.925040] 29*64kB [ 1374.931698] 0 [ 1374.938228] (ME) [ 1374.939005] 2717 [ 1374.949215] 30*128kB [ 1374.953746] 2718 [ 1374.978850] (ME) [ 1374.985337] warn_alloc_show_mem: 1 callbacks suppressed [ 1374.985340] Mem-Info: [ 1375.007062] 13*256kB [ 1375.038130] 2718 [ 1375.087427] (ME) [ 1375.100781] active_anon:28513 inactive_anon:13161 isolated_anon:0 [ 1375.100781] active_file:15 inactive_file:16 isolated_file:0 [ 1375.100781] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1375.100781] slab_reclaimable:13074 slab_unreclaimable:118584 [ 1375.100781] mapped:52744 shmem:15123 pagetables:802 bounce:0 [ 1375.100781] free:14068 free_pcp:66 free_cma:0 [ 1375.124984] 7*512kB [ 1375.134457] 2718 [ 1375.147759] (ME) [ 1375.160264] Node 0 active_anon:113248kB inactive_anon:36324kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198776kB dirty:0kB writeback:0kB shmem:44108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1375.172901] 0*1024kB [ 1375.236641] 2*2048kB (UM) 2*4096kB (U) = 27396kB [ 1375.241465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1375.247287] Node 0 [ 1375.250301] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1375.250323] DMA32 free:17996kB min:36200kB low:45248kB high:54296kB active_anon:113200kB inactive_anon:36324kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7584kB pagetables:3080kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1375.258915] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1375.275424] Node 1 active_anon:804kB inactive_anon:16320kB active_file:52kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12200kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1375.306084] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1375.329932] lowmem_reserve[]: 0 0 0 0 0 [ 1375.338319] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1375.356734] 15154 total pagecache pages [ 1375.364998] lowmem_reserve[]: 0 0 0 0 0 [ 1375.373618] Node 1 Normal free:27496kB min:53696kB low:67120kB high:80544kB active_anon:804kB inactive_anon:16320kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:120kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1375.389400] 0 pages in swap cache [ 1375.401938] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1375.401962] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1375.401983] Node 0 DMA32 free:17996kB min:36200kB low:45248kB high:54296kB active_anon:113200kB inactive_anon:36324kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7584kB pagetables:3080kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1375.402004] lowmem_reserve[]: 0 0 0 0 0 [ 1375.402023] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1375.402047] lowmem_reserve[]: [ 1375.429317] Swap cache stats: add 0, delete 0, find 0/0 [ 1375.431760] lowmem_reserve[]: 0 0 0 0 0 [ 1375.431789] Node 0 DMA: 7*4kB [ 1375.455639] Free swap = 0kB [ 1375.469843] 0 [ 1375.517597] Total swap = 0kB [ 1375.519017] (UME) [ 1375.519439] 2097051 pages RAM [ 1375.522497] 7*8kB (UM) 5*16kB (UME) 6*32kB (ME) 4*64kB (ME) 5*128kB (UME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10980kB [ 1375.537312] 0 pages HighMem/MovableOnly [ 1375.549731] 363840 pages reserved [ 1375.549747] 0 0 0 0 [ 1375.555564] Node 1 Normal free:27496kB min:53696kB low:67120kB high:80544kB active_anon:804kB inactive_anon:16320kB active_file:52kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:120kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1375.565769] 0 pages cma reserved [ 1375.592400] Node 0 DMA32: 1407*4kB (UME) 830*8kB (UME) 269*16kB (UME) 22*32kB (ME) 13*64kB (UME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18108kB [ 1375.615350] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1375.628225] lowmem_reserve[]: 0 0 0 0 0 [ 1375.638698] Node 1 Normal: 54*4kB (ME) 45*8kB (ME) 43*16kB (ME) 39*32kB (UME) 29*64kB (ME) 31*128kB (UME) 14*256kB (UME) 7*512kB (ME) 1*1024kB (U) 1*2048kB (M) 2*4096kB (U) = 26768kB [ 1375.665280] Node 0 DMA: 6*4kB (UME) 7*8kB (UM) 4*16kB (ME) 6*32kB (ME) 4*64kB (ME) 5*128kB (UME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 1375.689568] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1375.698486] Node 0 DMA32: 1407*4kB (UME) 830*8kB (UME) 269*16kB (UME) 22*32kB (ME) 13*64kB (UME) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18108kB [ 1375.706037] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1375.720926] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1375.721555] syz-executor.4: [ 1375.741001] Node 1 Normal: 54*4kB (ME) 45*8kB (ME) 43*16kB (ME) 39*32kB (UME) 29*64kB (ME) 31*128kB (UME) 14*256kB (UME) 7*512kB (ME) 1*1024kB (U) 1*2048kB (M) 2*4096kB (U) = 26768kB [ 1375.746480] page allocation failure: order:0 [ 1375.769289] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1375.773552] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1375.773776] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1375.795195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1375.808730] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1375.808737] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1375.808742] 15154 total pagecache pages [ 1375.808751] 0 pages in swap cache [ 1375.808757] Swap cache stats: add 0, delete 0, find 0/0 [ 1375.808760] Free swap = 0kB [ 1375.808763] Total swap = 0kB [ 1375.808777] 2097051 pages RAM [ 1375.808785] 0 pages HighMem/MovableOnly [ 1375.824933] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1375.845651] 363840 pages reserved [ 1375.855025] (null) [ 1375.865431] 15154 total pagecache pages [ 1375.869407] 0 pages in swap cache [ 1375.870051] 0 pages cma reserved [ 1375.879312] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1375.884507] CPU: 1 PID: 22392 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 1375.892386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1375.901740] Call Trace: [ 1375.904335] dump_stack+0x1b2/0x281 [ 1375.907968] warn_alloc.cold+0x96/0x1cc [ 1375.911940] ? zone_watermark_ok_safe+0x220/0x220 [ 1375.916783] ? usleep_range+0x130/0x130 [ 1375.920753] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1375.925855] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1375.930868] ? run_timer_softirq+0x5a0/0x5a0 [ 1375.935293] __alloc_pages_nodemask+0x2127/0x2720 [ 1375.940140] ? lock_acquire+0x170/0x3f0 [ 1375.944117] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1375.948955] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1375.953454] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1375.958960] alloc_pages_current+0x155/0x260 [ 1375.963373] ion_page_pool_alloc+0x118/0x1b0 [ 1375.967785] ion_system_heap_allocate+0x133/0x8c0 [ 1375.972630] ? _raw_spin_unlock+0x29/0x40 [ 1375.976793] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1375.981737] ? ion_system_contig_heap_create+0x130/0x130 [ 1375.987183] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1375.992198] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1375.997044] ion_alloc+0x27a/0x810 [ 1376.000587] ? ion_dma_buf_release+0x40/0x40 [ 1376.004996] ? __might_fault+0x177/0x1b0 [ 1376.009079] ion_ioctl+0xea/0x1f0 [ 1376.012530] ? ion_query_heaps+0x360/0x360 [ 1376.016764] ? __alloc_fd+0x1be/0x490 [ 1376.020563] ? ion_query_heaps+0x360/0x360 [ 1376.022088] Swap cache stats: add 0, delete 0, find 0/0 [ 1376.024800] do_vfs_ioctl+0x75a/0xff0 [ 1376.030152] Free swap = 0kB [ 1376.033944] ? ioctl_preallocate+0x1a0/0x1a0 [ 1376.033954] ? lock_downgrade+0x740/0x740 [ 1376.033965] ? __fget+0x225/0x360 [ 1376.033974] ? do_vfs_ioctl+0xff0/0xff0 [ 1376.033983] ? security_file_ioctl+0x83/0xb0 [ 1376.033996] SyS_ioctl+0x7f/0xb0 [ 1376.036997] Total swap = 0kB [ 1376.041393] ? do_vfs_ioctl+0xff0/0xff0 [ 1376.041405] do_syscall_64+0x1d5/0x640 [ 1376.041421] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1376.041433] RIP: 0033:0x465f69 [ 1376.045579] 2097051 pages RAM [ 1376.049011] RSP: 002b:00007f5ba2c45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1376.053011] 0 pages HighMem/MovableOnly [ 1376.057357] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1376.057365] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1376.060745] 363840 pages reserved [ 1376.063729] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1376.063737] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1376.067710] 0 pages cma reserved [ 1376.071581] R13: 00007ffec1e0e6ff R14: 00007f5ba2c45300 R15: 0000000000022000 [ 1376.100747] Mem-Info: [ 1376.120105] Out of memory: Kill process 22386 (syz-executor.0) score 1005 or sacrifice child [ 1376.124145] active_anon:28513 inactive_anon:13161 isolated_anon:0 [ 1376.124145] active_file:14 inactive_file:17 isolated_file:1 [ 1376.124145] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1376.124145] slab_reclaimable:13060 slab_unreclaimable:118552 [ 1376.124145] mapped:52745 shmem:15123 pagetables:802 bounce:0 [ 1376.124145] free:25186 free_pcp:151 free_cma:0 [ 1376.129197] Killed process 22388 (syz-executor.0) total-vm:93252kB, anon-rss:2196kB, file-rss:34820kB, shmem-rss:0kB [ 1376.131262] Node 0 active_anon:113248kB inactive_anon:36324kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:198776kB dirty:0kB writeback:0kB shmem:44108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1376.200390] oom_reaper: reaped process 22388 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1376.240530] Node 1 active_anon:804kB inactive_anon:16320kB active_file:52kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12204kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1376.282658] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1376.309049] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1376.314313] Node 0 DMA32 free:21876kB min:36200kB low:45248kB high:54296kB active_anon:111072kB inactive_anon:36324kB active_file:4kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7552kB pagetables:2932kB bounce:0kB free_pcp:160kB local_pcp:4kB free_cma:0kB [ 1376.343201] lowmem_reserve[]: 0 0 0 0 0 [ 1376.347206] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1376.374197] lowmem_reserve[]: 0 0 0 0 0 [ 1376.378253] Node 1 Normal free:26748kB min:53696kB low:67120kB high:80544kB active_anon:804kB inactive_anon:16320kB active_file:48kB inactive_file:64kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:120kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1376.410484] lowmem_reserve[]: 0 0 0 0 0 [ 1376.414602] Node 0 DMA: 6*4kB (UME) 7*8kB (UM) 4*16kB (ME) 6*32kB (ME) 4*64kB (ME) 5*128kB (UME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 1376.430281] Node 0 DMA32: 1383*4kB (UME) 805*8kB (UME) 265*16kB (UME) 23*32kB (UME) 12*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17716kB [ 1376.435183] oom_reaper: reaped process 22395 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1376.444670] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1376.444722] Node 1 Normal: 53*4kB (ME) 45*8kB (ME) 42*16kB (ME) 37*32kB (ME) 30*64kB (ME) 30*128kB (ME) 13*256kB (ME) 8*512kB (UME) 1*1024kB (U) 1*2048kB (M) 2*4096kB (U) = 26876kB [ 1376.483056] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1376.492163] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1376.500822] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1376.509673] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1376.518326] 15141 total pagecache pages [ 1376.524903] 0 pages in swap cache [ 1376.528371] Swap cache stats: add 0, delete 0, find 0/0 [ 1376.533774] Free swap = 0kB [ 1376.536786] Total swap = 0kB [ 1376.539824] 2097051 pages RAM [ 1376.542969] 0 pages HighMem/MovableOnly [ 1376.547024] 363840 pages reserved [ 1376.550450] 0 pages cma reserved [ 1376.626938] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1376.713997] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1376.718808] CPU: 0 PID: 7968 Comm: syz-fuzzer Not tainted 4.14.225-syzkaller #0 [ 1376.726258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1376.735614] Call Trace: [ 1376.738236] dump_stack+0x1b2/0x281 [ 1376.741874] dump_header+0x178/0x82f [ 1376.745594] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1376.750700] ? ___ratelimit+0x2cd/0x530 [ 1376.754693] oom_kill_process.cold+0x10/0xb18 [ 1376.759205] out_of_memory+0xe3e/0x1190 [ 1376.760707] syz-executor.2: page allocation failure: order:0 [ 1376.763183] ? oom_killer_disable+0x1c0/0x1c0 [ 1376.763193] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1376.768976] ? mutex_trylock+0x152/0x1a0 [ 1376.782428] syz-executor.0: page allocation failure: order:0 [ 1376.784605] __alloc_pages_nodemask+0x23e1/0x2720 [ 1376.784626] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1376.790413] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1376.795257] alloc_pages_current+0x155/0x260 [ 1376.795270] filemap_fault+0xea3/0x1980 [ 1376.795286] ext4_filemap_fault+0x84/0xb0 [ 1376.795296] __do_fault+0xfa/0x380 [ 1376.795304] __handle_mm_fault+0x2497/0x4620 [ 1376.795313] ? vm_insert_page+0x7c0/0x7c0 [ 1376.795323] ? lock_downgrade+0x740/0x740 [ 1376.795342] handle_mm_fault+0x391/0x860 [ 1376.795354] __do_page_fault+0x549/0xad0 [ 1376.810697] (null) [ 1376.811695] ? spurious_fault+0x640/0x640 [ 1376.815645] syz-executor.2 cpuset= [ 1376.819782] ? do_page_fault+0x60/0x500 [ 1376.829750] (null) [ 1376.831818] ? page_fault+0x2f/0x50 [ 1376.831826] page_fault+0x45/0x50 [ 1376.831840] RIP: 0000:0x93f280 [ 1376.831845] RSP: 2e000:000000c00003df00 EFLAGS: 0043b6a0 [ 1376.850684] / [ 1376.862621] syz-executor.0 cpuset= [ 1376.878971] mems_allowed=0-1 [ 1376.886253] / mems_allowed=0-1 [ 1376.889462] CPU: 1 PID: 22388 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1376.897340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1376.906689] Call Trace: [ 1376.909278] dump_stack+0x1b2/0x281 [ 1376.912898] warn_alloc.cold+0x96/0x1cc [ 1376.916870] ? zone_watermark_ok_safe+0x220/0x220 [ 1376.921705] ? usleep_range+0x130/0x130 [ 1376.925680] ? try_to_free_pages+0x23f/0x6e0 [ 1376.930081] ? _find_next_bit+0xdb/0x100 [ 1376.934135] ? run_timer_softirq+0x5a0/0x5a0 [ 1376.938635] __alloc_pages_nodemask+0x2127/0x2720 [ 1376.943494] ? lock_acquire+0x170/0x3f0 [ 1376.947475] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1376.952317] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1376.956818] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1376.960668] Mem-Info: [ 1376.962283] alloc_pages_current+0x155/0x260 [ 1376.964693] active_anon:27954 inactive_anon:13161 isolated_anon:0 [ 1376.964693] active_file:22 inactive_file:20 isolated_file:0 [ 1376.964693] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1376.964693] slab_reclaimable:13060 slab_unreclaimable:118552 [ 1376.964693] mapped:52769 shmem:15123 pagetables:749 bounce:0 [ 1376.964693] free:13899 free_pcp:60 free_cma:0 [ 1376.969119] ion_page_pool_alloc+0x118/0x1b0 [ 1377.006770] ion_system_heap_allocate+0x133/0x8c0 [ 1377.011610] ? ion_alloc+0x187/0x810 [ 1377.015316] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1377.020765] ? ion_system_contig_heap_create+0x130/0x130 [ 1377.026218] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1377.031252] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1377.036095] ion_alloc+0x204/0x810 [ 1377.039630] ? ion_dma_buf_release+0x40/0x40 [ 1377.040686] Node 0 active_anon:111028kB inactive_anon:36324kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198776kB dirty:0kB writeback:0kB shmem:44108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1377.044033] ? __might_fault+0x177/0x1b0 [ 1377.075687] ion_ioctl+0xea/0x1f0 [ 1377.079138] ? ion_query_heaps+0x360/0x360 [ 1377.083369] ? __alloc_fd+0x1be/0x490 [ 1377.087161] ? ion_query_heaps+0x360/0x360 [ 1377.091388] do_vfs_ioctl+0x75a/0xff0 [ 1377.095181] ? ioctl_preallocate+0x1a0/0x1a0 [ 1377.099575] ? lock_downgrade+0x740/0x740 [ 1377.100673] Node 1 active_anon:788kB inactive_anon:16320kB active_file:80kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12300kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1377.103714] ? __fget+0x225/0x360 [ 1377.134247] ? do_vfs_ioctl+0xff0/0xff0 [ 1377.138211] ? security_file_ioctl+0x83/0xb0 [ 1377.142614] SyS_ioctl+0x7f/0xb0 [ 1377.145969] ? do_vfs_ioctl+0xff0/0xff0 [ 1377.149961] do_syscall_64+0x1d5/0x640 [ 1377.153849] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1377.159038] RIP: 0033:0x465f69 [ 1377.160673] Node 0 [ 1377.162228] RSP: 002b:00007f0a724bf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1377.164480] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1377.172162] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1377.172168] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1377.172173] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1377.172177] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1377.172182] R13: 00007fffce0e3c8f R14: 00007f0a724bf300 R15: 0000000000022000 [ 1377.182315] CPU: 1 PID: 22395 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1377.216917] Mem-Info: [ 1377.219644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1377.226996] lowmem_reserve[]: [ 1377.234225] Call Trace: [ 1377.234253] dump_stack+0x1b2/0x281 [ 1377.234272] warn_alloc.cold+0x96/0x1cc [ 1377.234285] ? zone_watermark_ok_safe+0x220/0x220 [ 1377.242244] active_anon:27954 inactive_anon:13161 isolated_anon:0 [ 1377.242244] active_file:17 inactive_file:17 isolated_file:0 [ 1377.242244] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1377.242244] slab_reclaimable:13060 slab_unreclaimable:118555 [ 1377.242244] mapped:52744 shmem:15123 pagetables:749 bounce:0 [ 1377.242244] free:13888 free_pcp:69 free_cma:0 [ 1377.244586] ? usleep_range+0x130/0x130 [ 1377.253978] 0 [ 1377.257915] ? try_to_free_pages+0x23f/0x6e0 [ 1377.260471] 2717 [ 1377.264109] ? _find_next_bit+0xdb/0x100 [ 1377.264120] ? run_timer_softirq+0x5a0/0x5a0 [ 1377.264136] __alloc_pages_nodemask+0x2127/0x2720 [ 1377.264153] ? lock_acquire+0x170/0x3f0 [ 1377.268168] Node 0 active_anon:111028kB inactive_anon:36324kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198776kB dirty:0kB writeback:0kB shmem:44108kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1377.272978] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1377.272991] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1377.273007] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1377.273036] alloc_pages_current+0x155/0x260 [ 1377.306482] 2718 [ 1377.310402] ion_page_pool_alloc+0x118/0x1b0 [ 1377.312204] 2718 [ 1377.316571] ion_system_heap_allocate+0x133/0x8c0 [ 1377.318615] 2718 [ 1377.322682] ? ion_alloc+0x187/0x810 [ 1377.322694] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1377.322703] ? ion_system_contig_heap_create+0x130/0x130 [ 1377.322720] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1377.322734] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1377.331967] ion_alloc+0x204/0x810 [ 1377.331983] ? ion_dma_buf_release+0x40/0x40 [ 1377.331998] ? __might_fault+0x177/0x1b0 [ 1377.335956] Node 0 [ 1377.363551] ion_ioctl+0xea/0x1f0 [ 1377.363563] ? ion_query_heaps+0x360/0x360 [ 1377.363574] ? do_vfs_ioctl+0x76/0xff0 [ 1377.363583] ? ion_query_heaps+0x360/0x360 [ 1377.363596] do_vfs_ioctl+0x75a/0xff0 [ 1377.368473] Node 1 active_anon:788kB inactive_anon:16320kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12200kB dirty:0kB writeback:0kB shmem:16384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1377.372927] ? ioctl_preallocate+0x1a0/0x1a0 [ 1377.372937] ? lock_downgrade+0x740/0x740 [ 1377.372950] ? __fget+0x225/0x360 [ 1377.372960] ? do_vfs_ioctl+0xff0/0xff0 [ 1377.378392] Node 0 [ 1377.382792] ? security_file_ioctl+0x83/0xb0 [ 1377.382802] SyS_ioctl+0x7f/0xb0 [ 1377.382810] ? do_vfs_ioctl+0xff0/0xff0 [ 1377.382826] do_syscall_64+0x1d5/0x640 [ 1377.384885] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1377.389268] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1377.391340] lowmem_reserve[]: [ 1377.396128] RIP: 0033:0x465f69 [ 1377.398162] 0 [ 1377.401857] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1377.401867] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1377.401871] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1377.401876] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1377.401881] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1377.401886] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1377.410959] DMA32 free:17972kB min:36200kB low:45248kB high:54296kB active_anon:110980kB inactive_anon:36324kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:2868kB bounce:0kB free_pcp:156kB local_pcp:124kB free_cma:0kB [ 1377.455921] 2717 [ 1377.457146] lowmem_reserve[]: 08:36:59 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) 08:36:59 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) [ 1377.550329] 2718 2718 2718 [ 1377.723101] Node 0 DMA32 free:48752kB min:36200kB low:45248kB high:54296kB active_anon:110980kB inactive_anon:36324kB active_file:108kB inactive_file:908kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:2868kB bounce:0kB free_pcp:600kB local_pcp:316kB free_cma:0kB [ 1377.787736] lowmem_reserve[]: 0 0 0 0 0 [ 1377.840683] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1377.913138] 0 0 0 0 0 [ 1377.915775] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1377.972240] lowmem_reserve[]: 0 0 0 0 0 [ 1377.985143] Node 1 Normal free:26496kB min:53696kB low:67120kB high:80544kB active_anon:888kB inactive_anon:16320kB active_file:3572kB inactive_file:3972kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:120kB bounce:0kB free_pcp:744kB local_pcp:584kB free_cma:0kB [ 1377.987032] lowmem_reserve[]: 0 0 0 0 0 [ 1378.042800] Node 1 Normal free:28404kB min:53696kB low:67120kB high:80544kB active_anon:888kB inactive_anon:16320kB active_file:1996kB inactive_file:2372kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:120kB bounce:0kB free_pcp:836kB local_pcp:176kB free_cma:0kB [ 1378.090456] lowmem_reserve[]: 0 0 0 0 0 [ 1378.094581] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1378.110120] Node 0 DMA: 6*4kB (UME) 7*8kB (UM) 4*16kB (ME) 6*32kB (ME) 4*64kB (ME) 5*128kB (UME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10960kB [ 1378.130195] lowmem_reserve[]: 0 0 0 0 0 [ 1378.130660] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1378.137864] Node 0 [ 1378.139327] CPU: 0 PID: 22413 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 1378.139333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1378.139338] Call Trace: [ 1378.139361] dump_stack+0x1b2/0x281 [ 1378.139375] warn_alloc.cold+0x96/0x1cc [ 1378.142406] DMA: [ 1378.149473] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1378.149486] ? zone_watermark_ok_safe+0x220/0x220 [ 1378.149510] __alloc_pages_nodemask+0x2127/0x2720 [ 1378.149525] ? lock_acquire+0x170/0x3f0 [ 1378.163061] 6*4kB [ 1378.165072] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1378.165092] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1378.165104] ? __mutex_unlock_slowpath+0x75/0x770 [ 1378.169164] (UME) [ 1378.171125] alloc_pages_current+0x155/0x260 [ 1378.171143] ion_page_pool_alloc+0x118/0x1b0 [ 1378.171155] ion_system_heap_allocate+0x133/0x8c0 [ 1378.171164] ? ion_alloc+0x187/0x810 [ 1378.171173] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1378.171183] ? ion_system_contig_heap_create+0x130/0x130 [ 1378.171193] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1378.171203] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1378.171214] ion_alloc+0x204/0x810 [ 1378.171227] ? ion_dma_buf_release+0x40/0x40 [ 1378.171239] ? __might_fault+0x177/0x1b0 [ 1378.177716] 7*8kB [ 1378.181106] ion_ioctl+0xea/0x1f0 [ 1378.181120] ? ion_query_heaps+0x360/0x360 [ 1378.181134] ? sock_ioctl+0x16c/0x4c0 [ 1378.181142] ? ion_query_heaps+0x360/0x360 [ 1378.181151] do_vfs_ioctl+0x75a/0xff0 [ 1378.181162] ? ioctl_preallocate+0x1a0/0x1a0 [ 1378.181171] ? lock_downgrade+0x740/0x740 [ 1378.181190] ? __fget+0x225/0x360 [ 1378.181199] ? do_vfs_ioctl+0xff0/0xff0 [ 1378.181217] ? security_file_ioctl+0x83/0xb0 [ 1378.181228] SyS_ioctl+0x7f/0xb0 [ 1378.181239] ? do_vfs_ioctl+0xff0/0xff0 [ 1378.188817] (UM) [ 1378.190076] do_syscall_64+0x1d5/0x640 [ 1378.190097] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1378.190106] RIP: 0033:0x465f69 [ 1378.190114] RSP: 002b:00007f2758795188 EFLAGS: 00000246 [ 1378.196973] 4*16kB [ 1378.197080] ORIG_RAX: 0000000000000010 [ 1378.208074] (ME) [ 1378.209509] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1378.209516] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1378.209521] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1378.209526] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1378.209532] R13: 00007fff98c6ba8f R14: 00007f2758795300 R15: 0000000000022000 [ 1378.211981] syz-executor.4: [ 1378.239460] 6*32kB [ 1378.248801] Node 0 [ 1378.278059] (ME) [ 1378.283864] page allocation failure: order:4 [ 1378.288420] 4*64kB [ 1378.290743] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1378.290752] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1378.290775] CPU: 0 PID: 22412 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 1378.290780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1378.290783] Call Trace: [ 1378.290803] dump_stack+0x1b2/0x281 [ 1378.298357] (ME) [ 1378.302691] warn_alloc.cold+0x96/0x1cc [ 1378.302704] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1378.302714] ? zone_watermark_ok_safe+0x220/0x220 [ 1378.302735] __alloc_pages_nodemask+0x2127/0x2720 [ 1378.302750] ? lock_acquire+0x170/0x3f0 [ 1378.302764] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1378.302780] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1378.302791] ? __mutex_unlock_slowpath+0x75/0x770 [ 1378.302806] alloc_pages_current+0x155/0x260 [ 1378.302821] ion_page_pool_alloc+0x118/0x1b0 [ 1378.302832] ion_system_heap_allocate+0x133/0x8c0 [ 1378.302843] ? ion_alloc+0x187/0x810 [ 1378.302852] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1378.302863] ? ion_system_contig_heap_create+0x130/0x130 [ 1378.302872] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1378.302882] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1378.302893] ion_alloc+0x204/0x810 [ 1378.302906] ? ion_dma_buf_release+0x40/0x40 [ 1378.306356] 5*128kB [ 1378.310237] ? __might_fault+0x177/0x1b0 [ 1378.310252] ion_ioctl+0xea/0x1f0 [ 1378.310263] ? ion_query_heaps+0x360/0x360 [ 1378.310278] ? __alloc_fd+0x1be/0x490 [ 1378.316347] (UME) [ 1378.321385] ? ion_query_heaps+0x360/0x360 [ 1378.321397] do_vfs_ioctl+0x75a/0xff0 [ 1378.321409] ? ioctl_preallocate+0x1a0/0x1a0 [ 1378.321418] ? lock_downgrade+0x740/0x740 [ 1378.321431] ? __fget+0x225/0x360 [ 1378.321439] ? do_vfs_ioctl+0xff0/0xff0 [ 1378.321449] ? security_file_ioctl+0x83/0xb0 [ 1378.321459] SyS_ioctl+0x7f/0xb0 [ 1378.324701] 6*256kB [ 1378.329993] ? do_vfs_ioctl+0xff0/0xff0 [ 1378.330005] do_syscall_64+0x1d5/0x640 [ 1378.330022] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1378.330032] RIP: 0033:0x465f69 [ 1378.336278] (UME) [ 1378.338269] RSP: 002b:00007f5ba2c45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1378.338281] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1378.338287] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1378.338292] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1378.338300] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1378.346256] 2*512kB [ 1378.352852] R13: 00007ffec1e0e6ff R14: 00007f5ba2c45300 R15: 0000000000022000 [ 1378.357628] DMA32: [ 1378.360304] (UE) [ 1378.368215] 1234*4kB [ 1378.376888] 3*1024kB [ 1378.383169] (UME) [ 1378.393102] (UME) [ 1378.404280] 736*8kB [ 1378.411171] 2*2048kB [ 1378.417473] (UME) [ 1378.422326] warn_alloc_show_mem: 1 callbacks suppressed [ 1378.422329] Mem-Info: [ 1378.424891] 264*16kB [ 1378.428508] active_anon:28204 inactive_anon:13161 isolated_anon:0 [ 1378.428508] active_file:21 inactive_file:41 isolated_file:19 [ 1378.428508] unevictable:0 dirty:23 writeback:0 unstable:0 [ 1378.428508] slab_reclaimable:13066 slab_unreclaimable:118174 [ 1378.428508] mapped:52781 shmem:15123 pagetables:876 bounce:0 [ 1378.428508] free:13850 free_pcp:0 free_cma:0 [ 1378.430552] (UME) [ 1378.434611] Node 0 active_anon:111804kB inactive_anon:36320kB active_file:28kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):76kB mapped:198812kB dirty:0kB writeback:0kB shmem:44104kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1378.434630] Node 1 active_anon:1012kB inactive_anon:16324kB active_file:56kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12312kB dirty:92kB writeback:0kB shmem:16388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1378.443467] 27*32kB [ 1378.444553] (UE) [ 1378.449355] (UME) [ 1378.453446] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1378.465967] 10*64kB [ 1378.483084] 0*4096kB [ 1378.490540] (UM) [ 1378.491746] = 10960kB [ 1378.497231] 0*128kB [ 1378.502344] lowmem_reserve[]: 0 [ 1378.524249] 0*256kB [ 1378.526422] Node 0 [ 1378.541906] 3*512kB [ 1378.543997] 2717 [ 1378.549844] (U) [ 1378.552170] DMA32: 1234*4kB (UME) 736*8kB (UME) 264*16kB (UME) 27*32kB (UME) 10*64kB (UM) 0*128kB 0*256kB 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18088kB [ 1378.552231] Node 0 Normal: [ 1378.562625] 0*1024kB [ 1378.564173] 2718 [ 1378.570051] 0*2048kB [ 1378.573784] 2718 2718 [ 1378.573794] Node 0 DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:111756kB inactive_anon:36320kB active_file:28kB inactive_file:160kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7712kB pagetables:3336kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1378.587061] 0*4096kB [ 1378.588680] 0*4kB [ 1378.611489] = 18088kB [ 1378.618724] lowmem_reserve[]: [ 1378.636967] Node 0 [ 1378.645646] 0*8kB [ 1378.650326] Normal: [ 1378.651084] 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1378.653531] 0*4kB [ 1378.655663] Node 1 [ 1378.664795] 0*8kB [ 1378.665886] 0 [ 1378.710768] Normal: [ 1378.729782] 0 [ 1378.774952] 0*16kB [ 1378.796390] 0 [ 1378.815913] 0*32kB [ 1378.835285] 0 [ 1378.837203] 0*64kB [ 1378.839597] 0 [ 1378.842129] 0*128kB [ 1378.877882] 219*4kB [ 1378.881121] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1378.881147] lowmem_reserve[]: [ 1378.883373] (UME) [ 1378.885521] 0 0 [ 1378.887889] 75*8kB [ 1378.901811] 0 [ 1378.906603] (UME) [ 1378.906815] 0 [ 1378.908623] 64*16kB [ 1378.917832] 0 [ 1378.919427] 0*256kB [ 1378.930663] 0*512kB [ 1378.959381] Node 1 [ 1378.960471] (UME) [ 1378.962315] Normal free:26432kB min:53696kB low:67120kB high:80544kB active_anon:1012kB inactive_anon:16324kB active_file:176kB inactive_file:332kB unevictable:0kB writepending:92kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:160kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1378.964437] 90*32kB [ 1378.966218] lowmem_reserve[]: [ 1378.968783] (UME) [ 1378.970566] 0 [ 1378.973291] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1378.973307] Node 1 Normal: 218*4kB (UME) 74*8kB (UME) 63*16kB [ 1378.996525] 0 [ 1379.008473] 35*64kB [ 1379.010393] 0 [ 1379.015371] (UME) 24*128kB (UME) 25*256kB (UME) 19*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 26820kB [ 1379.015417] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1379.015423] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1379.015430] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1379.015436] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1379.015440] 15177 total pagecache pages [ 1379.015450] 0 pages in swap cache [ 1379.015454] Swap cache stats: add 0, delete 0, find 0/0 [ 1379.015458] Free swap = 0kB [ 1379.015460] Total swap = 0kB [ 1379.015466] 2097051 pages RAM [ 1379.015468] 0 pages HighMem/MovableOnly [ 1379.015471] 363840 pages reserved [ 1379.015473] 0 pages cma reserved [ 1379.015480] Out of memory (oom_kill_allocating_task): Kill process 7968 (syz-fuzzer) score 0 or sacrifice child [ 1379.015543] Killed process 21277 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1379.026008] oom_reaper: reaped process 21277 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1379.038106] 0 [ 1379.071913] (UME) 89*32kB (UME) 34*64kB (UME) 25*128kB (UME) 25*256kB (UME) 19*512kB (UME) 0*1024kB 0*2048kB 0*4096kB = 26824kB [ 1379.071969] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1379.071975] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1379.071982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1379.071989] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1379.071993] 15156 total pagecache pages [ 1379.072003] 0 pages in swap cache [ 1379.072008] Swap cache stats: add 0, delete 0, find 0/0 [ 1379.072012] Free swap = 0kB [ 1379.072016] Total swap = 0kB [ 1379.072022] 2097051 pages RAM [ 1379.072026] 0 pages HighMem/MovableOnly [ 1379.072029] 363840 pages reserved [ 1379.072033] 0 pages cma reserved [ 1379.454966] 0 [ 1379.505377] Node 0 DMA: 6*4kB (UME) 9*8kB (UM) 4*16kB (ME) 6*32kB (ME) 4*64kB (ME) 5*128kB (UME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10976kB [ 1379.546580] Node 0 DMA32: 572*4kB (UME) 2728*8kB (UME) 1973*16kB (UME) 426*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 69312kB [ 1379.630686] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1379.689709] Node 1 Normal: 2*4kB (UE) 1480*8kB (UME) 1444*16kB (UME) 1514*32kB (UME) 33*64kB (ME) 24*128kB (UME) 10*256kB (UME) 5*512kB (ME) 0*1024kB 26*2048kB (U) 14*4096kB (U) = 204296kB [ 1379.765981] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1379.807403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1379.835147] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1379.872088] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1379.909685] 15902 total pagecache pages [ 1379.913212] rsyslogd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1379.922607] 0 pages in swap cache [ 1379.943057] Swap cache stats: add 0, delete 0, find 0/0 [ 1379.958423] Free swap = 0kB [ 1379.971987] rsyslogd cpuset=/ mems_allowed=0-1 [ 1379.976609] CPU: 0 PID: 22416 Comm: rsyslogd Not tainted 4.14.225-syzkaller #0 [ 1379.977497] Total swap = 0kB [ 1379.983958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1379.983963] Call Trace: [ 1379.983981] dump_stack+0x1b2/0x281 [ 1379.983993] dump_header+0x178/0x82f [ 1379.984003] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1379.984012] ? ___ratelimit+0x2cd/0x530 [ 1379.984020] oom_kill_process.cold+0x10/0xb18 [ 1379.984036] out_of_memory+0xe3e/0x1190 [ 1379.984048] ? oom_killer_disable+0x1c0/0x1c0 [ 1379.984055] ? mutex_trylock+0x152/0x1a0 [ 1379.984065] __alloc_pages_nodemask+0x23e1/0x2720 [ 1379.984086] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1379.984107] alloc_pages_current+0x155/0x260 [ 1379.984117] filemap_fault+0xea3/0x1980 [ 1379.984135] ext4_filemap_fault+0x84/0xb0 [ 1379.984145] __do_fault+0xfa/0x380 [ 1379.984155] __handle_mm_fault+0x2497/0x4620 [ 1379.984165] ? vm_insert_page+0x7c0/0x7c0 [ 1379.984175] ? vfs_statx_fd+0x6d/0xd0 [ 1379.984194] handle_mm_fault+0x391/0x860 [ 1379.984208] __do_page_fault+0x549/0xad0 [ 1379.984219] ? spurious_fault+0x640/0x640 [ 1379.984228] ? do_page_fault+0x60/0x500 [ 1379.984241] ? page_fault+0x2f/0x50 [ 1380.091121] page_fault+0x45/0x50 [ 1380.094572] RIP: 27c56170:0x801 [ 1380.097849] RSP: 0009:0000000000000000 EFLAGS: 559f471d1ed1 [ 1380.099393] 2097051 pages RAM [ 1380.109045] 0 pages HighMem/MovableOnly [ 1380.141163] 363840 pages reserved [ 1380.144643] 0 pages cma reserved [ 1380.146974] Mem-Info: [ 1380.194254] active_anon:27987 inactive_anon:13161 isolated_anon:0 [ 1380.194254] active_file:40 inactive_file:1 isolated_file:3 [ 1380.194254] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1380.194254] slab_reclaimable:13073 slab_unreclaimable:118025 [ 1380.194254] mapped:52803 shmem:15123 pagetables:761 bounce:0 [ 1380.194254] free:24217 free_pcp:518 free_cma:0 [ 1380.280734] Node 0 active_anon:111028kB inactive_anon:36320kB active_file:64kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:198796kB dirty:0kB writeback:0kB shmem:44104kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1380.432010] Node 1 active_anon:920kB inactive_anon:16324kB active_file:396kB inactive_file:560kB unevictable:0kB isolated(anon):0kB isolated(file):112kB mapped:12816kB dirty:0kB writeback:0kB shmem:16388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1380.472715] Node 0 DMA free:11016kB min:204kB low:252kB high:300kB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1380.503880] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1380.508950] Node 0 DMA32 free:19652kB min:36200kB low:45248kB high:54296kB active_anon:110980kB inactive_anon:36320kB active_file:12kB inactive_file:260kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7584kB pagetables:2896kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 1380.537950] lowmem_reserve[]: 0 0 0 0 0 [ 1380.542035] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1380.567827] lowmem_reserve[]: 0 0 0 0 0 [ 1380.571910] Node 1 Normal free:44308kB min:53696kB low:67120kB high:80544kB active_anon:920kB inactive_anon:16324kB active_file:316kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:140kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1380.602178] lowmem_reserve[]: 0 0 0 0 0 [ 1380.606210] Node 0 DMA: 7*4kB (UME) 10*8kB (UM) 7*16kB (UME) 6*32kB (ME) 4*64kB (ME) 5*128kB (UME) 6*256kB (UME) 2*512kB (UE) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11036kB [ 1380.622287] Node 0 DMA32: 1314*4kB (UME) 765*8kB (UME) 248*16kB (UME) 130*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19504kB [ 1380.636550] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1380.647285] Node 1 Normal: 41*4kB (UM) 12*8kB (UM) 7*16kB (UM) 1361*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43924kB [ 1380.660565] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1380.669445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1380.678042] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1380.688075] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1380.696737] 15187 total pagecache pages [ 1380.700756] 0 pages in swap cache [ 1380.704197] Swap cache stats: add 0, delete 0, find 0/0 [ 1380.709544] Free swap = 0kB [ 1380.712610] Total swap = 0kB [ 1380.715624] 2097051 pages RAM [ 1380.718716] 0 pages HighMem/MovableOnly [ 1380.722904] 363840 pages reserved [ 1380.726352] 0 pages cma reserved [ 1380.729718] Out of memory (oom_kill_allocating_task): Kill process 22416 (rsyslogd) score 0 or sacrifice child [ 1380.739919] Killed process 22416 (rsyslogd) total-vm:960kB, anon-rss:4kB, file-rss:0kB, shmem-rss:0kB [ 1380.749800] oom_reaper: reaped process 22416 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1382.289334] oom_reaper: reaped process 22412 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1382.322820] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1382.339519] in:imklog cpuset=/ mems_allowed=0-1 [ 1382.339657] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1382.348102] CPU: 0 PID: 22420 Comm: in:imklog Not tainted 4.14.225-syzkaller #0 [ 1382.356272] syz-executor.2 cpuset= [ 1382.363669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1382.363674] Call Trace: [ 1382.363696] dump_stack+0x1b2/0x281 [ 1382.363708] dump_header+0x178/0x82f [ 1382.363719] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1382.363741] ? ___ratelimit+0x2cd/0x530 [ 1382.367260] / [ 1382.376879] oom_kill_process.cold+0x10/0xb18 [ 1382.379493] mems_allowed=0-1 [ 1382.383069] out_of_memory+0xe3e/0x1190 [ 1382.383085] ? oom_killer_disable+0x1c0/0x1c0 [ 1382.413543] ? mutex_trylock+0x152/0x1a0 [ 1382.417603] __alloc_pages_nodemask+0x23e1/0x2720 [ 1382.422458] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1382.427333] alloc_pages_current+0x155/0x260 [ 1382.431749] filemap_fault+0xea3/0x1980 [ 1382.435730] ext4_filemap_fault+0x84/0xb0 [ 1382.439882] __do_fault+0xfa/0x380 [ 1382.443426] __handle_mm_fault+0x2497/0x4620 [ 1382.447831] ? vm_insert_page+0x7c0/0x7c0 [ 1382.451974] ? lock_downgrade+0x740/0x740 [ 1382.456162] handle_mm_fault+0x391/0x860 [ 1382.460238] __do_page_fault+0x549/0xad0 [ 1382.464307] ? spurious_fault+0x640/0x640 [ 1382.468456] ? do_page_fault+0x60/0x500 [ 1382.472452] ? page_fault+0x2f/0x50 [ 1382.476078] page_fault+0x45/0x50 [ 1382.479545] RIP: 1fa0:0x1f9f [ 1382.482552] RSP: 0000:000055de129739d0 EFLAGS: 7f19b9141da0 [ 1382.482579] CPU: 1 PID: 22395 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1382.496166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1382.505523] Call Trace: [ 1382.508120] dump_stack+0x1b2/0x281 [ 1382.511756] warn_alloc.cold+0x96/0x1cc [ 1382.512875] Mem-Info: [ 1382.515757] ? zone_watermark_ok_safe+0x220/0x220 [ 1382.518164] active_anon:28210 inactive_anon:13161 isolated_anon:0 [ 1382.518164] active_file:21 inactive_file:2 isolated_file:0 [ 1382.518164] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1382.518164] slab_reclaimable:13094 slab_unreclaimable:118366 [ 1382.518164] mapped:52863 shmem:15123 pagetables:761 bounce:0 [ 1382.518164] free:13880 free_pcp:0 free_cma:0 [ 1382.523006] __alloc_pages_nodemask+0x2127/0x2720 [ 1382.523022] ? lock_acquire+0x170/0x3f0 [ 1382.523037] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1382.523052] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1382.523064] ? __mutex_unlock_slowpath+0x75/0x770 [ 1382.523089] ? policy_node+0x13/0x110 [ 1382.584189] alloc_pages_current+0x155/0x260 [ 1382.588609] ion_page_pool_alloc+0x118/0x1b0 [ 1382.593028] ion_system_heap_allocate+0x133/0x8c0 [ 1382.597968] ? _raw_spin_unlock+0x29/0x40 [ 1382.602119] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1382.607050] ? ion_system_contig_heap_create+0x130/0x130 [ 1382.612507] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1382.617532] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1382.622385] ion_alloc+0x27a/0x810 [ 1382.625934] ? ion_dma_buf_release+0x40/0x40 [ 1382.630157] Node 0 active_anon:111664kB inactive_anon:36320kB active_file:64kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198884kB dirty:0kB writeback:0kB shmem:44104kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1382.630346] ? __might_fault+0x177/0x1b0 [ 1382.662090] ion_ioctl+0xea/0x1f0 [ 1382.665553] ? ion_query_heaps+0x360/0x360 [ 1382.666273] syz-executor.4: page allocation failure: order:0 [ 1382.669791] ? do_vfs_ioctl+0x76/0xff0 [ 1382.669804] ? ion_query_heaps+0x360/0x360 [ 1382.679961] Node 1 active_anon:1176kB inactive_anon:16324kB active_file:20kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12568kB dirty:0kB writeback:0kB shmem:16388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1382.683692] do_vfs_ioctl+0x75a/0xff0 [ 1382.683705] ? ioctl_preallocate+0x1a0/0x1a0 [ 1382.683714] ? lock_downgrade+0x740/0x740 [ 1382.683726] ? __fget+0x225/0x360 [ 1382.683735] ? do_vfs_ioctl+0xff0/0xff0 [ 1382.683745] ? security_file_ioctl+0x83/0xb0 [ 1382.683754] SyS_ioctl+0x7f/0xb0 [ 1382.683762] ? do_vfs_ioctl+0xff0/0xff0 [ 1382.683773] do_syscall_64+0x1d5/0x640 [ 1382.683798] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1382.683806] RIP: 0033:0x465f69 [ 1382.683811] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1382.683821] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1382.683830] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1382.721318] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1382.723227] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1382.726665] (null) [ 1382.730619] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1382.730624] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1382.736327] warn_alloc_show_mem: 1 callbacks suppressed [ 1382.736331] Mem-Info: [ 1382.751317] syz-executor.4 cpuset= [ 1382.760395] active_anon:28210 inactive_anon:13161 isolated_anon:0 [ 1382.760395] active_file:21 inactive_file:2 isolated_file:0 [ 1382.760395] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1382.760395] slab_reclaimable:13094 slab_unreclaimable:118366 [ 1382.760395] mapped:52863 shmem:15123 pagetables:761 bounce:0 [ 1382.760395] free:13880 free_pcp:0 free_cma:0 [ 1382.769745] / [ 1382.772170] Node 0 active_anon:111664kB inactive_anon:36320kB active_file:64kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198884kB dirty:0kB writeback:0kB shmem:44104kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1382.777309] Node 0 [ 1382.804558] Node 1 active_anon:1176kB inactive_anon:16324kB active_file:20kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12568kB dirty:0kB writeback:0kB shmem:16388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1382.812000] mems_allowed=0-1 [ 1382.824210] Node 0 [ 1382.855586] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1382.898518] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1382.914537] CPU: 0 PID: 22412 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 1382.931253] lowmem_reserve[]: [ 1382.942776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1382.942780] Call Trace: [ 1382.942803] dump_stack+0x1b2/0x281 [ 1382.942816] warn_alloc.cold+0x96/0x1cc [ 1382.942832] ? zone_watermark_ok_safe+0x220/0x220 [ 1382.968477] 0 [ 1382.976322] ? usleep_range+0x130/0x130 [ 1382.976331] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1382.976342] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1382.976352] ? run_timer_softirq+0x5a0/0x5a0 [ 1382.976368] __alloc_pages_nodemask+0x2127/0x2720 [ 1382.979456] 2717 [ 1382.988821] ? lock_acquire+0x170/0x3f0 [ 1382.988837] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1382.988848] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1382.988870] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1382.991457] 2718 [ 1382.995059] alloc_pages_current+0x155/0x260 [ 1382.998998] 2718 [ 1383.003855] ion_page_pool_alloc+0x118/0x1b0 [ 1383.003866] ion_system_heap_allocate+0x133/0x8c0 [ 1383.003876] ? ion_alloc+0x187/0x810 [ 1383.003889] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1383.005671] 2718 [ 1383.009641] ? ion_system_contig_heap_create+0x130/0x130 [ 1383.019731] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1383.024147] Node 0 [ 1383.028951] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1383.031033] DMA32 free:17940kB min:36200kB low:45248kB high:54296kB active_anon:111616kB inactive_anon:36320kB active_file:56kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:2912kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1383.034966] ion_alloc+0x204/0x810 [ 1383.039782] lowmem_reserve[]: [ 1383.044277] ? ion_dma_buf_release+0x40/0x40 [ 1383.044289] ? __might_fault+0x177/0x1b0 [ 1383.044301] ion_ioctl+0xea/0x1f0 [ 1383.044312] ? ion_query_heaps+0x360/0x360 [ 1383.049778] 0 [ 1383.051842] ? __alloc_fd+0x1be/0x490 [ 1383.051854] ? ion_query_heaps+0x360/0x360 [ 1383.051864] do_vfs_ioctl+0x75a/0xff0 [ 1383.051879] ? ioctl_preallocate+0x1a0/0x1a0 [ 1383.056279] 0 [ 1383.058343] ? lock_downgrade+0x740/0x740 [ 1383.062763] 0 [ 1383.067570] ? __fget+0x225/0x360 [ 1383.071292] 0 [ 1383.076711] ? do_vfs_ioctl+0xff0/0xff0 [ 1383.078751] 0 [ 1383.084196] ? security_file_ioctl+0x83/0xb0 [ 1383.084206] SyS_ioctl+0x7f/0xb0 [ 1383.084214] ? do_vfs_ioctl+0xff0/0xff0 [ 1383.084226] do_syscall_64+0x1d5/0x640 [ 1383.084243] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1383.091482] RIP: 0033:0x465f69 [ 1383.091486] RSP: 002b:00007f5ba2c45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1383.091495] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1383.091500] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1383.091504] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1383.091509] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1383.091514] R13: 00007ffec1e0e6ff R14: 00007f5ba2c45300 R15: 0000000000022000 [ 1383.095228] lowmem_reserve[]: [ 1383.097395] Node 0 [ 1383.126752] 0 [ 1383.148861] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1383.150695] 2717 [ 1383.164653] lowmem_reserve[]: [ 1383.167103] 2718 [ 1383.167684] 0 [ 1383.171893] 2718 2718 [ 1383.171904] Node 0 DMA32 free:18232kB min:36200kB low:45248kB high:54296kB active_anon:111524kB inactive_anon:36320kB active_file:60kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:2912kB bounce:0kB free_pcp:56kB local_pcp:44kB free_cma:0kB [ 1383.171925] lowmem_reserve[]: 0 0 0 0 0 [ 1383.171944] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1383.171966] lowmem_reserve[]: [ 1383.185597] 0 [ 1383.202893] 0 [ 1383.220519] 0 [ 1383.236335] 0 [ 1383.249674] 0 [ 1383.264575] 0 [ 1383.293570] 0 [ 1383.306580] 0 [ 1383.370469] 0 [ 1383.380596] Node 1 Normal free:27076kB min:53696kB low:67120kB high:80544kB active_anon:1196kB inactive_anon:16324kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1383.536549] Node 1 Normal free:53276kB min:53696kB low:67120kB high:80544kB active_anon:1196kB inactive_anon:16324kB active_file:3324kB inactive_file:2432kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:124kB bounce:0kB free_pcp:1152kB local_pcp:524kB free_cma:0kB [ 1383.556785] lowmem_reserve[]: [ 1383.566808] lowmem_reserve[]: 0 0 0 0 0 [ 1383.574002] Node 0 DMA: 5*4kB (ME) 6*8kB (M) 5*16kB (UME) 6*32kB (ME) 4*64kB (ME) 3*128kB (ME) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10964kB [ 1383.579722] 0 [ 1383.590088] Node 0 DMA32: 1604*4kB (UME) 1516*8kB (UME) 554*16kB (UME) 292*32kB (UME) 245*64kB (UM) 11*128kB (UM) 6*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 56400kB [ 1383.640443] 0 0 0 0 [ 1383.647765] Node 0 DMA: 5*4kB (ME) 6*8kB (M) 5*16kB (UME) 6*32kB (ME) 4*64kB (ME) 3*128kB (ME) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10964kB [ 1383.660671] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1383.663581] Node 0 DMA32: 1825*4kB (UME) 1455*8kB (UME) 910*16kB (UME) 513*32kB (UME) 486*64kB (UM) 42*128kB (UM) 11*256kB (UM) 4*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 91260kB 08:37:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) [ 1383.685856] Node 1 Normal: 199*4kB (UME) 121*8kB (UME) 64*16kB (UM) 320*32kB (UME) 8*64kB (UME) 3*128kB (UE) 2*256kB (ME) 4*512kB (UE) 37*1024kB (UE) 2*2048kB (ME) 3*4096kB (U) = 70756kB [ 1383.771548] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1383.788307] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1383.802627] Node 1 Normal: 438*4kB (UME) 180*8kB (UME) 123*16kB (UM) 376*32kB (UME) 61*64kB (UME) 7*128kB (UME) 4*256kB (UME) 4*512kB (UE) 38*1024kB (UE) 5*2048kB (UME) 3*4096kB (U) = 86504kB [ 1383.806004] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1383.820129] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1383.820137] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1383.820143] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1383.820148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1383.820152] 16615 total pagecache pages [ 1383.820161] 0 pages in swap cache [ 1383.820167] Swap cache stats: add 0, delete 0, find 0/0 [ 1383.820170] Free swap = 0kB [ 1383.820173] Total swap = 0kB [ 1383.820179] 2097051 pages RAM [ 1383.820182] 0 pages HighMem/MovableOnly [ 1383.820184] 363840 pages reserved [ 1383.820187] 0 pages cma reserved [ 1383.820194] Out of memory (oom_kill_allocating_task): Kill process 22420 (in:imklog) score 0 or sacrifice child [ 1383.820240] Killed process 22418 (rsyslogd) total-vm:254332kB, anon-rss:752kB, file-rss:4kB, shmem-rss:0kB [ 1383.821936] oom_reaper: reaped process 22418 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1383.854993] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1384.033355] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1384.042583] 16176 total pagecache pages [ 1384.046728] 0 pages in swap cache [ 1384.050245] Swap cache stats: add 0, delete 0, find 0/0 [ 1384.065181] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1384.078884] Free swap = 0kB [ 1384.082026] Total swap = 0kB [ 1384.085094] 2097051 pages RAM [ 1384.088244] systemd-journal cpuset=/ mems_allowed=0-1 [ 1384.093533] 0 pages HighMem/MovableOnly [ 1384.097556] 363840 pages reserved [ 1384.101122] CPU: 1 PID: 22008 Comm: systemd-journal Not tainted 4.14.225-syzkaller #0 [ 1384.109109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1384.118462] Call Trace: [ 1384.121138] dump_stack+0x1b2/0x281 [ 1384.124767] dump_header+0x178/0x82f [ 1384.128471] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1384.133584] ? ___ratelimit+0x2cd/0x530 [ 1384.137558] oom_kill_process.cold+0x10/0xb18 [ 1384.142056] out_of_memory+0xe3e/0x1190 [ 1384.146046] ? oom_killer_disable+0x1c0/0x1c0 [ 1384.150539] ? mutex_trylock+0x152/0x1a0 [ 1384.154600] __alloc_pages_nodemask+0x23e1/0x2720 [ 1384.159473] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1384.164327] ? cache_grow_begin+0x41/0x630 [ 1384.168566] cache_grow_begin+0x91/0x630 [ 1384.172644] ? cache_grow_begin+0x91/0x630 [ 1384.176880] fallback_alloc+0x207/0x2c0 [ 1384.180852] kmem_cache_alloc+0x1e5/0x3c0 [ 1384.185209] getname_flags+0xc8/0x550 [ 1384.189017] user_path_at_empty+0x2a/0x50 [ 1384.193160] SyS_faccessat+0x21b/0x680 [ 1384.197058] ? SyS_fallocate+0x80/0x80 [ 1384.200946] ? do_syscall_64+0x4c/0x640 [ 1384.205007] ? SyS_faccessat+0x680/0x680 [ 1384.209148] do_syscall_64+0x1d5/0x640 [ 1384.213054] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1384.218505] RIP: 0033:0x7f1bacb9d9c7 [ 1384.222203] RSP: 002b:00007ffd5ce24908 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1384.229930] RAX: ffffffffffffffda RBX: 00007ffd5ce27820 RCX: 00007f1bacb9d9c7 [ 1384.237199] RDX: 00007f1bad60ea00 RSI: 0000000000000000 RDI: 0000557d6ddad9a3 [ 1384.244472] RBP: 00007ffd5ce24940 R08: 0000000000000000 R09: 0000000000000000 [ 1384.251835] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1384.259121] R13: 0000000000000000 R14: 00007ffd5ce27820 R15: 00007ffd5ce24e30 [ 1384.272964] 0 pages cma reserved [ 1384.296199] Mem-Info: [ 1384.298714] active_anon:28030 inactive_anon:13160 isolated_anon:0 [ 1384.298714] active_file:166 inactive_file:211 isolated_file:0 [ 1384.298714] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1384.298714] slab_reclaimable:13132 slab_unreclaimable:118076 [ 1384.298714] mapped:53209 shmem:15123 pagetables:785 bounce:0 [ 1384.298714] free:13770 free_pcp:136 free_cma:0 [ 1384.336979] Node 0 active_anon:111268kB inactive_anon:36316kB active_file:72kB inactive_file:104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198864kB dirty:0kB writeback:0kB shmem:44104kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1384.369164] Node 1 active_anon:852kB inactive_anon:16324kB active_file:284kB inactive_file:368kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13172kB dirty:0kB writeback:0kB shmem:16388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1384.408443] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1384.425255] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1384.446528] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1384.456133] syz-executor.4: page allocation failure: order:4 [ 1384.477250] syz-executor.0 cpuset= [ 1384.483140] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1384.483550] (null) [ 1384.486712] (null) [ 1384.498229] / mems_allowed=0-1 [ 1384.501494] CPU: 1 PID: 22425 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1384.509393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1384.518757] Call Trace: [ 1384.520494] syz-executor.2 cpuset= [ 1384.521353] dump_stack+0x1b2/0x281 [ 1384.521367] warn_alloc.cold+0x96/0x1cc [ 1384.521379] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1384.521389] ? zone_watermark_ok_safe+0x220/0x220 [ 1384.521419] __alloc_pages_nodemask+0x2127/0x2720 [ 1384.521436] ? lock_acquire+0x170/0x3f0 [ 1384.521450] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1384.521466] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1384.521478] ? __mutex_unlock_slowpath+0x75/0x770 [ 1384.565328] / mems_allowed=0-1 [ 1384.566346] alloc_pages_current+0x155/0x260 [ 1384.566363] ion_page_pool_alloc+0x118/0x1b0 [ 1384.578343] ion_system_heap_allocate+0x133/0x8c0 [ 1384.583198] ? ion_alloc+0x187/0x810 [ 1384.586919] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1384.592377] ? ion_system_contig_heap_create+0x130/0x130 [ 1384.597845] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1384.602870] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1384.607732] ion_alloc+0x204/0x810 [ 1384.611315] ? ion_dma_buf_release+0x40/0x40 [ 1384.615735] ? __might_fault+0x177/0x1b0 [ 1384.619804] ion_ioctl+0xea/0x1f0 [ 1384.623259] ? ion_query_heaps+0x360/0x360 [ 1384.627496] ? retint_kernel+0x2d/0x2d [ 1384.631389] ? ion_query_heaps+0x360/0x360 [ 1384.635633] do_vfs_ioctl+0x75a/0xff0 [ 1384.639441] ? ioctl_preallocate+0x1a0/0x1a0 [ 1384.643855] ? retint_kernel+0x2d/0x2d [ 1384.647748] ? do_vfs_ioctl+0xff0/0xff0 [ 1384.651729] ? __fdget+0x18d/0x1f0 [ 1384.655270] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 1384.660129] ? security_file_ioctl+0x83/0xb0 [ 1384.664540] SyS_ioctl+0x7f/0xb0 [ 1384.667904] ? do_vfs_ioctl+0xff0/0xff0 [ 1384.671881] do_syscall_64+0x1d5/0x640 [ 1384.675779] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1384.680968] RIP: 0033:0x465f69 [ 1384.684153] RSP: 002b:00007f0a724bf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1384.691863] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1384.699131] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1384.706407] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1384.713680] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1384.720953] R13: 00007fffce0e3c8f R14: 00007f0a724bf300 R15: 0000000000022000 [ 1384.728347] CPU: 0 PID: 22395 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1384.730506] syz-executor.4 cpuset= [ 1384.736256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1384.736260] Call Trace: [ 1384.736283] dump_stack+0x1b2/0x281 [ 1384.736300] warn_alloc.cold+0x96/0x1cc [ 1384.739845] lowmem_reserve[]: [ 1384.749189] ? zone_watermark_ok_safe+0x220/0x220 [ 1384.749200] ? usleep_range+0x130/0x130 [ 1384.749208] ? try_to_free_pages+0x23f/0x6e0 [ 1384.749218] ? _find_next_bit+0xdb/0x100 [ 1384.749231] ? run_timer_softirq+0x5a0/0x5a0 [ 1384.751846] / [ 1384.755426] __alloc_pages_nodemask+0x2127/0x2720 [ 1384.759374] mems_allowed=0-1 [ 1384.762592] ? lock_acquire+0x170/0x3f0 [ 1384.762608] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1384.762619] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1384.762635] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1384.767478] 0 [ 1384.771431] ? policy_node+0x13/0x110 [ 1384.771442] alloc_pages_current+0x155/0x260 [ 1384.771458] ion_page_pool_alloc+0x118/0x1b0 [ 1384.771470] ion_system_heap_allocate+0x133/0x8c0 [ 1384.775863] 2717 [ 1384.779931] ? _raw_spin_unlock+0x29/0x40 [ 1384.800678] 2718 [ 1384.803219] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1384.807870] 2718 2718 [ 1384.813779] ? ion_system_contig_heap_create+0x130/0x130 [ 1384.813792] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1384.813802] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1384.813816] ion_alloc+0x27a/0x810 [ 1384.833001] ? ion_dma_buf_release+0x40/0x40 [ 1384.835038] Node 0 [ 1384.839180] ? __might_fault+0x177/0x1b0 [ 1384.850682] DMA32 free:18096kB min:36200kB low:45248kB high:54296kB active_anon:111220kB inactive_anon:36316kB active_file:56kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7648kB pagetables:2996kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1384.854056] ion_ioctl+0xea/0x1f0 [ 1384.859049] lowmem_reserve[]: [ 1384.863976] ? ion_query_heaps+0x360/0x360 [ 1384.863987] ? do_vfs_ioctl+0x76/0xff0 [ 1384.863995] ? ion_query_heaps+0x360/0x360 [ 1384.864004] do_vfs_ioctl+0x75a/0xff0 [ 1384.864015] ? ioctl_preallocate+0x1a0/0x1a0 [ 1384.880668] 0 [ 1384.906199] ? lock_downgrade+0x740/0x740 [ 1384.906213] ? __fget+0x225/0x360 [ 1384.906222] ? do_vfs_ioctl+0xff0/0xff0 [ 1384.906232] ? security_file_ioctl+0x83/0xb0 [ 1384.906240] SyS_ioctl+0x7f/0xb0 [ 1384.906248] ? do_vfs_ioctl+0xff0/0xff0 [ 1384.906262] do_syscall_64+0x1d5/0x640 [ 1384.940671] 0 [ 1384.942635] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1384.946578] 0 [ 1384.950977] RIP: 0033:0x465f69 [ 1384.950982] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1384.950991] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1384.950995] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1384.951000] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1384.951005] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1384.951011] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1384.965052] CPU: 0 PID: 22412 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 1384.983532] 0 [ 1384.989885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1384.998885] 0 [ 1385.004419] Call Trace: [ 1385.004442] dump_stack+0x1b2/0x281 [ 1385.004456] warn_alloc.cold+0x96/0x1cc [ 1385.004470] ? zone_watermark_ok_safe+0x220/0x220 [ 1385.019167] __alloc_pages_nodemask+0x2127/0x2720 [ 1385.027071] Node 0 [ 1385.028824] ? lock_acquire+0x170/0x3f0 [ 1385.038217] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1385.039965] ? lock_acquire+0x170/0x3f0 [ 1385.042562] lowmem_reserve[]: [ 1385.046146] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1385.050120] 0 [ 1385.054964] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1385.054975] ? __mutex_unlock_slowpath+0x75/0x770 [ 1385.054990] alloc_pages_current+0x155/0x260 [ 1385.055005] ion_page_pool_alloc+0x118/0x1b0 [ 1385.059835] 0 [ 1385.062065] ion_system_heap_allocate+0x133/0x8c0 [ 1385.062078] ? _raw_spin_unlock+0x29/0x40 [ 1385.062086] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1385.062096] ? ion_system_contig_heap_create+0x130/0x130 [ 1385.062110] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1385.066066] 0 [ 1385.091063] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1385.091077] ion_alloc+0x27a/0x810 [ 1385.091091] ? ion_dma_buf_release+0x40/0x40 [ 1385.091103] ? __might_fault+0x177/0x1b0 [ 1385.095109] warn_alloc_show_mem: 1 callbacks suppressed [ 1385.095113] Mem-Info: [ 1385.098188] ion_ioctl+0xea/0x1f0 [ 1385.103066] 0 [ 1385.104832] ? ion_query_heaps+0x360/0x360 [ 1385.110258] 0 [ 1385.115093] ? __alloc_fd+0x1be/0x490 [ 1385.115105] ? ion_query_heaps+0x360/0x360 [ 1385.115115] do_vfs_ioctl+0x75a/0xff0 [ 1385.115127] ? ioctl_preallocate+0x1a0/0x1a0 [ 1385.115138] ? lock_downgrade+0x740/0x740 [ 1385.119568] active_anon:28030 inactive_anon:13160 isolated_anon:0 [ 1385.119568] active_file:52 inactive_file:7 isolated_file:0 [ 1385.119568] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1385.119568] slab_reclaimable:13132 slab_unreclaimable:118076 [ 1385.119568] mapped:52909 shmem:15123 pagetables:785 bounce:0 [ 1385.119568] free:13841 free_pcp:0 free_cma:0 [ 1385.123955] ? __fget+0x225/0x360 [ 1385.123965] ? do_vfs_ioctl+0xff0/0xff0 [ 1385.123975] ? security_file_ioctl+0x83/0xb0 [ 1385.123985] SyS_ioctl+0x7f/0xb0 [ 1385.123995] ? do_vfs_ioctl+0xff0/0xff0 [ 1385.125795] Node 0 active_anon:111268kB inactive_anon:36316kB active_file:72kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198864kB dirty:0kB writeback:0kB shmem:44104kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1385.130619] do_syscall_64+0x1d5/0x640 [ 1385.130637] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1385.130646] RIP: 0033:0x465f69 [ 1385.130650] RSP: 002b:00007f5ba2c45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1385.134823] Node 1 active_anon:852kB inactive_anon:16324kB active_file:136kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12772kB dirty:0kB writeback:0kB shmem:16388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1385.139721] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1385.150162] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1385.150171] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1385.152008] Node 1 [ 1385.156783] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1385.156791] R13: 00007ffec1e0e6ff R14: 00007f5ba2c45300 R15: 0000000000022000 [ 1385.160350] Normal free:26312kB min:53696kB low:67120kB high:80544kB active_anon:852kB inactive_anon:16324kB active_file:52kB inactive_file:80kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:136kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1385.338061] Node 0 DMA free:11020kB min:204kB low:252kB high:300kB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1385.667542] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1385.689157] Node 0 DMA32 free:307864kB min:36200kB low:45248kB high:54296kB active_anon:111120kB inactive_anon:36316kB active_file:328kB inactive_file:3420kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7584kB pagetables:2996kB bounce:0kB free_pcp:832kB local_pcp:320kB free_cma:0kB [ 1385.788112] lowmem_reserve[]: [ 1385.813297] lowmem_reserve[]: [ 1385.820707] 0 0 0 0 0 [ 1385.826348] Node 0 DMA: 5*4kB (ME) 7*8kB (UM) 4*16kB (ME) 6*32kB (ME) 5*64kB (UME) 3*128kB (ME) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11020kB [ 1385.827433] 0 [ 1385.885477] Node 0 [ 1385.887988] 0 0 0 0 [ 1385.897267] DMA32: 578*4kB (UE) 422*8kB (UME) 247*16kB (UME) 28*32kB (UME) 13*64kB (UME) 0*128kB 1*256kB (U) 68*512kB (U) 100*1024kB (U) 32*2048kB (U) 14*4096kB (U) = 271720kB [ 1385.902589] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1385.983275] lowmem_reserve[]: 0 0 0 0 0 [ 1385.987768] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1386.009889] Node 1 Normal free:919116kB min:53696kB low:67120kB high:80544kB active_anon:852kB inactive_anon:16324kB active_file:36kB inactive_file:40kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:136kB bounce:0kB free_pcp:156kB local_pcp:64kB free_cma:0kB [ 1386.035965] Node 1 [ 1386.060766] lowmem_reserve[]: 0 0 0 0 0 [ 1386.064886] Normal: [ 1386.067129] Node 0 DMA: 5*4kB (ME) 7*8kB (UM) 4*16kB (ME) 6*32kB (ME) 5*64kB (UME) 3*128kB (ME) 3*256kB (UME) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11020kB [ 1386.071744] 27*4kB (M) 24*8kB (M) 24*16kB (UM) 19*32kB (ME) 1365*64kB (UME) 665*128kB (UME) 584*256kB (UME) 218*512kB (UME) 199*1024kB (UME) 61*2048kB (UM) 38*4096kB (U) = 919244kB [ 1386.112894] Node 0 DMA32: 547*4kB (ME) 398*8kB (UME) 146*16kB (UME) 23*32kB (E) 2*64kB (ME) 0*128kB 1*256kB (U) 1*512kB (U) 2*1024kB (UM) 18*2048kB (UM) 13*4096kB (U) = 101500kB [ 1386.160408] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1386.168019] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1386.195114] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1386.202755] Node 1 Normal: 28*4kB (UM) 24*8kB (M) 23*16kB (M) 19*32kB (ME) 875*64kB (UME) 665*128kB (UME) 584*256kB (UME) 218*512kB (UME) 199*1024kB (UME) 61*2048kB (UM) 38*4096kB (U) = 887872kB [ 1386.230735] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1386.239594] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1386.267492] 17397 total pagecache pages [ 1386.272847] 0 pages in swap cache [ 1386.279648] Swap cache stats: add 0, delete 0, find 0/0 [ 1386.290611] Free swap = 0kB [ 1386.294864] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1386.297043] Total swap = 0kB [ 1386.315791] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1386.328935] 2097051 pages RAM [ 1386.335511] 0 pages HighMem/MovableOnly [ 1386.340933] 363840 pages reserved [ 1386.344465] 0 pages cma reserved [ 1386.347909] Out of memory (oom_kill_allocating_task): Kill process 22008 (systemd-journal) score 0 or sacrifice child [ 1386.350752] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1386.376943] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1386.393711] 17471 total pagecache pages [ 1386.403887] 0 pages in swap cache [ 1386.406864] Killed process 22008 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:2448kB [ 1386.407952] Swap cache stats: add 0, delete 0, find 0/0 [ 1386.446477] oom_reaper: reaped process 22008 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2448kB [ 1386.510971] Free swap = 0kB [ 1386.516109] Total swap = 0kB [ 1386.521664] 2097051 pages RAM [ 1386.524781] 0 pages HighMem/MovableOnly [ 1386.528757] 363840 pages reserved [ 1386.530227] systemd[1]: systemd-journald.service: Failed with result 'signal'. 08:37:08 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) [ 1386.603464] 0 pages cma reserved [ 1386.606443] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1386.784595] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 1386.839832] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 1386.880896] systemd[1]: Stopped Journal Service. [ 1386.979827] systemd[1]: Starting Journal Service... [ 1387.011853] systemd[1]: Started System Logging Service. 08:37:08 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000005c0)) 08:37:08 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) socket$nl_route(0x10, 0x3, 0x0) [ 1387.776442] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=1000 [ 1387.849401] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1387.882730] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1387.887974] CPU: 1 PID: 22431 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1387.895856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1387.905246] Call Trace: [ 1387.907849] dump_stack+0x1b2/0x281 [ 1387.911487] warn_alloc.cold+0x96/0x1cc [ 1387.915488] ? zone_watermark_ok_safe+0x220/0x220 [ 1387.920356] __alloc_pages_nodemask+0x2127/0x2720 [ 1387.925209] ? lock_acquire+0x170/0x3f0 [ 1387.929196] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1387.932141] syz-executor.5 cpuset=/ [ 1387.934046] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1387.934056] mems_allowed=0-1 [ 1387.937670] ? __mutex_unlock_slowpath+0x75/0x770 [ 1387.951140] alloc_pages_current+0x155/0x260 [ 1387.955557] ion_page_pool_alloc+0x118/0x1b0 [ 1387.959971] ion_system_heap_allocate+0x133/0x8c0 [ 1387.964826] ? ion_alloc+0x187/0x810 [ 1387.968538] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1387.973991] ? ion_system_contig_heap_create+0x130/0x130 [ 1387.979448] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1387.984480] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1387.989334] ion_alloc+0x204/0x810 [ 1387.992901] ? ion_dma_buf_release+0x40/0x40 [ 1387.997315] ? __might_fault+0x177/0x1b0 [ 1388.001417] ion_ioctl+0xea/0x1f0 [ 1388.004869] ? ion_query_heaps+0x360/0x360 [ 1388.009131] ? __alloc_fd+0x1be/0x490 [ 1388.012946] ? ion_query_heaps+0x360/0x360 [ 1388.017185] do_vfs_ioctl+0x75a/0xff0 [ 1388.020989] ? ioctl_preallocate+0x1a0/0x1a0 [ 1388.025402] ? lock_downgrade+0x740/0x740 [ 1388.029563] ? __fget+0x225/0x360 [ 1388.033014] ? do_vfs_ioctl+0xff0/0xff0 [ 1388.036997] ? security_file_ioctl+0x83/0xb0 [ 1388.041431] SyS_ioctl+0x7f/0xb0 [ 1388.044797] ? do_vfs_ioctl+0xff0/0xff0 [ 1388.048786] do_syscall_64+0x1d5/0x640 [ 1388.052680] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1388.057870] RIP: 0033:0x465f69 [ 1388.061077] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1388.068787] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1388.076053] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1388.083800] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1388.091100] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1388.098373] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1388.105660] CPU: 0 PID: 22437 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1388.113583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1388.122943] Call Trace: [ 1388.125543] dump_stack+0x1b2/0x281 [ 1388.129173] dump_header+0x178/0x82f [ 1388.132898] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1388.138001] ? ___ratelimit+0x2cd/0x530 [ 1388.141987] oom_kill_process.cold+0x10/0xb18 [ 1388.146493] out_of_memory+0xe3e/0x1190 [ 1388.150472] ? oom_killer_disable+0x1c0/0x1c0 [ 1388.154963] ? mutex_trylock+0x152/0x1a0 [ 1388.159108] __alloc_pages_nodemask+0x23e1/0x2720 [ 1388.163962] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1388.168820] alloc_pages_current+0x155/0x260 [ 1388.173230] filemap_fault+0xea3/0x1980 [ 1388.177212] ext4_filemap_fault+0x84/0xb0 [ 1388.181364] __do_fault+0xfa/0x380 [ 1388.184910] __handle_mm_fault+0x2497/0x4620 [ 1388.189314] ? lock_downgrade+0x740/0x740 [ 1388.193461] ? vm_insert_page+0x7c0/0x7c0 [ 1388.197605] ? _raw_spin_unlock_irq+0x24/0x80 [ 1388.202094] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1388.207120] handle_mm_fault+0x391/0x860 [ 1388.211191] __do_page_fault+0x549/0xad0 [ 1388.215260] ? spurious_fault+0x640/0x640 [ 1388.221058] ? do_page_fault+0x60/0x500 [ 1388.225049] ? page_fault+0x2f/0x50 [ 1388.228700] page_fault+0x45/0x50 [ 1388.232146] RIP: 6ddfc008:0x7fea6ddfc088 [ 1388.236193] RSP: 6ddfc010:ffffffff8100474c EFLAGS: 00000008 [ 1388.236209] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1388.247273] ? prepare_exit_to_usermode+0xc/0x210 [ 1388.252126] ? do_syscall_64+0x18/0x640 [ 1388.256101] ? do_syscall_64+0x18/0x640 [ 1388.329185] Mem-Info: [ 1388.351178] active_anon:28753 inactive_anon:13160 isolated_anon:0 [ 1388.351178] active_file:164 inactive_file:1960 isolated_file:0 [ 1388.351178] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1388.351178] slab_reclaimable:13251 slab_unreclaimable:118902 [ 1388.351178] mapped:53800 shmem:15123 pagetables:771 bounce:0 [ 1388.351178] free:57526 free_pcp:250 free_cma:0 [ 1388.385816] Node 0 active_anon:112764kB inactive_anon:36312kB active_file:12kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198772kB dirty:0kB writeback:0kB shmem:44096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1388.538521] warn_alloc_show_mem: 2 callbacks suppressed [ 1388.538525] Mem-Info: [ 1388.544016] Node 1 active_anon:2348kB inactive_anon:16328kB active_file:2644kB inactive_file:6432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16428kB dirty:0kB writeback:0kB shmem:16396kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1388.544024] Node 0 [ 1388.552163] active_anon:28778 inactive_anon:13160 isolated_anon:0 [ 1388.552163] active_file:664 inactive_file:1610 isolated_file:0 [ 1388.552163] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1388.552163] slab_reclaimable:13251 slab_unreclaimable:118774 [ 1388.552163] mapped:53800 shmem:15123 pagetables:808 bounce:0 [ 1388.552163] free:37828 free_pcp:285 free_cma:0 [ 1388.683027] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1388.729630] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1388.745528] Node 0 DMA32 free:35180kB min:36200kB low:45248kB high:54296kB active_anon:112764kB inactive_anon:36312kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:2684kB bounce:0kB free_pcp:704kB local_pcp:0kB free_cma:0kB [ 1388.832956] Node 0 active_anon:112764kB inactive_anon:36312kB active_file:0kB inactive_file:172kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198772kB dirty:0kB writeback:0kB shmem:44096kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1388.894816] lowmem_reserve[]: 0 0 0 0 0 [ 1388.912751] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1388.917661] Node 1 active_anon:2348kB inactive_anon:16328kB active_file:912kB inactive_file:568kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:11528kB dirty:0kB writeback:0kB shmem:16396kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1389.030687] lowmem_reserve[]: 0 0 0 0 0 [ 1389.052871] Node 1 Normal free:53608kB min:53696kB low:67120kB high:80544kB active_anon:2332kB inactive_anon:16332kB active_file:340kB inactive_file:148kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:496kB bounce:0kB free_pcp:56kB local_pcp:0kB free_cma:0kB [ 1389.069336] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1389.149201] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1389.206073] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1389.220933] lowmem_reserve[]: 0 0 0 0 0 [ 1389.225074] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10960kB [ 1389.255688] CPU: 1 PID: 22444 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 1389.263604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1389.272962] Call Trace: [ 1389.275561] dump_stack+0x1b2/0x281 [ 1389.279198] warn_alloc.cold+0x96/0x1cc [ 1389.282661] Node 0 DMA32: [ 1389.283173] ? zone_watermark_ok_safe+0x220/0x220 [ 1389.283194] __alloc_pages_nodemask+0x2127/0x2720 [ 1389.286018] 1124*4kB [ 1389.290856] ? lock_acquire+0x170/0x3f0 [ 1389.290871] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1389.290887] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1389.290899] ? __mutex_unlock_slowpath+0x75/0x770 [ 1389.290912] alloc_pages_current+0x155/0x260 [ 1389.290927] ion_page_pool_alloc+0x118/0x1b0 [ 1389.290938] ion_system_heap_allocate+0x133/0x8c0 [ 1389.323843] (ME) [ 1389.325997] ? ion_alloc+0x187/0x810 [ 1389.336572] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1389.342032] ? ion_system_contig_heap_create+0x130/0x130 [ 1389.343863] 798*8kB [ 1389.347481] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1389.347494] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1389.349802] (UME) [ 1389.354833] ion_alloc+0x204/0x810 [ 1389.354848] ? ion_dma_buf_release+0x40/0x40 [ 1389.354860] ? __might_fault+0x177/0x1b0 [ 1389.354871] ion_ioctl+0xea/0x1f0 [ 1389.354880] ? ion_query_heaps+0x360/0x360 [ 1389.354890] ? __alloc_fd+0x1be/0x490 [ 1389.354900] ? ion_query_heaps+0x360/0x360 [ 1389.354913] do_vfs_ioctl+0x75a/0xff0 [ 1389.386166] 267*16kB [ 1389.389583] ? ioctl_preallocate+0x1a0/0x1a0 [ 1389.393466] lowmem_reserve[]: [ 1389.395763] ? lock_downgrade+0x740/0x740 [ 1389.400140] 0 [ 1389.403244] ? __fget+0x225/0x360 [ 1389.403255] ? do_vfs_ioctl+0xff0/0xff0 [ 1389.403265] ? security_file_ioctl+0x83/0xb0 [ 1389.403275] SyS_ioctl+0x7f/0xb0 [ 1389.403284] ? do_vfs_ioctl+0xff0/0xff0 [ 1389.403294] do_syscall_64+0x1d5/0x640 [ 1389.403312] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1389.403321] RIP: 0033:0x465f69 [ 1389.403325] RSP: 002b:00007f6547c30188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1389.403335] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1389.403341] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1389.403346] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1389.403355] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1389.413165] (UME) [ 1389.416707] R13: 00007ffe59ae816f R14: 00007f6547c30300 R15: 0000000000022000 [ 1389.427348] 2717 [ 1389.544519] 28*32kB (UME) 29*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17904kB [ 1389.580667] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1389.610662] Node 1 Normal: 60*4kB (UM) 63*8kB (UM) 40*16kB (UM) 47*32kB (UM) 136*64kB (UM) 73*128kB (UM) 31*256kB (UM) 28*512kB (UM) 19*1024kB (U) 0*2048kB 0*4096kB = 62664kB [ 1389.630564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1389.641121] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1389.674315] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1389.697626] 2718 2718 2718 [ 1389.712643] Node 0 DMA32 free:30560kB min:36200kB low:45248kB high:54296kB active_anon:112696kB inactive_anon:36304kB active_file:216kB inactive_file:164kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:2684kB bounce:0kB free_pcp:880kB local_pcp:236kB free_cma:0kB [ 1389.747061] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1389.771261] 15365 total pagecache pages [ 1389.775278] 0 pages in swap cache [ 1389.778788] Swap cache stats: add 0, delete 0, find 0/0 [ 1389.800716] Free swap = 0kB [ 1389.803794] Total swap = 0kB [ 1389.806803] 2097051 pages RAM [ 1389.809902] 0 pages HighMem/MovableOnly [ 1389.814035] lowmem_reserve[]: 0 0 0 0 0 [ 1389.818034] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1389.860699] 363840 pages reserved [ 1389.863772] Mem-Info: [ 1389.864195] 0 pages cma reserved [ 1389.868872] active_anon:28752 inactive_anon:13160 isolated_anon:0 [ 1389.868872] active_file:23 inactive_file:10 isolated_file:0 [ 1389.868872] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1389.868872] slab_reclaimable:13252 slab_unreclaimable:118901 [ 1389.868872] mapped:52232 shmem:15123 pagetables:796 bounce:0 [ 1389.868872] free:35920 free_pcp:417 free_cma:0 [ 1389.869946] Out of memory (oom_kill_allocating_task): Kill process 22437 (syz-executor.5) score 0 or sacrifice child [ 1389.869987] Killed process 22437 (syz-executor.5) total-vm:93252kB, anon-rss:152kB, file-rss:34208kB, shmem-rss:0kB [ 1389.941710] lowmem_reserve[]: 0 0 0 0 0 [ 1389.965104] Node 1 Normal free:70156kB min:53696kB low:67120kB high:80544kB active_anon:2312kB inactive_anon:16336kB active_file:744kB inactive_file:1696kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:500kB bounce:0kB free_pcp:520kB local_pcp:36kB free_cma:0kB [ 1390.021081] Node 0 active_anon:112696kB inactive_anon:36304kB active_file:68kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198772kB dirty:0kB writeback:0kB shmem:44088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1390.055125] lowmem_reserve[]: 0 0 0 0 0 [ 1390.059168] Node 0 DMA: 1*4kB (E) 1*8kB (U) 9*16kB (UE) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11100kB [ 1390.099933] oom_reaper: reaped process 22437 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1390.120760] Node 0 DMA32: 1172*4kB (UME) 816*8kB (UME) 356*16kB (UME) 180*32kB (UME) 136*64kB (UE) 23*128kB (U) 5*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35600kB [ 1390.150742] Node 1 active_anon:2320kB inactive_anon:16336kB active_file:132kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):28kB mapped:10184kB dirty:32kB writeback:0kB shmem:16404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1390.179027] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1390.221351] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1390.230728] Node 1 Normal: 97*4kB (UM) 78*8kB (UM) 67*16kB (UM) 64*32kB (UM) 54*64kB (UM) 18*128kB (M) 29*256kB (UM) 30*512kB (UM) 20*1024kB (U) 0*2048kB 0*4096kB = 53156kB [ 1390.331311] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1390.340188] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1390.356695] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1390.368576] Node 0 DMA32 free:39096kB min:36200kB low:45248kB high:54296kB active_anon:112696kB inactive_anon:36304kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2684kB bounce:0kB free_pcp:548kB local_pcp:404kB free_cma:0kB [ 1390.370723] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1390.450714] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1390.459332] 15181 total pagecache pages [ 1390.463222] lowmem_reserve[]: 0 0 0 0 0 [ 1390.470695] 0 pages in swap cache [ 1390.474169] Swap cache stats: add 0, delete 0, find 0/0 [ 1390.476719] Node 0 [ 1390.479525] Free swap = 0kB [ 1390.479529] Total swap = 0kB [ 1390.479536] 2097051 pages RAM [ 1390.479539] 0 pages HighMem/MovableOnly [ 1390.479542] 363840 pages reserved [ 1390.479546] 0 pages cma reserved [ 1390.539191] oom_reaper: reaped process 22413 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1390.610914] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1390.670723] lowmem_reserve[]: 0 0 0 0 0 [ 1390.674777] Node 1 Normal free:79620kB min:53696kB low:67120kB high:80544kB active_anon:2320kB inactive_anon:16336kB active_file:60kB inactive_file:232kB unevictable:0kB writepending:32kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:500kB bounce:0kB free_pcp:88kB local_pcp:12kB free_cma:0kB [ 1390.780694] lowmem_reserve[]: 0 0 0 0 0 [ 1390.805653] Node 0 DMA: 2*4kB (UE) 0*8kB 1*16kB (E) 3*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11000kB [ 1390.860776] Node 0 DMA32: 830*4kB (UME) 822*8kB (UME) 278*16kB (UME) 29*32kB (UME) 317*64kB (UE) 40*128kB (U) 8*256kB (U) 3*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 45288kB [ 1390.936068] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1390.956729] Node 1 Normal: 2*4kB (UM) 1*8kB (U) 2*16kB (UM) 27*32kB (M) 155*64kB (UM) 48*128kB (UM) 22*256kB (UM) 9*512kB (UM) 31*1024kB (U) 4*2048kB (U) 0*4096kB = 67152kB 08:37:12 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) socket$nl_route(0x10, 0x3, 0x0) [ 1391.021700] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1391.076335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1391.122930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1391.152915] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1391.181598] 15313 total pagecache pages [ 1391.192288] 0 pages in swap cache [ 1391.199112] Swap cache stats: add 0, delete 0, find 0/0 [ 1391.211347] Free swap = 0kB [ 1391.217792] Total swap = 0kB [ 1391.224346] 2097051 pages RAM [ 1391.231035] 0 pages HighMem/MovableOnly [ 1391.253594] 363840 pages reserved [ 1391.257939] 0 pages cma reserved [ 1391.305992] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1391.380138] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1391.427094] CPU: 1 PID: 7994 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1391.434912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1391.444283] Call Trace: [ 1391.446880] dump_stack+0x1b2/0x281 [ 1391.450519] dump_header+0x178/0x82f [ 1391.454227] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1391.459339] ? ___ratelimit+0x2cd/0x530 [ 1391.463320] oom_kill_process.cold+0x10/0xb18 [ 1391.467828] out_of_memory+0xe3e/0x1190 [ 1391.471821] ? oom_killer_disable+0x1c0/0x1c0 [ 1391.476321] ? mutex_trylock+0x152/0x1a0 [ 1391.480387] __alloc_pages_nodemask+0x23e1/0x2720 [ 1391.485255] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1391.490119] alloc_pages_current+0x155/0x260 [ 1391.494535] filemap_fault+0xea3/0x1980 [ 1391.498522] ext4_filemap_fault+0x84/0xb0 [ 1391.502676] __do_fault+0xfa/0x380 [ 1391.506215] __handle_mm_fault+0x2497/0x4620 [ 1391.510622] ? vm_insert_page+0x7c0/0x7c0 [ 1391.514766] ? nanosleep_copyout+0x100/0x100 [ 1391.519182] handle_mm_fault+0x391/0x860 [ 1391.523248] __do_page_fault+0x549/0xad0 [ 1391.527325] ? spurious_fault+0x640/0x640 [ 1391.531473] ? do_page_fault+0x60/0x500 [ 1391.535448] ? page_fault+0x2f/0x50 [ 1391.539080] page_fault+0x45/0x50 [ 1391.541831] syz-executor.5: page allocation failure: order:4 [ 1391.542530] RIP: 153a0d:0x6 [ 1391.542538] RSP: 405e:00007ffeec2ed78c EFLAGS: 00000032 [ 1391.548329] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1391.625295] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1391.627306] Mem-Info: [ 1391.630451] CPU: 0 PID: 22448 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1391.632904] active_anon:28713 inactive_anon:13160 isolated_anon:0 [ 1391.632904] active_file:5 inactive_file:15 isolated_file:0 [ 1391.632904] unevictable:0 dirty:15 writeback:3 unstable:0 [ 1391.632904] slab_reclaimable:13293 slab_unreclaimable:118359 [ 1391.632904] mapped:43540 shmem:15123 pagetables:774 bounce:0 [ 1391.632904] free:13756 free_pcp:0 free_cma:0 [ 1391.640716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1391.640721] Call Trace: [ 1391.640742] dump_stack+0x1b2/0x281 [ 1391.640770] warn_alloc.cold+0x96/0x1cc [ 1391.674052] Node 0 active_anon:112520kB inactive_anon:36304kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163944kB dirty:8kB writeback:0kB shmem:44088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1391.683351] ? zone_watermark_ok_safe+0x220/0x220 [ 1391.683374] __alloc_pages_nodemask+0x2127/0x2720 [ 1391.683390] ? lock_acquire+0x170/0x3f0 [ 1391.685985] Node 1 active_anon:2332kB inactive_anon:16336kB active_file:32kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10216kB dirty:52kB writeback:12kB shmem:16404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1391.689589] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1391.693570] Node 0 [ 1391.721120] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1391.721129] ? retint_kernel+0x2d/0x2d [ 1391.721140] ? ion_page_pool_alloc+0x28/0x1b0 [ 1391.721151] ? __mutex_unlock_slowpath+0x75/0x770 [ 1391.726003] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1391.730825] ? ion_page_pool_alloc+0x28/0x1b0 [ 1391.730839] alloc_pages_current+0x155/0x260 [ 1391.730851] ion_page_pool_alloc+0x118/0x1b0 [ 1391.730863] ion_system_heap_allocate+0x133/0x8c0 [ 1391.734836] lowmem_reserve[]: [ 1391.762086] ? ion_alloc+0x187/0x810 [ 1391.762097] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1391.762106] ? ion_system_contig_heap_create+0x130/0x130 [ 1391.762116] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1391.762130] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1391.766961] 0 [ 1391.769184] ion_alloc+0x204/0x810 [ 1391.774646] 2717 [ 1391.778496] ? ion_dma_buf_release+0x40/0x40 [ 1391.778508] ? __might_fault+0x177/0x1b0 [ 1391.778520] ion_ioctl+0xea/0x1f0 [ 1391.787406] 2718 [ 1391.787848] ? ion_query_heaps+0x360/0x360 [ 1391.813378] 2718 [ 1391.817827] ? __alloc_fd+0x1be/0x490 [ 1391.822263] 2718 [ 1391.826635] ? ion_query_heaps+0x360/0x360 [ 1391.834558] do_vfs_ioctl+0x75a/0xff0 [ 1391.838245] Node 0 [ 1391.843689] ? ioctl_preallocate+0x1a0/0x1a0 [ 1391.843698] ? lock_downgrade+0x740/0x740 [ 1391.843710] ? __fget+0x225/0x360 [ 1391.843721] ? do_vfs_ioctl+0xff0/0xff0 [ 1391.849192] DMA32 free:17492kB min:36200kB low:45248kB high:54296kB active_anon:112520kB inactive_anon:36304kB active_file:4kB inactive_file:72kB unevictable:0kB writepending:8kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2596kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1391.854170] ? security_file_ioctl+0x83/0xb0 [ 1391.854181] SyS_ioctl+0x7f/0xb0 [ 1391.854189] ? do_vfs_ioctl+0xff0/0xff0 [ 1391.854201] do_syscall_64+0x1d5/0x640 [ 1391.854217] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1391.859048] lowmem_reserve[]: [ 1391.860835] RIP: 0033:0x465f69 [ 1391.860840] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1391.860849] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1391.860854] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1391.860859] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1391.860864] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1391.860873] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1391.864393] 0 [ 1391.874411] Mem-Info: [ 1391.884982] syz-executor.3: [ 1391.885408] active_anon:28713 inactive_anon:13160 isolated_anon:0 [ 1391.885408] active_file:5 inactive_file:15 isolated_file:0 [ 1391.885408] unevictable:0 dirty:15 writeback:3 unstable:0 [ 1391.885408] slab_reclaimable:13293 slab_unreclaimable:118359 [ 1391.885408] mapped:43540 shmem:15123 pagetables:774 bounce:0 [ 1391.885408] free:13756 free_pcp:0 free_cma:0 [ 1391.887440] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1391.891398] syz-executor.4: [ 1391.907141] (null) [ 1391.914605] Node 0 active_anon:112520kB inactive_anon:36304kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163944kB dirty:8kB writeback:0kB shmem:44088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1391.940675] 0 [ 1391.954357] page allocation failure: order:0 [ 1391.972588] syz-executor.3 cpuset= [ 1391.981839] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1392.008472] 0 [ 1392.019198] Node 1 active_anon:2332kB inactive_anon:16336kB active_file:32kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10216kB dirty:52kB writeback:12kB shmem:16404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1392.039144] / [ 1392.071310] (null) [ 1392.096762] 0 [ 1392.109171] Node 0 [ 1392.135273] 0 [ 1392.155913] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1392.163664] CPU: 0 PID: 22412 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 1392.171549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1392.179528] mems_allowed=0-1 [ 1392.180897] Call Trace: [ 1392.180919] dump_stack+0x1b2/0x281 [ 1392.180932] warn_alloc.cold+0x96/0x1cc [ 1392.180947] ? zone_watermark_ok_safe+0x220/0x220 [ 1392.194207] ? usleep_range+0x130/0x130 [ 1392.199024] Node 0 [ 1392.202989] ? try_to_free_pages+0x23f/0x6e0 [ 1392.202999] ? _find_next_bit+0xdb/0x100 [ 1392.203008] ? run_timer_softirq+0x5a0/0x5a0 [ 1392.203024] __alloc_pages_nodemask+0x2127/0x2720 [ 1392.203041] ? lock_acquire+0x170/0x3f0 [ 1392.220687] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1392.223015] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1392.226962] lowmem_reserve[]: [ 1392.251978] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1392.251994] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1392.252013] alloc_pages_current+0x155/0x260 [ 1392.252026] ion_page_pool_alloc+0x118/0x1b0 [ 1392.278697] ion_system_heap_allocate+0x133/0x8c0 [ 1392.283549] ? _raw_spin_unlock+0x29/0x40 [ 1392.287720] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1392.290674] 0 [ 1392.292648] ? ion_system_contig_heap_create+0x130/0x130 [ 1392.292655] 0 [ 1392.294444] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1392.294456] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1392.299923] 0 [ 1392.301741] ion_alloc+0x27a/0x810 [ 1392.301756] ? ion_dma_buf_release+0x40/0x40 [ 1392.301768] ? __might_fault+0x177/0x1b0 [ 1392.301780] ion_ioctl+0xea/0x1f0 [ 1392.301791] ? ion_query_heaps+0x360/0x360 [ 1392.320667] 0 [ 1392.321297] ? __alloc_fd+0x1be/0x490 [ 1392.325332] 0 [ 1392.328783] ? ion_query_heaps+0x360/0x360 [ 1392.328794] do_vfs_ioctl+0x75a/0xff0 [ 1392.344758] ? ioctl_preallocate+0x1a0/0x1a0 [ 1392.348549] Node 1 [ 1392.352947] ? lock_downgrade+0x740/0x740 [ 1392.352967] ? __fget+0x225/0x360 [ 1392.352977] ? do_vfs_ioctl+0xff0/0xff0 [ 1392.352988] ? security_file_ioctl+0x83/0xb0 [ 1392.370672] Normal free:26668kB min:53696kB low:67120kB high:80544kB active_anon:2340kB inactive_anon:16336kB active_file:60kB inactive_file:60kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:500kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1392.371126] SyS_ioctl+0x7f/0xb0 [ 1392.402349] ? do_vfs_ioctl+0xff0/0xff0 [ 1392.406324] do_syscall_64+0x1d5/0x640 [ 1392.410220] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1392.415404] RIP: 0033:0x465f69 [ 1392.418581] RSP: 002b:00007f5ba2c45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1392.426290] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1392.430678] lowmem_reserve[]: [ 1392.433555] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1392.433563] 0 [ 1392.436646] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1392.436654] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1392.460253] R13: 00007ffec1e0e6ff R14: 00007f5ba2c45300 R15: 0000000000022000 [ 1392.460668] 0 0 0 0 [ 1392.470033] Node 0 DMA: 1*4kB (E) 1*8kB (U) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10972kB [ 1392.475847] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1392.511033] CPU: 1 PID: 22413 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 1392.511040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1392.511043] Call Trace: [ 1392.511070] dump_stack+0x1b2/0x281 [ 1392.511083] warn_alloc.cold+0x96/0x1cc [ 1392.511095] ? zone_watermark_ok_safe+0x220/0x220 [ 1392.511105] ? usleep_range+0x130/0x130 [ 1392.511114] ? try_to_free_pages+0x23f/0x6e0 [ 1392.511124] ? _find_next_bit+0xdb/0x100 [ 1392.511136] ? run_timer_softirq+0x5a0/0x5a0 [ 1392.526041] lowmem_reserve[]: [ 1392.528487] __alloc_pages_nodemask+0x2127/0x2720 [ 1392.531103] 0 [ 1392.534661] ? lock_acquire+0x170/0x3f0 [ 1392.538608] 2717 [ 1392.543461] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1392.543473] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1392.543488] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1392.543505] alloc_pages_current+0x155/0x260 [ 1392.543518] ion_page_pool_alloc+0x118/0x1b0 [ 1392.543529] ion_system_heap_allocate+0x133/0x8c0 [ 1392.543539] ? ion_alloc+0x187/0x810 [ 1392.543552] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1392.554398] 2718 [ 1392.555954] ? ion_system_contig_heap_create+0x130/0x130 [ 1392.560346] 2718 [ 1392.563442] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1392.563453] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1392.563465] ion_alloc+0x204/0x810 [ 1392.563480] ? ion_dma_buf_release+0x40/0x40 [ 1392.563491] ? __might_fault+0x177/0x1b0 [ 1392.563505] ion_ioctl+0xea/0x1f0 [ 1392.568330] 2718 [ 1392.570120] ? ion_query_heaps+0x360/0x360 [ 1392.585432] ? sock_ioctl+0x16c/0x4c0 [ 1392.595533] Node 0 [ 1392.599697] ? ion_query_heaps+0x360/0x360 [ 1392.607346] DMA32 free:17620kB min:36200kB low:45248kB high:54296kB active_anon:112536kB inactive_anon:36304kB active_file:12kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:2684kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1392.608216] do_vfs_ioctl+0x75a/0xff0 [ 1392.618295] lowmem_reserve[]: [ 1392.621138] ? ioctl_preallocate+0x1a0/0x1a0 [ 1392.621148] ? lock_downgrade+0x740/0x740 [ 1392.621160] ? __fget+0x225/0x360 [ 1392.621169] ? do_vfs_ioctl+0xff0/0xff0 [ 1392.621178] ? security_file_ioctl+0x83/0xb0 [ 1392.621187] SyS_ioctl+0x7f/0xb0 [ 1392.621194] ? do_vfs_ioctl+0xff0/0xff0 [ 1392.621205] do_syscall_64+0x1d5/0x640 [ 1392.621222] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1392.625591] 0 [ 1392.628270] RIP: 0033:0x465f69 [ 1392.637699] 0 [ 1392.641012] RSP: 002b:00007f2758795188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1392.641022] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1392.641026] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1392.641031] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1392.641036] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1392.641041] R13: 00007fff98c6ba8f R14: 00007f2758795300 R15: 0000000000022000 [ 1392.665721] Bluetooth: hci3 command 0x0406 tx timeout [ 1392.700145] 0 [ 1392.726224] Node 0 [ 1392.735405] 0 [ 1392.760157] DMA32: [ 1392.773153] 0 [ 1392.796938] Bluetooth: hci4 command 0x0406 tx timeout [ 1392.808923] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1392.827500] 1149*4kB [ 1392.841479] lowmem_reserve[]: 0 0 0 0 0 [ 1392.847906] Node 1 Normal free:26668kB min:53696kB low:67120kB high:80544kB active_anon:2340kB inactive_anon:16336kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:500kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1392.857436] (UME) [ 1392.888668] Mem-Info: [ 1392.895625] active_anon:28719 inactive_anon:13160 isolated_anon:0 [ 1392.895625] active_file:14 inactive_file:13 isolated_file:0 [ 1392.895625] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1392.895625] slab_reclaimable:13298 slab_unreclaimable:118396 [ 1392.895625] mapped:43521 shmem:15123 pagetables:796 bounce:0 [ 1392.895625] free:13815 free_pcp:0 free_cma:0 [ 1392.898761] 818*8kB [ 1392.940454] lowmem_reserve[]: [ 1392.944182] (ME) 279*16kB (UME) 33*32kB (UME) 3*64kB (UE) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17620kB [ 1392.963260] 0 0 0 0 0 [ 1392.965799] Node 0 DMA: 1*4kB (E) 1*8kB (U) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10972kB [ 1392.969882] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1392.998633] Node 0 [ 1393.048689] Node 1 [ 1393.053286] Node 0 active_anon:112536kB inactive_anon:36304kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163956kB dirty:0kB writeback:0kB shmem:44088kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1393.059074] Normal: [ 1393.088138] DMA32: 2313*4kB (UME) 1036*8kB (UME) 282*16kB (UME) 34*32kB (UME) 235*64kB (UE) 0*128kB 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 38948kB [ 1393.170855] 89*4kB (UM) 6*8kB (UME) 9*16kB (UM) 1*32kB (U) 26*64kB (UME) 18*128kB (ME) 16*256kB (UME) 3*512kB (ME) 28*1024kB (UE) 14*2048kB (U) 0*4096kB = 67524kB [ 1393.176590] Node 0 [ 1393.186026] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1393.187288] Normal: [ 1393.210878] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1393.212448] Node 1 active_anon:2240kB inactive_anon:16336kB active_file:2936kB inactive_file:2356kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14464kB dirty:0kB writeback:0kB shmem:16404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1393.213398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1393.227916] 0*4kB [ 1393.283390] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1393.313041] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1393.318350] Node 0 DMA32 free:46780kB min:36200kB low:45248kB high:54296kB active_anon:112436kB inactive_anon:36304kB active_file:104kB inactive_file:1816kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2684kB bounce:0kB free_pcp:1048kB local_pcp:852kB free_cma:0kB [ 1393.360901] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1393.369805] Node 1 Normal: 1*4kB (M) 38*8kB (ME) 30*16kB (M) 4*32kB (UM) 29*64kB (UME) 18*128kB (ME) 16*256kB (UME) 3*512kB (ME) 28*1024kB (UE) 14*2048kB (U) 0*4096kB = 68052kB [ 1393.387991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1393.410836] lowmem_reserve[]: 0 0 0 0 0 [ 1393.414861] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1393.440670] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1393.449169] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1393.449919] 16606 total pagecache pages [ 1393.462659] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1393.482682] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1393.503015] lowmem_reserve[]: 0 0 0 0 0 [ 1393.504822] 0 pages in swap cache [ 1393.507044] Node 1 [ 1393.510489] Swap cache stats: add 0, delete 0, find 0/0 [ 1393.510513] Normal free:66904kB min:53696kB low:67120kB high:80544kB active_anon:2240kB inactive_anon:16336kB active_file:2264kB inactive_file:1924kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:500kB bounce:0kB free_pcp:948kB local_pcp:256kB free_cma:0kB [ 1393.513106] Free swap = 0kB [ 1393.523211] 16306 total pagecache pages [ 1393.546999] Total swap = 0kB [ 1393.553989] lowmem_reserve[]: 0 0 0 0 0 [ 1393.560789] 2097051 pages RAM [ 1393.561783] Node 0 [ 1393.563911] 0 pages HighMem/MovableOnly [ 1393.563919] 363840 pages reserved [ 1393.566166] DMA: [ 1393.570218] 0 pages cma reserved [ 1393.577523] 0 pages in swap cache [ 1393.579600] Out of memory (oom_kill_allocating_task): Kill process 7994 (syz-executor.5) score 0 or sacrifice child [ 1393.583067] 1*4kB [ 1393.593575] Swap cache stats: add 0, delete 0, find 0/0 [ 1393.601320] Free swap = 0kB [ 1393.604338] Total swap = 0kB [ 1393.607356] 2097051 pages RAM [ 1393.610446] 0 pages HighMem/MovableOnly [ 1393.614919] (E) 1*8kB (U) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10972kB [ 1393.631073] 363840 pages reserved [ 1393.634537] 0 pages cma reserved [ 1393.635149] Killed process 22448 (syz-executor.5) total-vm:93384kB, anon-rss:156kB, file-rss:34860kB, shmem-rss:0kB [ 1393.648739] Node 0 DMA32: 1054*4kB (UME) 809*8kB (UME) 540*16kB (UME) 32*32kB (ME) 294*64kB (UE) 6*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 40704kB [ 1393.700545] systemd-journald[22436]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1393.750748] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1393.768923] oom_reaper: reaped process 22448 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1393.790937] Node 1 Normal: 140*4kB (M) 135*8kB (ME) 83*16kB (UME) 21*32kB (UM) 29*64kB (UME) 19*128kB (UME) 16*256kB (UME) 3*512kB (ME) 9*1024kB (UE) 15*2048kB (U) 0*4096kB = 53496kB [ 1393.809224] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1393.831531] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1393.870723] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1393.879624] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1393.928944] 15595 total pagecache pages [ 1393.939098] 0 pages in swap cache [ 1393.951295] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 1393.968005] Swap cache stats: add 0, delete 0, find 0/0 [ 1393.996334] Free swap = 0kB [ 1394.000719] Total swap = 0kB [ 1394.004169] 2097051 pages RAM [ 1394.007275] 0 pages HighMem/MovableOnly [ 1394.012961] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1394.018003] CPU: 0 PID: 22435 Comm: rs:main Q:Reg Not tainted 4.14.225-syzkaller #0 [ 1394.025788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1394.035131] Call Trace: [ 1394.037712] dump_stack+0x1b2/0x281 [ 1394.041331] dump_header+0x178/0x82f [ 1394.045036] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1394.050128] ? ___ratelimit+0x2cd/0x530 [ 1394.054093] oom_kill_process.cold+0x10/0xb18 [ 1394.058586] out_of_memory+0xe3e/0x1190 [ 1394.062555] ? oom_killer_disable+0x1c0/0x1c0 [ 1394.067038] ? mutex_trylock+0x152/0x1a0 [ 1394.071090] __alloc_pages_nodemask+0x23e1/0x2720 [ 1394.075926] ? trace_hardirqs_on+0x10/0x10 [ 1394.080158] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1394.085001] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1394.089585] alloc_pages_current+0x155/0x260 [ 1394.093991] pagecache_get_page+0x3f5/0xab0 [ 1394.098311] grab_cache_page_write_begin+0x63/0x90 [ 1394.103234] ext4_da_write_begin+0x249/0xe70 [ 1394.107642] ? ext4_write_begin+0x1260/0x1260 [ 1394.112153] generic_perform_write+0x1c9/0x420 [ 1394.116731] ? __mnt_drop_write_file+0x5f/0x90 [ 1394.121301] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 1394.125956] ? current_time+0xb0/0xb0 [ 1394.129744] ? ext4_file_write_iter+0x1cc/0xd20 [ 1394.135108] __generic_file_write_iter+0x227/0x590 [ 1394.140030] ext4_file_write_iter+0x276/0xd20 [ 1394.144537] ? aa_file_perm+0x304/0xab0 [ 1394.148499] ? ext4_file_read_iter+0x330/0x330 [ 1394.153074] ? trace_hardirqs_on+0x10/0x10 [ 1394.157317] ? iov_iter_init+0xa6/0x1c0 [ 1394.161285] __vfs_write+0x44c/0x630 [ 1394.164992] ? kernel_read+0x110/0x110 [ 1394.168887] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1394.173925] vfs_write+0x17f/0x4d0 [ 1394.177470] SyS_write+0xf2/0x210 [ 1394.180921] ? SyS_read+0x210/0x210 [ 1394.184538] ? __do_page_fault+0x159/0xad0 [ 1394.188787] ? do_syscall_64+0x4c/0x640 [ 1394.192757] ? SyS_read+0x210/0x210 [ 1394.196375] do_syscall_64+0x1d5/0x640 [ 1394.200259] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1394.205439] RIP: 0033:0x7f98da11d1cd [ 1394.209139] RSP: 002b:00007f98d76d8590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1394.216855] RAX: ffffffffffffffda RBX: 00007f98cc024f40 RCX: 00007f98da11d1cd [ 1394.224130] RDX: 000000000000012c RSI: 00007f98cc024f40 RDI: 0000000000000006 [ 1394.231387] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1394.238645] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f98cc024cc0 [ 1394.245927] R13: 00007f98d76d85b0 R14: 00005602608df3a0 R15: 000000000000012c [ 1394.261577] 363840 pages reserved [ 1394.271831] 0 pages cma reserved [ 1394.349147] Mem-Info: [ 1394.360741] active_anon:28742 inactive_anon:15170 isolated_anon:0 [ 1394.360741] active_file:215 inactive_file:767 isolated_file:3 [ 1394.360741] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1394.360741] slab_reclaimable:13350 slab_unreclaimable:118094 [ 1394.360741] mapped:44588 shmem:17148 pagetables:786 bounce:0 [ 1394.360741] free:33100 free_pcp:327 free_cma:0 [ 1394.460819] Node 0 active_anon:112640kB inactive_anon:40408kB active_file:808kB inactive_file:2600kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:167572kB dirty:0kB writeback:0kB shmem:48192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1394.489013] Node 1 active_anon:2328kB inactive_anon:20272kB active_file:352kB inactive_file:580kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:11180kB dirty:0kB writeback:0kB shmem:20400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1394.570816] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1394.610762] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1394.615832] Node 0 DMA32 free:44408kB min:36200kB low:45248kB high:54296kB active_anon:112640kB inactive_anon:40340kB active_file:612kB inactive_file:2828kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2732kB bounce:0kB free_pcp:336kB local_pcp:300kB free_cma:0kB [ 1394.690837] lowmem_reserve[]: 0 0 0 0 0 [ 1394.690858] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1394.690892] lowmem_reserve[]: 0 0 0 0 0 [ 1394.690912] Node 1 Normal free:70908kB min:53696kB low:67120kB high:80544kB active_anon:2328kB inactive_anon:20304kB active_file:152kB inactive_file:532kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:412kB bounce:0kB free_pcp:52kB local_pcp:48kB free_cma:0kB [ 1394.690930] lowmem_reserve[]: 0 0 0 0 0 [ 1394.690947] Node 0 DMA: 1*4kB (E) 1*8kB (U) 1*16kB (E) 2*32kB (UE) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11036kB [ 1394.837579] Node 0 DMA32: 454*4kB (UME) 429*8kB (UME) 165*16kB (ME) 25*32kB (UME) 8*64kB (UE) 82*128kB (U) 31*256kB (U) 8*512kB (U) 4*1024kB (U) 0*2048kB 0*4096kB = 35824kB [ 1394.895805] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1394.906715] Node 1 Normal: 70*4kB (UM) 18*8kB (UME) 5*16kB (UE) 7*32kB (UM) 15*64kB (UE) 19*128kB (UME) 20*256kB (UME) 3*512kB (ME) 1*1024kB (E) 16*2048kB (U) 3*4096kB (U) = 56856kB [ 1394.931376] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1394.940237] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1394.992591] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1395.050752] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1395.059376] 17798 total pagecache pages [ 1395.092091] 0 pages in swap cache [ 1395.095600] Swap cache stats: add 0, delete 0, find 0/0 [ 1395.122815] Free swap = 0kB [ 1395.125833] Total swap = 0kB [ 1395.128828] 2097051 pages RAM [ 1395.132124] 0 pages HighMem/MovableOnly [ 1395.136092] 363840 pages reserved [ 1395.139528] 0 pages cma reserved [ 1395.147111] Out of memory (oom_kill_allocating_task): Kill process 22435 (rs:main Q:Reg) score 0 or sacrifice child [ 1395.170713] Killed process 22427 (rsyslogd) total-vm:254332kB, anon-rss:1040kB, file-rss:0kB, shmem-rss:0kB [ 1395.206274] oom_reaper: reaped process 22427 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1395.296642] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1395.376735] systemd[1]: rsyslog.service: Unit entered failed state. [ 1395.438849] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1396.097566] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1396.191779] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1396.227167] oom_reaper: reaped process 22425 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1396.237294] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1396.267079] CPU: 1 PID: 22413 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 1396.274995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1396.284359] Call Trace: [ 1396.286964] dump_stack+0x1b2/0x281 [ 1396.290600] warn_alloc.cold+0x96/0x1cc [ 1396.294703] ? zone_watermark_ok_safe+0x220/0x220 [ 1396.299571] __alloc_pages_nodemask+0x2127/0x2720 [ 1396.304424] ? io_schedule_timeout+0x140/0x140 [ 1396.309019] ? lock_acquire+0x170/0x3f0 [ 1396.313003] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1396.317863] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1396.322828] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1396.323321] ? __mutex_unlock_slowpath+0x75/0x770 [ 1396.323333] ? __sanitizer_cov_trace_pc+0xe/0x50 [ 1396.345098] alloc_pages_current+0x155/0x260 [ 1396.349520] ion_page_pool_alloc+0x118/0x1b0 [ 1396.353187] systemd-journal cpuset=/ [ 1396.353937] ion_system_heap_allocate+0x133/0x8c0 [ 1396.353950] ? _raw_spin_unlock+0x29/0x40 [ 1396.353958] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1396.353966] ? ion_system_contig_heap_create+0x130/0x130 [ 1396.353977] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1396.353986] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1396.353998] ion_alloc+0x27a/0x810 [ 1396.357837] mems_allowed=0-1 [ 1396.362693] ? ion_dma_buf_release+0x40/0x40 [ 1396.362706] ? __might_fault+0x177/0x1b0 [ 1396.362717] ion_ioctl+0xea/0x1f0 [ 1396.362726] ? ion_query_heaps+0x360/0x360 [ 1396.362739] ? sock_ioctl+0x16c/0x4c0 [ 1396.362747] ? ion_query_heaps+0x360/0x360 [ 1396.362756] do_vfs_ioctl+0x75a/0xff0 [ 1396.362771] ? ioctl_preallocate+0x1a0/0x1a0 [ 1396.380746] syz-executor.0: [ 1396.382266] ? lock_downgrade+0x740/0x740 [ 1396.387136] page allocation failure: order:0 [ 1396.390700] ? __fget+0x225/0x360 [ 1396.390709] ? do_vfs_ioctl+0xff0/0xff0 [ 1396.390719] ? security_file_ioctl+0x83/0xb0 [ 1396.390728] SyS_ioctl+0x7f/0xb0 [ 1396.390736] ? do_vfs_ioctl+0xff0/0xff0 [ 1396.390747] do_syscall_64+0x1d5/0x640 [ 1396.390763] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1396.390774] RIP: 0033:0x465f69 [ 1396.393895] syz-executor.5: [ 1396.398265] RSP: 002b:00007f2758795188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1396.410711] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1396.413762] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1396.417991] (null) [ 1396.421793] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1396.421799] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1396.421804] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1396.421808] R13: 00007fff98c6ba8f R14: 00007f2758795300 R15: 0000000000022000 [ 1396.443996] warn_alloc_show_mem: 1 callbacks suppressed [ 1396.444001] Mem-Info: [ 1396.450779] page allocation failure: order:0 [ 1396.464377] active_anon:28530 inactive_anon:15193 isolated_anon:0 [ 1396.464377] active_file:33 inactive_file:4 isolated_file:0 [ 1396.464377] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1396.464377] slab_reclaimable:13374 slab_unreclaimable:119396 [ 1396.464377] mapped:43934 shmem:17171 pagetables:779 bounce:0 [ 1396.464377] free:13864 free_pcp:30 free_cma:0 [ 1396.466269] CPU: 0 PID: 22436 Comm: systemd-journal Not tainted 4.14.225-syzkaller #0 [ 1396.469434] Node 0 active_anon:112708kB inactive_anon:40424kB active_file:84kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164896kB dirty:0kB writeback:0kB shmem:48208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1396.472424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1396.472428] Call Trace: [ 1396.472448] dump_stack+0x1b2/0x281 [ 1396.472460] dump_header+0x178/0x82f [ 1396.472470] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1396.472482] ? ___ratelimit+0x2cd/0x530 [ 1396.480184] Node 1 active_anon:1412kB inactive_anon:20348kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10840kB dirty:0kB writeback:0kB shmem:20476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1396.487370] oom_kill_process.cold+0x10/0xb18 [ 1396.487388] out_of_memory+0xe3e/0x1190 [ 1396.487400] ? oom_killer_disable+0x1c0/0x1c0 [ 1396.487418] ? mutex_trylock+0x152/0x1a0 [ 1396.494734] Node 0 [ 1396.496842] __alloc_pages_nodemask+0x23e1/0x2720 [ 1396.504159] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1396.511387] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1396.511409] ? cache_grow_begin+0x41/0x630 [ 1396.518688] lowmem_reserve[]: [ 1396.525970] cache_grow_begin+0x91/0x630 [ 1396.525980] ? cache_grow_begin+0x91/0x630 [ 1396.525988] fallback_alloc+0x207/0x2c0 [ 1396.525999] kmem_cache_alloc+0x1e5/0x3c0 [ 1396.526011] getname_flags+0xc8/0x550 [ 1396.531389] 0 [ 1396.533767] user_path_at_empty+0x2a/0x50 [ 1396.538160] 2717 [ 1396.571750] SyS_faccessat+0x21b/0x680 [ 1396.571760] ? SyS_fallocate+0x80/0x80 [ 1396.571768] ? do_syscall_64+0x4c/0x640 [ 1396.571774] ? SyS_faccessat+0x680/0x680 [ 1396.571781] do_syscall_64+0x1d5/0x640 [ 1396.571800] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1396.579759] 2718 [ 1396.608560] RIP: 0033:0x7fc5960a69c7 [ 1396.608565] RSP: 002b:00007ffd6e4ded58 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1396.608573] RAX: ffffffffffffffda RBX: 00007ffd6e4e1c70 RCX: 00007fc5960a69c7 [ 1396.608577] RDX: 00007fc596b17a00 RSI: 0000000000000000 RDI: 0000564004e289a3 [ 1396.608580] RBP: 00007ffd6e4ded90 R08: 0000000000000000 R09: 0000000000000000 [ 1396.608584] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1396.608588] R13: 0000000000000000 R14: 00007ffd6e4e1c70 R15: 00007ffd6e4df280 [ 1396.617052] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1396.629268] 2718 [ 1396.636770] (null) [ 1396.639219] 2718 [ 1396.668165] syz-executor.5 cpuset= [ 1396.679025] syz-executor.0 cpuset= [ 1396.685058] / [ 1396.849006] / [ 1396.856314] Mem-Info: [ 1396.860432] Node 0 [ 1396.860448] active_anon:28530 inactive_anon:15193 isolated_anon:0 [ 1396.860448] active_file:33 inactive_file:4 isolated_file:0 [ 1396.860448] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1396.860448] slab_reclaimable:13374 slab_unreclaimable:119396 [ 1396.860448] mapped:43934 shmem:17171 pagetables:779 bounce:0 [ 1396.860448] free:13864 free_pcp:30 free_cma:0 [ 1396.860464] Node 0 active_anon:112708kB inactive_anon:40424kB active_file:84kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164896kB dirty:0kB writeback:0kB shmem:48208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1396.862731] DMA32 free:17656kB min:36200kB low:45248kB high:54296kB active_anon:112708kB inactive_anon:40424kB active_file:96kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2768kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1396.862735] lowmem_reserve[]: 0 0 0 0 0 [ 1396.862755] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1396.862774] lowmem_reserve[]: 0 0 0 [ 1396.904350] Node 1 active_anon:1412kB inactive_anon:20348kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10840kB dirty:0kB writeback:0kB shmem:20476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1396.928168] 0 [ 1396.969935] mems_allowed=0-1 [ 1396.984887] 0 [ 1397.003351] Node 0 [ 1397.022254] mems_allowed=0-1 [ 1397.025365] CPU: 1 PID: 22425 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1397.033239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1397.036785] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1397.042598] Call Trace: [ 1397.042622] dump_stack+0x1b2/0x281 [ 1397.042636] warn_alloc.cold+0x96/0x1cc [ 1397.042647] ? zone_watermark_ok_safe+0x220/0x220 [ 1397.042657] ? usleep_range+0x130/0x130 [ 1397.042666] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1397.042679] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1397.042689] ? run_timer_softirq+0x5a0/0x5a0 [ 1397.042708] __alloc_pages_nodemask+0x2127/0x2720 [ 1397.106731] ? lock_acquire+0x170/0x3f0 [ 1397.110724] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1397.115583] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1397.120085] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1397.125540] ? check_preemption_disabled+0x35/0x240 [ 1397.130575] alloc_pages_current+0x155/0x260 [ 1397.134996] ion_page_pool_alloc+0x118/0x1b0 [ 1397.139410] ion_system_heap_allocate+0x133/0x8c0 [ 1397.144275] ? ion_alloc+0x187/0x810 [ 1397.147989] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1397.153437] ? ion_system_contig_heap_create+0x130/0x130 [ 1397.158887] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1397.163926] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1397.168777] ion_alloc+0x204/0x810 [ 1397.172331] ? ion_dma_buf_release+0x40/0x40 [ 1397.176752] ? __might_fault+0x177/0x1b0 [ 1397.180817] ion_ioctl+0xea/0x1f0 [ 1397.184273] ? ion_query_heaps+0x360/0x360 [ 1397.188518] ? retint_kernel+0x2d/0x2d [ 1397.192475] ? ion_query_heaps+0x360/0x360 [ 1397.196711] do_vfs_ioctl+0x75a/0xff0 [ 1397.200516] ? ioctl_preallocate+0x1a0/0x1a0 [ 1397.204944] ? retint_kernel+0x2d/0x2d [ 1397.208841] ? do_vfs_ioctl+0xff0/0xff0 [ 1397.212825] ? __fdget+0x18d/0x1f0 [ 1397.216361] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 1397.221196] ? security_file_ioctl+0x83/0xb0 [ 1397.225732] SyS_ioctl+0x7f/0xb0 [ 1397.229129] ? do_vfs_ioctl+0xff0/0xff0 [ 1397.233119] do_syscall_64+0x1d5/0x640 [ 1397.237048] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1397.242247] RIP: 0033:0x465f69 [ 1397.245457] RSP: 002b:00007f0a724bf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1397.253172] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1397.260440] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1397.267710] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1397.274986] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1397.278463] lowmem_reserve[]: [ 1397.282280] R13: 00007fffce0e3c8f R14: 00007f0a724bf300 R15: 0000000000022000 [ 1397.285458] Node 1 Normal free:26576kB min:53696kB low:67120kB high:80544kB active_anon:1396kB inactive_anon:20348kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:348kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1397.299187] CPU: 0 PID: 22448 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1397.325716] lowmem_reserve[]: [ 1397.333561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1397.333566] Call Trace: [ 1397.333587] dump_stack+0x1b2/0x281 [ 1397.333601] warn_alloc.cold+0x96/0x1cc [ 1397.333614] ? zone_watermark_ok_safe+0x220/0x220 [ 1397.336715] 0 [ 1397.346072] ? usleep_range+0x130/0x130 [ 1397.346082] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1397.346093] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1397.346102] ? run_timer_softirq+0x5a0/0x5a0 [ 1397.346125] __alloc_pages_nodemask+0x2127/0x2720 [ 1397.346141] ? lock_acquire+0x170/0x3f0 [ 1397.348718] 0 [ 1397.352366] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1397.352379] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1397.352394] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1397.352407] ? policy_node+0x28/0x110 [ 1397.356382] 0 [ 1397.361217] alloc_pages_current+0x155/0x260 [ 1397.361233] ion_page_pool_alloc+0x118/0x1b0 [ 1397.361243] ion_system_heap_allocate+0x133/0x8c0 [ 1397.361260] ? ion_alloc+0x187/0x810 [ 1397.363043] 0 [ 1397.367005] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1397.372128] 0 [ 1397.377103] ? ion_system_contig_heap_create+0x130/0x130 [ 1397.386323] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1397.386336] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1397.390291] Node 0 [ 1397.392086] ion_alloc+0x204/0x810 [ 1397.392100] ? ion_dma_buf_release+0x40/0x40 [ 1397.392111] ? __might_fault+0x177/0x1b0 [ 1397.392124] ion_ioctl+0xea/0x1f0 [ 1397.396963] DMA: [ 1397.401450] ? ion_query_heaps+0x360/0x360 [ 1397.401461] ? __alloc_fd+0x1be/0x490 [ 1397.401470] ? ion_query_heaps+0x360/0x360 [ 1397.401484] do_vfs_ioctl+0x75a/0xff0 [ 1397.407095] 1*4kB [ 1397.410712] ? ioctl_preallocate+0x1a0/0x1a0 [ 1397.410722] ? lock_downgrade+0x740/0x740 [ 1397.410734] ? __fget+0x225/0x360 [ 1397.410744] ? do_vfs_ioctl+0xff0/0xff0 [ 1397.412531] (E) [ 1397.416933] ? security_file_ioctl+0x83/0xb0 [ 1397.421360] 1*8kB [ 1397.426152] SyS_ioctl+0x7f/0xb0 [ 1397.429835] (U) [ 1397.431627] ? do_vfs_ioctl+0xff0/0xff0 [ 1397.431639] do_syscall_64+0x1d5/0x640 [ 1397.431655] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1397.431665] RIP: 0033:0x465f69 [ 1397.431673] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 [ 1397.437117] 2*16kB [ 1397.438897] ORIG_RAX: 0000000000000010 [ 1397.444383] (UE) [ 1397.449336] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1397.449345] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1397.454221] 13*32kB [ 1397.456393] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1397.456401] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1397.459924] (UE) [ 1397.464318] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1397.477950] 0 [ 1397.483702] 2*64kB [ 1397.489025] 2717 [ 1397.491189] (UE) [ 1397.505496] 2718 [ 1397.514481] 1*128kB [ 1397.527972] 2718 [ 1397.536160] (E) [ 1397.547644] 2718 [ 1397.556937] 2*256kB [ 1397.570718] (UE) [ 1397.589906] Node 0 [ 1397.601043] 1*512kB [ 1397.611994] DMA32 free:18292kB min:36200kB low:45248kB high:54296kB active_anon:112632kB inactive_anon:40424kB active_file:20kB inactive_file:20kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7424kB pagetables:2664kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 1397.623432] (E) [ 1397.660051] lowmem_reserve[]: 0 0 0 0 0 [ 1397.665182] Mem-Info: [ 1397.666108] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1397.668545] active_anon:28507 inactive_anon:15193 isolated_anon:0 [ 1397.668545] active_file:17 inactive_file:17 isolated_file:0 [ 1397.668545] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1397.668545] slab_reclaimable:13375 slab_unreclaimable:119393 [ 1397.668545] mapped:43894 shmem:17171 pagetables:753 bounce:0 [ 1397.668545] free:13956 free_pcp:34 free_cma:0 [ 1397.668564] Node 0 active_anon:112632kB inactive_anon:40424kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164836kB dirty:0kB writeback:0kB shmem:48208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1397.703173] lowmem_reserve[]: [ 1397.737920] 1*1024kB [ 1397.774806] 0 0 0 0 0 [ 1397.792316] Node 1 Normal free:60888kB min:53696kB low:67120kB high:80544kB active_anon:1396kB inactive_anon:20348kB active_file:48kB inactive_file:1748kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:348kB bounce:0kB free_pcp:572kB local_pcp:300kB free_cma:0kB [ 1397.802778] (E) [ 1397.821889] lowmem_reserve[]: 0 0 0 0 0 [ 1397.828664] Node 0 DMA: 1*4kB (E) 1*8kB (U) 2*16kB (UE) 13*32kB (UE) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10956kB [ 1397.848478] 2*2048kB (ME) 1*4096kB (U) = 10956kB [ 1397.848701] Node 0 DMA32: 796*4kB (UME) 493*8kB (UME) 171*16kB (UE) 328*32kB (UE) 85*64kB (U) 44*128kB (U) 5*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32712kB [ 1397.869195] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1397.895432] Node 1 active_anon:1396kB inactive_anon:20348kB active_file:148kB inactive_file:3448kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13140kB dirty:0kB writeback:0kB shmem:20476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1397.904864] Node 1 [ 1397.923751] Node 0 DMA32: 1080*4kB (UME) 891*8kB (UME) 226*16kB (UME) 363*32kB (UE) 177*64kB (UM) 49*128kB (UM) 8*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 46328kB [ 1397.942696] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1397.945167] Normal: 1*4kB (E) 1*8kB (M) 1*16kB (U) 809*32kB (UM) 120*64kB (U) 31*128kB (UME) 43*256kB (UE) 19*512kB (UE) 1*1024kB (U) 0*2048kB 0*4096kB = 59324kB 08:37:19 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) [ 1397.971291] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1397.998904] Node 1 Normal: 325*4kB (UME) 5*8kB (UM) 5*16kB (UM) 812*32kB (UM) 120*64kB (U) 31*128kB (UME) 43*256kB (UE) 19*512kB (UE) 1*1024kB (U) 0*2048kB 0*4096kB = 60812kB [ 1398.012902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1398.036314] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1398.057173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1398.060883] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1398.084126] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1398.090013] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1398.131323] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1398.137881] Node 0 [ 1398.139930] 19040 total pagecache pages [ 1398.139940] 0 pages in swap cache [ 1398.139945] Swap cache stats: add 0, delete 0, find 0/0 [ 1398.139948] Free swap = 0kB [ 1398.139951] Total swap = 0kB [ 1398.139956] 2097051 pages RAM [ 1398.139959] 0 pages HighMem/MovableOnly [ 1398.139962] 363840 pages reserved [ 1398.139965] 0 pages cma reserved [ 1398.139972] Out of memory (oom_kill_allocating_task): Kill process 22436 (systemd-journal) score 0 or sacrifice child [ 1398.140002] Killed process 22436 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1448kB [ 1398.182361] oom_reaper: reaped process 22436 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1448kB [ 1398.210543] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1398.242849] systemd[1]: Stopped System Logging Service. [ 1398.261869] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1398.284949] 19005 total pagecache pages [ 1398.297975] 0 pages in swap cache [ 1398.311082] Swap cache stats: add 0, delete 0, find 0/0 [ 1398.324749] Free swap = 0kB [ 1398.337175] Total swap = 0kB [ 1398.354903] 2097051 pages RAM [ 1398.359769] systemd[1]: Starting System Logging Service... [ 1398.366904] 0 pages HighMem/MovableOnly [ 1398.379842] DMA32 free:39112kB min:36200kB low:45248kB high:54296kB active_anon:112668kB inactive_anon:40424kB active_file:1752kB inactive_file:1288kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7488kB pagetables:2768kB bounce:0kB free_pcp:660kB local_pcp:676kB free_cma:0kB [ 1398.395145] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1398.416835] 363840 pages reserved [ 1398.429641] 0 pages cma reserved [ 1398.466331] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1398.489108] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1398.495327] lowmem_reserve[]: 0 0 0 0 0 [ 1398.500424] CPU: 1 PID: 22453 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 1398.508323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1398.517682] Call Trace: [ 1398.520277] dump_stack+0x1b2/0x281 [ 1398.523917] warn_alloc.cold+0x96/0x1cc [ 1398.527900] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1398.532924] ? zone_watermark_ok_safe+0x220/0x220 [ 1398.537786] __alloc_pages_nodemask+0x2127/0x2720 [ 1398.542672] ? lock_acquire+0x170/0x3f0 [ 1398.546658] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1398.551510] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1398.556968] ? __mutex_unlock_slowpath+0x75/0x770 [ 1398.561821] alloc_pages_current+0x155/0x260 [ 1398.566236] ion_page_pool_alloc+0x118/0x1b0 [ 1398.570644] ion_system_heap_allocate+0x133/0x8c0 [ 1398.575535] ? ion_alloc+0x187/0x810 [ 1398.579240] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1398.584683] ? ion_system_contig_heap_create+0x130/0x130 [ 1398.590130] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1398.595141] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1398.599988] ion_alloc+0x204/0x810 [ 1398.603527] ? ion_dma_buf_release+0x40/0x40 [ 1398.607963] ? __might_fault+0x177/0x1b0 [ 1398.612018] ion_ioctl+0xea/0x1f0 [ 1398.615483] ? ion_query_heaps+0x360/0x360 [ 1398.619706] ? __alloc_fd+0x1be/0x490 [ 1398.623506] ? ion_query_heaps+0x360/0x360 [ 1398.627735] do_vfs_ioctl+0x75a/0xff0 [ 1398.631560] ? ioctl_preallocate+0x1a0/0x1a0 [ 1398.635970] ? lock_downgrade+0x740/0x740 [ 1398.640129] ? __fget+0x225/0x360 [ 1398.643575] ? do_vfs_ioctl+0xff0/0xff0 [ 1398.647544] ? security_file_ioctl+0x83/0xb0 [ 1398.651952] SyS_ioctl+0x7f/0xb0 [ 1398.655319] ? do_vfs_ioctl+0xff0/0xff0 [ 1398.659297] do_syscall_64+0x1d5/0x640 [ 1398.663205] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1398.668405] RIP: 0033:0x465f69 [ 1398.671589] RSP: 002b:00007f5ba2c45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1398.679304] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1398.686572] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1398.694456] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1398.701740] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1398.709011] R13: 00007ffec1e0e6ff R14: 00007f5ba2c45300 R15: 0000000000022000 [ 1398.731648] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1398.736114] warn_alloc_show_mem: 1 callbacks suppressed [ 1398.736118] Mem-Info: [ 1398.822966] active_anon:28391 inactive_anon:15193 isolated_anon:12 [ 1398.822966] active_file:260 inactive_file:444 isolated_file:32 [ 1398.822966] unevictable:0 dirty:14 writeback:0 unstable:0 [ 1398.822966] slab_reclaimable:13396 slab_unreclaimable:119139 [ 1398.822966] mapped:44033 shmem:17171 pagetables:779 bounce:0 [ 1398.822966] free:26040 free_pcp:201 free_cma:0 [ 1398.825994] lowmem_reserve[]: 0 0 0 0 0 [ 1398.907354] Node 0 active_anon:112568kB inactive_anon:40424kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:164004kB dirty:12kB writeback:0kB shmem:48208kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1398.937177] Node 1 Normal free:53540kB min:53696kB low:67120kB high:80544kB active_anon:1396kB inactive_anon:20348kB active_file:292kB inactive_file:36kB unevictable:0kB writepending:44kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:348kB bounce:0kB free_pcp:588kB local_pcp:300kB free_cma:0kB [ 1398.957784] Node 1 active_anon:996kB inactive_anon:20348kB active_file:192kB inactive_file:40kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:10228kB dirty:44kB writeback:0kB shmem:20476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1399.050681] lowmem_reserve[]: 0 0 0 0 0 [ 1399.054732] Node 0 DMA: 5*4kB (UE) 0*8kB 4*16kB (UE) 13*32kB (UE) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10996kB [ 1399.064471] Node 0 DMA free:10996kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1399.090689] Node 0 DMA32: 657*4kB (ME) 402*8kB (UME) 153*16kB (UME) 309*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18180kB [ 1399.104204] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1399.118449] Node 0 DMA32 free:18064kB min:36200kB low:45248kB high:54296kB active_anon:112580kB inactive_anon:40424kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7552kB pagetables:2716kB bounce:0kB free_pcp:144kB local_pcp:24kB free_cma:0kB [ 1399.120668] Node 0 [ 1399.149256] systemd-cgroups invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1399.168230] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1399.182805] lowmem_reserve[]: 0 0 0 0 0 [ 1399.186824] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1399.195522] syz-executor.5 cpuset= [ 1399.219480] systemd-cgroups cpuset=/ mems_allowed=0-1 [ 1399.228434] CPU: 1 PID: 22456 Comm: systemd-cgroups Not tainted 4.14.225-syzkaller #0 [ 1399.230185] / [ 1399.236407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1399.236416] Call Trace: [ 1399.250082] dump_stack+0x1b2/0x281 [ 1399.250334] mems_allowed=0-1 [ 1399.253726] dump_header+0x178/0x82f [ 1399.253737] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1399.253745] ? ___ratelimit+0x2cd/0x530 [ 1399.253754] oom_kill_process.cold+0x10/0xb18 [ 1399.253772] out_of_memory+0xe3e/0x1190 [ 1399.253783] ? oom_killer_disable+0x1c0/0x1c0 [ 1399.253790] ? mutex_trylock+0x152/0x1a0 [ 1399.253800] __alloc_pages_nodemask+0x23e1/0x2720 [ 1399.253824] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1399.293325] lowmem_reserve[]: [ 1399.296009] alloc_pages_current+0x155/0x260 [ 1399.313153] filemap_fault+0xea3/0x1980 [ 1399.317134] ext4_filemap_fault+0x84/0xb0 [ 1399.321291] __do_fault+0xfa/0x380 [ 1399.324840] __handle_mm_fault+0x2497/0x4620 [ 1399.329274] ? vm_insert_page+0x7c0/0x7c0 [ 1399.330223] 0 [ 1399.333418] ? vm_mmap_pgoff+0x168/0x1a0 [ 1399.333425] ? vm_mmap_pgoff+0xcb/0x1a0 [ 1399.333440] handle_mm_fault+0x391/0x860 [ 1399.333452] __do_page_fault+0x549/0xad0 [ 1399.333464] ? spurious_fault+0x640/0x640 [ 1399.333471] ? do_page_fault+0x60/0x500 [ 1399.333480] ? page_fault+0x2f/0x50 [ 1399.333487] page_fault+0x45/0x50 [ 1399.333495] RIP: 7d1e03f0:0x47c3134 [ 1399.333500] RSP: 7d1f4be0:00007fffabb98980 EFLAGS: 7fd57d60f000 [ 1399.353048] Normal: [ 1399.369873] CPU: 0 PID: 22448 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1399.385763] 0*4kB [ 1399.386714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1399.386722] 0*8kB [ 1399.388911] Call Trace: [ 1399.402983] dump_stack+0x1b2/0x281 [ 1399.406107] 0*16kB 0*32kB [ 1399.406609] warn_alloc.cold+0x96/0x1cc [ 1399.406617] 0*64kB [ 1399.409509] ? zone_watermark_ok_safe+0x220/0x220 [ 1399.413504] 0*128kB [ 1399.415701] __alloc_pages_nodemask+0x2127/0x2720 [ 1399.420507] 0*256kB [ 1399.422837] ? lock_acquire+0x170/0x3f0 [ 1399.422849] ? lock_acquire+0x170/0x3f0 [ 1399.422865] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1399.422882] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1399.427706] 0*512kB [ 1399.430057] ? __mutex_unlock_slowpath+0x75/0x770 [ 1399.434043] 0*1024kB [ 1399.437982] alloc_pages_current+0x155/0x260 [ 1399.442837] 0*2048kB [ 1399.448245] ion_page_pool_alloc+0x118/0x1b0 [ 1399.450534] 0*4096kB [ 1399.455380] ion_system_heap_allocate+0x133/0x8c0 [ 1399.455392] ? _raw_spin_unlock+0x29/0x40 [ 1399.455401] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1399.455410] ? ion_system_contig_heap_create+0x130/0x130 [ 1399.455425] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1399.457816] = 0kB [ 1399.462241] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1399.462254] ion_alloc+0x27a/0x810 [ 1399.462269] ? ion_dma_buf_release+0x40/0x40 [ 1399.462281] ? __might_fault+0x177/0x1b0 [ 1399.464673] Node 1 [ 1399.469094] ion_ioctl+0xea/0x1f0 [ 1399.471599] Normal: [ 1399.476425] ? ion_query_heaps+0x360/0x360 [ 1399.480569] 69*4kB [ 1399.485509] ? __alloc_fd+0x1be/0x490 [ 1399.485520] ? ion_query_heaps+0x360/0x360 [ 1399.485530] do_vfs_ioctl+0x75a/0xff0 [ 1399.485545] ? ioctl_preallocate+0x1a0/0x1a0 [ 1399.491028] Mem-Info: [ 1399.495985] ? lock_downgrade+0x740/0x740 [ 1399.496000] ? __fget+0x225/0x360 [ 1399.498051] active_anon:28413 inactive_anon:15192 isolated_anon:0 [ 1399.498051] active_file:7 inactive_file:14 isolated_file:0 [ 1399.498051] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1399.498051] slab_reclaimable:13457 slab_unreclaimable:118726 [ 1399.498051] mapped:43518 shmem:17171 pagetables:758 bounce:0 [ 1399.498051] free:13856 free_pcp:30 free_cma:0 [ 1399.502872] ? do_vfs_ioctl+0xff0/0xff0 [ 1399.502882] ? security_file_ioctl+0x83/0xb0 [ 1399.502891] SyS_ioctl+0x7f/0xb0 [ 1399.502899] ? do_vfs_ioctl+0xff0/0xff0 [ 1399.502911] do_syscall_64+0x1d5/0x640 [ 1399.506467] (UME) [ 1399.510883] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1399.510893] RIP: 0033:0x465f69 [ 1399.510898] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1399.510911] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1399.514958] 14*8kB [ 1399.517178] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1399.517186] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1399.520692] Node 0 active_anon:112580kB inactive_anon:40424kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163956kB dirty:0kB writeback:0kB shmem:48212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1399.522927] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1399.522935] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1399.527158] Node 1 active_anon:1072kB inactive_anon:20344kB active_file:8kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10116kB dirty:0kB writeback:0kB shmem:20472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1399.534581] 0 [ 1399.537776] syz-executor.3: [ 1399.541612] 0 [ 1399.559007] (ME) [ 1399.593444] 0 [ 1399.609288] page allocation failure: order:0 [ 1399.615237] 0 [ 1399.616378] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1399.637965] Node 0 [ 1399.642615] Node 1 [ 1399.655707] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1399.685712] (null) [ 1399.699922] 18*16kB [ 1399.727182] Normal free:26400kB min:53696kB low:67120kB high:80544kB active_anon:1072kB inactive_anon:20344kB active_file:28kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:316kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1399.738858] lowmem_reserve[]: [ 1399.739789] lowmem_reserve[]: [ 1399.754628] 0 [ 1399.780687] Mem-Info: [ 1399.798338] (ME) [ 1399.809670] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1399.809696] CPU: 0 PID: 22413 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 1399.809702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1399.809706] Call Trace: [ 1399.809727] dump_stack+0x1b2/0x281 [ 1399.809749] warn_alloc.cold+0x96/0x1cc [ 1399.809763] ? zone_watermark_ok_safe+0x220/0x220 [ 1399.829169] 810*32kB [ 1399.835160] ? usleep_range+0x130/0x130 [ 1399.835170] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1399.835182] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1399.835197] ? run_timer_softirq+0x5a0/0x5a0 [ 1399.844602] 2717 [ 1399.847140] __alloc_pages_nodemask+0x2127/0x2720 [ 1399.850763] 2718 [ 1399.854702] ? lock_acquire+0x170/0x3f0 [ 1399.859508] 2718 [ 1399.861916] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1399.861928] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1399.861945] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1399.865912] (UME) [ 1399.870996] alloc_pages_current+0x155/0x260 [ 1399.871013] ion_page_pool_alloc+0x118/0x1b0 [ 1399.871024] ion_system_heap_allocate+0x133/0x8c0 [ 1399.876020] 0*64kB [ 1399.880429] ? _raw_spin_unlock+0x29/0x40 [ 1399.882515] 2718 [ 1399.887299] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1399.893289] ? ion_system_contig_heap_create+0x130/0x130 [ 1399.893301] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1399.893311] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1399.893322] ion_alloc+0x27a/0x810 [ 1399.893336] ? ion_dma_buf_release+0x40/0x40 [ 1399.893348] ? __might_fault+0x177/0x1b0 [ 1399.899647] 0*128kB [ 1399.900250] ion_ioctl+0xea/0x1f0 [ 1399.905030] Node 0 [ 1399.910163] ? ion_query_heaps+0x360/0x360 [ 1399.912335] 0*256kB [ 1399.916723] ? sock_ioctl+0x16c/0x4c0 [ 1399.921175] DMA32 free:18056kB min:36200kB low:45248kB high:54296kB active_anon:112580kB inactive_anon:40424kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7552kB pagetables:2716kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1399.925964] ? ion_query_heaps+0x360/0x360 [ 1399.928172] lowmem_reserve[]: [ 1399.932317] do_vfs_ioctl+0x75a/0xff0 [ 1399.932330] ? ioctl_preallocate+0x1a0/0x1a0 [ 1399.932338] ? lock_downgrade+0x740/0x740 [ 1399.932351] ? __fget+0x225/0x360 [ 1399.932361] ? do_vfs_ioctl+0xff0/0xff0 [ 1399.934436] 0*512kB [ 1399.939340] ? security_file_ioctl+0x83/0xb0 [ 1399.944817] 0 [ 1399.949777] SyS_ioctl+0x7f/0xb0 [ 1399.954644] 0*1024kB [ 1399.958130] ? do_vfs_ioctl+0xff0/0xff0 [ 1399.962555] 0*2048kB [ 1399.966587] do_syscall_64+0x1d5/0x640 [ 1399.968900] 0*4096kB [ 1399.972363] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1399.972372] RIP: 0033:0x465f69 [ 1399.972376] RSP: 002b:00007f2758795188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1399.972389] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1399.974620] 0 [ 1399.979956] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1399.979964] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1399.982309] 0 [ 1399.986052] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1399.986061] R13: 00007fff98c6ba8f R14: 00007f2758795300 R15: 0000000000022000 [ 1400.014121] = 26596kB [ 1400.023264] 0 [ 1400.047485] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1400.050816] active_anon:28413 inactive_anon:15192 isolated_anon:0 [ 1400.050816] active_file:11 inactive_file:10 isolated_file:0 [ 1400.050816] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1400.050816] slab_reclaimable:13456 slab_unreclaimable:118726 [ 1400.050816] mapped:43518 shmem:17171 pagetables:758 bounce:0 [ 1400.050816] free:13917 free_pcp:30 free_cma:0 [ 1400.068000] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1400.068680] Node 0 active_anon:112580kB inactive_anon:40424kB active_file:20kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163956kB dirty:0kB writeback:0kB shmem:48212kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1400.089102] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1400.094309] 0 [ 1400.119802] 0 [ 1400.127228] Node 1 active_anon:1080kB inactive_anon:20344kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10128kB dirty:0kB writeback:0kB shmem:20472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1400.147183] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1400.184650] 0 [ 1400.216953] 0 [ 1400.229701] 0 [ 1400.267376] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1400.276394] Node 0 [ 1400.297497] 17200 total pagecache pages [ 1400.303825] 0 pages in swap cache [ 1400.307282] Swap cache stats: add 0, delete 0, find 0/0 [ 1400.316934] lowmem_reserve[]: 0 0 0 0 0 [ 1400.319107] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1400.321002] Node 1 Normal free:26596kB min:53696kB low:67120kB high:80544kB active_anon:1080kB inactive_anon:20344kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:320kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1400.321022] lowmem_reserve[]: 0 0 0 0 0 [ 1400.321047] Node 0 [ 1400.365471] 0 [ 1400.380601] Free swap = 0kB [ 1400.387522] Total swap = 0kB [ 1400.390534] 2097051 pages RAM [ 1400.397898] 0 pages HighMem/MovableOnly [ 1400.401929] 363840 pages reserved [ 1400.405373] Node 0 DMA: 2*4kB (UE) 0*8kB 3*16kB (UE) 13*32kB (UE) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10968kB [ 1400.405528] 0 pages cma reserved [ 1400.443546] DMA: 2*4kB (UE) 0*8kB 3*16kB (UE) 13*32kB (UE) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10968kB [ 1400.477034] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1400.487386] Node 0 DMA32 free:20604kB min:36200kB low:45248kB high:54296kB active_anon:112580kB inactive_anon:40424kB active_file:20kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:2716kB bounce:0kB free_pcp:736kB local_pcp:632kB free_cma:0kB [ 1400.487940] Node 0 [ 1400.536720] systemd[1]: Failed to start Journal Service. [ 1400.538981] Node 0 [ 1400.540438] systemd[1]: Dependency failed for Flush Journal to Persistent Storage. [ 1400.554513] DMA32: 838*4kB (UME) 401*8kB (ME) 157*16kB (UME) 300*32kB (UME) 187*64kB (UE) 44*128kB (U) 34*256kB (U) 8*512kB (U) 5*1024kB (U) 0*2048kB 0*4096kB = 54192kB [ 1400.556897] DMA32: [ 1400.570248] lowmem_reserve[]: 0 0 0 0 0 [ 1400.570274] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1400.570297] lowmem_reserve[]: 0 0 0 0 0 [ 1400.570315] Node 1 Normal free:129488kB min:53696kB low:67120kB high:80544kB active_anon:1080kB inactive_anon:20344kB active_file:136kB inactive_file:4736kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:320kB bounce:0kB free_pcp:1196kB local_pcp:716kB free_cma:0kB [ 1400.570336] lowmem_reserve[]: 0 0 0 0 0 [ 1400.570360] Node 0 [ 1400.640139] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1400.650681] 838*4kB (UME) 402*8kB (UME) 153*16kB (UME) 300*32kB (UME) 807*64kB (UME) 76*128kB (UM) 39*256kB (U) 27*512kB (UM) 13*1024kB (U) 1*2048kB (U) 0*4096kB = 119160kB [ 1400.653474] systemd[1]: systemd-journal-flush.service: Job systemd-journal-flush.service/start failed with result 'dependency'. [ 1400.680758] Node 1 Normal: 90*4kB (UME) 53*8kB (U) 86*16kB (UME) 883*32kB (UE) 781*64kB (U) 88*128kB (UM) 49*256kB (U) 27*512kB (U) 31*1024kB (U) 13*2048kB (U) 4*4096kB (U) = 192784kB [ 1400.697527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1400.706848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1400.716079] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1400.725172] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1400.732911] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1400.741971] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1400.750296] DMA: 2*4kB (UE) 0*8kB 3*16kB (UE) 13*32kB (UE) 12*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11992kB [ 1400.765746] 18754 total pagecache pages [ 1400.774279] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1400.785859] 0 pages in swap cache [ 1400.790677] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1400.809397] systemd[1]: Stopped Journal Service. [ 1400.814632] Swap cache stats: add 0, delete 0, find 0/0 [ 1400.826680] Free swap = 0kB [ 1400.829775] Node 0 DMA32: 872*4kB (UE) 390*8kB (UE) 151*16kB (E) 314*32kB (UE) 807*64kB (UME) 75*128kB (U) 40*256kB (UM) 26*512kB (U) 13*1024kB (U) 1*2048kB (U) 0*4096kB = 119232kB [ 1400.830338] Node 1 [ 1400.864645] Total swap = 0kB [ 1400.874819] 2097051 pages RAM [ 1400.884439] Normal: 2674*4kB (UME) 851*8kB (U) 1098*16kB (UME) 1398*32kB (UME) 849*64kB (UM) 106*128kB (UM) 63*256kB (UM) 30*512kB (U) 34*1024kB (U) 13*2048kB (U) 4*4096kB (U) = 257024kB [ 1400.885953] 0 pages HighMem/MovableOnly [ 1400.909241] systemd[1]: Starting Journal Service... [ 1400.921092] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1400.923995] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1400.955872] 363840 pages reserved [ 1400.963780] 0 pages cma reserved [ 1400.969289] Node 1 Normal: 5505*4kB (UME) 923*8kB (U) 1246*16kB (UME) 1453*32kB (UME) 988*64kB (UM) 106*128kB (UM) 63*256kB (UM) 30*512kB (U) 34*1024kB (U) 13*2048kB (U) 4*4096kB (U) = 281948kB [ 1400.971589] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1400.987866] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1401.018981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1401.029589] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1401.044390] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1401.067431] 19263 total pagecache pages [ 1401.067447] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1401.089574] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1401.100479] 19359 total pagecache pages [ 1401.107305] 0 pages in swap cache [ 1401.115188] Swap cache stats: add 0, delete 0, find 0/0 [ 1401.120565] Free swap = 0kB [ 1401.123805] Total swap = 0kB [ 1401.124451] 0 pages in swap cache [ 1401.140733] 2097051 pages RAM [ 1401.140884] Swap cache stats: add 0, delete 0, find 0/0 [ 1401.143915] 0 pages HighMem/MovableOnly [ 1401.150133] Free swap = 0kB [ 1401.153374] 363840 pages reserved [ 1401.185151] 0 pages cma reserved [ 1401.185162] Total swap = 0kB [ 1401.188593] Out of memory (oom_kill_allocating_task): Kill process 22456 (systemd-cgroups) score 0 or sacrifice child [ 1401.201839] 2097051 pages RAM [ 1401.211762] 0 pages HighMem/MovableOnly [ 1401.223292] Killed process 22456 (systemd-cgroups) total-vm:37652kB, anon-rss:176kB, file-rss:0kB, shmem-rss:0kB [ 1401.223295] 363840 pages reserved [ 1401.223302] 0 pages cma reserved [ 1401.243572] systemd[1]: Started System Logging Service. [ 1401.267172] oom_reaper: reaped process 22456 (systemd-cgroups), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1401.409424] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1401.423835] systemd-journald[22458]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. 08:37:23 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) [ 1401.972812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1401.981210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1402.032461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1402.060755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1402.069021] device bridge_slave_1 left promiscuous mode [ 1402.101129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.108612] device bridge_slave_0 left promiscuous mode [ 1402.139317] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.221128] device veth1_macvtap left promiscuous mode [ 1402.240740] device veth0_macvtap left promiscuous mode [ 1402.248913] oom_reaper: reaped process 22431 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1402.286919] device veth1_vlan left promiscuous mode [ 1402.326177] device veth0_vlan left promiscuous mode [ 1402.366541] oom_reaper: reaped process 22444 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1402.385801] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1402.427302] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 1402.450748] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1402.455906] CPU: 0 PID: 22425 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1402.463784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1402.473157] Call Trace: [ 1402.475754] dump_stack+0x1b2/0x281 [ 1402.479396] warn_alloc.cold+0x96/0x1cc [ 1402.483375] ? zone_watermark_ok_safe+0x220/0x220 [ 1402.488251] __alloc_pages_nodemask+0x2127/0x2720 [ 1402.493108] ? lock_acquire+0x170/0x3f0 [ 1402.497097] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1402.501947] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1402.507396] ? __mutex_unlock_slowpath+0x75/0x770 [ 1402.512241] alloc_pages_current+0x155/0x260 [ 1402.516651] ion_page_pool_alloc+0x118/0x1b0 [ 1402.521054] ion_system_heap_allocate+0x133/0x8c0 [ 1402.525893] ? _raw_spin_unlock+0x29/0x40 [ 1402.530033] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1402.534961] ? ion_system_contig_heap_create+0x130/0x130 [ 1402.540416] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1402.545430] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1402.550270] ion_alloc+0x27a/0x810 [ 1402.553810] ? ion_dma_buf_release+0x40/0x40 [ 1402.558212] ? __might_fault+0x177/0x1b0 [ 1402.562269] ion_ioctl+0xea/0x1f0 [ 1402.565715] ? ion_query_heaps+0x360/0x360 [ 1402.569940] ? retint_kernel+0x2d/0x2d [ 1402.573819] ? ion_query_heaps+0x360/0x360 [ 1402.578041] do_vfs_ioctl+0x75a/0xff0 [ 1402.581834] ? ioctl_preallocate+0x1a0/0x1a0 [ 1402.586236] ? retint_kernel+0x2d/0x2d [ 1402.590114] ? do_vfs_ioctl+0xff0/0xff0 [ 1402.594079] ? __fdget+0x18d/0x1f0 [ 1402.597611] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 1402.602449] ? security_file_ioctl+0x83/0xb0 [ 1402.606850] SyS_ioctl+0x7f/0xb0 [ 1402.610206] ? do_vfs_ioctl+0xff0/0xff0 [ 1402.614173] do_syscall_64+0x1d5/0x640 [ 1402.618060] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1402.623240] RIP: 0033:0x465f69 [ 1402.626424] RSP: 002b:00007f0a724bf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1402.634123] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1402.641385] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1402.648654] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1402.655926] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1402.663190] R13: 00007fffce0e3c8f R14: 00007f0a724bf300 R15: 0000000000022000 [ 1402.683862] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1402.688961] CPU: 1 PID: 22461 Comm: rs:main Q:Reg Not tainted 4.14.225-syzkaller #0 [ 1402.691353] warn_alloc_show_mem: 1 callbacks suppressed [ 1402.691357] Mem-Info: [ 1402.696753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1402.702215] active_anon:28267 inactive_anon:17222 isolated_anon:0 [ 1402.702215] active_file:127 inactive_file:131 isolated_file:32 [ 1402.702215] unevictable:0 dirty:23 writeback:0 unstable:0 [ 1402.702215] slab_reclaimable:13579 slab_unreclaimable:119851 [ 1402.702215] mapped:44095 shmem:19215 pagetables:782 bounce:0 [ 1402.702215] free:13848 free_pcp:0 free_cma:0 [ 1402.704532] Call Trace: [ 1402.716216] Node 0 active_anon:112324kB inactive_anon:48548kB active_file:196kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165512kB dirty:32kB writeback:0kB shmem:56392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1402.747320] dump_stack+0x1b2/0x281 [ 1402.747332] dump_header+0x178/0x82f [ 1402.747341] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1402.747350] ? ___ratelimit+0x2cd/0x530 [ 1402.747358] oom_kill_process.cold+0x10/0xb18 [ 1402.747374] out_of_memory+0xe3e/0x1190 [ 1402.747385] ? oom_killer_disable+0x1c0/0x1c0 [ 1402.747392] ? mutex_trylock+0x152/0x1a0 [ 1402.747403] __alloc_pages_nodemask+0x23e1/0x2720 [ 1402.747417] ? trace_hardirqs_on+0x10/0x10 [ 1402.750018] Node 1 active_anon:744kB inactive_anon:20340kB active_file:312kB inactive_file:444kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:10868kB dirty:60kB writeback:0kB shmem:20468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1402.750024] Node 0 [ 1402.777966] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1402.777978] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1402.777997] alloc_pages_current+0x155/0x260 [ 1402.778008] pagecache_get_page+0x3f5/0xab0 [ 1402.778020] grab_cache_page_write_begin+0x63/0x90 [ 1402.778030] ext4_da_write_begin+0x249/0xe70 [ 1402.778043] ? ext4_write_begin+0x1260/0x1260 [ 1402.781719] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1402.785365] generic_perform_write+0x1c9/0x420 [ 1402.790439] lowmem_reserve[]: [ 1402.794414] ? __mnt_drop_write_file+0x5f/0x90 [ 1402.794423] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 1402.794431] ? current_time+0xb0/0xb0 [ 1402.794440] ? ext4_file_write_iter+0x1cc/0xd20 [ 1402.794449] __generic_file_write_iter+0x227/0x590 [ 1402.794459] ext4_file_write_iter+0x276/0xd20 [ 1402.794469] ? aa_file_perm+0x304/0xab0 [ 1402.794479] ? ext4_file_read_iter+0x330/0x330 [ 1402.798955] 0 [ 1402.802930] ? trace_hardirqs_on+0x10/0x10 [ 1402.802939] ? iov_iter_init+0xa6/0x1c0 [ 1402.802950] __vfs_write+0x44c/0x630 [ 1402.802959] ? kernel_read+0x110/0x110 [ 1402.802977] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1402.802986] vfs_write+0x17f/0x4d0 [ 1402.802995] SyS_write+0xf2/0x210 [ 1402.803002] ? SyS_read+0x210/0x210 [ 1402.803010] ? __do_page_fault+0x159/0xad0 [ 1402.803017] ? do_syscall_64+0x4c/0x640 [ 1402.803028] ? SyS_read+0x210/0x210 [ 1402.803038] do_syscall_64+0x1d5/0x640 [ 1402.809007] 2717 [ 1402.811573] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1402.811581] RIP: 0033:0x7fe0cbb741cd [ 1402.811585] RSP: 002b:00007fe0c912f590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1402.811593] RAX: ffffffffffffffda RBX: 00007fe0c0022d20 RCX: 00007fe0cbb741cd [ 1402.811598] RDX: 000000000000005c RSI: 00007fe0c0022d20 RDI: 0000000000000006 [ 1402.811602] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1402.811606] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fe0c0022aa0 [ 1402.811613] R13: 00007fe0c912f5b0 R14: 00005608ddb8e3a0 R15: 000000000000005c [ 1402.816463] 2718 [ 1403.023073] Mem-Info: [ 1403.044761] 2718 [ 1403.048954] syz-executor.1: [ 1403.062756] syz-executor.5: [ 1403.064259] 2718 [ 1403.065786] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1403.072972] (null) [ 1403.083082] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1403.086760] syz-executor.2: [ 1403.095856] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1403.104057] active_anon:28232 inactive_anon:17222 isolated_anon:0 [ 1403.104057] active_file:9 inactive_file:23 isolated_file:0 [ 1403.104057] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1403.104057] slab_reclaimable:13570 slab_unreclaimable:119499 [ 1403.104057] mapped:43891 shmem:19215 pagetables:781 bounce:0 [ 1403.104057] free:14355 free_pcp:99 free_cma:0 [ 1403.108508] page allocation failure: order:0 [ 1403.139412] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1403.148991] CPU: 1 PID: 22444 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 1403.154089] Node 0 [ 1403.156863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1403.156886] DMA32 free:19008kB min:36200kB low:45248kB high:54296kB active_anon:112304kB inactive_anon:48548kB active_file:24kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7584kB pagetables:2848kB bounce:0kB free_pcp:132kB local_pcp:4kB free_cma:0kB [ 1403.159106] Call Trace: [ 1403.189129] lowmem_reserve[]: [ 1403.196667] dump_stack+0x1b2/0x281 [ 1403.196681] warn_alloc.cold+0x96/0x1cc [ 1403.196692] ? zone_watermark_ok_safe+0x220/0x220 [ 1403.196701] ? usleep_range+0x130/0x130 [ 1403.196709] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1403.196721] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1403.196730] ? run_timer_softirq+0x5a0/0x5a0 [ 1403.196746] __alloc_pages_nodemask+0x2127/0x2720 [ 1403.196762] ? lock_acquire+0x170/0x3f0 [ 1403.196776] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1403.196787] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1403.196807] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1403.213851] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1403.214918] ? alloc_pages_current+0x37/0x260 [ 1403.218867] (null) [ 1403.223961] alloc_pages_current+0x155/0x260 [ 1403.223977] ion_page_pool_alloc+0x118/0x1b0 [ 1403.223988] ion_system_heap_allocate+0x133/0x8c0 [ 1403.223998] ? ion_alloc+0x187/0x810 [ 1403.224007] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1403.224018] ? ion_system_contig_heap_create+0x130/0x130 [ 1403.224029] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1403.224039] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1403.224050] ion_alloc+0x204/0x810 [ 1403.224064] ? ion_dma_buf_release+0x40/0x40 [ 1403.224075] ? __might_fault+0x177/0x1b0 [ 1403.224087] ion_ioctl+0xea/0x1f0 [ 1403.224097] ? ion_query_heaps+0x360/0x360 [ 1403.224108] ? __alloc_fd+0x1be/0x490 [ 1403.238922] 0 [ 1403.242310] ? ion_query_heaps+0x360/0x360 [ 1403.242320] do_vfs_ioctl+0x75a/0xff0 [ 1403.242333] ? ioctl_preallocate+0x1a0/0x1a0 [ 1403.242342] ? lock_downgrade+0x740/0x740 [ 1403.242354] ? __fget+0x225/0x360 [ 1403.242363] ? do_vfs_ioctl+0xff0/0xff0 [ 1403.242373] ? security_file_ioctl+0x83/0xb0 [ 1403.242383] SyS_ioctl+0x7f/0xb0 [ 1403.259883] 0 [ 1403.264226] ? do_vfs_ioctl+0xff0/0xff0 [ 1403.264240] do_syscall_64+0x1d5/0x640 [ 1403.264257] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1403.264265] RIP: 0033:0x465f69 [ 1403.264269] RSP: 002b:00007f6547c30188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1403.264279] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1403.264284] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1403.264289] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1403.264294] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1403.264300] R13: 00007ffe59ae816f R14: 00007f6547c30300 R15: 0000000000022000 [ 1403.268416] CPU: 1 PID: 22448 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1403.285559] 0 [ 1403.288298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1403.304223] syz-executor.2 cpuset=/ [ 1403.309059] Call Trace: [ 1403.326784] 0 [ 1403.328732] dump_stack+0x1b2/0x281 [ 1403.340260] mems_allowed=0-1 [ 1403.342336] warn_alloc.cold+0x96/0x1cc [ 1403.342349] ? zone_watermark_ok_safe+0x220/0x220 [ 1403.342358] ? usleep_range+0x130/0x130 [ 1403.342366] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1403.342378] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1403.342387] ? run_timer_softirq+0x5a0/0x5a0 [ 1403.342403] __alloc_pages_nodemask+0x2127/0x2720 [ 1403.342426] ? lock_acquire+0x170/0x3f0 [ 1403.342442] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1403.342453] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1403.342467] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1403.384669] 0 [ 1403.392011] alloc_pages_current+0x155/0x260 [ 1403.392029] ion_page_pool_alloc+0x118/0x1b0 [ 1403.392039] ion_system_heap_allocate+0x133/0x8c0 [ 1403.392052] ? _raw_spin_unlock+0x29/0x40 [ 1403.392060] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1403.392069] ? ion_system_contig_heap_create+0x130/0x130 [ 1403.392081] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1403.392091] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1403.392102] ion_alloc+0x27a/0x810 [ 1403.392116] ? ion_dma_buf_release+0x40/0x40 [ 1403.392132] ? __might_fault+0x177/0x1b0 [ 1403.436370] ion_ioctl+0xea/0x1f0 [ 1403.438151] Node 0 [ 1403.447532] ? ion_query_heaps+0x360/0x360 [ 1403.447543] ? __alloc_fd+0x1be/0x490 [ 1403.447552] ? ion_query_heaps+0x360/0x360 [ 1403.447561] do_vfs_ioctl+0x75a/0xff0 [ 1403.447572] ? ioctl_preallocate+0x1a0/0x1a0 [ 1403.447580] ? lock_downgrade+0x740/0x740 [ 1403.447591] ? __fget+0x225/0x360 [ 1403.447600] ? do_vfs_ioctl+0xff0/0xff0 [ 1403.447611] ? security_file_ioctl+0x83/0xb0 [ 1403.447621] SyS_ioctl+0x7f/0xb0 [ 1403.447627] ? do_vfs_ioctl+0xff0/0xff0 [ 1403.447640] do_syscall_64+0x1d5/0x640 [ 1403.518878] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1403.519732] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1403.558776] lowmem_reserve[]: [ 1403.561774] RIP: 0033:0x465f69 [ 1403.561779] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1403.561787] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1403.561792] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1403.561811] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1403.561815] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1403.561820] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1403.564250] Node 0 active_anon:112304kB inactive_anon:48548kB active_file:24kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165436kB dirty:0kB writeback:0kB shmem:56392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1403.580275] CPU: 0 PID: 22431 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1403.584119] Node 1 active_anon:624kB inactive_anon:20340kB active_file:12kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10128kB dirty:0kB writeback:0kB shmem:20468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1403.587864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1403.592330] Node 0 [ 1403.596413] Call Trace: [ 1403.599968] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1403.603943] dump_stack+0x1b2/0x281 [ 1403.603956] warn_alloc.cold+0x96/0x1cc [ 1403.603968] ? zone_watermark_ok_safe+0x220/0x220 [ 1403.603977] ? usleep_range+0x130/0x130 [ 1403.603989] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1403.608398] lowmem_reserve[]: [ 1403.611768] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1403.611778] ? run_timer_softirq+0x5a0/0x5a0 [ 1403.611794] __alloc_pages_nodemask+0x2127/0x2720 [ 1403.611810] ? lock_acquire+0x170/0x3f0 [ 1403.615780] 0 [ 1403.619670] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1403.644624] 2717 [ 1403.649912] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1403.653040] 2718 [ 1403.656190] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1403.670673] 2718 [ 1403.671202] ? check_preemption_disabled+0x35/0x240 [ 1403.678551] 2718 [ 1403.685844] alloc_pages_current+0x155/0x260 [ 1403.685861] ion_page_pool_alloc+0x118/0x1b0 [ 1403.685872] ion_system_heap_allocate+0x133/0x8c0 [ 1403.685883] ? ion_alloc+0x187/0x810 [ 1403.728603] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1403.750679] Node 0 [ 1403.763943] ? ion_system_contig_heap_create+0x130/0x130 [ 1403.763955] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1403.763966] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1403.763978] ion_alloc+0x204/0x810 [ 1403.800691] DMA32 free:19008kB min:36200kB low:45248kB high:54296kB active_anon:112304kB inactive_anon:48548kB active_file:24kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7584kB pagetables:2848kB bounce:0kB free_pcp:140kB local_pcp:136kB free_cma:0kB [ 1403.804341] ? ion_dma_buf_release+0x40/0x40 [ 1403.807969] lowmem_reserve[]: [ 1403.811956] ? __might_fault+0x177/0x1b0 [ 1403.811970] ion_ioctl+0xea/0x1f0 [ 1403.811980] ? ion_query_heaps+0x360/0x360 [ 1403.811990] ? __alloc_fd+0x1be/0x490 [ 1403.812001] ? ion_query_heaps+0x360/0x360 [ 1403.830675] 0 [ 1403.834289] do_vfs_ioctl+0x75a/0xff0 [ 1403.838694] 0 [ 1403.843545] ? ioctl_preallocate+0x1a0/0x1a0 [ 1403.843555] ? lock_downgrade+0x740/0x740 [ 1403.843567] ? __fget+0x225/0x360 [ 1403.843576] ? do_vfs_ioctl+0xff0/0xff0 [ 1403.843588] ? security_file_ioctl+0x83/0xb0 [ 1403.870674] 0 [ 1403.875452] SyS_ioctl+0x7f/0xb0 [ 1403.877580] 0 [ 1403.882177] ? do_vfs_ioctl+0xff0/0xff0 [ 1403.882190] do_syscall_64+0x1d5/0x640 [ 1403.882206] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1403.882216] RIP: 0033:0x465f69 [ 1403.882247] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1403.882258] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1403.900676] 0 [ 1403.901027] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1403.909956] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1403.909965] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1403.930683] Node 0 [ 1403.952998] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1403.966260] 0 [ 1404.017238] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1404.129683] warn_alloc_show_mem: 1 callbacks suppressed [ 1404.129687] Mem-Info: [ 1404.143504] active_anon:28257 inactive_anon:17222 isolated_anon:0 [ 1404.143504] active_file:43 inactive_file:1422 isolated_file:0 [ 1404.143504] unevictable:0 dirty:10 writeback:0 unstable:0 [ 1404.143504] slab_reclaimable:13569 slab_unreclaimable:119498 [ 1404.143504] mapped:44752 shmem:19215 pagetables:781 bounce:0 [ 1404.143504] free:53545 free_pcp:122 free_cma:0 [ 1404.170795] 0 0 0 0 [ 1404.180386] Node 1 Normal free:204616kB min:53696kB low:67120kB high:80544kB active_anon:724kB inactive_anon:20340kB active_file:140kB inactive_file:5652kB unevictable:0kB writepending:40kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:276kB bounce:0kB free_pcp:348kB local_pcp:200kB free_cma:0kB [ 1404.271070] Node 0 active_anon:112304kB inactive_anon:48548kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165436kB dirty:0kB writeback:0kB shmem:56392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1404.303457] device hsr_slave_1 left promiscuous mode [ 1404.325111] device hsr_slave_0 left promiscuous mode [ 1404.341356] lowmem_reserve[]: 0 0 0 0 0 [ 1404.345601] Node 0 DMA: 1*4kB (E) 3*8kB (U) 3*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10988kB [ 1404.373510] Node 1 active_anon:824kB inactive_anon:20340kB active_file:240kB inactive_file:6452kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46172kB dirty:40kB writeback:0kB shmem:20468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1404.405332] team0 (unregistering): Port device team_slave_1 removed [ 1404.412140] Node 0 DMA32: 2317*4kB (UME) 1970*8kB (UME) 622*16kB (UME) 150*32kB (UME) 130*64kB (UME) 10*128kB (UM) 6*256kB (UM) 5*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 54500kB [ 1404.438057] team0 (unregistering): Port device team_slave_0 removed [ 1404.440695] lowmem_reserve[]: 0 0 0 0 0 [ 1404.449080] Node 1 Normal free:212088kB min:53696kB low:67120kB high:80544kB active_anon:824kB inactive_anon:20340kB active_file:240kB inactive_file:6452kB unevictable:0kB writepending:40kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:276kB bounce:0kB free_pcp:1320kB local_pcp:620kB free_cma:0kB [ 1404.473793] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB [ 1404.479700] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1404.495392] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1404.511371] Node 1 Normal: 2780*4kB (UE) 50*8kB (UE) 28*16kB (UME) 25*32kB (UME) 1332*64kB (UM) 179*128kB (U) 115*256kB (U) 25*512kB (UM) 2*1024kB (UM) 1*2048kB (M) 4*4096kB (UM) = 183648kB [ 1404.514459] Node 0 [ 1404.543110] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1404.558323] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1404.560769] DMA free:11160kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1404.584881] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1404.610919] lowmem_reserve[]: 0 0 0 0 0 [ 1404.620795] Node 0 DMA: 47*4kB (UE) 3*8kB (U) 3*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11172kB [ 1404.644610] bond0 (unregistering): Released all slaves [ 1404.660698] Node 0 DMA32: 6881*4kB (UME) 2195*8kB (UME) 888*16kB (UME) 255*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 67452kB [ 1404.664615] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1404.680858] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1404.689668] Node 0 DMA32 free:67408kB min:36200kB low:45248kB high:54296kB active_anon:112304kB inactive_anon:48548kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7616kB pagetables:2848kB bounce:0kB free_pcp:1364kB local_pcp:628kB free_cma:0kB [ 1404.710705] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1404.740737] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1404.762740] 20931 total pagecache pages [ 1404.765181] Node 1 Normal: 6688*4kB (UE) 247*8kB (UE) 579*16kB (UME) 343*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 48968kB [ 1404.767335] 0 pages in swap cache [ 1404.781126] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1404.797831] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1404.803140] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1404.805040] Swap cache stats: add 0, delete 0, find 0/0 [ 1404.820974] CPU: 1 PID: 22444 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 1404.824015] Free swap = 0kB [ 1404.829088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1404.841704] Call Trace: [ 1404.843970] Total swap = 0kB [ 1404.844313] dump_stack+0x1b2/0x281 [ 1404.847323] 2097051 pages RAM [ 1404.851113] warn_alloc.cold+0x96/0x1cc [ 1404.851126] ? zone_watermark_ok_safe+0x220/0x220 [ 1404.851146] __alloc_pages_nodemask+0x2127/0x2720 [ 1404.851156] ? retint_kernel+0x2d/0x2d [ 1404.851171] ? lock_acquire+0x170/0x3f0 [ 1404.851185] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1404.870700] 0 pages HighMem/MovableOnly [ 1404.872310] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1404.876278] 363840 pages reserved [ 1404.881446] ? __mutex_unlock_slowpath+0x75/0x770 [ 1404.881461] alloc_pages_current+0x155/0x260 [ 1404.881477] ion_page_pool_alloc+0x118/0x1b0 [ 1404.881487] ion_system_heap_allocate+0x133/0x8c0 [ 1404.881497] ? _raw_spin_unlock+0x29/0x40 [ 1404.881506] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1404.881515] ? ion_system_contig_heap_create+0x130/0x130 [ 1404.881526] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1404.881536] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1404.881547] ion_alloc+0x27a/0x810 [ 1404.881561] ? ion_dma_buf_release+0x40/0x40 [ 1404.881572] ? __might_fault+0x177/0x1b0 [ 1404.881584] ion_ioctl+0xea/0x1f0 [ 1404.881595] ? ion_query_heaps+0x360/0x360 [ 1404.904222] 0 pages cma reserved [ 1404.904682] ? __alloc_fd+0x1be/0x490 [ 1404.967427] ? ion_query_heaps+0x360/0x360 [ 1404.971861] do_vfs_ioctl+0x75a/0xff0 [ 1404.975850] ? ioctl_preallocate+0x1a0/0x1a0 [ 1404.980282] ? lock_downgrade+0x740/0x740 [ 1404.984452] ? __fget+0x225/0x360 [ 1404.987922] ? do_vfs_ioctl+0xff0/0xff0 [ 1404.991924] ? security_file_ioctl+0x83/0xb0 [ 1404.996688] SyS_ioctl+0x7f/0xb0 [ 1405.000085] ? do_vfs_ioctl+0xff0/0xff0 [ 1405.004324] do_syscall_64+0x1d5/0x640 [ 1405.008363] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1405.013697] RIP: 0033:0x465f69 [ 1405.017089] RSP: 002b:00007f6547c30188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1405.024927] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1405.032565] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1405.040002] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1405.047421] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1405.054717] R13: 00007ffe59ae816f R14: 00007f6547c30300 R15: 0000000000022000 [ 1405.067722] lowmem_reserve[]: 0 0 0 0 0 [ 1405.081186] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1405.115701] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1405.140513] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1405.162881] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1405.179825] lowmem_reserve[]: 0 0 0 0 0 [ 1405.205182] 19257 total pagecache pages [ 1405.209217] 0 pages in swap cache [ 1405.212854] Node 1 Normal free:49696kB min:53696kB low:67120kB high:80544kB active_anon:832kB inactive_anon:20340kB active_file:12kB inactive_file:276kB unevictable:0kB writepending:40kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:360kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1405.262894] Swap cache stats: add 0, delete 0, find 0/0 [ 1405.268306] Free swap = 0kB [ 1405.269456] Mem-Info: [ 1405.282924] Total swap = 0kB [ 1405.286245] 2097051 pages RAM [ 1405.288006] active_anon:28284 inactive_anon:17222 isolated_anon:0 [ 1405.288006] active_file:30 inactive_file:1 isolated_file:0 [ 1405.288006] unevictable:0 dirty:1 writeback:10 unstable:0 [ 1405.288006] slab_reclaimable:13565 slab_unreclaimable:118227 [ 1405.288006] mapped:52604 shmem:19215 pagetables:825 bounce:0 [ 1405.288006] free:13839 free_pcp:60 free_cma:0 [ 1405.289517] 0 pages HighMem/MovableOnly [ 1405.333381] lowmem_reserve[]: 0 0 0 0 0 [ 1405.337744] Node 0 DMA: 40*4kB (UE) 3*8kB (U) 3*16kB (UE) 1*32kB (E) 1*64kB (E) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10952kB [ 1405.357720] Node 0 DMA32: 531*4kB (ME) 391*8kB (ME) 202*16kB (UME) 279*32kB (UME) 4*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17668kB [ 1405.376689] 363840 pages reserved [ 1405.380373] 0 pages cma reserved [ 1405.383809] Out of memory (oom_kill_allocating_task): Kill process 22461 (rs:main Q:Reg) score 0 or sacrifice child [ 1405.399262] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1405.410448] Killed process 22457 (rsyslogd) total-vm:254332kB, anon-rss:800kB, file-rss:0kB, shmem-rss:0kB [ 1405.424441] Node 1 Normal: 76*4kB (ME) 26*8kB (ME) 255*16kB (UME) 521*32kB (UME) 31*64kB (UM) 11*128kB (UM) 5*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26960kB [ 1405.443608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1405.444568] oom_reaper: reaped process 22457 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1405.453318] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1405.474311] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1405.484334] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1405.493090] 19257 total pagecache pages [ 1405.497143] 0 pages in swap cache [ 1405.503000] Swap cache stats: add 0, delete 0, find 0/0 [ 1405.508696] Free swap = 0kB [ 1405.512069] Total swap = 0kB [ 1405.515260] 2097051 pages RAM [ 1405.518611] 0 pages HighMem/MovableOnly [ 1405.522985] 363840 pages reserved [ 1405.528767] 0 pages cma reserved [ 1405.566718] oom_reaper: reaped process 22453 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1405.590996] Node 0 active_anon:111304kB inactive_anon:48548kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:168784kB dirty:0kB writeback:4kB shmem:56392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1405.620706] Node 1 active_anon:832kB inactive_anon:20340kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:41632kB dirty:4kB writeback:36kB shmem:20468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1405.730725] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1405.778470] kworker/u4:4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1405.804135] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1405.809556] Node 0 DMA32 free:17764kB min:36200kB low:45248kB high:54296kB active_anon:111296kB inactive_anon:48548kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:2940kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1405.820671] kworker/u4:4 cpuset= [ 1405.854643] lowmem_reserve[]: 0 0 0 0 0 [ 1405.870764] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1405.880665] / mems_allowed=0-1 [ 1405.960017] CPU: 1 PID: 2848 Comm: kworker/u4:4 Not tainted 4.14.225-syzkaller #0 [ 1405.968129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1405.977981] Workqueue: events_unbound call_usermodehelper_exec_work [ 1405.984846] Call Trace: [ 1405.987635] dump_stack+0x1b2/0x281 [ 1405.991505] dump_header+0x178/0x82f [ 1405.995382] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1405.998479] lowmem_reserve[]: [ 1406.000755] ? ___ratelimit+0x2cd/0x530 [ 1406.000772] oom_kill_process.cold+0x10/0xb18 [ 1406.000783] ? lock_downgrade+0x740/0x740 [ 1406.000795] out_of_memory+0x2dc/0x1190 [ 1406.000807] ? oom_killer_disable+0x1c0/0x1c0 [ 1406.000814] ? mutex_trylock+0x152/0x1a0 [ 1406.000830] __alloc_pages_nodemask+0x23e1/0x2720 [ 1406.004081] 0 [ 1406.008491] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1406.025230] 0 [ 1406.026829] ? fs_reclaim_release+0xd0/0x110 [ 1406.031209] 0 [ 1406.036567] ? kmem_cache_alloc_node+0x38b/0x410 [ 1406.039330] 0 [ 1406.044276] copy_process.part.0+0x265/0x71c0 [ 1406.044289] ? __lock_acquire+0x5fc/0x3f20 [ 1406.044300] ? debug_object_activate+0x292/0x490 [ 1406.044306] ? trace_hardirqs_on+0x10/0x10 [ 1406.044313] ? static_obj+0x50/0x50 [ 1406.044326] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1406.044335] ? __cleanup_sighand+0x40/0x40 [ 1406.078277] 0 [ 1406.080710] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1406.080720] _do_fork+0x184/0xc80 [ 1406.080732] ? fork_idle+0x270/0x270 [ 1406.080751] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1406.080760] ? process_one_work+0x6c4/0x14a0 [ 1406.080768] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1406.080776] kernel_thread+0x2f/0x40 [ 1406.080791] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1406.094615] ? call_usermodehelper+0x80/0x80 [ 1406.096412] Node 1 [ 1406.102102] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1406.102113] process_one_work+0x793/0x14a0 [ 1406.102125] ? work_busy+0x320/0x320 [ 1406.102131] ? worker_thread+0x158/0xff0 [ 1406.102142] ? _raw_spin_unlock_irq+0x24/0x80 [ 1406.102151] worker_thread+0x5cc/0xff0 [ 1406.102165] ? rescuer_thread+0xc80/0xc80 [ 1406.102174] kthread+0x30d/0x420 [ 1406.102180] ? kthread_create_on_node+0xd0/0xd0 [ 1406.102191] ret_from_fork+0x24/0x30 [ 1406.134959] Normal free:26568kB min:53696kB low:67120kB high:80544kB active_anon:808kB inactive_anon:20340kB active_file:492kB inactive_file:252kB unevictable:0kB writepending:44kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:332kB bounce:0kB free_pcp:716kB local_pcp:52kB free_cma:0kB [ 1406.225904] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1406.243819] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1406.289531] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1406.290343] syz-executor.4 cpuset= [ 1406.308077] CPU: 0 PID: 22425 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1406.313759] / [ 1406.321012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1406.321022] Call Trace: [ 1406.335543] dump_stack+0x1b2/0x281 [ 1406.339383] warn_alloc.cold+0x96/0x1cc [ 1406.340687] mems_allowed=0-1 [ 1406.343474] ? zone_watermark_ok_safe+0x220/0x220 [ 1406.351660] ? usleep_range+0x130/0x130 [ 1406.356239] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1406.361364] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1406.366692] ? run_timer_softirq+0x5a0/0x5a0 [ 1406.371439] __alloc_pages_nodemask+0x2127/0x2720 [ 1406.376400] ? lock_acquire+0x170/0x3f0 [ 1406.380400] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1406.385375] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1406.390289] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1406.395935] alloc_pages_current+0x155/0x260 [ 1406.400368] ion_page_pool_alloc+0x118/0x1b0 [ 1406.404802] ion_system_heap_allocate+0x133/0x8c0 [ 1406.410031] ? _raw_spin_unlock+0x29/0x40 [ 1406.414546] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1406.419505] ? ion_system_contig_heap_create+0x130/0x130 [ 1406.425214] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1406.430250] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1406.435240] ion_alloc+0x27a/0x810 [ 1406.439039] ? ion_dma_buf_release+0x40/0x40 [ 1406.443561] ? __might_fault+0x177/0x1b0 [ 1406.447645] ion_ioctl+0xea/0x1f0 [ 1406.451126] ? ion_query_heaps+0x360/0x360 [ 1406.455392] ? retint_kernel+0x2d/0x2d [ 1406.459306] ? ion_query_heaps+0x360/0x360 [ 1406.463751] do_vfs_ioctl+0x75a/0xff0 [ 1406.467900] ? ioctl_preallocate+0x1a0/0x1a0 [ 1406.470680] Mem-Info: [ 1406.472417] ? retint_kernel+0x2d/0x2d [ 1406.474991] active_anon:27996 inactive_anon:17222 isolated_anon:0 [ 1406.474991] active_file:4 inactive_file:13 isolated_file:0 [ 1406.474991] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1406.474991] slab_reclaimable:13559 slab_unreclaimable:117773 [ 1406.474991] mapped:52595 shmem:19215 pagetables:795 bounce:0 [ 1406.474991] free:13931 free_pcp:73 free_cma:0 [ 1406.479032] ? do_vfs_ioctl+0xff0/0xff0 [ 1406.517002] ? __fdget+0x18d/0x1f0 [ 1406.520564] ? __sanitizer_cov_trace_pc+0x4a/0x50 [ 1406.525430] ? security_file_ioctl+0x83/0xb0 [ 1406.529980] SyS_ioctl+0x7f/0xb0 [ 1406.533355] ? do_vfs_ioctl+0xff0/0xff0 [ 1406.537353] do_syscall_64+0x1d5/0x640 [ 1406.541272] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1406.546484] RIP: 0033:0x465f69 [ 1406.549688] RSP: 002b:00007f0a724bf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1406.557693] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1406.565193] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1406.572609] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1406.580317] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1406.587994] R13: 00007fffce0e3c8f R14: 00007f0a724bf300 R15: 0000000000022000 [ 1406.590683] Node 0 active_anon:111176kB inactive_anon:48548kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:168784kB dirty:0kB writeback:0kB shmem:56392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1406.603900] lowmem_reserve[]: [ 1406.632739] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1406.640681] CPU: 1 PID: 22453 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 1406.650608] 0 [ 1406.656569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1406.656580] 0 [ 1406.658379] Call Trace: [ 1406.672167] dump_stack+0x1b2/0x281 [ 1406.673953] syz-executor.1 cpuset=/ [ 1406.676078] warn_alloc.cold+0x96/0x1cc [ 1406.676090] ? zone_watermark_ok_safe+0x220/0x220 [ 1406.679715] mems_allowed=0-1 [ 1406.683697] ? usleep_range+0x130/0x130 [ 1406.683707] ? try_to_free_pages+0x23f/0x6e0 [ 1406.683716] ? _find_next_bit+0xdb/0x100 [ 1406.683725] ? run_timer_softirq+0x5a0/0x5a0 [ 1406.683741] __alloc_pages_nodemask+0x2127/0x2720 [ 1406.683757] ? lock_acquire+0x170/0x3f0 [ 1406.683771] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1406.683782] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1406.683796] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1406.690270] 0 [ 1406.692331] alloc_pages_current+0x155/0x260 [ 1406.692353] ion_page_pool_alloc+0x118/0x1b0 [ 1406.692363] ion_system_heap_allocate+0x133/0x8c0 [ 1406.692373] ? ion_alloc+0x187/0x810 [ 1406.692383] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1406.692392] ? ion_system_contig_heap_create+0x130/0x130 [ 1406.692403] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1406.692413] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1406.692423] ion_alloc+0x204/0x810 [ 1406.692437] ? ion_dma_buf_release+0x40/0x40 [ 1406.701675] 0 [ 1406.705347] ? __might_fault+0x177/0x1b0 [ 1406.710004] 0 [ 1406.715435] ion_ioctl+0xea/0x1f0 [ 1406.715447] ? ion_query_heaps+0x360/0x360 [ 1406.715457] ? __alloc_fd+0x1be/0x490 [ 1406.715466] ? ion_query_heaps+0x360/0x360 [ 1406.715476] do_vfs_ioctl+0x75a/0xff0 [ 1406.715486] ? ioctl_preallocate+0x1a0/0x1a0 [ 1406.715495] ? lock_downgrade+0x740/0x740 [ 1406.715506] ? __fget+0x225/0x360 [ 1406.715515] ? do_vfs_ioctl+0xff0/0xff0 [ 1406.715528] ? security_file_ioctl+0x83/0xb0 [ 1406.746398] SyS_ioctl+0x7f/0xb0 [ 1406.764819] Node 0 [ 1406.765978] ? do_vfs_ioctl+0xff0/0xff0 [ 1406.806742] DMA: [ 1406.808523] do_syscall_64+0x1d5/0x640 [ 1406.826711] 36*4kB [ 1406.829182] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1406.858167] RIP: 0033:0x465f69 [ 1406.859081] (UE) [ 1406.861361] RSP: 002b:00007f5ba2c45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1406.861371] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1406.861375] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1406.861380] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1406.861384] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1406.861389] R13: 00007ffec1e0e6ff R14: 00007f5ba2c45300 R15: 0000000000022000 [ 1406.867766] Node 1 active_anon:808kB inactive_anon:20340kB active_file:108kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:41596kB dirty:0kB writeback:0kB shmem:20468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1406.910363] CPU: 0 PID: 22444 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 1406.943984] Node 0 [ 1406.945731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1406.945747] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1406.945754] lowmem_reserve[]: [ 1406.948133] Call Trace: [ 1406.958104] 0 [ 1406.984733] dump_stack+0x1b2/0x281 [ 1406.984747] warn_alloc.cold+0x96/0x1cc [ 1406.984758] ? zone_watermark_ok_safe+0x220/0x220 [ 1406.984768] ? usleep_range+0x130/0x130 [ 1406.984781] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1406.988187] 2717 [ 1406.990784] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1406.990794] ? run_timer_softirq+0x5a0/0x5a0 [ 1406.990811] __alloc_pages_nodemask+0x2127/0x2720 [ 1406.990834] ? lock_acquire+0x170/0x3f0 [ 1406.992622] 2718 [ 1406.996543] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1407.000508] 2718 [ 1407.005593] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1407.005608] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1407.005626] alloc_pages_current+0x155/0x260 [ 1407.005639] ion_page_pool_alloc+0x118/0x1b0 [ 1407.009826] 2718 [ 1407.015100] ion_system_heap_allocate+0x133/0x8c0 [ 1407.015113] ? _raw_spin_unlock+0x29/0x40 [ 1407.015122] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1407.015135] ? ion_system_contig_heap_create+0x130/0x130 [ 1407.022390] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1407.022403] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1407.022415] ion_alloc+0x27a/0x810 [ 1407.022430] ? ion_dma_buf_release+0x40/0x40 [ 1407.027159] Node 0 [ 1407.032212] ? __might_fault+0x177/0x1b0 [ 1407.032226] ion_ioctl+0xea/0x1f0 [ 1407.032237] ? ion_query_heaps+0x360/0x360 [ 1407.032248] ? __alloc_fd+0x1be/0x490 [ 1407.036640] DMA32 free:19024kB min:36200kB low:45248kB high:54296kB active_anon:111176kB inactive_anon:48548kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2848kB bounce:0kB free_pcp:140kB local_pcp:0kB free_cma:0kB [ 1407.038894] ? ion_query_heaps+0x360/0x360 [ 1407.043780] lowmem_reserve[]: [ 1407.046006] do_vfs_ioctl+0x75a/0xff0 [ 1407.050493] 0 [ 1407.056222] ? ioctl_preallocate+0x1a0/0x1a0 [ 1407.056232] ? lock_downgrade+0x740/0x740 [ 1407.056243] ? __fget+0x225/0x360 [ 1407.056252] ? do_vfs_ioctl+0xff0/0xff0 [ 1407.056265] ? security_file_ioctl+0x83/0xb0 [ 1407.061034] 0 [ 1407.065806] SyS_ioctl+0x7f/0xb0 [ 1407.067868] 0 [ 1407.072804] ? do_vfs_ioctl+0xff0/0xff0 [ 1407.072821] do_syscall_64+0x1d5/0x640 [ 1407.072838] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1407.072848] RIP: 0033:0x465f69 [ 1407.077295] warn_alloc_show_mem: 1 callbacks suppressed [ 1407.077299] Mem-Info: [ 1407.082386] RSP: 002b:00007f6547c30188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1407.082397] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1407.082402] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1407.082406] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1407.082410] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1407.082415] R13: 00007ffe59ae816f R14: 00007f6547c30300 R15: 0000000000022000 [ 1407.094603] 4*8kB [ 1407.110680] 0 [ 1407.121166] (U) [ 1407.134895] active_anon:27996 inactive_anon:17222 isolated_anon:0 [ 1407.134895] active_file:8 inactive_file:7 isolated_file:11 [ 1407.134895] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1407.134895] slab_reclaimable:13558 slab_unreclaimable:117474 [ 1407.134895] mapped:52595 shmem:19215 pagetables:795 bounce:0 [ 1407.134895] free:14225 free_pcp:108 free_cma:0 [ 1407.154430] 4*16kB (UE) 1*32kB (E) 1*64kB (E) 1*128kB (E) [ 1407.170743] 0 [ 1407.172597] 1*256kB [ 1407.184678] (E) [ 1407.204073] Node 0 [ 1407.204405] 2*512kB [ 1407.209723] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1407.213776] (UE) [ 1407.220687] Node 0 active_anon:111176kB inactive_anon:48548kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:168784kB dirty:0kB writeback:0kB shmem:56392kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1407.221323] 1*1024kB [ 1407.229365] Node 1 active_anon:808kB inactive_anon:20340kB active_file:24kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):44kB mapped:41596kB dirty:0kB writeback:0kB shmem:20468kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1407.237813] (E) [ 1407.250672] lowmem_reserve[]: [ 1407.270708] 2*2048kB [ 1407.313867] 0 [ 1407.430815] Node 0 DMA free:11152kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1407.490708] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1407.496525] Node 0 DMA32 free:111536kB min:36200kB low:45248kB high:54296kB active_anon:111176kB inactive_anon:48548kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7456kB pagetables:2848kB bounce:0kB free_pcp:1376kB local_pcp:672kB free_cma:0kB [ 1407.560737] lowmem_reserve[]: 0 0 0 0 0 [ 1407.565028] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1407.570744] (ME) 1*4096kB (U) = 10960kB [ 1407.629682] Node 0 DMA32: 8020*4kB (UME) 3186*8kB (UME) 1147*16kB (UME) 392*32kB (UME) 339*64kB (UME) 31*128kB (UM) 55*256kB (UM) 10*512kB (U) 7*1024kB (U) 0*2048kB 0*4096kB = 140496kB [ 1407.640674] lowmem_reserve[]: 0 0 0 0 0 [ 1407.655703] 0 0 0 0 [ 1407.658348] Node 1 Normal free:478660kB min:53696kB low:67120kB high:80544kB active_anon:808kB inactive_anon:20340kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:332kB bounce:0kB free_pcp:1316kB local_pcp:620kB free_cma:0kB [ 1407.670719] Node 0 [ 1407.691764] Node 1 Normal free:478660kB min:53696kB low:67120kB high:80544kB active_anon:808kB inactive_anon:20340kB active_file:24kB inactive_file:20kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:192kB pagetables:332kB bounce:0kB free_pcp:1316kB local_pcp:620kB free_cma:0kB [ 1407.710709] Normal: [ 1407.727915] lowmem_reserve[]: 0 0 0 0 0 [ 1407.731259] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1407.734667] lowmem_reserve[]: [ 1407.749832] Node 0 DMA: 43*4kB (UE) 4*8kB (U) 4*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11180kB [ 1407.771262] Node 1 Normal: 13507*4kB (UME) 1435*8kB (UME) 1431*16kB (UME) 1217*32kB (UME) 1796*64kB (UM) 289*128kB (UME) 197*256kB (UM) 59*512kB (UM) 54*1024kB (U) 21*2048kB (U) 5*4096kB (U) = 478708kB [ 1407.776941] 0 0 0 0 0 [ 1407.802139] Node 0 DMA32: 7670*4kB (UE) 3135*8kB (UE) 1129*16kB (UE) 379*32kB (UE) 322*64kB (UME) 28*128kB (U) 55*256kB (UM) 9*512kB (U) 7*1024kB (UM) 0*2048kB 0*4096kB = 136000kB [ 1407.806783] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1407.840453] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1407.842851] Node 0 DMA: 43*4kB (UE) 4*8kB (U) 4*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11180kB [ 1407.854963] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1407.885522] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1407.890192] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1407.912746] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1407.953207] Node 0 DMA32: 7538*4kB (UME) 2807*8kB (UE) 1140*16kB (UME) 393*32kB (UE) 332*64kB (UE) 27*128kB (U) 53*256kB (U) 9*512kB (U) 3*1024kB (U) 0*2048kB 0*4096kB = 129376kB [ 1407.961129] 21868 total pagecache pages [ 1407.976953] systemd[1]: rsyslog.service: Unit entered failed state. [ 1408.002650] Node 1 Normal: 13507*4kB (UME) 1435*8kB (UME) 1431*16kB (UME) 1217*32kB (UME) 1796*64kB (UM) 289*128kB (UME) 197*256kB (UM) 59*512kB (UM) 54*1024kB (U) 21*2048kB (U) 5*4096kB (U) = 478708kB [ 1408.014397] 0 pages in swap cache [ 1408.029439] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1408.030415] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1408.064374] Swap cache stats: add 0, delete 0, find 0/0 [ 1408.069867] Free swap = 0kB [ 1408.071681] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1408.087803] Node 1 Normal: 13507*4kB (UME) 1455*8kB (UME) 1441*16kB (UME) 1220*32kB (UME) 1798*64kB (UM) 290*128kB (UME) 197*256kB (UM) 59*512kB (UM) 54*1024kB (U) 21*2048kB (U) 5*4096kB (U) = 479380kB [ 1408.104094] Total swap = 0kB [ 1408.109799] 2097051 pages RAM [ 1408.114527] 0 pages HighMem/MovableOnly [ 1408.118678] 363840 pages reserved [ 1408.120696] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1408.131383] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1408.140801] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1408.145180] 0 pages cma reserved [ 1408.149669] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1408.180678] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1408.189494] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1408.217278] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1408.220690] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1408.226169] 22222 total pagecache pages [ 1408.251363] 0 pages in swap cache [ 1408.254863] Swap cache stats: add 0, delete 0, find 0/0 [ 1408.260333] Free swap = 0kB [ 1408.270701] 22222 total pagecache pages [ 1408.275188] 0 pages in swap cache [ 1408.277171] systemd[1]: Stopped System Logging Service. [ 1408.278746] Swap cache stats: add 0, delete 0, find 0/0 [ 1408.303514] Total swap = 0kB [ 1408.306586] 2097051 pages RAM [ 1408.309787] 0 pages HighMem/MovableOnly [ 1408.311082] Free swap = 0kB [ 1408.317280] Total swap = 0kB [ 1408.331472] 363840 pages reserved [ 1408.335202] 0 pages cma reserved [ 1408.338750] Out of memory: Kill process 7967 (syz-fuzzer) score 13 or sacrifice child [ 1408.341106] 2097051 pages RAM [ 1408.350169] 0 pages HighMem/MovableOnly [ 1408.354164] systemd[1]: Starting System Logging Service... [ 1408.375455] IPVS: ftp: loaded support on port[0] = 21 [ 1408.380702] 363840 pages reserved [ 1408.385316] 0 pages cma reserved [ 1408.388076] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1408.406670] Killed process 22471 (syz-executor.3) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB 08:37:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) socket$nl_route(0x10, 0x3, 0x0) 08:37:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) socket$nl_route(0x10, 0x3, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) 08:37:30 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) socket$nl_route(0x10, 0x3, 0x0) [ 1408.683226] systemd[1]: Started Load/Save RF Kill Switch Status. [ 1408.886683] systemd[1]: Started System Logging Service. [ 1409.112933] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1409.116579] syz-executor.1: [ 1409.127589] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1409.155468] syz-executor.5 cpuset= [ 1409.164572] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1409.170129] / [ 1409.194331] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1409.206331] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1409.214139] mems_allowed=0-1 [ 1409.216109] CPU: 0 PID: 22512 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1409.226476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1409.236169] Call Trace: [ 1409.239341] dump_stack+0x1b2/0x281 [ 1409.243094] warn_alloc.cold+0x96/0x1cc [ 1409.247448] ? zone_watermark_ok_safe+0x220/0x220 [ 1409.252799] __alloc_pages_nodemask+0x2127/0x2720 [ 1409.257672] ? __schedule+0x893/0x1de0 [ 1409.261598] ? lock_acquire+0x170/0x3f0 [ 1409.266174] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1409.271595] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1409.277956] ? __mutex_unlock_slowpath+0x75/0x770 [ 1409.283518] alloc_pages_current+0x155/0x260 [ 1409.288228] ion_page_pool_alloc+0x118/0x1b0 [ 1409.293131] ion_system_heap_allocate+0x133/0x8c0 [ 1409.298183] ? ion_alloc+0x187/0x810 [ 1409.302019] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1409.307498] ? ion_system_contig_heap_create+0x130/0x130 [ 1409.312977] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1409.318016] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1409.322885] ion_alloc+0x204/0x810 [ 1409.326452] ? ion_dma_buf_release+0x40/0x40 [ 1409.330890] ? __might_fault+0x177/0x1b0 [ 1409.334985] ion_ioctl+0xea/0x1f0 [ 1409.338464] ? ion_query_heaps+0x360/0x360 [ 1409.343570] ? ion_query_heaps+0x360/0x360 [ 1409.348142] do_vfs_ioctl+0x75a/0xff0 [ 1409.351972] ? ioctl_preallocate+0x1a0/0x1a0 [ 1409.356697] ? lock_downgrade+0x740/0x740 [ 1409.361183] ? __fget+0x225/0x360 [ 1409.364665] ? do_vfs_ioctl+0xff0/0xff0 [ 1409.368669] ? security_file_ioctl+0x83/0xb0 [ 1409.373629] SyS_ioctl+0x7f/0xb0 [ 1409.377172] ? do_vfs_ioctl+0xff0/0xff0 [ 1409.381560] do_syscall_64+0x1d5/0x640 [ 1409.385651] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1409.390856] RIP: 0033:0x465f69 [ 1409.394066] RSP: 002b:00007f0a724bf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1409.401903] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1409.409357] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1409.416929] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1409.424741] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1409.432392] R13: 00007fffce0e3c8f R14: 00007f0a724bf300 R15: 0000000000022000 [ 1409.469961] warn_alloc_show_mem: 2 callbacks suppressed [ 1409.469965] Mem-Info: [ 1409.475581] CPU: 1 PID: 22508 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1409.486530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1409.490727] active_anon:28255 inactive_anon:17222 isolated_anon:24 [ 1409.490727] active_file:1708 inactive_file:5466 isolated_file:0 [ 1409.490727] unevictable:0 dirty:61 writeback:0 unstable:0 [ 1409.490727] slab_reclaimable:13508 slab_unreclaimable:117973 [ 1409.490727] mapped:48791 shmem:19215 pagetables:782 bounce:0 [ 1409.490727] free:75827 free_pcp:716 free_cma:0 [ 1409.496024] Call Trace: [ 1409.536125] dump_stack+0x1b2/0x281 [ 1409.540187] warn_alloc.cold+0x96/0x1cc [ 1409.544429] ? zone_watermark_ok_safe+0x220/0x220 [ 1409.549747] ? ext4_ind_map_blocks+0x1670/0x20e0 [ 1409.554731] __alloc_pages_nodemask+0x2127/0x2720 [ 1409.559918] ? lock_acquire+0x170/0x3f0 [ 1409.563949] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1409.569050] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1409.574759] ? __mutex_unlock_slowpath+0x75/0x770 [ 1409.579776] alloc_pages_current+0x155/0x260 [ 1409.584250] ion_page_pool_alloc+0x118/0x1b0 [ 1409.588834] ion_system_heap_allocate+0x133/0x8c0 [ 1409.594060] ? ion_alloc+0x187/0x810 [ 1409.598003] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1409.603487] ? ion_system_contig_heap_create+0x130/0x130 [ 1409.609141] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1409.610745] Node 0 active_anon:112476kB inactive_anon:48552kB active_file:6872kB inactive_file:21636kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185036kB dirty:192kB writeback:0kB shmem:56396kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1409.614269] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1409.648437] ion_alloc+0x204/0x810 [ 1409.652312] ? ion_dma_buf_release+0x40/0x40 [ 1409.656744] ? __might_fault+0x177/0x1b0 [ 1409.660829] ion_ioctl+0xea/0x1f0 [ 1409.664405] ? ion_query_heaps+0x360/0x360 [ 1409.668816] ? __alloc_fd+0x1be/0x490 [ 1409.672933] ? ion_query_heaps+0x360/0x360 [ 1409.677526] do_vfs_ioctl+0x75a/0xff0 [ 1409.681353] ? ioctl_preallocate+0x1a0/0x1a0 [ 1409.685782] ? lock_downgrade+0x740/0x740 [ 1409.689953] ? __fget+0x225/0x360 [ 1409.693629] ? do_vfs_ioctl+0xff0/0xff0 [ 1409.697678] ? security_file_ioctl+0x83/0xb0 [ 1409.702382] SyS_ioctl+0x7f/0xb0 [ 1409.705814] ? do_vfs_ioctl+0xff0/0xff0 [ 1409.709808] do_syscall_64+0x1d5/0x640 [ 1409.711287] Node 1 active_anon:544kB inactive_anon:20336kB active_file:60kB inactive_file:128kB unevictable:0kB isolated(anon):96kB isolated(file):0kB mapped:10128kB dirty:52kB writeback:0kB shmem:20464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1409.714015] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1409.747933] RIP: 0033:0x465f69 [ 1409.751265] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1409.759135] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1409.767212] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1409.775015] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1409.782725] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1409.790358] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1409.797860] CPU: 0 PID: 22507 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 1409.806301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1409.815770] Call Trace: [ 1409.819097] dump_stack+0x1b2/0x281 [ 1409.823036] warn_alloc.cold+0x96/0x1cc [ 1409.827418] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1409.834300] ? zone_watermark_ok_safe+0x220/0x220 [ 1409.839667] __alloc_pages_nodemask+0x2127/0x2720 [ 1409.844711] ? lock_acquire+0x170/0x3f0 [ 1409.849695] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1409.855144] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1409.860809] ? __mutex_unlock_slowpath+0x75/0x770 [ 1409.865924] ? retint_kernel+0x2d/0x2d [ 1409.870410] alloc_pages_current+0x155/0x260 [ 1409.875103] ion_page_pool_alloc+0x118/0x1b0 [ 1409.879541] ion_system_heap_allocate+0x133/0x8c0 [ 1409.884573] ? ion_alloc+0x187/0x810 [ 1409.888401] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1409.894214] ? ion_system_contig_heap_create+0x130/0x130 [ 1409.899690] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1409.905031] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1409.910349] ion_alloc+0x204/0x810 [ 1409.913919] ? ion_dma_buf_release+0x40/0x40 [ 1409.918847] ? __might_fault+0x177/0x1b0 [ 1409.923191] ion_ioctl+0xea/0x1f0 [ 1409.927044] ? ion_query_heaps+0x360/0x360 [ 1409.931441] ? __alloc_fd+0x1be/0x490 [ 1409.935530] ? ion_query_heaps+0x360/0x360 [ 1409.939921] do_vfs_ioctl+0x75a/0xff0 [ 1409.943884] ? ioctl_preallocate+0x1a0/0x1a0 [ 1409.948573] ? lock_downgrade+0x740/0x740 [ 1409.953022] ? __fget+0x225/0x360 [ 1409.956771] ? do_vfs_ioctl+0xff0/0xff0 [ 1409.961013] ? security_file_ioctl+0x83/0xb0 [ 1409.965442] SyS_ioctl+0x7f/0xb0 [ 1409.968827] ? do_vfs_ioctl+0xff0/0xff0 [ 1409.972835] do_syscall_64+0x1d5/0x640 [ 1409.977072] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1409.982510] RIP: 0033:0x465f69 [ 1409.985906] RSP: 002b:00007f6547c30188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1409.994051] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1410.001929] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1410.009589] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1410.017373] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1410.024904] R13: 00007ffe59ae816f R14: 00007f6547c30300 R15: 0000000000022000 [ 1410.041292] systemd[1]: Started Journal Service. [ 1410.060221] Node 0 DMA free:11024kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1410.103865] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1410.129572] Node 0 DMA32 free:133888kB min:36200kB low:45248kB high:54296kB active_anon:112448kB inactive_anon:48552kB active_file:6952kB inactive_file:21656kB unevictable:0kB writepending:224kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7616kB pagetables:2996kB bounce:0kB free_pcp:1384kB local_pcp:740kB free_cma:0kB [ 1410.165693] lowmem_reserve[]: 0 0 0 0 0 [ 1410.180504] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1410.222350] lowmem_reserve[]: 0 0 0 0 0 [ 1410.234946] Node 1 Normal free:242600kB min:53696kB low:67120kB high:80544kB active_anon:516kB inactive_anon:20336kB active_file:60kB inactive_file:156kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:136kB bounce:0kB free_pcp:644kB local_pcp:644kB free_cma:0kB [ 1410.273205] lowmem_reserve[]: 0 0 0 0 0 [ 1410.286991] Node 0 DMA: 44*4kB (UE) 8*8kB (U) 4*16kB (UE) 1*32kB (E) 1*64kB (E) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11024kB [ 1410.303669] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1410.316391] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1410.322078] Node 0 DMA32: 10073*4kB (U) 1462*8kB (UE) 3142*16kB (UE) 1322*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 144564kB [ 1410.344028] CPU: 0 PID: 22431 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1410.352223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1410.361874] Call Trace: [ 1410.364638] dump_stack+0x1b2/0x281 [ 1410.368292] warn_alloc.cold+0x96/0x1cc [ 1410.372624] ? zone_watermark_ok_safe+0x220/0x220 [ 1410.377496] __alloc_pages_nodemask+0x2127/0x2720 [ 1410.382357] ? lock_acquire+0x170/0x3f0 [ 1410.386358] ? lock_acquire+0x170/0x3f0 [ 1410.390465] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1410.395549] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1410.401028] ? __mutex_unlock_slowpath+0x75/0x770 [ 1410.406262] alloc_pages_current+0x155/0x260 [ 1410.410964] ion_page_pool_alloc+0x118/0x1b0 [ 1410.415646] ion_system_heap_allocate+0x133/0x8c0 [ 1410.420680] ? _raw_spin_unlock+0x29/0x40 [ 1410.424858] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1410.430058] ? ion_system_contig_heap_create+0x130/0x130 [ 1410.435694] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1410.440731] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1410.445891] ion_alloc+0x27a/0x810 [ 1410.449644] ? ion_dma_buf_release+0x40/0x40 [ 1410.454172] ? __might_fault+0x177/0x1b0 [ 1410.458377] ion_ioctl+0xea/0x1f0 [ 1410.462024] ? ion_query_heaps+0x360/0x360 [ 1410.466453] ? __alloc_fd+0x1be/0x490 [ 1410.471188] ? ion_query_heaps+0x360/0x360 [ 1410.475591] do_vfs_ioctl+0x75a/0xff0 [ 1410.479598] ? ioctl_preallocate+0x1a0/0x1a0 [ 1410.484182] ? lock_downgrade+0x740/0x740 [ 1410.488521] ? __fget+0x225/0x360 [ 1410.492079] ? do_vfs_ioctl+0xff0/0xff0 [ 1410.496484] ? security_file_ioctl+0x83/0xb0 [ 1410.500996] SyS_ioctl+0x7f/0xb0 [ 1410.504551] ? do_vfs_ioctl+0xff0/0xff0 [ 1410.508576] do_syscall_64+0x1d5/0x640 [ 1410.512777] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1410.518312] RIP: 0033:0x465f69 [ 1410.521937] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1410.531068] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1410.538357] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1410.545736] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1410.553235] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1410.560634] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1410.569695] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1410.581259] Node 1 Normal: 28689*4kB (UME) 2790*8kB (UM) 2512*16kB (U) 2268*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 249844kB [ 1410.600584] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1410.612513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1410.621642] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1410.641039] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1410.650069] 26501 total pagecache pages [ 1410.654680] 0 pages in swap cache [ 1410.658340] Swap cache stats: add 0, delete 0, find 0/0 [ 1410.670992] Free swap = 0kB [ 1410.674199] Total swap = 0kB [ 1410.677640] 2097051 pages RAM [ 1410.681140] 0 pages HighMem/MovableOnly [ 1410.697469] 363840 pages reserved [ 1410.704508] 0 pages cma reserved [ 1410.724052] warn_alloc_show_mem: 2 callbacks suppressed [ 1410.724056] Mem-Info: [ 1410.741060] active_anon:28241 inactive_anon:17222 isolated_anon:0 [ 1410.741060] active_file:1778 inactive_file:5603 isolated_file:0 [ 1410.741060] unevictable:0 dirty:69 writeback:0 unstable:0 [ 1410.741060] slab_reclaimable:13434 slab_unreclaimable:120194 [ 1410.741060] mapped:57630 shmem:19216 pagetables:783 bounce:0 [ 1410.741060] free:107795 free_pcp:432 free_cma:0 [ 1410.785033] Node 0 active_anon:112448kB inactive_anon:48552kB active_file:7052kB inactive_file:22256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220392kB dirty:224kB writeback:0kB shmem:56400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1410.824935] Node 1 active_anon:516kB inactive_anon:20336kB active_file:60kB inactive_file:156kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10128kB dirty:52kB writeback:0kB shmem:20464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1410.871825] Node 0 DMA free:11080kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1410.930732] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1410.936023] Node 0 DMA32 free:149960kB min:36200kB low:45248kB high:54296kB active_anon:112448kB inactive_anon:48552kB active_file:6952kB inactive_file:22160kB unevictable:0kB writepending:224kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7616kB pagetables:2996kB bounce:0kB free_pcp:1084kB local_pcp:676kB free_cma:0kB [ 1410.967499] lowmem_reserve[]: 0 0 0 0 0 [ 1410.990703] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1411.028411] lowmem_reserve[]: 0 0 0 0 0 [ 1411.032746] Node 1 Normal free:312696kB min:53696kB low:67120kB high:80544kB active_anon:516kB inactive_anon:20336kB active_file:68kB inactive_file:148kB unevictable:0kB writepending:60kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:136kB bounce:0kB free_pcp:672kB local_pcp:672kB free_cma:0kB [ 1411.080861] lowmem_reserve[]: 0 0 0 0 0 [ 1411.085180] Node 0 DMA: 222*4kB (UE) 12*8kB (U) 4*16kB (UE) 1*32kB (E) 1*64kB (E) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11768kB [ 1411.112098] Node 0 DMA32: 15404*4kB (UME) 2039*8kB (UME) 3233*16kB (UME) 1365*32kB (UME) 71*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 178008kB [ 1411.128395] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1411.164136] Node 1 Normal: 39963*4kB (UME) 3982*8kB (UM) 3004*16kB (U) 2464*32kB (UE) 89*64kB (U) 6*128kB (U) 8*256kB (U) 9*512kB (U) 6*1024kB (U) 0*2048kB 0*4096kB = 337884kB [ 1411.184656] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1411.205042] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1411.208438] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1411.245899] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1411.275658] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1411.280745] CPU: 1 PID: 22453 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 1411.292591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1411.298719] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1411.302399] Call Trace: [ 1411.302423] dump_stack+0x1b2/0x281 [ 1411.302437] warn_alloc.cold+0x96/0x1cc [ 1411.302448] ? zone_watermark_ok_safe+0x220/0x220 [ 1411.302469] __alloc_pages_nodemask+0x2127/0x2720 [ 1411.302480] ? lock_acquire+0x170/0x3f0 [ 1411.302492] ? lock_acquire+0x170/0x3f0 [ 1411.302507] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1411.302524] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1411.302535] ? __mutex_unlock_slowpath+0x75/0x770 [ 1411.302549] alloc_pages_current+0x155/0x260 [ 1411.302563] ion_page_pool_alloc+0x118/0x1b0 [ 1411.302573] ion_system_heap_allocate+0x133/0x8c0 [ 1411.302584] ? _raw_spin_unlock+0x29/0x40 [ 1411.302597] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1411.337459] 26521 total pagecache pages [ 1411.340241] ? ion_system_contig_heap_create+0x130/0x130 [ 1411.340255] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1411.340268] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1411.361929] 0 pages in swap cache [ 1411.365763] ion_alloc+0x27a/0x810 [ 1411.365781] ? ion_dma_buf_release+0x40/0x40 [ 1411.365793] ? __might_fault+0x177/0x1b0 [ 1411.385862] Swap cache stats: add 0, delete 0, find 0/0 [ 1411.389864] ion_ioctl+0xea/0x1f0 [ 1411.389877] ? ion_query_heaps+0x360/0x360 [ 1411.389889] ? __alloc_fd+0x1be/0x490 [ 1411.410334] Free swap = 0kB [ 1411.411272] ? ion_query_heaps+0x360/0x360 [ 1411.411283] do_vfs_ioctl+0x75a/0xff0 [ 1411.411295] ? ioctl_preallocate+0x1a0/0x1a0 [ 1411.411305] ? lock_downgrade+0x740/0x740 [ 1411.411323] ? __fget+0x225/0x360 [ 1411.411333] ? do_vfs_ioctl+0xff0/0xff0 [ 1411.411343] ? security_file_ioctl+0x83/0xb0 [ 1411.411353] SyS_ioctl+0x7f/0xb0 [ 1411.411361] ? do_vfs_ioctl+0xff0/0xff0 [ 1411.411373] do_syscall_64+0x1d5/0x640 [ 1411.411390] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1411.411403] RIP: 0033:0x465f69 [ 1411.420180] Total swap = 0kB [ 1411.421380] RSP: 002b:00007f5ba2c45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1411.421390] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1411.421395] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1411.421399] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1411.421404] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1411.421410] R13: 00007ffec1e0e6ff R14: 00007f5ba2c45300 R15: 0000000000022000 [ 1411.545320] 2097051 pages RAM [ 1411.548621] 0 pages HighMem/MovableOnly [ 1411.559428] 363840 pages reserved [ 1411.571444] 0 pages cma reserved [ 1411.746547] Mem-Info: [ 1411.756211] active_anon:28260 inactive_anon:17223 isolated_anon:0 [ 1411.756211] active_file:1784 inactive_file:5587 isolated_file:0 [ 1411.756211] unevictable:0 dirty:88 writeback:0 unstable:0 [ 1411.756211] slab_reclaimable:13419 slab_unreclaimable:120225 [ 1411.756211] mapped:57644 shmem:19216 pagetables:827 bounce:0 [ 1411.756211] free:137682 free_pcp:506 free_cma:0 [ 1411.889989] Node 0 active_anon:112524kB inactive_anon:48556kB active_file:7068kB inactive_file:22200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220448kB dirty:292kB writeback:0kB shmem:56400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1411.991357] Node 1 active_anon:516kB inactive_anon:20336kB active_file:68kB inactive_file:148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10128kB dirty:60kB writeback:0kB shmem:20464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1412.090687] Node 0 DMA free:11124kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1412.264112] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1412.269593] Node 0 DMA32 free:31888kB min:36200kB low:45248kB high:54296kB active_anon:112536kB inactive_anon:48556kB active_file:8888kB inactive_file:8148kB unevictable:0kB writepending:316kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7680kB pagetables:3172kB bounce:0kB free_pcp:660kB local_pcp:0kB free_cma:0kB [ 1412.390699] lowmem_reserve[]: 0 0 0 0 0 [ 1412.395668] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1412.399564] oom_reaper: reaped process 22512 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1412.449755] lowmem_reserve[]: 0 0 0 0 0 [ 1412.476548] Node 1 Normal free:27124kB min:53696kB low:67120kB high:80544kB active_anon:516kB inactive_anon:20336kB active_file:76kB inactive_file:140kB unevictable:0kB writepending:60kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:136kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1412.518914] lowmem_reserve[]: 0 0 0 0 0 [ 1412.527275] Node 0 DMA: 209*4kB (UE) 13*8kB (U) 4*16kB (UE) 1*32kB (E) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10956kB [ 1412.534948] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask= [ 1412.552163] Node 0 [ 1412.560700] (null), order=1, oom_score_adj=0 [ 1412.574688] DMA32: 632*4kB (UME) 463*8kB (UME) 203*16kB (UME) 64*32kB (UME) 29*64kB (UM) 9*128kB (UM) 5*256kB (M) 2*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 17864kB [ 1412.583481] systemd-journal cpuset= [ 1412.599046] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1412.604314] / [ 1412.626911] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1412.630667] mems_allowed=0-1 [ 1412.634937] Node 0 Normal: 0*4kB 0*8kB 0*16kB [ 1412.637089] CPU: 1 PID: 22458 Comm: systemd-journal Not tainted 4.14.225-syzkaller #0 [ 1412.641903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1412.641907] Call Trace: [ 1412.641928] dump_stack+0x1b2/0x281 [ 1412.641941] dump_header+0x178/0x82f [ 1412.641952] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1412.641962] ? ___ratelimit+0x2cd/0x530 [ 1412.641971] oom_kill_process.cold+0x10/0xb18 [ 1412.641989] out_of_memory+0xe3e/0x1190 [ 1412.642001] ? oom_killer_disable+0x1c0/0x1c0 [ 1412.642012] ? mutex_trylock+0x152/0x1a0 [ 1412.656209] syz-executor.2: [ 1412.659640] __alloc_pages_nodemask+0x23e1/0x2720 [ 1412.676380] 0*32kB [ 1412.679861] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1412.684810] page allocation failure: order:0 [ 1412.688948] ? cache_grow_begin+0x41/0x630 [ 1412.716126] 0*64kB [ 1412.717941] cache_grow_begin+0x91/0x630 [ 1412.725064] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1412.729155] ? cache_grow_begin+0x91/0x630 [ 1412.729165] fallback_alloc+0x207/0x2c0 [ 1412.745374] kmem_cache_alloc+0x1e5/0x3c0 [ 1412.745601] 0*128kB 0*256kB [ 1412.749688] getname_flags+0xc8/0x550 [ 1412.749700] user_path_at_empty+0x2a/0x50 [ 1412.760855] SyS_faccessat+0x21b/0x680 [ 1412.764917] ? SyS_fallocate+0x80/0x80 [ 1412.765210] syz-executor.2 cpuset= [ 1412.769213] ? do_syscall_64+0x4c/0x640 [ 1412.769215] / mems_allowed=0-1 [ 1412.772765] ? SyS_faccessat+0x680/0x680 [ 1412.772774] do_syscall_64+0x1d5/0x640 [ 1412.772789] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1412.772797] RIP: 0033:0x7f43031b09c7 [ 1412.772801] RSP: 002b:00007ffce89670e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1412.772810] RAX: ffffffffffffffda RBX: 00007ffce896a110 RCX: 00007f43031b09c7 [ 1412.772814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055f8e5afd9a3 [ 1412.772818] RBP: 00007ffce8967230 R08: 000055f8e5af33e5 R09: 0000000000000018 [ 1412.772822] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1412.772825] R13: 0000000000000000 R14: 000055f8e6013d60 R15: 00007ffce8967720 [ 1412.866871] Mem-Info: [ 1412.868744] CPU: 0 PID: 22512 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1412.869647] active_anon:28288 inactive_anon:17223 isolated_anon:0 [ 1412.869647] active_file:33 inactive_file:17 isolated_file:1 [ 1412.869647] unevictable:0 dirty:19 writeback:0 unstable:0 [ 1412.869647] slab_reclaimable:13404 slab_unreclaimable:120085 [ 1412.869647] mapped:52802 shmem:19216 pagetables:827 bounce:0 [ 1412.869647] free:13803 free_pcp:0 free_cma:0 [ 1412.877724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1412.877729] Call Trace: [ 1412.877751] dump_stack+0x1b2/0x281 [ 1412.877764] warn_alloc.cold+0x96/0x1cc [ 1412.877774] ? zone_watermark_ok_safe+0x220/0x220 [ 1412.877783] ? usleep_range+0x130/0x130 [ 1412.877792] ? try_to_free_pages+0x23f/0x6e0 [ 1412.877801] ? _find_next_bit+0xdb/0x100 [ 1412.877829] ? run_timer_softirq+0x5a0/0x5a0 [ 1412.912294] Node 0 active_anon:112536kB inactive_anon:48556kB active_file:56kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:201080kB dirty:16kB writeback:0kB shmem:56400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1412.921999] __alloc_pages_nodemask+0x2127/0x2720 [ 1412.922017] ? lock_acquire+0x170/0x3f0 [ 1412.922031] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1412.922046] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1412.924864] Node 1 active_anon:616kB inactive_anon:20336kB active_file:76kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10128kB dirty:60kB writeback:0kB shmem:20464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1412.928730] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1412.933094] Node 0 [ 1412.938081] alloc_pages_current+0x155/0x260 [ 1412.942112] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1412.946473] ion_page_pool_alloc+0x118/0x1b0 [ 1412.950834] lowmem_reserve[]: [ 1412.955751] ion_system_heap_allocate+0x133/0x8c0 [ 1412.985521] 0 [ 1412.990586] ? ion_alloc+0x187/0x810 [ 1412.994675] 2717 [ 1412.999794] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1413.004449] 2718 [ 1413.032301] ? ion_system_contig_heap_create+0x130/0x130 [ 1413.032313] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1413.032324] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1413.032334] ion_alloc+0x204/0x810 [ 1413.032349] ? ion_dma_buf_release+0x40/0x40 [ 1413.038343] 2718 [ 1413.040709] ? __might_fault+0x177/0x1b0 [ 1413.040723] ion_ioctl+0xea/0x1f0 [ 1413.040733] ? ion_query_heaps+0x360/0x360 [ 1413.040744] ? ion_query_heaps+0x360/0x360 [ 1413.040754] do_vfs_ioctl+0x75a/0xff0 [ 1413.040766] ? ioctl_preallocate+0x1a0/0x1a0 [ 1413.045173] 2718 [ 1413.071247] ? lock_downgrade+0x740/0x740 [ 1413.071262] ? __fget+0x225/0x360 [ 1413.071270] ? do_vfs_ioctl+0xff0/0xff0 [ 1413.071280] ? security_file_ioctl+0x83/0xb0 [ 1413.071289] SyS_ioctl+0x7f/0xb0 [ 1413.071297] ? do_vfs_ioctl+0xff0/0xff0 [ 1413.071310] do_syscall_64+0x1d5/0x640 [ 1413.076099] Node 0 DMA32 free:17724kB min:36200kB low:45248kB high:54296kB active_anon:112536kB inactive_anon:48556kB active_file:172kB inactive_file:476kB unevictable:0kB writepending:316kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7680kB pagetables:3172kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1413.076119] lowmem_reserve[]: 0 0 0 0 0 [ 1413.076136] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1413.076151] lowmem_reserve[]: 0 0 0 0 0 [ 1413.076169] Node 1 Normal free:26532kB min:53696kB low:67120kB high:80544kB active_anon:516kB inactive_anon:20336kB active_file:76kB inactive_file:40kB unevictable:0kB writepending:60kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:136kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1413.076190] lowmem_reserve[]: [ 1413.079609] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1413.084657] 0 [ 1413.086553] RIP: 0033:0x465f69 [ 1413.090378] 0 [ 1413.092446] RSP: 002b:00007f0a724bf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1413.092456] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1413.092461] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1413.092466] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1413.092470] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1413.092476] R13: 00007fffce0e3c8f R14: 00007f0a724bf300 R15: 0000000000022000 [ 1413.105343] 0*512kB [ 1413.127559] 0 [ 1413.141694] 0*1024kB [ 1413.159214] 0 [ 1413.173104] 0*2048kB [ 1413.191088] 0 [ 1413.229638] 0*4096kB [ 1413.255476] CPU: 1 PID: 22431 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1413.295416] = 0kB [ 1413.301771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1413.301776] Call Trace: [ 1413.301799] dump_stack+0x1b2/0x281 [ 1413.301812] warn_alloc.cold+0x96/0x1cc [ 1413.301823] ? zone_watermark_ok_safe+0x220/0x220 [ 1413.301833] ? usleep_range+0x130/0x130 [ 1413.301849] ? queue_work_on+0x10d/0x1d0 [ 1413.301860] ? _find_next_bit+0xdb/0x100 [ 1413.301871] ? run_timer_softirq+0x5a0/0x5a0 [ 1413.301887] __alloc_pages_nodemask+0x2127/0x2720 [ 1413.301905] ? lock_acquire+0x170/0x3f0 [ 1413.324217] Node 1 [ 1413.324510] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1413.346762] Normal: [ 1413.346872] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1413.348704] 20*4kB [ 1413.351126] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1413.351144] alloc_pages_current+0x155/0x260 [ 1413.351159] ion_page_pool_alloc+0x118/0x1b0 [ 1413.351170] ion_system_heap_allocate+0x133/0x8c0 [ 1413.351181] ? _raw_spin_unlock+0x29/0x40 [ 1413.351190] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1413.351200] ? ion_system_contig_heap_create+0x130/0x130 [ 1413.351210] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1413.351220] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1413.351230] ion_alloc+0x27a/0x810 [ 1413.351245] ? ion_dma_buf_release+0x40/0x40 [ 1413.351256] ? __might_fault+0x177/0x1b0 [ 1413.359973] (UME) [ 1413.363807] ion_ioctl+0xea/0x1f0 [ 1413.363818] ? ion_query_heaps+0x360/0x360 [ 1413.363828] ? __alloc_fd+0x1be/0x490 [ 1413.363838] ? ion_query_heaps+0x360/0x360 [ 1413.363847] do_vfs_ioctl+0x75a/0xff0 [ 1413.363857] ? ioctl_preallocate+0x1a0/0x1a0 [ 1413.363866] ? lock_downgrade+0x740/0x740 [ 1413.363878] ? __fget+0x225/0x360 [ 1413.363887] ? do_vfs_ioctl+0xff0/0xff0 [ 1413.363898] ? security_file_ioctl+0x83/0xb0 [ 1413.363908] SyS_ioctl+0x7f/0xb0 [ 1413.363914] ? do_vfs_ioctl+0xff0/0xff0 [ 1413.363925] do_syscall_64+0x1d5/0x640 [ 1413.363942] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1413.383485] 3*8kB [ 1413.386558] RIP: 0033:0x465f69 [ 1413.406646] (UM) [ 1413.408627] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 [ 1413.428746] 2*16kB [ 1413.432284] ORIG_RAX: 0000000000000010 [ 1413.432290] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1413.432295] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1413.432299] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1413.432304] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1413.432309] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1413.485510] (U) [ 1413.514774] Node 0 [ 1413.532978] Mem-Info: [ 1413.585345] DMA: [ 1413.597123] 530*32kB (UE) 105*64kB (U) 5*128kB (U) 2*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 26504kB [ 1413.597177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1413.597183] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1413.597190] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1413.597196] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1413.597201] 19247 total pagecache pages [ 1413.597210] 0 pages in swap cache [ 1413.597216] Swap cache stats: add 0, delete 0, find 0/0 [ 1413.597220] Free swap = 0kB [ 1413.597223] Total swap = 0kB [ 1413.597229] 2097051 pages RAM [ 1413.597233] 0 pages HighMem/MovableOnly [ 1413.597236] 363840 pages reserved [ 1413.597239] 0 pages cma reserved [ 1413.600816] active_anon:28282 inactive_anon:17223 isolated_anon:0 [ 1413.600816] active_file:16 inactive_file:15 isolated_file:0 [ 1413.600816] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1413.600816] slab_reclaimable:13404 slab_unreclaimable:120079 [ 1413.600816] mapped:52773 shmem:19216 pagetables:827 bounce:0 [ 1413.600816] free:13861 free_pcp:11 free_cma:0 [ 1413.628784] 209*4kB [ 1413.632272] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1413.632294] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1413.632316] CPU: 0 PID: 22453 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 1413.632322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1413.632326] Call Trace: [ 1413.632343] dump_stack+0x1b2/0x281 [ 1413.632356] warn_alloc.cold+0x96/0x1cc [ 1413.632368] ? zone_watermark_ok_safe+0x220/0x220 [ 1413.632378] ? usleep_range+0x130/0x130 [ 1413.632390] ? try_to_free_pages+0x23f/0x6e0 [ 1413.659000] (UE) [ 1413.661447] ? _find_next_bit+0xdb/0x100 [ 1413.661458] ? run_timer_softirq+0x5a0/0x5a0 [ 1413.661474] __alloc_pages_nodemask+0x2127/0x2720 [ 1413.661491] ? lock_acquire+0x170/0x3f0 [ 1413.670790] 13*8kB [ 1413.674733] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1413.678166] (U) [ 1413.683710] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1413.683726] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1413.683744] alloc_pages_current+0x155/0x260 [ 1413.683761] ion_page_pool_alloc+0x118/0x1b0 [ 1413.686790] 4*16kB [ 1413.689968] ion_system_heap_allocate+0x133/0x8c0 [ 1413.693114] (UE) [ 1413.697325] ? _raw_spin_unlock+0x29/0x40 [ 1413.700898] 1*32kB [ 1413.704244] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1413.738733] (E) [ 1413.741017] ? ion_system_contig_heap_create+0x130/0x130 [ 1413.741030] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1413.741041] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1413.741053] ion_alloc+0x27a/0x810 [ 1413.753259] 1*64kB [ 1413.758913] ? ion_dma_buf_release+0x40/0x40 [ 1413.766934] (E) [ 1413.776549] ? __might_fault+0x177/0x1b0 [ 1413.776565] ion_ioctl+0xea/0x1f0 [ 1413.776576] ? ion_query_heaps+0x360/0x360 [ 1413.776585] ? __alloc_fd+0x1be/0x490 [ 1413.776597] ? ion_query_heaps+0x360/0x360 [ 1413.790684] 1*128kB [ 1413.792233] do_vfs_ioctl+0x75a/0xff0 [ 1413.796449] (E) [ 1413.801383] ? ioctl_preallocate+0x1a0/0x1a0 [ 1413.801392] ? lock_downgrade+0x740/0x740 [ 1413.801404] ? __fget+0x225/0x360 [ 1413.801418] ? do_vfs_ioctl+0xff0/0xff0 [ 1413.801430] ? security_file_ioctl+0x83/0xb0 [ 1413.820688] 2*256kB [ 1413.821221] SyS_ioctl+0x7f/0xb0 [ 1413.823451] (UE) [ 1413.828517] ? do_vfs_ioctl+0xff0/0xff0 [ 1413.830598] 2*512kB [ 1413.835419] do_syscall_64+0x1d5/0x640 [ 1413.835437] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1413.835446] RIP: 0033:0x465f69 [ 1413.835450] RSP: 002b:00007f5ba2c45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1413.835459] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1413.835468] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1413.857790] (UE) [ 1413.858842] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1413.861285] 2*1024kB [ 1413.865685] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1413.865693] R13: 00007ffec1e0e6ff R14: 00007f5ba2c45300 R15: 0000000000022000 [ 1413.867933] (UE) [ 1413.876403] Node 0 active_anon:112492kB inactive_anon:48556kB active_file:36kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200964kB dirty:0kB writeback:0kB shmem:56400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1413.912578] 3*2048kB [ 1413.916279] Node 1 active_anon:636kB inactive_anon:20336kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10128kB dirty:0kB writeback:0kB shmem:20464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1413.955800] (UME) [ 1413.958016] Node 0 [ 1414.015219] 0*4096kB [ 1414.020545] DMA free:11020kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1414.060688] = 10956kB [ 1414.061401] lowmem_reserve[]: [ 1414.063309] Node 0 [ 1414.091030] 0 2717 2718 2718 2718 [ 1414.140086] Node 0 DMA32 free:62788kB min:36200kB low:45248kB high:54296kB active_anon:112476kB inactive_anon:48556kB active_file:216kB inactive_file:5912kB unevictable:0kB writepending:96kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7680kB pagetables:3084kB bounce:0kB free_pcp:816kB local_pcp:112kB free_cma:0kB [ 1414.174336] lowmem_reserve[]: 0 0 0 0 0 [ 1414.191085] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1414.210706] DMA32: 198*4kB (ME) 352*8kB (E) 149*16kB (E) 224*32kB (UE) 682*64kB (UM) 28*128kB (UM) 11*256kB (UM) 5*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 66792kB [ 1414.250954] lowmem_reserve[]: 0 0 0 0 0 [ 1414.255000] Node 1 Normal free:128392kB min:53696kB low:67120kB high:80544kB active_anon:636kB inactive_anon:20336kB active_file:36kB inactive_file:20kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:136kB bounce:0kB free_pcp:124kB local_pcp:28kB free_cma:0kB [ 1414.270684] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1414.331063] lowmem_reserve[]: 0 0 0 0 0 [ 1414.335082] Node 1 Normal: 7*4kB (E) 1*8kB (M) 1*16kB (M) 1*32kB (E) 143*64kB (UM) 45*128kB (UM) 39*256kB (UM) 25*512kB (UM) 26*1024kB [ 1414.338753] Node 0 [ 1414.338756] (U) 2*2048kB [ 1414.370714] DMA: 22*4kB (UE) 13*8kB (U) 4*16kB (UE) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11040kB [ 1414.391928] Node 0 DMA32: 374*4kB (UME) 399*8kB (UME) 177*16kB (UME) 38*32kB (UME) 287*64kB (UM) 28*128kB (UM) 11*256kB (UM) 5*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 37088kB [ 1414.408174] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1414.419159] Node 1 Normal: 13*4kB (UME) 4*8kB (UM) 2*16kB (M) 2*32kB (UE) 3*64kB (UM) 1*128kB (M) 38*256kB (UM) 25*512kB (UM) 26*1024kB (U) 2*2048kB (U) 0*4096kB = 53748kB [ 1414.430654] (U) 0*4096kB = 68500kB [ 1414.438248] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1414.459446] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1414.474935] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1414.499320] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1414.505143] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1414.529762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1414.543612] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1414.566393] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1414.570001] 19265 total pagecache pages [ 1414.589439] 0 pages in swap cache [ 1414.592942] Swap cache stats: add 0, delete 0, find 0/0 [ 1414.598297] Free swap = 0kB [ 1414.620751] Total swap = 0kB [ 1414.623807] 2097051 pages RAM [ 1414.624872] 19265 total pagecache pages [ 1414.626908] 0 pages HighMem/MovableOnly [ 1414.640712] 0 pages in swap cache [ 1414.644219] Swap cache stats: add 0, delete 0, find 0/0 [ 1414.649574] Free swap = 0kB [ 1414.660675] 363840 pages reserved [ 1414.664143] 0 pages cma reserved [ 1414.667505] Out of memory (oom_kill_allocating_task): Kill process 22458 (systemd-journal) score 0 or sacrifice child [ 1414.682934] Total swap = 0kB [ 1414.685974] 2097051 pages RAM [ 1414.689089] 0 pages HighMem/MovableOnly [ 1414.708153] Killed process 22458 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:2092kB [ 1414.718236] 363840 pages reserved [ 1414.722949] oom_reaper: reaped process 22458 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2092kB [ 1414.757558] 0 pages cma reserved 08:37:36 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) 08:37:36 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) [ 1414.911995] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1414.951606] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1415.003819] systemd[1]: Stopped Journal Service. [ 1415.074116] systemd[1]: Starting Journal Service... [ 1415.282909] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1415.311566] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1415.346375] CPU: 0 PID: 22536 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1415.354305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1415.363658] Call Trace: [ 1415.366334] dump_stack+0x1b2/0x281 [ 1415.369969] warn_alloc.cold+0x96/0x1cc [ 1415.373946] ? zone_watermark_ok_safe+0x220/0x220 [ 1415.378799] __alloc_pages_nodemask+0x2127/0x2720 [ 1415.383645] ? lock_acquire+0x170/0x3f0 [ 1415.387623] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1415.392467] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1415.397918] ? __mutex_unlock_slowpath+0x75/0x770 [ 1415.402768] alloc_pages_current+0x155/0x260 [ 1415.407178] ion_page_pool_alloc+0x118/0x1b0 [ 1415.411583] ion_system_heap_allocate+0x133/0x8c0 [ 1415.416458] ? ion_alloc+0x187/0x810 [ 1415.420168] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1415.425622] ? ion_system_contig_heap_create+0x130/0x130 [ 1415.431081] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1415.436108] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1415.440966] ion_alloc+0x204/0x810 [ 1415.444503] ? ion_dma_buf_release+0x40/0x40 [ 1415.448925] ? __might_fault+0x177/0x1b0 [ 1415.452989] ion_ioctl+0xea/0x1f0 [ 1415.456440] ? ion_query_heaps+0x360/0x360 [ 1415.460669] ? __alloc_fd+0x1be/0x490 [ 1415.464463] ? ion_query_heaps+0x360/0x360 [ 1415.468691] do_vfs_ioctl+0x75a/0xff0 [ 1415.472507] ? ioctl_preallocate+0x1a0/0x1a0 [ 1415.476911] ? lock_downgrade+0x740/0x740 [ 1415.481068] ? __fget+0x225/0x360 [ 1415.484517] ? do_vfs_ioctl+0xff0/0xff0 [ 1415.488486] ? security_file_ioctl+0x83/0xb0 [ 1415.492906] SyS_ioctl+0x7f/0xb0 [ 1415.496270] ? do_vfs_ioctl+0xff0/0xff0 [ 1415.500240] do_syscall_64+0x1d5/0x640 [ 1415.504129] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1415.509334] RIP: 0033:0x465f69 [ 1415.512525] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1415.520239] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1415.527506] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1415.534767] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1415.542028] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1415.549291] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1415.636579] oom_reaper: reaped process 22507 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1415.696314] warn_alloc_show_mem: 2 callbacks suppressed [ 1415.696318] Mem-Info: [ 1415.704271] active_anon:28220 inactive_anon:17223 isolated_anon:0 [ 1415.704271] active_file:26 inactive_file:39 isolated_file:21 [ 1415.704271] unevictable:0 dirty:23 writeback:0 unstable:0 [ 1415.704271] slab_reclaimable:13435 slab_unreclaimable:120087 [ 1415.704271] mapped:52294 shmem:19218 pagetables:870 bounce:0 [ 1415.704271] free:15904 free_pcp:86 free_cma:0 [ 1415.739742] kworker/u4:0 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1415.752903] Node 0 active_anon:111808kB inactive_anon:48552kB active_file:24kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):84kB mapped:198888kB dirty:76kB writeback:0kB shmem:56400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1415.761007] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1415.793253] kworker/u4:0 cpuset=/ mems_allowed=0-1 [ 1415.805530] CPU: 1 PID: 14651 Comm: kworker/u4:0 Not tainted 4.14.225-syzkaller #0 [ 1415.813238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1415.815397] syz-executor.0 cpuset= [ 1415.822602] Workqueue: events_unbound call_usermodehelper_exec_work [ 1415.822609] Call Trace: [ 1415.822626] dump_stack+0x1b2/0x281 [ 1415.822637] dump_header+0x178/0x82f [ 1415.822646] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1415.822655] ? ___ratelimit+0x2cd/0x530 [ 1415.822665] oom_kill_process.cold+0x10/0xb18 [ 1415.822676] ? lock_downgrade+0x740/0x740 [ 1415.822689] out_of_memory+0x2dc/0x1190 [ 1415.822702] ? oom_killer_disable+0x1c0/0x1c0 [ 1415.829341] / [ 1415.832642] ? mutex_trylock+0x152/0x1a0 [ 1415.850730] mems_allowed=0-1 [ 1415.851565] __alloc_pages_nodemask+0x23e1/0x2720 [ 1415.883486] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1415.888326] ? fs_reclaim_release+0xd0/0x110 [ 1415.892754] ? kmem_cache_alloc_node+0x38b/0x410 [ 1415.897499] copy_process.part.0+0x265/0x71c0 [ 1415.901999] ? __lock_acquire+0x5fc/0x3f20 [ 1415.906234] ? debug_object_activate+0x292/0x490 [ 1415.910981] ? trace_hardirqs_on+0x10/0x10 [ 1415.915202] ? static_obj+0x50/0x50 [ 1415.918824] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1415.924266] ? __cleanup_sighand+0x40/0x40 [ 1415.928500] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1415.933969] _do_fork+0x184/0xc80 [ 1415.937419] ? fork_idle+0x270/0x270 [ 1415.941155] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1415.946270] ? process_one_work+0x6c4/0x14a0 [ 1415.950669] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1415.956122] kernel_thread+0x2f/0x40 [ 1415.959841] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1415.965114] ? call_usermodehelper+0x80/0x80 [ 1415.969526] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1415.974981] process_one_work+0x793/0x14a0 [ 1415.979217] ? work_busy+0x320/0x320 [ 1415.982919] ? worker_thread+0x158/0xff0 [ 1415.986990] ? _raw_spin_unlock_irq+0x24/0x80 [ 1415.990787] Node 1 active_anon:1072kB inactive_anon:20340kB active_file:80kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10288kB dirty:16kB writeback:0kB shmem:20472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1415.991476] worker_thread+0x5cc/0xff0 [ 1416.022619] ? rescuer_thread+0xc80/0xc80 [ 1416.026763] kthread+0x30d/0x420 [ 1416.030130] ? kthread_create_on_node+0xd0/0xd0 [ 1416.034795] ret_from_fork+0x24/0x30 [ 1416.038512] CPU: 0 PID: 22512 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1416.040210] Mem-Info: [ 1416.046401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1416.046405] Call Trace: [ 1416.046425] dump_stack+0x1b2/0x281 [ 1416.046439] warn_alloc.cold+0x96/0x1cc [ 1416.046452] ? zone_watermark_ok_safe+0x220/0x220 [ 1416.048862] active_anon:28220 inactive_anon:17223 isolated_anon:0 [ 1416.048862] active_file:26 inactive_file:39 isolated_file:21 [ 1416.048862] unevictable:0 dirty:23 writeback:0 unstable:0 [ 1416.048862] slab_reclaimable:13435 slab_unreclaimable:120087 [ 1416.048862] mapped:52294 shmem:19218 pagetables:870 bounce:0 [ 1416.048862] free:13704 free_pcp:0 free_cma:0 [ 1416.058215] __alloc_pages_nodemask+0x2127/0x2720 [ 1416.058233] ? lock_acquire+0x170/0x3f0 [ 1416.058247] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1416.060849] Node 0 active_anon:111808kB inactive_anon:48552kB active_file:24kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):84kB mapped:198888kB dirty:76kB writeback:0kB shmem:56400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1416.064435] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1416.068388] Node 1 active_anon:1072kB inactive_anon:20340kB active_file:80kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10288kB dirty:16kB writeback:0kB shmem:20472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1416.073215] ? __mutex_unlock_slowpath+0x75/0x770 [ 1416.073230] alloc_pages_current+0x155/0x260 [ 1416.073245] ion_page_pool_alloc+0x118/0x1b0 [ 1416.073269] ion_system_heap_allocate+0x133/0x8c0 [ 1416.106525] Node 0 [ 1416.111343] ? _raw_spin_unlock+0x29/0x40 [ 1416.111362] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1416.111374] ? ion_system_contig_heap_create+0x130/0x130 [ 1416.115477] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1416.120337] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1416.148680] lowmem_reserve[]: [ 1416.154176] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1416.154197] ion_alloc+0x27a/0x810 [ 1416.154212] ? ion_dma_buf_release+0x40/0x40 [ 1416.181508] 0 [ 1416.186325] ? __might_fault+0x177/0x1b0 [ 1416.190741] 2717 [ 1416.195128] ion_ioctl+0xea/0x1f0 [ 1416.199944] 2718 [ 1416.202178] ? ion_query_heaps+0x360/0x360 [ 1416.202191] ? ion_query_heaps+0x360/0x360 [ 1416.202202] do_vfs_ioctl+0x75a/0xff0 [ 1416.202243] ? ioctl_preallocate+0x1a0/0x1a0 [ 1416.206366] 2718 [ 1416.211290] ? lock_downgrade+0x740/0x740 [ 1416.211305] ? __fget+0x225/0x360 [ 1416.211314] ? do_vfs_ioctl+0xff0/0xff0 [ 1416.211324] ? security_file_ioctl+0x83/0xb0 [ 1416.211334] SyS_ioctl+0x7f/0xb0 [ 1416.216775] 2718 [ 1416.242290] ? do_vfs_ioctl+0xff0/0xff0 [ 1416.242303] do_syscall_64+0x1d5/0x640 [ 1416.242319] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1416.242331] RIP: 0033:0x465f69 [ 1416.250431] RSP: 002b:00007f0a724bf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1416.255302] Node 0 [ 1416.258811] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1416.258819] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1416.263264] DMA32 free:17516kB min:36200kB low:45248kB high:54296kB active_anon:112308kB inactive_anon:48552kB active_file:504kB inactive_file:128kB unevictable:0kB writepending:76kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7744kB pagetables:3072kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1416.265022] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1416.269078] lowmem_reserve[]: [ 1416.271134] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1416.271140] R13: 00007fffce0e3c8f R14: 00007f0a724bf300 R15: 0000000000022000 [ 1416.313462] Node 0 [ 1416.327151] syz-executor.4: [ 1416.340464] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1416.352872] page allocation failure: order:4 [ 1416.369462] lowmem_reserve[]: [ 1416.397442] 0 [ 1416.430717] syz-executor.1: [ 1416.446259] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1416.454898] 0 [ 1416.456342] (null) [ 1416.478065] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1416.478212] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1416.496250] CPU: 1 PID: 22540 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 1416.502500] 2717 [ 1416.504121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1416.504129] 2718 [ 1416.506175] Call Trace: [ 1416.520167] dump_stack+0x1b2/0x281 [ 1416.523799] warn_alloc.cold+0x96/0x1cc [ 1416.527780] ? zone_watermark_ok_safe+0x220/0x220 [ 1416.532638] __alloc_pages_nodemask+0x2127/0x2720 [ 1416.537489] ? lock_acquire+0x170/0x3f0 [ 1416.541467] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1416.546314] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1416.551766] ? __mutex_unlock_slowpath+0x75/0x770 [ 1416.556608] alloc_pages_current+0x155/0x260 [ 1416.561012] ion_page_pool_alloc+0x118/0x1b0 [ 1416.565412] ion_system_heap_allocate+0x133/0x8c0 [ 1416.570243] ? ion_alloc+0x187/0x810 [ 1416.574038] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1416.579484] ? ion_system_contig_heap_create+0x130/0x130 [ 1416.584930] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1416.589946] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1416.594812] ion_alloc+0x204/0x810 [ 1416.598367] ? ion_dma_buf_release+0x40/0x40 [ 1416.602770] ? __might_fault+0x177/0x1b0 [ 1416.606824] ion_ioctl+0xea/0x1f0 [ 1416.610267] ? ion_query_heaps+0x360/0x360 [ 1416.614497] ? __alloc_fd+0x1be/0x490 [ 1416.618297] ? ion_query_heaps+0x360/0x360 [ 1416.622530] do_vfs_ioctl+0x75a/0xff0 [ 1416.626325] ? ioctl_preallocate+0x1a0/0x1a0 [ 1416.630744] ? lock_downgrade+0x740/0x740 [ 1416.634886] ? __fget+0x225/0x360 [ 1416.638336] ? do_vfs_ioctl+0xff0/0xff0 [ 1416.642302] ? security_file_ioctl+0x83/0xb0 [ 1416.646819] SyS_ioctl+0x7f/0xb0 [ 1416.650179] ? do_vfs_ioctl+0xff0/0xff0 [ 1416.654152] do_syscall_64+0x1d5/0x640 [ 1416.658057] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1416.663260] RIP: 0033:0x465f69 [ 1416.666444] RSP: 002b:00007f5ba2c45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1416.674149] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1416.681422] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1416.688691] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1416.695956] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1416.703224] R13: 00007ffec1e0e6ff R14: 00007f5ba2c45300 R15: 0000000000022000 [ 1416.717003] 2718 2718 [ 1416.719537] Node 0 DMA32 free:17672kB min:36200kB low:45248kB high:54296kB active_anon:111712kB inactive_anon:48552kB active_file:20kB inactive_file:32kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7680kB pagetables:2988kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1416.729302] 0 [ 1416.754250] lowmem_reserve[]: 0 0 0 0 0 [ 1416.760068] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1416.768002] syz-executor.1 cpuset= [ 1416.791415] lowmem_reserve[]: 0 0 0 0 0 [ 1416.798961] Node 1 Normal free:26440kB min:53696kB low:67120kB high:80544kB active_anon:1052kB inactive_anon:20340kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:140kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1416.804435] / [ 1416.829762] 0 0 0 [ 1416.833714] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1416.861609] mems_allowed=0-1 [ 1416.864737] CPU: 1 PID: 22507 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 1416.872616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1416.877316] lowmem_reserve[]: [ 1416.882488] Call Trace: [ 1416.882511] dump_stack+0x1b2/0x281 [ 1416.882525] warn_alloc.cold+0x96/0x1cc [ 1416.882536] ? zone_watermark_ok_safe+0x220/0x220 [ 1416.882545] ? usleep_range+0x130/0x130 [ 1416.882555] ? try_to_free_pages+0x23f/0x6e0 [ 1416.882565] ? _find_next_bit+0xdb/0x100 [ 1416.882576] ? run_timer_softirq+0x5a0/0x5a0 [ 1416.882591] __alloc_pages_nodemask+0x2127/0x2720 [ 1416.882608] ? lock_acquire+0x170/0x3f0 [ 1416.882622] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1416.909476] 0 [ 1416.909989] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1416.938330] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1416.943793] ? policy_node+0xcd/0x110 [ 1416.947598] alloc_pages_current+0x155/0x260 [ 1416.952014] ion_page_pool_alloc+0x118/0x1b0 [ 1416.956426] ion_system_heap_allocate+0x133/0x8c0 [ 1416.958604] 0 [ 1416.961266] ? ion_alloc+0x187/0x810 [ 1416.961276] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1416.961285] ? ion_system_contig_heap_create+0x130/0x130 [ 1416.961296] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1416.961306] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1416.961318] ion_alloc+0x204/0x810 [ 1416.961338] ? ion_dma_buf_release+0x40/0x40 [ 1416.961350] ? __might_fault+0x177/0x1b0 [ 1416.961361] ion_ioctl+0xea/0x1f0 [ 1416.961371] ? ion_query_heaps+0x360/0x360 [ 1416.961382] ? __alloc_fd+0x1be/0x490 [ 1416.990399] 0 [ 1416.991101] ? ion_query_heaps+0x360/0x360 [ 1416.991112] do_vfs_ioctl+0x75a/0xff0 [ 1416.991124] ? ioctl_preallocate+0x1a0/0x1a0 [ 1416.991134] ? lock_downgrade+0x740/0x740 [ 1416.991147] ? __fget+0x225/0x360 [ 1416.991156] ? do_vfs_ioctl+0xff0/0xff0 [ 1416.991167] ? security_file_ioctl+0x83/0xb0 [ 1416.991177] SyS_ioctl+0x7f/0xb0 [ 1416.991187] ? do_vfs_ioctl+0xff0/0xff0 [ 1417.013018] 0 [ 1417.017111] do_syscall_64+0x1d5/0x640 [ 1417.039348] 0 [ 1417.041219] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1417.041230] RIP: 0033:0x465f69 [ 1417.041235] RSP: 002b:00007f6547c30188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1417.041244] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1417.041249] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1417.041254] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1417.041259] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1417.041264] R13: 00007ffe59ae816f R14: 00007f6547c30300 R15: 0000000000022000 [ 1417.044152] lowmem_reserve[]: [ 1417.103807] 0 0 0 0 0 [ 1417.114698] Node 1 Normal free:26440kB min:53696kB low:67120kB high:80544kB active_anon:1052kB inactive_anon:20340kB active_file:48kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:140kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1417.145409] lowmem_reserve[]: 0 0 0 0 0 [ 1417.148395] Node 0 [ 1417.149440] Node 0 [ 1417.149449] DMA: [ 1417.151716] DMA: 1*4kB (U) 12*8kB (U) 5*16kB (UE) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10964kB [ 1417.151797] Node 0 DMA32: 588*4kB (UME) 688*8kB (UME) 385*16kB (UME) 99*32kB (UME) 9*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17760kB [ 1417.178645] 1*4kB [ 1417.193888] Mem-Info: [ 1417.198480] active_anon:28191 inactive_anon:17223 isolated_anon:0 [ 1417.198480] active_file:17 inactive_file:20 isolated_file:0 [ 1417.198480] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1417.198480] slab_reclaimable:13434 slab_unreclaimable:120055 [ 1417.198480] mapped:52225 shmem:19218 pagetables:782 bounce:0 [ 1417.198480] free:13769 free_pcp:46 free_cma:0 [ 1417.207662] (U) [ 1417.238293] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1417.250109] 12*8kB [ 1417.257894] Node 1 [ 1417.259976] (U) [ 1417.260134] Normal: 1852*4kB (UME) 731*8kB (UME) 486*16kB (UME) 169*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26440kB [ 1417.280366] 5*16kB (UE) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10964kB [ 1417.286251] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1417.310229] Node 0 active_anon:111712kB inactive_anon:48552kB active_file:20kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:198772kB dirty:12kB writeback:0kB shmem:56400kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1417.318308] Node 0 [ 1417.347389] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1417.360480] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1417.401837] Node 1 active_anon:1052kB inactive_anon:20340kB active_file:48kB inactive_file:448kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10128kB dirty:0kB writeback:0kB shmem:20472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1417.410716] DMA32: [ 1417.431483] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1417.475062] systemd[1]: systemd-journald.service: Main process exited, code=exited, status=127/n/a [ 1417.493034] 20550 total pagecache pages [ 1417.504836] 557*4kB (UME) 688*8kB (UME) 385*16kB (UME) 100*32kB (UME) 9*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17668kB [ 1417.506932] 0 pages in swap cache [ 1417.538881] systemd[1]: Failed to start Journal Service. [ 1417.551106] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1417.572613] Node 0 [ 1417.584548] Swap cache stats: add 0, delete 0, find 0/0 [ 1417.600279] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1417.600767] Free swap = 0kB [ 1417.615686] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1417.627707] systemd[1]: systemd-journald.service: Failed with result 'exit-code'. [ 1417.644581] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1417.656141] Total swap = 0kB [ 1417.656151] Node 1 Normal: 2*4kB (ME) 2*8kB (UM) 0*16kB 0*32kB 857*64kB (UME) 166*128kB (UE) 92*256kB [ 1417.659269] lowmem_reserve[]: 0 [ 1417.668879] (UME) [ 1417.672148] 2097051 pages RAM [ 1417.679611] 0 pages HighMem/MovableOnly [ 1417.684174] 363840 pages reserved [ 1417.688183] systemd[1]: Stopped Journal Service. [ 1417.700979] 2717 2718 2718 2718 [ 1417.706619] 0 pages cma reserved [ 1417.708455] 24*512kB [ 1417.710082] Node 0 [ 1417.712255] (UME) [ 1417.718208] DMA32 free:45804kB min:36200kB low:45248kB high:54296kB active_anon:111712kB inactive_anon:48552kB active_file:220kB inactive_file:0kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7712kB pagetables:2988kB bounce:0kB free_pcp:440kB local_pcp:236kB free_cma:0kB [ 1417.720303] 183*1024kB [ 1417.722707] Out of memory: Kill process 22504 (syz-executor.5) score 1004 or sacrifice child [ 1417.770548] lowmem_reserve[]: 0 0 0 0 0 [ 1417.781060] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1417.809222] (UE) 31*2048kB [ 1417.811447] Killed process 22508 (syz-executor.5) total-vm:93384kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 1417.826230] (U) 5*4096kB (U) = 383320kB [ 1417.826578] lowmem_reserve[]: 0 0 0 0 0 [ 1417.836169] Node 1 Normal free:372436kB min:53696kB low:67120kB high:80544kB active_anon:1252kB inactive_anon:20340kB active_file:848kB inactive_file:5004kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:224kB pagetables:288kB bounce:0kB free_pcp:264kB local_pcp:240kB free_cma:0kB [ 1417.839597] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1417.881957] lowmem_reserve[]: 0 0 0 0 0 [ 1417.885332] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1417.916300] oom_reaper: reaped process 22508 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1417.928928] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1417.955098] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1417.958314] Node 0 [ 1417.970682] 21018 total pagecache pages [ 1417.971033] DMA: 1*4kB (U) 12*8kB (U) 5*16kB (UE) 1*32kB (E) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11028kB [ 1418.000722] 0 pages in swap cache [ 1418.004221] Swap cache stats: add 0, delete 0, find 0/0 [ 1418.009586] Free swap = 0kB [ 1418.020173] Total swap = 0kB [ 1418.024665] 2097051 pages RAM [ 1418.029231] 0 pages HighMem/MovableOnly [ 1418.030170] Node 0 [ 1418.046621] 363840 pages reserved [ 1418.049720] DMA32: [ 1418.052556] 0 pages cma reserved [ 1418.057987] 665*4kB (UME) 600*8kB (UME) 196*16kB (UME) 55*32kB (UME) 332*64kB (UM) 37*128kB (U) 14*256kB (U) 0*512kB 2*1024kB (U) 2*2048kB (U) 0*4096kB = 48068kB [ 1418.109151] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1418.125982] Node 1 Normal: 14*4kB (E) 5*8kB (UME) 2*16kB (UE) 3*32kB (UE) 0*64kB 142*128kB (UE) 91*256kB (UM) 22*512kB (U) 183*1024kB (UM) 33*2048kB (UME) 4*4096kB (U) = 324320kB [ 1418.150508] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1418.170982] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1418.191823] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1418.231085] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1418.271711] 21421 total pagecache pages [ 1418.287973] 0 pages in swap cache [ 1418.299278] Swap cache stats: add 0, delete 0, find 0/0 [ 1418.318244] Free swap = 0kB [ 1418.324865] Total swap = 0kB [ 1418.334555] 2097051 pages RAM [ 1418.347753] 0 pages HighMem/MovableOnly [ 1418.359556] 363840 pages reserved [ 1418.369727] 0 pages cma reserved [ 1418.476163] systemd-journald[22545]: File /run/log/journal/64dd78f1a75445a997c532444ad0f085/system.journal corrupted or uncleanly shut down, renaming and replacing. 08:37:40 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) [ 1419.190091] oom_reaper: reaped process 22540 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1419.617819] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1419.654246] systemd cpuset=/ mems_allowed=0-1 [ 1419.658822] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.225-syzkaller #0 [ 1419.665746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1419.675128] Call Trace: [ 1419.677720] dump_stack+0x1b2/0x281 [ 1419.681349] dump_header+0x178/0x82f [ 1419.685066] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1419.690165] ? ___ratelimit+0x2cd/0x530 [ 1419.694139] oom_kill_process.cold+0x10/0xb18 [ 1419.698635] ? lock_downgrade+0x740/0x740 [ 1419.702793] out_of_memory+0x2dc/0x1190 [ 1419.706780] ? oom_killer_disable+0x1c0/0x1c0 [ 1419.711272] ? mutex_trylock+0x152/0x1a0 [ 1419.715329] __alloc_pages_nodemask+0x23e1/0x2720 [ 1419.720203] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1419.725060] alloc_pages_current+0x155/0x260 [ 1419.729469] filemap_fault+0xea3/0x1980 [ 1419.733457] ext4_filemap_fault+0x84/0xb0 [ 1419.737606] __do_fault+0xfa/0x380 [ 1419.741142] __handle_mm_fault+0x2497/0x4620 [ 1419.745563] ? vm_insert_page+0x7c0/0x7c0 [ 1419.749708] ? lock_downgrade+0x740/0x740 [ 1419.753861] handle_mm_fault+0x391/0x860 [ 1419.758104] __do_page_fault+0x549/0xad0 [ 1419.762175] ? spurious_fault+0x640/0x640 [ 1419.766326] ? do_page_fault+0x60/0x500 [ 1419.770304] ? page_fault+0x2f/0x50 [ 1419.773931] page_fault+0x45/0x50 [ 1419.777378] RIP: 0002:0x56473ae659a0 [ 1419.781081] RSP: 3a9236d3:00007fff42f14430 EFLAGS: 56473a9236d3 [ 1419.855686] syz-executor.1: [ 1419.864041] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1419.889414] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1419.927842] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1419.943839] CPU: 1 PID: 22507 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 1419.951750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1419.961108] Call Trace: [ 1419.963709] dump_stack+0x1b2/0x281 [ 1419.963865] syz-executor.5 cpuset=/ [ 1419.967340] warn_alloc.cold+0x96/0x1cc [ 1419.967353] ? zone_watermark_ok_safe+0x220/0x220 [ 1419.971144] mems_allowed=0-1 [ 1419.974967] __alloc_pages_nodemask+0x2127/0x2720 [ 1419.987729] ? lock_acquire+0x170/0x3f0 [ 1419.991725] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1419.996578] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1420.002039] ? __mutex_unlock_slowpath+0x75/0x770 [ 1420.006889] ? retint_kernel+0x2d/0x2d [ 1420.010781] alloc_pages_current+0x155/0x260 [ 1420.015190] ion_page_pool_alloc+0x118/0x1b0 [ 1420.019628] ion_system_heap_allocate+0x133/0x8c0 [ 1420.024489] ? _raw_spin_unlock+0x29/0x40 [ 1420.028647] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1420.033584] ? ion_system_contig_heap_create+0x130/0x130 [ 1420.039045] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1420.044068] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1420.048923] ion_alloc+0x27a/0x810 [ 1420.052473] ? ion_dma_buf_release+0x40/0x40 [ 1420.056883] ? __might_fault+0x177/0x1b0 [ 1420.060969] ion_ioctl+0xea/0x1f0 [ 1420.064423] ? ion_query_heaps+0x360/0x360 [ 1420.068679] ? __alloc_fd+0x1be/0x490 [ 1420.072482] ? ion_query_heaps+0x360/0x360 [ 1420.076720] do_vfs_ioctl+0x75a/0xff0 [ 1420.080529] ? ioctl_preallocate+0x1a0/0x1a0 [ 1420.084947] ? lock_downgrade+0x740/0x740 [ 1420.089107] ? __fget+0x225/0x360 [ 1420.092565] ? do_vfs_ioctl+0xff0/0xff0 [ 1420.096545] ? security_file_ioctl+0x83/0xb0 [ 1420.100962] SyS_ioctl+0x7f/0xb0 [ 1420.104339] ? do_vfs_ioctl+0xff0/0xff0 [ 1420.108344] do_syscall_64+0x1d5/0x640 [ 1420.112252] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1420.117451] RIP: 0033:0x465f69 [ 1420.120661] RSP: 002b:00007f6547c30188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1420.128372] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1420.135644] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1420.142924] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1420.150199] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1420.157492] R13: 00007ffe59ae816f R14: 00007f6547c30300 R15: 0000000000022000 [ 1420.171641] CPU: 0 PID: 22555 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1420.179551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1420.188913] Call Trace: [ 1420.191521] dump_stack+0x1b2/0x281 [ 1420.195164] warn_alloc.cold+0x96/0x1cc [ 1420.199153] ? zone_watermark_ok_safe+0x220/0x220 [ 1420.204017] __alloc_pages_nodemask+0x2127/0x2720 [ 1420.208871] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1420.213406] ? finish_task_switch+0x178/0x610 [ 1420.217904] ? finish_task_switch+0x14d/0x610 [ 1420.222406] ? lock_acquire+0x170/0x3f0 [ 1420.226391] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1420.231259] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1420.236896] ? __mutex_unlock_slowpath+0x75/0x770 [ 1420.241776] ? alloc_pages_current+0x16/0x260 [ 1420.246283] alloc_pages_current+0x155/0x260 [ 1420.250702] ion_page_pool_alloc+0x118/0x1b0 [ 1420.255136] ion_system_heap_allocate+0x133/0x8c0 [ 1420.259982] ? ion_alloc+0x187/0x810 [ 1420.263698] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1420.269334] ? ion_system_contig_heap_create+0x130/0x130 [ 1420.274793] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1420.279836] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1420.284685] ion_alloc+0x204/0x810 [ 1420.288234] ? ion_dma_buf_release+0x40/0x40 [ 1420.291039] Mem-Info: [ 1420.292646] ? __might_fault+0x177/0x1b0 [ 1420.292664] ion_ioctl+0xea/0x1f0 [ 1420.297327] active_anon:28282 inactive_anon:19255 isolated_anon:0 [ 1420.297327] active_file:163 inactive_file:1078 isolated_file:9 [ 1420.297327] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1420.297327] slab_reclaimable:13563 slab_unreclaimable:121802 [ 1420.297327] mapped:53375 shmem:21266 pagetables:805 bounce:0 [ 1420.297327] free:67128 free_pcp:373 free_cma:0 [ 1420.299128] ? ion_query_heaps+0x360/0x360 [ 1420.299140] ? __alloc_fd+0x1be/0x490 [ 1420.308158] Node 0 active_anon:111552kB inactive_anon:56680kB active_file:612kB inactive_file:4216kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:203340kB dirty:12kB writeback:0kB shmem:64592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1420.336104] ? ion_query_heaps+0x360/0x360 [ 1420.336116] do_vfs_ioctl+0x75a/0xff0 [ 1420.336128] ? ioctl_preallocate+0x1a0/0x1a0 [ 1420.336136] ? lock_downgrade+0x740/0x740 [ 1420.336148] ? __fget+0x225/0x360 [ 1420.336156] ? do_vfs_ioctl+0xff0/0xff0 [ 1420.336170] ? security_file_ioctl+0x83/0xb0 [ 1420.368930] Node 1 active_anon:1576kB inactive_anon:20340kB active_file:40kB inactive_file:96kB unevictable:0kB isolated(anon):0kB isolated(file):36kB mapped:10160kB dirty:0kB writeback:0kB shmem:20472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1420.372239] SyS_ioctl+0x7f/0xb0 [ 1420.372249] ? do_vfs_ioctl+0xff0/0xff0 [ 1420.372260] do_syscall_64+0x1d5/0x640 [ 1420.372282] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1420.379836] Node 0 [ 1420.380301] RIP: 0033:0x465f69 [ 1420.390241] DMA free:11024kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:68kB inactive_file:16kB unevictable:0kB writepending:8kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:8kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1420.392257] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1420.392273] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1420.392278] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1420.392283] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1420.392289] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1420.392294] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1420.713963] warn_alloc_show_mem: 2 callbacks suppressed [ 1420.713967] Mem-Info: [ 1420.741702] active_anon:28207 inactive_anon:19255 isolated_anon:0 [ 1420.741702] active_file:538 inactive_file:868 isolated_file:9 [ 1420.741702] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1420.741702] slab_reclaimable:13563 slab_unreclaimable:122078 [ 1420.741702] mapped:53250 shmem:21266 pagetables:805 bounce:0 [ 1420.741702] free:57264 free_pcp:161 free_cma:0 [ 1420.854067] Node 0 active_anon:111452kB inactive_anon:56680kB active_file:2012kB inactive_file:3076kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:202840kB dirty:12kB writeback:0kB shmem:64592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1420.924950] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1420.951392] Node 0 DMA32 free:44664kB min:36200kB low:45248kB high:54296kB active_anon:111532kB inactive_anon:56680kB active_file:1480kB inactive_file:3068kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7744kB pagetables:2952kB bounce:0kB free_pcp:520kB local_pcp:384kB free_cma:0kB [ 1420.974609] Node 1 active_anon:1376kB inactive_anon:20340kB active_file:4kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):36kB mapped:10160kB dirty:0kB writeback:0kB shmem:20472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1421.073036] lowmem_reserve[]: 0 0 0 0 0 [ 1421.077172] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1421.137833] Node 0 DMA free:11072kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:24kB unevictable:0kB writepending:8kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1421.210709] lowmem_reserve[]: 0 0 0 0 0 [ 1421.214876] Node 1 Normal free:53628kB min:53696kB low:67120kB high:80544kB active_anon:1348kB inactive_anon:20340kB active_file:60kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:228kB bounce:0kB free_pcp:188kB local_pcp:68kB free_cma:0kB [ 1421.222607] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1421.311300] lowmem_reserve[]: 0 0 0 0 0 [ 1421.317599] Node 0 DMA32 free:20776kB min:36200kB low:45248kB high:54296kB active_anon:111428kB inactive_anon:56680kB active_file:948kB inactive_file:1320kB unevictable:0kB writepending:4kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7712kB pagetables:2908kB bounce:0kB free_pcp:696kB local_pcp:620kB free_cma:0kB [ 1421.320707] Node 0 [ 1421.420324] lowmem_reserve[]: [ 1421.426104] DMA: 85*4kB (UM) 61*8kB (UM) 13*16kB (UME) 5*32kB (UME) 5*64kB (UME) 2*128kB (ME) 2*256kB (UE) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10988kB [ 1421.432833] 0 0 0 0 0 [ 1421.495586] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1421.500712] Node 0 DMA32: 1092*4kB (UME) 493*8kB (UME) 229*16kB (UME) 78*32kB (UME) 76*64kB (UM) 16*128kB (U) 6*256kB (U) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 24456kB [ 1421.590681] lowmem_reserve[]: 0 0 0 0 0 [ 1421.594738] Node 1 Normal free:45860kB min:53696kB low:67120kB high:80544kB active_anon:1348kB inactive_anon:20340kB active_file:60kB inactive_file:156kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:228kB bounce:0kB free_pcp:624kB local_pcp:620kB free_cma:0kB [ 1421.610690] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1421.670716] Node 1 Normal: 322*4kB (UME) 744*8kB (UME) 151*16kB (UME) 114*32kB (UME) 183*64kB (U) 73*128kB (U) 34*256kB (U) 22*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 54328kB [ 1421.674028] lowmem_reserve[]: 0 0 0 0 0 [ 1421.724037] Node 0 DMA: 57*4kB (U) 60*8kB (U) 13*16kB (UE) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 1421.730715] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1421.770685] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1421.779305] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1421.800680] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1421.809292] 21334 total pagecache pages [ 1421.813334] Node 0 DMA32: 457*4kB (ME) 392*8kB (UME) 192*16kB (ME) 38*32kB (ME) 49*64kB (UM) 17*128kB (U) 6*256kB (U) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 17636kB [ 1421.831288] 0 pages in swap cache [ 1421.834748] Swap cache stats: add 0, delete 0, find 0/0 [ 1421.850709] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1421.861530] Free swap = 0kB [ 1421.864546] Total swap = 0kB [ 1421.867576] 2097051 pages RAM [ 1421.880677] 0 pages HighMem/MovableOnly [ 1421.884676] 363840 pages reserved [ 1421.888123] 0 pages cma reserved [ 1421.891762] Node 1 Normal: 2727*4kB (UME) 1096*8kB (UME) 193*16kB (UME) 82*32kB (UME) 50*64kB (U) 48*128kB (U) 34*256kB (U) 22*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 54700kB [ 1421.920721] Out of memory: Kill process 22535 (syz-executor.2) score 1004 or sacrifice child [ 1421.929436] Killed process 22536 (syz-executor.2) total-vm:93252kB, anon-rss:148kB, file-rss:34816kB, shmem-rss:0kB [ 1421.940159] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1421.961286] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1421.969918] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1422.013127] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1422.040979] oom_reaper: reaped process 22536 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1422.047636] 21334 total pagecache pages [ 1422.058083] 0 pages in swap cache [ 1422.085153] Swap cache stats: add 0, delete 0, find 0/0 [ 1422.096749] Free swap = 0kB [ 1422.100047] Total swap = 0kB [ 1422.110855] 2097051 pages RAM [ 1422.113975] 0 pages HighMem/MovableOnly [ 1422.121880] oom_reaper: reaped process 22555 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1422.129508] 363840 pages reserved [ 1422.152472] 0 pages cma reserved [ 1422.192938] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1422.236654] in:imklog cpuset=/ mems_allowed=0-1 [ 1422.259355] CPU: 1 PID: 22525 Comm: in:imklog Not tainted 4.14.225-syzkaller #0 [ 1422.266872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1422.270702] syz-executor.2: [ 1422.276229] Call Trace: [ 1422.276242] page allocation failure: order:0 [ 1422.279255] dump_stack+0x1b2/0x281 [ 1422.289859] dump_header+0x178/0x82f [ 1422.293580] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1422.298698] ? ___ratelimit+0x2cd/0x530 [ 1422.302685] oom_kill_process.cold+0x10/0xb18 [ 1422.307188] out_of_memory+0xe3e/0x1190 [ 1422.309471] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1422.311169] ? oom_killer_disable+0x1c0/0x1c0 [ 1422.311178] ? mutex_trylock+0x152/0x1a0 [ 1422.311188] __alloc_pages_nodemask+0x23e1/0x2720 [ 1422.311207] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1422.311229] alloc_pages_current+0x155/0x260 [ 1422.311239] filemap_fault+0xea3/0x1980 [ 1422.311257] ext4_filemap_fault+0x84/0xb0 [ 1422.318380] syz-executor.0: [ 1422.322864] __do_fault+0xfa/0x380 [ 1422.322874] __handle_mm_fault+0x2497/0x4620 [ 1422.322883] ? vm_insert_page+0x7c0/0x7c0 [ 1422.322892] ? lock_downgrade+0x740/0x740 [ 1422.322910] handle_mm_fault+0x391/0x860 [ 1422.322921] __do_page_fault+0x549/0xad0 [ 1422.322932] ? spurious_fault+0x640/0x640 [ 1422.322941] ? do_page_fault+0x60/0x500 [ 1422.322950] ? page_fault+0x2f/0x50 [ 1422.322958] page_fault+0x45/0x50 [ 1422.322965] RIP: 1fa0:0x1f9f [ 1422.322970] RSP: 0000:000055ba7aa319d0 EFLAGS: 7fe4b5bdfda0 [ 1422.329222] syz-executor.4: [ 1422.335904] (null) [ 1422.343833] page allocation failure: order:0 [ 1422.355116] syz-executor.2 cpuset= [ 1422.366644] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1422.368913] page allocation failure: order:0 [ 1422.380277] (null) [ 1422.381314] syz-executor.1: [ 1422.385331] syz-executor.5: [ 1422.388944] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1422.403933] syz-executor.4 cpuset= [ 1422.406209] / [ 1422.448085] / [ 1422.450414] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1422.459842] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1422.461104] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1422.467163] (null) [ 1422.477609] CPU: 0 PID: 22512 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1422.485491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1422.486738] syz-executor.5 cpuset= [ 1422.494847] Call Trace: [ 1422.494870] dump_stack+0x1b2/0x281 [ 1422.494884] warn_alloc.cold+0x96/0x1cc [ 1422.494900] ? zone_watermark_ok_safe+0x220/0x220 [ 1422.498443] / [ 1422.501016] ? usleep_range+0x130/0x130 [ 1422.504666] mems_allowed=0-1 [ 1422.508845] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1422.508860] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1422.513762] Mem-Info: [ 1422.515410] ? run_timer_softirq+0x5a0/0x5a0 [ 1422.519371] active_anon:28170 inactive_anon:19255 isolated_anon:0 [ 1422.519371] active_file:29 inactive_file:6 isolated_file:0 [ 1422.519371] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1422.519371] slab_reclaimable:13540 slab_unreclaimable:122032 [ 1422.519371] mapped:52629 shmem:21265 pagetables:784 bounce:0 [ 1422.519371] free:13941 free_pcp:244 free_cma:0 [ 1422.522462] __alloc_pages_nodemask+0x2127/0x2720 [ 1422.522479] ? lock_acquire+0x170/0x3f0 [ 1422.522493] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1422.522508] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1422.527612] mems_allowed=0-1 [ 1422.532622] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1422.532640] alloc_pages_current+0x155/0x260 [ 1422.532655] ion_page_pool_alloc+0x118/0x1b0 [ 1422.532666] ion_system_heap_allocate+0x133/0x8c0 [ 1422.560698] Node 0 active_anon:111352kB inactive_anon:56680kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200388kB dirty:0kB writeback:0kB shmem:64588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1422.572604] ? _raw_spin_unlock+0x29/0x40 [ 1422.572617] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1422.572627] ? ion_system_contig_heap_create+0x130/0x130 [ 1422.572642] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1422.620706] Node 1 active_anon:1328kB inactive_anon:20340kB active_file:108kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10128kB dirty:0kB writeback:0kB shmem:20472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1422.640481] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1422.640496] ion_alloc+0x27a/0x810 [ 1422.640511] ? ion_dma_buf_release+0x40/0x40 [ 1422.640523] ? __might_fault+0x177/0x1b0 [ 1422.690677] Node 0 [ 1422.692127] ion_ioctl+0xea/0x1f0 [ 1422.695684] DMA free:10940kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1422.700071] ? ion_query_heaps+0x360/0x360 [ 1422.730685] lowmem_reserve[]: [ 1422.735305] ? ion_query_heaps+0x360/0x360 [ 1422.739532] 0 [ 1422.742634] do_vfs_ioctl+0x75a/0xff0 [ 1422.742647] ? ioctl_preallocate+0x1a0/0x1a0 [ 1422.742656] ? lock_downgrade+0x740/0x740 [ 1422.742669] ? __fget+0x225/0x360 [ 1422.742679] ? do_vfs_ioctl+0xff0/0xff0 [ 1422.768474] ? security_file_ioctl+0x83/0xb0 [ 1422.770663] 2717 2718 [ 1422.772882] SyS_ioctl+0x7f/0xb0 [ 1422.772892] ? do_vfs_ioctl+0xff0/0xff0 [ 1422.775375] 2718 [ 1422.778751] do_syscall_64+0x1d5/0x640 [ 1422.788837] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1422.794026] RIP: 0033:0x465f69 [ 1422.797204] RSP: 002b:00007f0a724bf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1422.804918] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1422.810667] 2718 [ 1422.812186] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1422.814241] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1422.828954] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1422.836581] R13: 00007fffce0e3c8f R14: 00007f0a724bf300 R15: 0000000000022000 [ 1422.843880] CPU: 1 PID: 22540 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 1422.846961] syz-executor.1 cpuset= [ 1422.851761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1422.851765] Call Trace: [ 1422.851784] dump_stack+0x1b2/0x281 [ 1422.851797] warn_alloc.cold+0x96/0x1cc [ 1422.851810] ? zone_watermark_ok_safe+0x220/0x220 [ 1422.855367] / [ 1422.864891] ? usleep_range+0x130/0x130 [ 1422.869746] mems_allowed=0-1 [ 1422.871081] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1422.871095] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1422.871105] ? run_timer_softirq+0x5a0/0x5a0 [ 1422.871122] __alloc_pages_nodemask+0x2127/0x2720 [ 1422.871137] ? lock_acquire+0x170/0x3f0 [ 1422.882836] mems_allowed=0-1 [ 1422.885677] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1422.919958] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1422.924462] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1422.929920] alloc_pages_current+0x155/0x260 [ 1422.934336] ion_page_pool_alloc+0x118/0x1b0 [ 1422.938753] ion_system_heap_allocate+0x133/0x8c0 [ 1422.943594] ? ion_alloc+0x187/0x810 [ 1422.947301] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1422.952769] ? ion_system_contig_heap_create+0x130/0x130 [ 1422.958228] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1422.963243] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1422.968086] ion_alloc+0x204/0x810 [ 1422.971633] ? ion_dma_buf_release+0x40/0x40 [ 1422.976037] ? __might_fault+0x177/0x1b0 [ 1422.980186] ion_ioctl+0xea/0x1f0 [ 1422.983634] ? ion_query_heaps+0x360/0x360 [ 1422.987879] ? __alloc_fd+0x1be/0x490 [ 1422.991670] ? ion_query_heaps+0x360/0x360 [ 1422.995893] do_vfs_ioctl+0x75a/0xff0 [ 1422.999684] ? ioctl_preallocate+0x1a0/0x1a0 [ 1423.004106] ? lock_downgrade+0x740/0x740 [ 1423.008252] ? __fget+0x225/0x360 [ 1423.011696] ? do_vfs_ioctl+0xff0/0xff0 [ 1423.015676] ? security_file_ioctl+0x83/0xb0 [ 1423.020078] SyS_ioctl+0x7f/0xb0 [ 1423.023442] ? do_vfs_ioctl+0xff0/0xff0 [ 1423.027414] do_syscall_64+0x1d5/0x640 [ 1423.031301] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1423.036482] RIP: 0033:0x465f69 [ 1423.039656] RSP: 002b:00007f5ba2c45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1423.047375] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1423.054641] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1423.061913] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1423.069186] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1423.076468] R13: 00007ffec1e0e6ff R14: 00007f5ba2c45300 R15: 0000000000022000 [ 1423.083766] CPU: 0 PID: 22507 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 1423.091752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1423.101107] Call Trace: [ 1423.103705] dump_stack+0x1b2/0x281 [ 1423.107054] Node 0 DMA32 free:18604kB min:36200kB low:45248kB high:54296kB active_anon:111260kB inactive_anon:56680kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7712kB pagetables:2908kB bounce:0kB free_pcp:764kB local_pcp:644kB free_cma:0kB [ 1423.107368] warn_alloc.cold+0x96/0x1cc [ 1423.107381] ? zone_watermark_ok_safe+0x220/0x220 [ 1423.145344] ? usleep_range+0x130/0x130 [ 1423.149319] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1423.154510] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1423.159519] ? run_timer_softirq+0x5a0/0x5a0 [ 1423.160661] lowmem_reserve[]: 0 [ 1423.163928] __alloc_pages_nodemask+0x2127/0x2720 [ 1423.163945] ? lock_acquire+0x170/0x3f0 [ 1423.167205] 0 [ 1423.172058] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1423.172070] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1423.172085] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1423.172099] ? retint_kernel+0x2d/0x2d [ 1423.190697] 0 [ 1423.193283] alloc_pages_current+0x155/0x260 [ 1423.197153] 0 [ 1423.198954] ion_page_pool_alloc+0x118/0x1b0 [ 1423.209530] ion_system_heap_allocate+0x133/0x8c0 [ 1423.214373] ? _raw_spin_unlock+0x29/0x40 [ 1423.218522] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1423.220676] 0 [ 1423.223447] ? ion_system_contig_heap_create+0x130/0x130 [ 1423.223454] Node 0 [ 1423.225247] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1423.225259] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1423.240684] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1423.242745] ion_alloc+0x27a/0x810 [ 1423.271286] ? ion_dma_buf_release+0x40/0x40 [ 1423.275709] ? __might_fault+0x177/0x1b0 [ 1423.279768] ion_ioctl+0xea/0x1f0 [ 1423.283230] ? ion_query_heaps+0x360/0x360 [ 1423.287463] ? __alloc_fd+0x1be/0x490 [ 1423.290673] lowmem_reserve[]: 0 [ 1423.291264] ? ion_query_heaps+0x360/0x360 [ 1423.291275] do_vfs_ioctl+0x75a/0xff0 [ 1423.294542] 0 [ 1423.298780] ? ioctl_preallocate+0x1a0/0x1a0 [ 1423.308772] ? lock_downgrade+0x740/0x740 [ 1423.312927] ? __fget+0x225/0x360 [ 1423.316374] ? do_vfs_ioctl+0xff0/0xff0 [ 1423.320339] ? security_file_ioctl+0x83/0xb0 [ 1423.320672] 0 0 [ 1423.324743] SyS_ioctl+0x7f/0xb0 [ 1423.324757] ? do_vfs_ioctl+0xff0/0xff0 [ 1423.326806] 0 [ 1423.330175] do_syscall_64+0x1d5/0x640 [ 1423.339804] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1423.344990] RIP: 0033:0x465f69 [ 1423.348188] RSP: 002b:00007f6547c30188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1423.355892] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1423.355901] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1423.370435] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1423.370682] Node 1 [ 1423.377703] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1423.377713] R13: 00007ffe59ae816f R14: 00007f6547c30300 R15: 0000000000022000 [ 1423.379950] Normal free:26800kB min:53696kB low:67120kB high:80544kB active_anon:1328kB inactive_anon:20340kB active_file:116kB inactive_file:48kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:228kB bounce:0kB free_pcp:136kB local_pcp:120kB free_cma:0kB [ 1423.391380] CPU: 0 PID: 22536 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1423.430595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1423.439947] Call Trace: [ 1423.440667] lowmem_reserve[]: 0 [ 1423.442535] dump_stack+0x1b2/0x281 [ 1423.442536] 0 0 [ 1423.445810] warn_alloc.cold+0x96/0x1cc [ 1423.449422] 0 [ 1423.451384] ? zone_watermark_ok_safe+0x220/0x220 [ 1423.451394] ? usleep_range+0x130/0x130 [ 1423.451402] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1423.451413] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1423.451424] ? run_timer_softirq+0x5a0/0x5a0 [ 1423.470671] 0 [ 1423.471083] __alloc_pages_nodemask+0x2127/0x2720 [ 1423.480479] ? lock_acquire+0x170/0x3f0 [ 1423.491056] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1423.495890] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1423.500384] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1423.500668] Node 0 DMA: [ 1423.505856] alloc_pages_current+0x155/0x260 [ 1423.505874] ion_page_pool_alloc+0x118/0x1b0 [ 1423.508528] 35*4kB [ 1423.513015] ion_system_heap_allocate+0x133/0x8c0 [ 1423.513026] ? ion_alloc+0x187/0x810 [ 1423.513035] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1423.513044] ? ion_system_contig_heap_create+0x130/0x130 [ 1423.513054] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1423.513065] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1423.513076] ion_alloc+0x204/0x810 [ 1423.530674] (U) [ 1423.533702] ? ion_dma_buf_release+0x40/0x40 [ 1423.539143] 65*8kB [ 1423.544514] ? __might_fault+0x177/0x1b0 [ 1423.544529] ion_ioctl+0xea/0x1f0 [ 1423.544540] ? ion_query_heaps+0x360/0x360 [ 1423.544550] ? __alloc_fd+0x1be/0x490 [ 1423.544561] ? ion_query_heaps+0x360/0x360 [ 1423.570671] (U) [ 1423.573423] do_vfs_ioctl+0x75a/0xff0 [ 1423.577205] 13*16kB [ 1423.581440] ? ioctl_preallocate+0x1a0/0x1a0 [ 1423.581449] ? lock_downgrade+0x740/0x740 [ 1423.581462] ? __fget+0x225/0x360 [ 1423.581470] ? do_vfs_ioctl+0xff0/0xff0 [ 1423.581483] ? security_file_ioctl+0x83/0xb0 [ 1423.590674] (UE) [ 1423.593920] SyS_ioctl+0x7f/0xb0 [ 1423.598045] 3*32kB [ 1423.601491] ? do_vfs_ioctl+0xff0/0xff0 [ 1423.601503] do_syscall_64+0x1d5/0x640 [ 1423.601519] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1423.601528] RIP: 0033:0x465f69 [ 1423.601536] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 [ 1423.620686] warn_alloc_show_mem: 1 callbacks suppressed [ 1423.620690] Mem-Info: [ 1423.622755] ORIG_RAX: 0000000000000010 [ 1423.622764] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1423.626667] active_anon:28147 inactive_anon:19255 isolated_anon:0 [ 1423.626667] active_file:17 inactive_file:17 isolated_file:0 [ 1423.626667] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1423.626667] slab_reclaimable:13540 slab_unreclaimable:122032 [ 1423.626667] mapped:52629 shmem:21265 pagetables:784 bounce:0 [ 1423.626667] free:14086 free_pcp:237 free_cma:0 [ 1423.631848] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1423.631854] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1423.631859] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1423.631863] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1423.746443] (UE) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10948kB [ 1423.784284] CPU: 1 PID: 22555 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1423.792190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1423.801547] Call Trace: [ 1423.804142] dump_stack+0x1b2/0x281 [ 1423.807780] warn_alloc.cold+0x96/0x1cc [ 1423.811763] ? zone_watermark_ok_safe+0x220/0x220 [ 1423.816616] ? usleep_range+0x130/0x130 [ 1423.820600] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1423.825720] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1423.830740] ? run_timer_softirq+0x5a0/0x5a0 [ 1423.835168] __alloc_pages_nodemask+0x2127/0x2720 [ 1423.840025] ? lock_acquire+0x170/0x3f0 [ 1423.844013] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1423.848859] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1423.853366] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1423.858832] alloc_pages_current+0x155/0x260 [ 1423.863245] ion_page_pool_alloc+0x118/0x1b0 [ 1423.867658] ion_system_heap_allocate+0x133/0x8c0 [ 1423.872527] ? ion_alloc+0x187/0x810 [ 1423.876261] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1423.881713] ? ion_system_contig_heap_create+0x130/0x130 [ 1423.887163] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1423.892178] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1423.897025] ion_alloc+0x204/0x810 [ 1423.900570] ? ion_dma_buf_release+0x40/0x40 [ 1423.905064] ? __might_fault+0x177/0x1b0 [ 1423.909128] ion_ioctl+0xea/0x1f0 [ 1423.912607] ? ion_query_heaps+0x360/0x360 [ 1423.916844] ? __alloc_fd+0x1be/0x490 [ 1423.920662] ? ion_query_heaps+0x360/0x360 [ 1423.924897] do_vfs_ioctl+0x75a/0xff0 [ 1423.928792] ? ioctl_preallocate+0x1a0/0x1a0 [ 1423.933195] ? lock_downgrade+0x740/0x740 [ 1423.937345] ? __fget+0x225/0x360 [ 1423.940800] ? do_vfs_ioctl+0xff0/0xff0 [ 1423.944775] ? security_file_ioctl+0x83/0xb0 [ 1423.949272] SyS_ioctl+0x7f/0xb0 [ 1423.952639] ? do_vfs_ioctl+0xff0/0xff0 [ 1423.956623] do_syscall_64+0x1d5/0x640 [ 1423.960525] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1423.965713] RIP: 0033:0x465f69 [ 1423.968896] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1423.976610] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1423.983986] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1423.991257] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1423.998524] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1424.005796] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1424.017156] Node 0 [ 1424.025329] systemd[1]: Started Journal Service. [ 1424.037082] DMA32: 10251*4kB (UE) 1077*8kB (UE) 259*16kB (UE) 32*32kB (UE) 747*64kB (UE) 235*128kB (UM) 64*256kB (UM) 5*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 151620kB [ 1424.054655] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1424.083309] Node 1 Normal: 2058*4kB (UME) 86*8kB (UE) 40*16kB (UE) 56*32kB (UME) 1379*64kB (UME) 172*128kB (UME) 186*256kB (UME) 103*512kB (U) 41*1024kB (UM) 8*2048kB (U) 0*4096kB = 280344kB [ 1424.102167] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1424.113071] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1424.135997] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1424.158852] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1424.168298] 24506 total pagecache pages [ 1424.172402] 0 pages in swap cache [ 1424.182692] Swap cache stats: add 0, delete 0, find 0/0 [ 1424.195745] Node 0 active_anon:111508kB inactive_anon:56680kB active_file:704kB inactive_file:11612kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:173232kB dirty:0kB writeback:0kB shmem:64588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1424.225964] Free swap = 0kB [ 1424.230566] Total swap = 0kB [ 1424.244139] 2097051 pages RAM [ 1424.247819] 0 pages HighMem/MovableOnly [ 1424.252004] 363840 pages reserved [ 1424.260598] 0 pages cma reserved [ 1424.264190] Out of memory (oom_kill_allocating_task): Kill process 22525 (in:imklog) score 0 or sacrifice child [ 1424.275232] Node 1 active_anon:1132kB inactive_anon:20340kB active_file:360kB inactive_file:3060kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:12588kB dirty:0kB writeback:0kB shmem:20472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1424.303389] Killed process 22482 (rsyslogd) total-vm:254332kB, anon-rss:900kB, file-rss:0kB, shmem-rss:0kB [ 1424.314517] Node 0 DMA free:11268kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 08:37:45 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) fcntl$dupfd(r1, 0x0, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) socket$nl_route(0x10, 0x3, 0x0) 08:37:45 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) [ 1424.370969] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1424.377603] Node 0 DMA32 free:104896kB min:36200kB low:45248kB high:54296kB active_anon:110608kB inactive_anon:56680kB active_file:1604kB inactive_file:16612kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7520kB pagetables:2672kB bounce:0kB free_pcp:1220kB local_pcp:480kB free_cma:0kB [ 1424.581056] lowmem_reserve[]: 0 0 0 0 0 [ 1424.594158] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1424.612636] syz-executor.0: [ 1424.627962] syz-executor.2: [ 1424.631028] lowmem_reserve[]: 0 0 0 0 0 [ 1424.631051] Node 1 Normal free:95416kB min:53696kB low:67120kB high:80544kB active_anon:932kB inactive_anon:20240kB active_file:1060kB inactive_file:2460kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:228kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1424.631074] lowmem_reserve[]: 0 0 0 0 0 [ 1424.631093] Node 0 DMA: 41*4kB (U) 65*8kB (U) 13*16kB (UE) 3*32kB (UE) 1*64kB [ 1424.637040] syz-executor.1: [ 1424.638270] (E) [ 1424.670346] page allocation failure: order:4 [ 1424.676334] page allocation failure: order:4 [ 1424.679211] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1424.685167] 2*128kB [ 1424.691459] (null) [ 1424.696178] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1424.699829] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1424.699853] CPU: 0 PID: 22570 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1424.699859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1424.699862] Call Trace: [ 1424.699881] dump_stack+0x1b2/0x281 [ 1424.707809] (UE) [ 1424.711428] warn_alloc.cold+0x96/0x1cc [ 1424.711442] ? zone_watermark_ok_safe+0x220/0x220 [ 1424.711452] ? madvise_free_huge_pmd+0x330/0xa30 [ 1424.711472] __alloc_pages_nodemask+0x2127/0x2720 [ 1424.711487] ? lock_acquire+0x170/0x3f0 [ 1424.711501] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1424.711517] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1424.711528] ? __mutex_unlock_slowpath+0x75/0x770 [ 1424.711541] alloc_pages_current+0x155/0x260 [ 1424.711555] ion_page_pool_alloc+0x118/0x1b0 [ 1424.711567] ion_system_heap_allocate+0x133/0x8c0 [ 1424.717845] (null) [ 1424.724549] ? ion_alloc+0x187/0x810 [ 1424.724562] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1424.724572] ? ion_system_contig_heap_create+0x130/0x130 [ 1424.724582] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1424.724593] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1424.724603] ion_alloc+0x204/0x810 [ 1424.724616] ? ion_dma_buf_release+0x40/0x40 [ 1424.724626] ? __might_fault+0x177/0x1b0 [ 1424.724637] ion_ioctl+0xea/0x1f0 [ 1424.724647] ? ion_query_heaps+0x360/0x360 [ 1424.724660] ? sock_ioctl+0x16c/0x4c0 [ 1424.724668] ? ion_query_heaps+0x360/0x360 [ 1424.724677] do_vfs_ioctl+0x75a/0xff0 [ 1424.724687] ? ioctl_preallocate+0x1a0/0x1a0 [ 1424.724696] ? lock_downgrade+0x740/0x740 [ 1424.724709] ? __fget+0x225/0x360 [ 1424.738517] 2*256kB [ 1424.740352] ? do_vfs_ioctl+0xff0/0xff0 [ 1424.740370] ? security_file_ioctl+0x83/0xb0 [ 1424.740380] SyS_ioctl+0x7f/0xb0 [ 1424.746973] (UE) [ 1424.751223] ? do_vfs_ioctl+0xff0/0xff0 [ 1424.751237] do_syscall_64+0x1d5/0x640 [ 1424.751254] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1424.751262] RIP: 0033:0x465f69 [ 1424.751267] RSP: 002b:00007f0a724bf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1424.751276] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1424.751285] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1424.766213] 2*512kB [ 1424.769644] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1424.769650] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1424.769656] R13: 00007fffce0e3c8f R14: 00007f0a724bf300 R15: 0000000000022000 [ 1424.773232] warn_alloc_show_mem: 3 callbacks suppressed [ 1424.773236] Mem-Info: [ 1424.780344] syz-executor.2 cpuset= [ 1424.785103] page allocation failure: order:4 [ 1424.797930] / [ 1424.803829] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1424.810296] (UE) [ 1424.811389] active_anon:28035 inactive_anon:19230 isolated_anon:24 [ 1424.811389] active_file:1141 inactive_file:5593 isolated_file:12 [ 1424.811389] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1424.811389] slab_reclaimable:13475 slab_unreclaimable:122277 [ 1424.811389] mapped:48355 shmem:21265 pagetables:762 bounce:0 [ 1424.811389] free:62749 free_pcp:481 free_cma:0 [ 1424.820216] mems_allowed=0-1 [ 1424.820574] Node 0 active_anon:111208kB inactive_anon:56680kB active_file:3504kB inactive_file:19912kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:180432kB dirty:0kB writeback:0kB shmem:64588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1424.826434] 2*1024kB [ 1424.830733] (null) [ 1424.841739] CPU: 1 PID: 22536 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1424.847417] Node 1 active_anon:932kB inactive_anon:20240kB active_file:1060kB inactive_file:2460kB unevictable:0kB isolated(anon):48kB isolated(file):48kB mapped:12988kB dirty:0kB writeback:0kB shmem:20472kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1424.848370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1424.848374] Call Trace: [ 1424.848394] dump_stack+0x1b2/0x281 [ 1424.848408] warn_alloc.cold+0x96/0x1cc [ 1424.852531] Node 0 [ 1424.856635] ? zone_watermark_ok_safe+0x220/0x220 [ 1424.856658] __alloc_pages_nodemask+0x2127/0x2720 [ 1424.864110] syz-executor.1 cpuset= [ 1424.864238] ? _raw_spin_unlock_irq+0x24/0x80 [ 1424.866619] / [ 1424.870633] ? lock_acquire+0x170/0x3f0 [ 1424.875172] DMA free:11236kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1424.878411] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1424.878430] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1424.880513] lowmem_reserve[]: [ 1424.884452] ? __mutex_unlock_slowpath+0x75/0x770 [ 1424.884466] alloc_pages_current+0x155/0x260 [ 1424.884482] ion_page_pool_alloc+0x118/0x1b0 [ 1424.884493] ion_system_heap_allocate+0x133/0x8c0 [ 1424.884504] ? _raw_spin_unlock+0x29/0x40 [ 1424.884512] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1424.884522] ? ion_system_contig_heap_create+0x130/0x130 [ 1424.884533] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1424.884543] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1424.884554] ion_alloc+0x27a/0x810 [ 1424.884567] ? ion_dma_buf_release+0x40/0x40 [ 1424.884579] ? __might_fault+0x177/0x1b0 [ 1424.884591] ion_ioctl+0xea/0x1f0 [ 1424.891762] 0 [ 1424.893649] ? ion_query_heaps+0x360/0x360 [ 1424.893662] ? __alloc_fd+0x1be/0x490 [ 1424.896884] mems_allowed=0-1 [ 1424.904540] ? ion_query_heaps+0x360/0x360 [ 1424.904551] do_vfs_ioctl+0x75a/0xff0 [ 1424.904563] ? ioctl_preallocate+0x1a0/0x1a0 [ 1424.904572] ? lock_downgrade+0x740/0x740 [ 1424.904584] ? __fget+0x225/0x360 [ 1424.904592] ? do_vfs_ioctl+0xff0/0xff0 [ 1424.904602] ? security_file_ioctl+0x83/0xb0 [ 1424.904611] SyS_ioctl+0x7f/0xb0 [ 1424.904619] ? do_vfs_ioctl+0xff0/0xff0 [ 1424.904630] do_syscall_64+0x1d5/0x640 [ 1424.904647] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1424.904658] RIP: 0033:0x465f69 [ 1424.915110] 2717 [ 1424.919179] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1424.919189] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1424.919194] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1424.919199] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1424.919204] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1424.919209] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1424.926389] (UE) [ 1424.928886] 2718 [ 1424.947476] 3*2048kB [ 1424.952794] CPU: 0 PID: 22569 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 1424.963028] (UME) [ 1424.968357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1424.968361] Call Trace: [ 1424.968382] dump_stack+0x1b2/0x281 [ 1424.968399] warn_alloc.cold+0x96/0x1cc [ 1424.976063] 0*4096kB [ 1425.004218] ? zone_watermark_ok_safe+0x220/0x220 [ 1425.004230] ? perf_trace_balance_dirty_pages+0x770/0xb90 [ 1425.004251] __alloc_pages_nodemask+0x2127/0x2720 [ 1425.004267] ? lock_acquire+0x170/0x3f0 [ 1425.004281] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1425.004298] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1425.037261] = 11036kB [ 1425.038156] ? __mutex_unlock_slowpath+0x75/0x770 [ 1425.043679] Node 0 [ 1425.048164] alloc_pages_current+0x155/0x260 [ 1425.048181] ion_page_pool_alloc+0x118/0x1b0 [ 1425.048194] ion_system_heap_allocate+0x133/0x8c0 [ 1425.119112] DMA32: [ 1425.121518] ? ion_alloc+0x187/0x810 [ 1425.121530] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1425.121540] ? ion_system_contig_heap_create+0x130/0x130 [ 1425.121551] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1425.121565] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1425.207890] 21078*4kB [ 1425.211211] ion_alloc+0x204/0x810 [ 1425.211228] ? ion_dma_buf_release+0x40/0x40 [ 1425.211241] ? __might_fault+0x177/0x1b0 [ 1425.211254] ion_ioctl+0xea/0x1f0 [ 1425.223135] (UM) [ 1425.224782] ? ion_query_heaps+0x360/0x360 [ 1425.224794] ? __alloc_fd+0x1be/0x490 [ 1425.224805] ? ion_query_heaps+0x360/0x360 [ 1425.230859] 3232*8kB [ 1425.231708] do_vfs_ioctl+0x75a/0xff0 [ 1425.245961] (UME) [ 1425.248224] ? ioctl_preallocate+0x1a0/0x1a0 [ 1425.248235] ? lock_downgrade+0x740/0x740 [ 1425.248247] ? __fget+0x225/0x360 [ 1425.265050] 1496*16kB [ 1425.267407] ? do_vfs_ioctl+0xff0/0xff0 [ 1425.267418] ? security_file_ioctl+0x83/0xb0 [ 1425.267428] SyS_ioctl+0x7f/0xb0 [ 1425.285917] (UME) [ 1425.289528] ? do_vfs_ioctl+0xff0/0xff0 [ 1425.289543] do_syscall_64+0x1d5/0x640 [ 1425.289560] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1425.327337] 1067*32kB [ 1425.327985] RIP: 0033:0x465f69 [ 1425.339939] (UME) [ 1425.340501] RSP: 002b:00007f6547c30188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1425.340513] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1425.340518] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1425.340523] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1425.340528] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1425.340538] R13: 00007ffe59ae816f R14: 00007f6547c30300 R15: 0000000000022000 [ 1425.348265] 348*64kB [ 1425.369785] 2718 [ 1425.403340] (UM) [ 1425.407634] 2718 [ 1425.414944] 7*128kB [ 1425.471701] (U) [ 1425.533813] Node 0 DMA32 free:255772kB min:36200kB low:45248kB high:54296kB active_anon:111488kB inactive_anon:56680kB active_file:3904kB inactive_file:20316kB unevictable:0kB writepending:128kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7680kB pagetables:2864kB bounce:0kB free_pcp:1284kB local_pcp:764kB free_cma:0kB [ 1425.640814] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 191416kB [ 1425.663011] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1425.684321] lowmem_reserve[]: 0 0 0 0 0 [ 1425.688374] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1425.704415] Node 1 Normal: 31254*4kB (UM) 4884*8kB (UME) 1780*16kB (UM) 1374*32kB (UME) 334*64kB (U) 103*128kB (U) 7*256kB (U) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 274424kB [ 1425.760725] lowmem_reserve[]: 0 0 0 0 0 [ 1425.764762] Node 1 Normal free:277344kB min:53696kB low:67120kB high:80544kB active_anon:928kB inactive_anon:20336kB active_file:1104kB inactive_file:2428kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:228kB bounce:0kB free_pcp:652kB local_pcp:0kB free_cma:0kB [ 1425.809564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1425.837813] lowmem_reserve[]: 0 0 0 0 0 [ 1425.845822] Node 0 DMA: 97*4kB (U) 66*8kB (U) 14*16kB (UE) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11284kB [ 1425.847422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1425.864670] Node 0 DMA32: 15937*4kB (UE) 5587*8kB (UME) 2001*16kB (UME) 1369*32kB (UE) 433*64kB (UM) 17*128kB (U) 4*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 215180kB [ 1425.905079] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1425.910803] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1425.933058] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1425.943850] Node 1 Normal: 31893*4kB (UM) 5168*8kB (UME) 1916*16kB (UM) 1410*32kB (UME) 348*64kB (U) 103*128kB (U) 7*256kB (U) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 283476kB [ 1425.960704] 28361 total pagecache pages [ 1425.965892] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1425.973640] 0 pages in swap cache [ 1425.980595] Swap cache stats: add 0, delete 0, find 0/0 [ 1425.988342] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1425.998284] Free swap = 0kB [ 1426.008085] Total swap = 0kB [ 1426.017984] 2097051 pages RAM [ 1426.024498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1426.027892] 0 pages HighMem/MovableOnly [ 1426.033692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1426.049668] 363840 pages reserved [ 1426.054089] 28361 total pagecache pages [ 1426.060750] 0 pages cma reserved [ 1426.061602] 0 pages in swap cache [ 1426.067578] Swap cache stats: add 0, delete 0, find 0/0 [ 1426.078531] Free swap = 0kB [ 1426.086048] Total swap = 0kB [ 1426.089532] 2097051 pages RAM [ 1426.096309] 0 pages HighMem/MovableOnly [ 1426.101599] 363840 pages reserved [ 1426.105057] 0 pages cma reserved [ 1426.114413] warn_alloc_show_mem: 2 callbacks suppressed [ 1426.114417] Mem-Info: [ 1426.125927] active_anon:28229 inactive_anon:19254 isolated_anon:0 [ 1426.125927] active_file:1352 inactive_file:5777 isolated_file:0 [ 1426.125927] unevictable:0 dirty:8 writeback:0 unstable:0 [ 1426.125927] slab_reclaimable:13484 slab_unreclaimable:122676 [ 1426.125927] mapped:57330 shmem:21263 pagetables:810 bounce:0 [ 1426.125927] free:90598 free_pcp:240 free_cma:0 [ 1426.181487] Node 0 active_anon:111988kB inactive_anon:56680kB active_file:4304kB inactive_file:20680kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216224kB dirty:28kB writeback:0kB shmem:64588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1426.230952] Node 1 active_anon:928kB inactive_anon:20336kB active_file:1104kB inactive_file:2428kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:13096kB dirty:4kB writeback:0kB shmem:20464kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1426.230957] Node 0 DMA free:11280kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1426.230977] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1426.309041] Node 0 DMA32 free:44972kB min:36200kB low:45248kB high:54296kB active_anon:111988kB inactive_anon:56680kB active_file:4304kB inactive_file:20680kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7744kB pagetables:3012kB bounce:0kB free_pcp:604kB local_pcp:180kB free_cma:0kB [ 1426.420268] lowmem_reserve[]: 0 0 0 0 0 [ 1426.429013] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1426.464616] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1426.469543] lowmem_reserve[]: 0 0 0 0 0 [ 1426.484472] Node 1 Normal free:218676kB min:53696kB low:67120kB high:80544kB active_anon:928kB inactive_anon:20336kB active_file:1608kB inactive_file:1396kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:228kB bounce:0kB free_pcp:244kB local_pcp:244kB free_cma:0kB [ 1426.522151] lowmem_reserve[]: 0 0 0 0 0 [ 1426.530814] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1426.533586] Node 0 DMA: 97*4kB (U) 56*8kB (U) 14*16kB (UE) 3*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11012kB [ 1426.553771] CPU: 1 PID: 22555 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1426.561671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1426.571025] Call Trace: [ 1426.573619] dump_stack+0x1b2/0x281 [ 1426.577245] warn_alloc.cold+0x96/0x1cc [ 1426.581223] ? zone_watermark_ok_safe+0x220/0x220 [ 1426.586083] __alloc_pages_nodemask+0x2127/0x2720 [ 1426.590924] ? lock_acquire+0x170/0x3f0 [ 1426.594896] ? lock_acquire+0x170/0x3f0 [ 1426.598869] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1426.603716] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1426.609169] ? __mutex_unlock_slowpath+0x75/0x770 [ 1426.613840] Node 0 DMA32: [ 1426.614017] alloc_pages_current+0x155/0x260 [ 1426.614025] 799*4kB [ 1426.617291] ion_page_pool_alloc+0x118/0x1b0 [ 1426.628403] ion_system_heap_allocate+0x133/0x8c0 [ 1426.633252] ? _raw_spin_unlock+0x29/0x40 [ 1426.633846] (UME) [ 1426.637497] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1426.637499] 747*8kB (UME) [ 1426.639640] ? ion_system_contig_heap_create+0x130/0x130 [ 1426.652843] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1426.657861] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1426.660714] 268*16kB (UME) [ 1426.662704] ion_alloc+0x27a/0x810 [ 1426.662719] ? ion_dma_buf_release+0x40/0x40 [ 1426.665647] 445*32kB [ 1426.669185] ? __might_fault+0x177/0x1b0 [ 1426.680026] ion_ioctl+0xea/0x1f0 [ 1426.683481] ? ion_query_heaps+0x360/0x360 [ 1426.687713] ? __alloc_fd+0x1be/0x490 [ 1426.691513] ? ion_query_heaps+0x360/0x360 [ 1426.695746] do_vfs_ioctl+0x75a/0xff0 [ 1426.699546] ? ioctl_preallocate+0x1a0/0x1a0 [ 1426.703948] ? lock_downgrade+0x740/0x740 [ 1426.708098] ? __fget+0x225/0x360 [ 1426.711548] ? do_vfs_ioctl+0xff0/0xff0 [ 1426.715535] ? security_file_ioctl+0x83/0xb0 [ 1426.719969] SyS_ioctl+0x7f/0xb0 [ 1426.721262] (UME) [ 1426.723346] ? do_vfs_ioctl+0xff0/0xff0 [ 1426.723349] 9*64kB (UM) [ 1426.725490] do_syscall_64+0x1d5/0x640 [ 1426.729445] 1*128kB [ 1426.732117] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1426.732126] RIP: 0033:0x465f69 [ 1426.732131] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1426.732140] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1426.732145] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1426.732150] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1426.732154] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1426.732159] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1426.821268] (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28404kB [ 1426.844234] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1426.918687] IPVS: ftp: loaded support on port[0] = 21 [ 1426.920232] Node 1 Normal: 6069*4kB (U) 4492*8kB (UE) 1958*16kB (U) 1421*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 137012kB [ 1426.988271] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1427.012301] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1427.058401] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1427.097427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1427.131232] 22674 total pagecache pages [ 1427.135250] 0 pages in swap cache [ 1427.138695] Swap cache stats: add 0, delete 0, find 0/0 [ 1427.146206] Free swap = 0kB [ 1427.151300] Total swap = 0kB [ 1427.154327] 2097051 pages RAM [ 1427.180819] 0 pages HighMem/MovableOnly [ 1427.184853] 363840 pages reserved [ 1427.188315] 0 pages cma reserved [ 1427.570368] oom_reaper: reaped process 22570 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1427.827148] oom_reaper: reaped process 22569 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1428.041174] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1428.057941] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1428.063784] CPU: 0 PID: 21875 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1428.071680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1428.081032] Call Trace: [ 1428.083657] dump_stack+0x1b2/0x281 [ 1428.087277] dump_header+0x178/0x82f [ 1428.090983] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1428.096074] ? ___ratelimit+0x2cd/0x530 [ 1428.100039] oom_kill_process.cold+0x10/0xb18 [ 1428.104546] out_of_memory+0xe3e/0x1190 [ 1428.108514] ? oom_killer_disable+0x1c0/0x1c0 [ 1428.113000] ? mutex_trylock+0x152/0x1a0 [ 1428.117080] __alloc_pages_nodemask+0x23e1/0x2720 [ 1428.121926] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1428.126778] alloc_pages_current+0x155/0x260 [ 1428.131198] filemap_fault+0xea3/0x1980 [ 1428.135173] ext4_filemap_fault+0x84/0xb0 [ 1428.139407] __do_fault+0xfa/0x380 [ 1428.142938] __handle_mm_fault+0x2497/0x4620 [ 1428.147342] ? vm_insert_page+0x7c0/0x7c0 [ 1428.151489] ? nanosleep_copyout+0x100/0x100 [ 1428.155905] handle_mm_fault+0x391/0x860 [ 1428.160181] __do_page_fault+0x549/0xad0 [ 1428.164335] ? spurious_fault+0x640/0x640 [ 1428.168477] ? do_page_fault+0x60/0x500 [ 1428.172451] ? page_fault+0x2f/0x50 [ 1428.176068] page_fault+0x45/0x50 [ 1428.179509] RIP: 15bff7:0x4 [ 1428.182430] RSP: 000c:00007fffce0e3f4c EFLAGS: 00000027 [ 1428.220755] syz-executor.5: [ 1428.221199] syz-executor.4: [ 1428.226181] page allocation failure: order:0 [ 1428.229201] page allocation failure: order:4 [ 1428.237008] Mem-Info: [ 1428.242285] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1428.259762] active_anon:28274 inactive_anon:19258 isolated_anon:0 [ 1428.259762] active_file:15 inactive_file:14 isolated_file:0 [ 1428.259762] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1428.259762] slab_reclaimable:13460 slab_unreclaimable:122246 [ 1428.259762] mapped:52709 shmem:21268 pagetables:827 bounce:0 [ 1428.259762] free:13941 free_pcp:0 free_cma:0 [ 1428.264281] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1428.302874] CPU: 0 PID: 22555 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1428.306118] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1428.310755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1428.310760] Call Trace: [ 1428.310781] dump_stack+0x1b2/0x281 [ 1428.310795] warn_alloc.cold+0x96/0x1cc [ 1428.310810] ? zone_watermark_ok_safe+0x220/0x220 [ 1428.342448] ? usleep_range+0x130/0x130 [ 1428.346423] ? try_to_free_pages+0x23f/0x6e0 [ 1428.350831] ? _find_next_bit+0xdb/0x100 [ 1428.354894] ? run_timer_softirq+0x5a0/0x5a0 [ 1428.359309] __alloc_pages_nodemask+0x2127/0x2720 [ 1428.361695] (null) [ 1428.364155] ? lock_acquire+0x170/0x3f0 [ 1428.366284] syz-executor.4 cpuset=/ [ 1428.370266] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1428.370280] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1428.383203] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1428.388669] alloc_pages_current+0x155/0x260 [ 1428.393088] ion_page_pool_alloc+0x118/0x1b0 [ 1428.393147] mems_allowed=0-1 [ 1428.397496] ion_system_heap_allocate+0x133/0x8c0 [ 1428.400676] Node 0 active_anon:111828kB inactive_anon:56680kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200708kB dirty:0kB writeback:0kB shmem:64588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1428.405421] ? _raw_spin_unlock+0x29/0x40 [ 1428.405434] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1428.405443] ? ion_system_contig_heap_create+0x130/0x130 [ 1428.405454] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1428.405464] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1428.405475] ion_alloc+0x27a/0x810 [ 1428.405494] ? ion_dma_buf_release+0x40/0x40 [ 1428.465500] ? __might_fault+0x177/0x1b0 [ 1428.469560] ion_ioctl+0xea/0x1f0 [ 1428.470670] Node 1 active_anon:1268kB inactive_anon:20352kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10128kB dirty:0kB writeback:0kB shmem:20484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1428.473007] ? ion_query_heaps+0x360/0x360 [ 1428.504757] ? __alloc_fd+0x1be/0x490 [ 1428.508558] ? ion_query_heaps+0x360/0x360 [ 1428.512791] do_vfs_ioctl+0x75a/0xff0 [ 1428.516603] ? ioctl_preallocate+0x1a0/0x1a0 [ 1428.521012] ? lock_downgrade+0x740/0x740 [ 1428.525173] ? __fget+0x225/0x360 [ 1428.528643] ? do_vfs_ioctl+0xff0/0xff0 [ 1428.532630] ? security_file_ioctl+0x83/0xb0 [ 1428.537039] SyS_ioctl+0x7f/0xb0 [ 1428.540499] ? do_vfs_ioctl+0xff0/0xff0 [ 1428.540669] Node 0 DMA free:10944kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1428.544555] do_syscall_64+0x1d5/0x640 [ 1428.544572] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1428.579806] RIP: 0033:0x465f69 [ 1428.582984] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1428.590701] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1428.597964] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1428.600658] lowmem_reserve[]: [ 1428.605233] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1428.605241] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1428.608333] 0 [ 1428.615591] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1428.616043] syz-executor.1: [ 1428.623162] syz-executor.0: [ 1428.633316] CPU: 0 PID: 22540 Comm: syz-executor.4 Not tainted 4.14.225-syzkaller #0 [ 1428.635196] syz-executor.2: [ 1428.638183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1428.658388] Call Trace: [ 1428.660204] page allocation failure: order:0 [ 1428.660975] dump_stack+0x1b2/0x281 [ 1428.660989] warn_alloc.cold+0x96/0x1cc [ 1428.661002] ? zone_watermark_ok_safe+0x220/0x220 [ 1428.665405] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1428.669049] __alloc_pages_nodemask+0x2127/0x2720 [ 1428.673050] page allocation failure: order:0 [ 1428.677824] ? io_schedule_timeout+0x140/0x140 [ 1428.684969] 2717 [ 1428.689773] ? lock_acquire+0x170/0x3f0 [ 1428.694180] 2718 [ 1428.698722] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1428.700783] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1428.704716] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1428.706743] (null) [ 1428.711578] ? __mutex_unlock_slowpath+0x75/0x770 [ 1428.711593] alloc_pages_current+0x155/0x260 [ 1428.711611] ion_page_pool_alloc+0x118/0x1b0 [ 1428.718705] (null) [ 1428.724134] ion_system_heap_allocate+0x133/0x8c0 [ 1428.724147] ? _raw_spin_unlock+0x29/0x40 [ 1428.724156] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1428.724166] ? ion_system_contig_heap_create+0x130/0x130 [ 1428.724181] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1428.726331] 2718 [ 1428.731264] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1428.731278] ion_alloc+0x27a/0x810 [ 1428.731294] ? ion_dma_buf_release+0x40/0x40 [ 1428.735700] syz-executor.2 cpuset= [ 1428.740087] ? __might_fault+0x177/0x1b0 [ 1428.742274] / [ 1428.747075] ion_ioctl+0xea/0x1f0 [ 1428.751242] 2718 [ 1428.756116] ? ion_query_heaps+0x360/0x360 [ 1428.761579] syz-executor.0 cpuset= [ 1428.766545] ? __alloc_fd+0x1be/0x490 [ 1428.768624] / [ 1428.773471] ? ion_query_heaps+0x360/0x360 [ 1428.777041] mems_allowed=0-1 [ 1428.781372] do_vfs_ioctl+0x75a/0xff0 [ 1428.781395] ? ioctl_preallocate+0x1a0/0x1a0 [ 1428.788964] ? lock_downgrade+0x740/0x740 [ 1428.790691] Node 0 [ 1428.794114] ? __fget+0x225/0x360 [ 1428.796158] DMA32 free:18064kB min:36200kB low:45248kB high:54296kB active_anon:111828kB inactive_anon:56680kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7744kB pagetables:3080kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1428.800369] ? do_vfs_ioctl+0xff0/0xff0 [ 1428.810664] mems_allowed=0-1 [ 1428.813573] ? security_file_ioctl+0x83/0xb0 [ 1428.840653] lowmem_reserve[]: [ 1428.862597] SyS_ioctl+0x7f/0xb0 [ 1428.862607] ? do_vfs_ioctl+0xff0/0xff0 [ 1428.862618] do_syscall_64+0x1d5/0x640 [ 1428.862638] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1428.893528] RIP: 0033:0x465f69 [ 1428.896709] RSP: 002b:00007f5ba2c45188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1428.904414] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1428.910669] 0 [ 1428.911674] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1428.911682] 0 [ 1428.913477] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1428.929773] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1428.937046] R13: 00007ffec1e0e6ff R14: 00007f5ba2c45300 R15: 0000000000022000 [ 1428.940660] 0 0 0 [ 1428.945162] Bluetooth: hci2 command 0x0409 tx timeout [ 1428.946514] CPU: 1 PID: 22536 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1428.951747] warn_alloc_show_mem: 1 callbacks suppressed [ 1428.951750] Mem-Info: [ 1428.959559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1428.970670] page allocation failure: order:0 [ 1428.976638] Call Trace: [ 1428.976650] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1428.981060] dump_stack+0x1b2/0x281 [ 1428.981074] warn_alloc.cold+0x96/0x1cc [ 1428.981086] ? zone_watermark_ok_safe+0x220/0x220 [ 1428.981095] ? usleep_range+0x130/0x130 [ 1428.981104] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1428.981120] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1428.989684] active_anon:28274 inactive_anon:19258 isolated_anon:0 [ 1428.989684] active_file:15 inactive_file:14 isolated_file:0 [ 1428.989684] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1428.989684] slab_reclaimable:13460 slab_unreclaimable:122246 [ 1428.989684] mapped:52709 shmem:21268 pagetables:827 bounce:0 [ 1428.989684] free:13941 free_pcp:0 free_cma:0 [ 1428.990773] ? run_timer_softirq+0x5a0/0x5a0 [ 1428.990789] __alloc_pages_nodemask+0x2127/0x2720 [ 1428.990807] ? lock_acquire+0x170/0x3f0 [ 1428.990821] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1428.990833] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1428.990847] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1428.994467] Node 0 active_anon:111828kB inactive_anon:56680kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:200708kB dirty:0kB writeback:0kB shmem:64588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1428.998424] alloc_pages_current+0x155/0x260 [ 1429.006446] (null) [ 1429.007203] ion_page_pool_alloc+0x118/0x1b0 [ 1429.012546] syz-executor.1 cpuset= [ 1429.017307] ion_system_heap_allocate+0x133/0x8c0 [ 1429.053639] Node 1 active_anon:1268kB inactive_anon:20352kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:10128kB dirty:0kB writeback:0kB shmem:20484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1429.054749] ? _raw_spin_unlock+0x29/0x40 [ 1429.059564] Node 0 [ 1429.063534] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1429.063543] ? ion_system_contig_heap_create+0x130/0x130 [ 1429.063554] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1429.063565] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1429.063575] ion_alloc+0x27a/0x810 [ 1429.063589] ? ion_dma_buf_release+0x40/0x40 [ 1429.063601] ? __might_fault+0x177/0x1b0 [ 1429.063613] ion_ioctl+0xea/0x1f0 [ 1429.068472] DMA free:10944kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1429.072944] ? ion_query_heaps+0x360/0x360 [ 1429.072954] ? __alloc_fd+0x1be/0x490 [ 1429.072964] ? ion_query_heaps+0x360/0x360 [ 1429.072973] do_vfs_ioctl+0x75a/0xff0 [ 1429.072984] ? ioctl_preallocate+0x1a0/0x1a0 [ 1429.072992] ? lock_downgrade+0x740/0x740 [ 1429.073003] ? __fget+0x225/0x360 [ 1429.073012] ? do_vfs_ioctl+0xff0/0xff0 [ 1429.073022] ? security_file_ioctl+0x83/0xb0 [ 1429.073032] SyS_ioctl+0x7f/0xb0 [ 1429.073038] ? do_vfs_ioctl+0xff0/0xff0 [ 1429.073053] do_syscall_64+0x1d5/0x640 [ 1429.080683] lowmem_reserve[]: [ 1429.106338] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1429.106348] RIP: 0033:0x465f69 [ 1429.106352] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1429.106361] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1429.106366] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1429.106371] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1429.106375] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1429.106380] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1429.123677] CPU: 1 PID: 22570 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1429.126458] / [ 1429.153038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1429.157391] 0 [ 1429.159398] Call Trace: [ 1429.164398] mems_allowed=0-1 [ 1429.169854] dump_stack+0x1b2/0x281 [ 1429.174932] 2717 [ 1429.179799] warn_alloc.cold+0x96/0x1cc [ 1429.190694] 2718 [ 1429.191755] ? zone_watermark_ok_safe+0x220/0x220 [ 1429.195172] 2718 [ 1429.220679] ? usleep_range+0x130/0x130 [ 1429.220689] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1429.220701] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1429.220710] ? run_timer_softirq+0x5a0/0x5a0 [ 1429.220726] __alloc_pages_nodemask+0x2127/0x2720 [ 1429.220741] ? lock_acquire+0x170/0x3f0 [ 1429.220756] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1429.220767] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1429.220781] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1429.220798] alloc_pages_current+0x155/0x260 [ 1429.220809] ion_page_pool_alloc+0x118/0x1b0 [ 1429.220820] ion_system_heap_allocate+0x133/0x8c0 [ 1429.220841] ? ion_alloc+0x187/0x810 [ 1429.254365] 2718 [ 1429.257194] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1429.264521] ? ion_system_contig_heap_create+0x130/0x130 [ 1429.264533] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1429.264543] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1429.264554] ion_alloc+0x204/0x810 [ 1429.264568] ? ion_dma_buf_release+0x40/0x40 [ 1429.264579] ? __might_fault+0x177/0x1b0 [ 1429.264591] ion_ioctl+0xea/0x1f0 [ 1429.264602] ? ion_query_heaps+0x360/0x360 [ 1429.293849] Node 0 [ 1429.294885] ? sock_ioctl+0x16c/0x4c0 [ 1429.313927] DMA32 free:18072kB min:36200kB low:45248kB high:54296kB active_anon:111828kB inactive_anon:56680kB active_file:44kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7744kB pagetables:3080kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1429.316688] ? ion_query_heaps+0x360/0x360 [ 1429.333813] lowmem_reserve[]: [ 1429.343011] do_vfs_ioctl+0x75a/0xff0 [ 1429.343025] ? ioctl_preallocate+0x1a0/0x1a0 [ 1429.343034] ? lock_downgrade+0x740/0x740 [ 1429.343046] ? __fget+0x225/0x360 [ 1429.343054] ? do_vfs_ioctl+0xff0/0xff0 [ 1429.343063] ? security_file_ioctl+0x83/0xb0 [ 1429.343072] SyS_ioctl+0x7f/0xb0 [ 1429.343079] ? do_vfs_ioctl+0xff0/0xff0 [ 1429.343090] do_syscall_64+0x1d5/0x640 [ 1429.343107] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1429.360711] 0 [ 1429.362227] RIP: 0033:0x465f69 [ 1429.367065] 0 [ 1429.369114] RSP: 002b:00007f0a724bf188 EFLAGS: 00000246 [ 1429.393834] 0 [ 1429.396415] ORIG_RAX: 0000000000000010 [ 1429.413810] 0 [ 1429.417379] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1429.433886] 0 [ 1429.437780] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1429.456590] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1429.474085] Node 0 [ 1429.474897] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1429.478702] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1429.506780] R13: 00007fffce0e3c8f R14: 00007f0a724bf300 R15: 0000000000022000 [ 1429.522771] Node 0 [ 1429.530404] CPU: 0 PID: 22569 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 1429.536367] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1429.538522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1429.541965] lowmem_reserve[]: [ 1429.545873] Call Trace: [ 1429.549740] 0 [ 1429.554930] dump_stack+0x1b2/0x281 [ 1429.554944] warn_alloc.cold+0x96/0x1cc [ 1429.554955] ? zone_watermark_ok_safe+0x220/0x220 [ 1429.554964] ? usleep_range+0x130/0x130 [ 1429.554975] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1429.556784] 0 [ 1429.559967] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1429.561785] 0 [ 1429.567094] ? run_timer_softirq+0x5a0/0x5a0 [ 1429.568869] 0 [ 1429.572838] __alloc_pages_nodemask+0x2127/0x2720 [ 1429.572855] ? lock_acquire+0x170/0x3f0 [ 1429.572873] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1429.574660] 0 [ 1429.581932] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1429.581947] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1429.581962] ? alloc_pages_current+0x37/0x260 [ 1429.581973] alloc_pages_current+0x155/0x260 [ 1429.591046] ion_page_pool_alloc+0x118/0x1b0 [ 1429.591057] ion_system_heap_allocate+0x133/0x8c0 [ 1429.591066] ? ion_alloc+0x187/0x810 [ 1429.591081] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1429.598352] Node 1 [ 1429.600580] ? ion_system_contig_heap_create+0x130/0x130 [ 1429.607891] Normal free:26784kB min:53696kB low:67120kB high:80544kB active_anon:1268kB inactive_anon:20352kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:228kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1429.632720] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1429.632734] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1429.632747] ion_alloc+0x204/0x810 [ 1429.632762] ? ion_dma_buf_release+0x40/0x40 [ 1429.640026] lowmem_reserve[]: [ 1429.642260] ? __might_fault+0x177/0x1b0 [ 1429.642273] ion_ioctl+0xea/0x1f0 [ 1429.642283] ? ion_query_heaps+0x360/0x360 [ 1429.642296] ? __alloc_fd+0x1be/0x490 [ 1429.650158] 0 [ 1429.675049] ? ion_query_heaps+0x360/0x360 [ 1429.675060] do_vfs_ioctl+0x75a/0xff0 [ 1429.675072] ? ioctl_preallocate+0x1a0/0x1a0 [ 1429.675081] ? lock_downgrade+0x740/0x740 [ 1429.675093] ? __fget+0x225/0x360 [ 1429.690673] 0 [ 1429.691886] ? do_vfs_ioctl+0xff0/0xff0 [ 1429.695484] 0 [ 1429.699445] ? security_file_ioctl+0x83/0xb0 [ 1429.720671] 0 [ 1429.721888] SyS_ioctl+0x7f/0xb0 [ 1429.726270] 0 [ 1429.728063] ? do_vfs_ioctl+0xff0/0xff0 [ 1429.741677] do_syscall_64+0x1d5/0x640 [ 1429.743455] Node 0 [ 1429.747969] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1429.770678] DMA: [ 1429.771503] RIP: 0033:0x465f69 [ 1429.775207] 70*4kB [ 1429.780636] RSP: 002b:00007f6547c30188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1429.780646] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1429.780651] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1429.780655] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1429.780660] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1429.780665] R13: 00007ffe59ae816f R14: 00007f6547c30300 R15: 0000000000022000 [ 1429.789497] lowmem_reserve[]: [ 1429.964810] warn_alloc_show_mem: 1 callbacks suppressed [ 1429.964814] Mem-Info: [ 1429.978989] active_anon:28274 inactive_anon:19258 isolated_anon:0 [ 1429.978989] active_file:14 inactive_file:1665 isolated_file:0 [ 1429.978989] unevictable:0 dirty:25 writeback:0 unstable:0 [ 1429.978989] slab_reclaimable:13460 slab_unreclaimable:122133 [ 1429.978989] mapped:54034 shmem:21268 pagetables:827 bounce:0 [ 1429.978989] free:77929 free_pcp:11 free_cma:0 [ 1430.016593] Node 0 active_anon:111828kB inactive_anon:56680kB active_file:44kB inactive_file:1044kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:201408kB dirty:0kB writeback:0kB shmem:64588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1430.040670] (U) 59*8kB (U) 15*16kB (UE) 3*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10944kB [ 1430.049098] Node 1 active_anon:1268kB inactive_anon:20352kB active_file:12kB inactive_file:5616kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14728kB dirty:100kB writeback:0kB shmem:20484kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1430.092369] Node 0 DMA free:11380kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1430.110730] Node 0 DMA32: 2560*4kB (UME) 431*8kB (UME) 234*16kB (UME) 210*32kB (UME) 902*64kB (UME) 240*128kB (UM) 56*256kB (U) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 128984kB [ 1430.122222] 0 [ 1430.136538] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1430.145013] Node 0 DMA32 free:130824kB min:36200kB low:45248kB high:54296kB active_anon:111828kB inactive_anon:56680kB active_file:52kB inactive_file:1140kB unevictable:0kB writepending:12kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7744kB pagetables:3080kB bounce:0kB free_pcp:884kB local_pcp:140kB free_cma:0kB [ 1430.178119] 0 0 0 0 [ 1430.180476] Node 1 Normal free:261492kB min:53696kB low:67120kB high:80544kB active_anon:1284kB inactive_anon:20352kB active_file:16kB inactive_file:5668kB unevictable:0kB writepending:112kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:228kB bounce:0kB free_pcp:692kB local_pcp:0kB free_cma:0kB [ 1430.230744] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1430.233433] lowmem_reserve[]: [ 1430.242281] lowmem_reserve[]: 0 0 0 0 0 [ 1430.249393] Node 0 DMA: 135*4kB (U) 127*8kB (U) 18*16kB (UE) 3*32kB (UE) 5*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11988kB [ 1430.250695] Node 1 Normal: 6302*4kB (UM) 1140*8kB (U) 298*16kB (UM) 1063*32kB (UME) 1835*64kB (UM) 169*128kB (UM) 88*256kB (U) 58*512kB (UM) 44*1024kB (U) 5*2048kB (U) 0*4096kB = 319704kB [ 1430.293798] 0 [ 1430.324795] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1430.340737] 0 0 0 0 [ 1430.351208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1430.359820] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1430.370911] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1430.373833] Node 0 [ 1430.379508] 22988 total pagecache pages [ 1430.379530] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1430.383494] 0 pages in swap cache [ 1430.393886] Node 0 [ 1430.412919] Swap cache stats: add 0, delete 0, find 0/0 [ 1430.424010] Free swap = 0kB [ 1430.427076] Total swap = 0kB [ 1430.430103] 2097051 pages RAM [ 1430.440689] lowmem_reserve[]: 0 0 0 0 0 [ 1430.450719] Node 1 Normal free:317744kB min:53696kB low:67120kB high:80544kB active_anon:1284kB inactive_anon:20352kB active_file:16kB inactive_file:5668kB unevictable:0kB writepending:112kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:228kB bounce:0kB free_pcp:1360kB local_pcp:708kB free_cma:0kB [ 1430.470684] 0 pages HighMem/MovableOnly [ 1430.480126] DMA32: 8067*4kB (UME) 779*8kB (UME) 884*16kB (UME) 388*32kB (UME) 622*64kB (UME) 254*128kB (UM) 62*256kB (U) 8*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 157348kB [ 1430.500809] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1430.510744] 363840 pages reserved [ 1430.514993] 0 pages cma reserved [ 1430.518355] Out of memory (oom_kill_allocating_task): Kill process 21875 (syz-executor.0) score 0 or sacrifice child [ 1430.529347] lowmem_reserve[]: 0 0 0 0 0 [ 1430.550709] Node 0 DMA: 147*4kB (U) 127*8kB (U) 18*16kB (UE) 3*32kB (UE) 5*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 12036kB [ 1430.566299] Node 1 Normal: 12240*4kB (UM) 1681*8kB (UM) 514*16kB (UM) 1202*32kB (UME) 1859*64kB (UM) 174*128kB (UM) 120*256kB (U) 85*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 324584kB [ 1430.590747] Node 0 DMA32: 10987*4kB (UME) 2164*8kB (UME) 1049*16kB (UME) 560*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 95964kB [ 1430.593871] Killed process 21875 (syz-executor.0) total-vm:93120kB, anon-rss:108kB, file-rss:33896kB, shmem-rss:0kB [ 1430.604985] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1430.626605] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1430.650757] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1430.657733] oom_reaper: reaped process 21875 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1430.659361] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1430.700721] Node 1 Normal: 16816*4kB (UM) 2264*8kB (UM) 692*16kB (UM) 1295*32kB (UME) 303*64kB (UM) 177*128kB (UM) 122*256kB (U) 85*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 254688kB [ 1430.717384] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1430.731024] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1430.760692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1430.769302] 22988 total pagecache pages [ 1430.775395] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1430.810753] 0 pages in swap cache [ 1430.814234] Swap cache stats: add 0, delete 0, find 0/0 [ 1430.819596] Free swap = 0kB [ 1430.824141] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1430.840720] 22988 total pagecache pages [ 1430.844717] 0 pages in swap cache [ 1430.848159] Swap cache stats: add 0, delete 0, find 0/0 [ 1430.855988] Total swap = 0kB [ 1430.859015] 2097051 pages RAM [ 1430.871730] 0 pages HighMem/MovableOnly [ 1430.875724] 363840 pages reserved [ 1430.879161] 0 pages cma reserved [ 1430.890742] Free swap = 0kB [ 1430.893780] Total swap = 0kB [ 1430.896785] 2097051 pages RAM [ 1430.899887] 0 pages HighMem/MovableOnly [ 1430.930760] 363840 pages reserved [ 1430.934235] 0 pages cma reserved [ 1431.010787] Bluetooth: hci2 command 0x041b tx timeout 08:37:52 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) 08:37:53 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000005c0)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x80000000, 0xf}) [ 1432.465958] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1432.485668] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1432.492871] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1432.493620] syz-executor.0: [ 1432.508042] CPU: 0 PID: 22685 Comm: syz-executor.2 Not tainted 4.14.225-syzkaller #0 [ 1432.518955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1432.528321] Call Trace: [ 1432.530914] dump_stack+0x1b2/0x281 [ 1432.533727] chnl_net:caif_netlink_parms(): no params data found [ 1432.534549] warn_alloc.cold+0x96/0x1cc [ 1432.534563] ? zone_watermark_ok_safe+0x220/0x220 [ 1432.545097] syz-executor.5 cpuset= [ 1432.549442] __alloc_pages_nodemask+0x2127/0x2720 [ 1432.549460] ? lock_acquire+0x170/0x3f0 [ 1432.561811] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1432.563905] syz-executor.3: page allocation failure: order:5 [ 1432.566664] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1432.566669] , mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 1432.572489] ? __mutex_unlock_slowpath+0x75/0x770 [ 1432.577931] syz-executor.3 cpuset= [ 1432.584441] ? retint_kernel+0x2d/0x2d [ 1432.589453] / [ 1432.592796] alloc_pages_current+0x155/0x260 [ 1432.592814] ion_page_pool_alloc+0x118/0x1b0 [ 1432.592827] ion_system_heap_allocate+0x133/0x8c0 [ 1432.592838] ? ion_alloc+0x187/0x810 [ 1432.596869] mems_allowed=0-1 [ 1432.598579] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1432.624414] ? ion_system_contig_heap_create+0x130/0x130 [ 1432.629870] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1432.634896] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1432.639746] ion_alloc+0x204/0x810 [ 1432.643300] ? ion_dma_buf_release+0x40/0x40 [ 1432.647709] ? __might_fault+0x177/0x1b0 [ 1432.651775] ion_ioctl+0xea/0x1f0 [ 1432.655223] ? ion_query_heaps+0x360/0x360 [ 1432.659474] ? sock_ioctl+0x16c/0x4c0 [ 1432.663268] ? ion_query_heaps+0x360/0x360 [ 1432.667502] do_vfs_ioctl+0x75a/0xff0 [ 1432.671313] ? ioctl_preallocate+0x1a0/0x1a0 [ 1432.675717] ? lock_downgrade+0x740/0x740 [ 1432.679868] ? __fget+0x225/0x360 [ 1432.683329] ? do_vfs_ioctl+0xff0/0xff0 [ 1432.687307] ? security_file_ioctl+0x83/0xb0 [ 1432.691727] SyS_ioctl+0x7f/0xb0 [ 1432.695086] ? do_vfs_ioctl+0xff0/0xff0 [ 1432.699061] do_syscall_64+0x1d5/0x640 [ 1432.702956] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1432.708157] RIP: 0033:0x465f69 [ 1432.711344] RSP: 002b:00007f5b72fdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1432.719049] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1432.726315] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1432.733600] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1432.740868] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1432.748133] R13: 00007fff1438b2cf R14: 00007f5b72fdb300 R15: 0000000000022000 [ 1432.755418] CPU: 1 PID: 22577 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 1432.763310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1432.772397] page allocation failure: order:4 [ 1432.772663] Call Trace: [ 1432.772668] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1432.777076] dump_stack+0x1b2/0x281 [ 1432.777089] warn_alloc.cold+0x96/0x1cc [ 1432.789176] syz-executor.0 cpuset= [ 1432.790898] ? zone_watermark_ok_safe+0x220/0x220 [ 1432.790912] ? wake_all_kswapds+0x175/0x360 [ 1432.790925] __alloc_pages_nodemask+0x2127/0x2720 [ 1432.790936] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1432.790942] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 1432.790962] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1432.790972] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1432.797174] / [ 1432.798478] ? cache_alloc_refill+0x2fa/0x350 [ 1432.810002] mems_allowed=0-1 [ 1432.812433] ? ____cache_alloc_node+0x156/0x1d0 [ 1432.812445] cache_grow_begin+0x91/0x630 [ 1432.812454] ? cache_grow_begin+0x91/0x630 [ 1432.812464] fallback_alloc+0x207/0x2c0 [ 1432.812476] __kmalloc+0x213/0x400 [ 1432.812486] ? batadv_hash_new+0xaa/0x270 [ 1432.812495] batadv_hash_new+0xaa/0x270 [ 1432.812509] ? queue_delayed_work_on+0xfc/0x1d0 [ 1432.874590] batadv_tt_init+0x260/0x390 [ 1432.878587] batadv_mesh_init+0x478/0x630 [ 1432.882749] batadv_softif_init_late+0xa26/0xc90 [ 1432.887509] ? batadv_get_strings+0x40/0x40 [ 1432.891830] ? dev_valid_name+0x1a0/0x1a0 [ 1432.895985] ? batadv_get_strings+0x40/0x40 [ 1432.900313] register_netdevice+0x291/0xe40 [ 1432.904646] ? netdev_change_features+0xa0/0xa0 [ 1432.909324] ? rtnl_create_link+0x129/0x890 [ 1432.913654] rtnl_newlink+0x14dc/0x1830 [ 1432.917651] ? rtnl_newlink+0x43d/0x1830 [ 1432.921720] ? __lock_acquire+0x5fc/0x3f20 [ 1432.925972] ? trace_hardirqs_on+0x10/0x10 [ 1432.930209] ? rtnl_dellink+0x6a0/0x6a0 [ 1432.934188] ? trace_hardirqs_on+0x10/0x10 [ 1432.938421] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1432.944313] ? deref_stack_reg+0x124/0x1a0 [ 1432.948596] ? lock_acquire+0x170/0x3f0 [ 1432.952593] ? lock_downgrade+0x740/0x740 [ 1432.956744] ? rtnl_dellink+0x6a0/0x6a0 [ 1432.960713] rtnetlink_rcv_msg+0x3be/0xb10 [ 1432.964946] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1432.969437] ? __netlink_lookup+0x345/0x5d0 [ 1432.973795] netlink_rcv_skb+0x125/0x390 [ 1432.977858] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1432.982355] ? netlink_ack+0x9a0/0x9a0 [ 1432.986251] netlink_unicast+0x437/0x610 [ 1432.990324] ? netlink_sendskb+0xd0/0xd0 [ 1432.994390] ? __check_object_size+0x179/0x230 [ 1432.998985] netlink_sendmsg+0x62e/0xb80 [ 1433.003068] ? nlmsg_notify+0x170/0x170 [ 1433.007052] ? security_socket_sendmsg+0x83/0xb0 [ 1433.011806] ? nlmsg_notify+0x170/0x170 [ 1433.015783] sock_sendmsg+0xb5/0x100 [ 1433.019501] SyS_sendto+0x1c7/0x2c0 [ 1433.023149] ? SyS_getpeername+0x220/0x220 [ 1433.027490] ? up_read+0x17/0x30 [ 1433.030857] ? __do_page_fault+0x159/0xad0 [ 1433.035087] ? do_syscall_64+0x4c/0x640 [ 1433.039080] ? SyS_getpeername+0x220/0x220 [ 1433.043310] do_syscall_64+0x1d5/0x640 [ 1433.047198] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1433.052396] RIP: 0033:0x4193fc [ 1433.055575] RSP: 002b:00007ffd7398a220 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1433.063303] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193fc [ 1433.070574] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1433.077861] RBP: 0000000000000000 R08: 00007ffd7398a274 R09: 000000000000000c [ 1433.085135] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1433.092436] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1433.094262] Bluetooth: hci2 command 0x040f tx timeout [ 1433.099788] warn_alloc_show_mem: 2 callbacks suppressed [ 1433.099793] Mem-Info: [ 1433.108254] CPU: 0 PID: 22570 Comm: syz-executor.0 Not tainted 4.14.225-syzkaller #0 [ 1433.110307] active_anon:28186 inactive_anon:19257 isolated_anon:0 [ 1433.110307] active_file:1500 inactive_file:2230 isolated_file:0 [ 1433.110307] unevictable:0 dirty:28 writeback:50 unstable:0 [ 1433.110307] slab_reclaimable:13444 slab_unreclaimable:122138 [ 1433.110307] mapped:46474 shmem:21267 pagetables:782 bounce:0 [ 1433.110307] free:324631 free_pcp:215 free_cma:0 [ 1433.112665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1433.120735] Node 0 active_anon:111604kB inactive_anon:56684kB active_file:2968kB inactive_file:6696kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:171068kB dirty:96kB writeback:100kB shmem:64592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1433.154571] Call Trace: [ 1433.163958] Node 1 active_anon:1140kB inactive_anon:20344kB active_file:3032kB inactive_file:2224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:14828kB dirty:16kB writeback:100kB shmem:20476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1433.192413] dump_stack+0x1b2/0x281 [ 1433.194980] Node 0 [ 1433.222667] warn_alloc.cold+0x96/0x1cc [ 1433.226301] DMA free:11032kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1433.228525] ? zone_watermark_ok_safe+0x220/0x220 [ 1433.232493] lowmem_reserve[]: [ 1433.258010] __alloc_pages_nodemask+0x2127/0x2720 [ 1433.262825] 0 [ 1433.265934] ? lock_acquire+0x170/0x3f0 [ 1433.270752] 2717 [ 1433.272554] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1433.276494] 2718 [ 1433.278557] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1433.283370] 2718 [ 1433.285434] ? __mutex_unlock_slowpath+0x75/0x770 [ 1433.290859] 2718 [ 1433.292925] alloc_pages_current+0x155/0x260 [ 1433.299864] ion_page_pool_alloc+0x118/0x1b0 [ 1433.304255] Node 0 DMA32 free:462464kB min:36200kB low:45248kB high:54296kB active_anon:111604kB inactive_anon:56684kB active_file:2968kB inactive_file:6696kB unevictable:0kB writepending:96kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7776kB pagetables:2900kB bounce:0kB free_pcp:352kB local_pcp:272kB free_cma:0kB [ 1433.308692] ion_system_heap_allocate+0x133/0x8c0 [ 1433.308706] ? _raw_spin_unlock+0x29/0x40 [ 1433.338306] lowmem_reserve[]: [ 1433.343172] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1433.347292] 0 [ 1433.350399] ? ion_system_contig_heap_create+0x130/0x130 [ 1433.355327] 0 [ 1433.357151] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1433.362660] 0 [ 1433.364479] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1433.369466] 0 [ 1433.371274] ion_alloc+0x27a/0x810 [ 1433.376085] 0 [ 1433.377890] ? ion_dma_buf_release+0x40/0x40 [ 1433.383200] ? __might_fault+0x177/0x1b0 [ 1433.387581] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:520kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1433.391690] ion_ioctl+0xea/0x1f0 [ 1433.391702] ? ion_query_heaps+0x360/0x360 [ 1433.417194] lowmem_reserve[]: [ 1433.420649] ? sock_ioctl+0x16c/0x4c0 [ 1433.424873] 0 [ 1433.427980] ? ion_query_heaps+0x360/0x360 [ 1433.431751] 0 [ 1433.433571] do_vfs_ioctl+0x75a/0xff0 [ 1433.437778] 0 [ 1433.439572] ? ioctl_preallocate+0x1a0/0x1a0 [ 1433.443340] 0 [ 1433.445135] ? lock_downgrade+0x740/0x740 [ 1433.449507] 0 [ 1433.451318] ? __fget+0x225/0x360 [ 1433.455431] Node 1 [ 1433.457224] ? do_vfs_ioctl+0xff0/0xff0 [ 1433.460664] Normal free:825028kB min:53696kB low:67120kB high:80544kB active_anon:1140kB inactive_anon:20344kB active_file:3412kB inactive_file:2064kB unevictable:0kB writepending:116kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:228kB bounce:0kB free_pcp:508kB local_pcp:508kB free_cma:0kB [ 1433.462881] ? security_file_ioctl+0x83/0xb0 [ 1433.466823] lowmem_reserve[]: 0 [ 1433.495551] SyS_ioctl+0x7f/0xb0 [ 1433.499942] 0 [ 1433.503218] ? do_vfs_ioctl+0xff0/0xff0 [ 1433.506551] 0 0 [ 1433.508356] do_syscall_64+0x1d5/0x640 [ 1433.512297] 0 [ 1433.514276] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1433.518128] Node 0 [ 1433.519921] RIP: 0033:0x465f69 [ 1433.525104] DMA: [ 1433.527362] RSP: 002b:00007f0a724bf188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1433.530542] 153*4kB [ 1433.532589] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1433.540375] (U) 140*8kB [ 1433.542691] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1433.549945] (U) [ 1433.552601] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1433.559880] 60*16kB (UE) [ 1433.561860] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1433.569457] 19*32kB (UE) [ 1433.572211] R13: 00007fffce0e3c8f R14: 00007f0a724bf300 R15: 0000000000022000 [ 1433.579485] 1*64kB (E) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11044kB [ 1433.599414] Node 0 DMA32: 24352*4kB (UME) 19315*8kB (UME) 7855*16kB (UME) 2559*32kB (UME) 6*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 459880kB [ 1433.614230] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1433.624954] Node 1 Normal: 71201*4kB (UM) 24531*8kB (UM) 10438*16kB (UM) 5521*32kB (UM) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 824860kB [ 1433.639520] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1433.648368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1433.656951] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1433.665794] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1433.674397] 25096 total pagecache pages [ 1433.678382] 0 pages in swap cache [ 1433.681836] Swap cache stats: add 0, delete 0, find 0/0 [ 1433.687193] Free swap = 0kB [ 1433.690206] Total swap = 0kB [ 1433.693379] 2097051 pages RAM [ 1433.696480] 0 pages HighMem/MovableOnly [ 1433.700442] 363840 pages reserved [ 1433.703884] 0 pages cma reserved [ 1433.710081] / mems_allowed=0-1 [ 1433.715276] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1433.715536] CPU: 1 PID: 22690 Comm: syz-executor.5 Not tainted 4.14.225-syzkaller #0 [ 1433.735011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1433.744376] Call Trace: [ 1433.746974] dump_stack+0x1b2/0x281 [ 1433.750609] warn_alloc.cold+0x96/0x1cc [ 1433.754603] ? zone_watermark_ok_safe+0x220/0x220 [ 1433.755974] syz-executor.1 cpuset= [ 1433.759463] __alloc_pages_nodemask+0x2127/0x2720 [ 1433.759475] ? switch_mm_irqs_off+0x601/0xeb0 [ 1433.772343] ? lock_acquire+0x170/0x3f0 [ 1433.776084] / mems_allowed=0-1 [ 1433.776333] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1433.776350] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1433.789811] ? __mutex_unlock_slowpath+0x75/0x770 [ 1433.794661] ? policy_node+0x2f/0x110 [ 1433.798476] alloc_pages_current+0x155/0x260 [ 1433.802895] ion_page_pool_alloc+0x118/0x1b0 [ 1433.807313] ion_system_heap_allocate+0x133/0x8c0 [ 1433.812162] ? ion_alloc+0x187/0x810 [ 1433.815874] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1433.821322] ? ion_system_contig_heap_create+0x130/0x130 [ 1433.826778] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1433.831828] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1433.836676] ion_alloc+0x204/0x810 [ 1433.840222] ? ion_dma_buf_release+0x40/0x40 [ 1433.844631] ? __might_fault+0x177/0x1b0 [ 1433.848694] ion_ioctl+0xea/0x1f0 [ 1433.852147] ? ion_query_heaps+0x360/0x360 [ 1433.856385] ? sock_ioctl+0x16c/0x4c0 [ 1433.860179] ? ion_query_heaps+0x360/0x360 [ 1433.864411] do_vfs_ioctl+0x75a/0xff0 [ 1433.868216] ? ioctl_preallocate+0x1a0/0x1a0 [ 1433.872637] ? lock_downgrade+0x740/0x740 [ 1433.876790] ? __fget+0x225/0x360 [ 1433.880249] ? do_vfs_ioctl+0xff0/0xff0 [ 1433.884233] ? security_file_ioctl+0x83/0xb0 [ 1433.888644] SyS_ioctl+0x7f/0xb0 [ 1433.892012] ? do_vfs_ioctl+0xff0/0xff0 [ 1433.895988] do_syscall_64+0x1d5/0x640 [ 1433.899919] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1433.905133] RIP: 0033:0x465f69 [ 1433.908320] RSP: 002b:00007fea6b5fa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1433.916132] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1433.923402] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1433.930843] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1433.938113] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1433.945381] R13: 00007ffeec2ed4cf R14: 00007fea6b5fa300 R15: 0000000000022000 [ 1433.964738] CPU: 0 PID: 22569 Comm: syz-executor.1 Not tainted 4.14.225-syzkaller #0 [ 1433.972658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1433.982024] Call Trace: [ 1433.984624] dump_stack+0x1b2/0x281 [ 1433.988263] warn_alloc.cold+0x96/0x1cc [ 1433.992261] ? zone_watermark_ok_safe+0x220/0x220 [ 1433.997140] __alloc_pages_nodemask+0x2127/0x2720 [ 1434.002032] ? ___preempt_schedule+0x16/0x18 [ 1434.006454] ? lock_acquire+0x170/0x3f0 [ 1434.010438] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1434.015299] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1434.020782] ? __mutex_unlock_slowpath+0x75/0x770 [ 1434.025634] alloc_pages_current+0x155/0x260 [ 1434.030074] ion_page_pool_alloc+0x118/0x1b0 [ 1434.034493] ion_system_heap_allocate+0x133/0x8c0 [ 1434.039395] ? _raw_spin_unlock+0x29/0x40 [ 1434.043545] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1434.048479] ? ion_system_contig_heap_create+0x130/0x130 [ 1434.053947] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1434.058971] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1434.063821] ion_alloc+0x27a/0x810 [ 1434.067371] ? ion_dma_buf_release+0x40/0x40 [ 1434.071799] ? __might_fault+0x177/0x1b0 [ 1434.075865] ion_ioctl+0xea/0x1f0 [ 1434.079344] ? ion_query_heaps+0x360/0x360 [ 1434.083774] ? __alloc_fd+0x1be/0x490 [ 1434.087577] ? ion_query_heaps+0x360/0x360 [ 1434.091816] do_vfs_ioctl+0x75a/0xff0 [ 1434.095628] ? ioctl_preallocate+0x1a0/0x1a0 [ 1434.100040] ? lock_downgrade+0x740/0x740 [ 1434.104197] ? __fget+0x225/0x360 [ 1434.107654] ? do_vfs_ioctl+0xff0/0xff0 [ 1434.111717] ? security_file_ioctl+0x83/0xb0 [ 1434.116123] SyS_ioctl+0x7f/0xb0 [ 1434.119524] ? do_vfs_ioctl+0xff0/0xff0 [ 1434.123503] do_syscall_64+0x1d5/0x640 [ 1434.127403] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1434.132598] RIP: 0033:0x465f69 [ 1434.135782] RSP: 002b:00007f6547c30188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1434.143496] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465f69 [ 1434.150787] RDX: 0000000020000080 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1434.158056] RBP: 00000000004bfa8f R08: 0000000000000000 R09: 0000000000000000 [ 1434.165332] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1434.172608] R13: 00007ffe59ae816f R14: 00007f6547c30300 R15: 0000000000022000 [ 1434.216235] warn_alloc_show_mem: 2 callbacks suppressed [ 1434.216240] Mem-Info: [ 1434.231984] active_anon:28191 inactive_anon:19257 isolated_anon:24 [ 1434.231984] active_file:1446 inactive_file:2259 isolated_file:0 [ 1434.231984] unevictable:0 dirty:15 writeback:0 unstable:0 [ 1434.231984] slab_reclaimable:13394 slab_unreclaimable:123013 [ 1434.231984] mapped:46486 shmem:21267 pagetables:782 bounce:0 [ 1434.231984] free:220151 free_pcp:144 free_cma:0 [ 1434.269958] Node 0 active_anon:111604kB inactive_anon:56684kB active_file:3028kB inactive_file:6664kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:171116kB dirty:56kB writeback:0kB shmem:64592kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1434.311258] Node 1 active_anon:1160kB inactive_anon:20344kB active_file:2756kB inactive_file:2372kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:14828kB dirty:4kB writeback:0kB shmem:20476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1434.371358] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 1434.381645] ------------[ cut here ]------------ [ 1434.386387] Node 0 [ 1434.386424] WARNING: CPU: 1 PID: 22577 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 1434.386446] DMA free:10980kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1434.388655] Kernel panic - not syncing: panic_on_warn set ... [ 1434.388655] [ 1434.388664] CPU: 1 PID: 22577 Comm: syz-executor.3 Not tainted 4.14.225-syzkaller #0 [ 1434.388669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1434.388673] Call Trace: [ 1434.388695] dump_stack+0x1b2/0x281 [ 1434.420307] lowmem_reserve[]: [ 1434.423305] panic+0x1f9/0x42d [ 1434.423314] ? add_taint.cold+0x16/0x16 [ 1434.423326] ? debug_print_object.cold+0xa7/0xdb [ 1434.423337] ? debug_print_object.cold+0xa7/0xdb [ 1434.423345] __warn.cold+0x20/0x44 [ 1434.423353] ? ist_end_non_atomic+0x10/0x10 [ 1434.423360] ? debug_print_object.cold+0xa7/0xdb [ 1434.423369] report_bug+0x208/0x250 [ 1434.423380] do_error_trap+0x195/0x2d0 [ 1434.423388] ? math_error+0x2d0/0x2d0 [ 1434.423403] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1434.423422] invalid_op+0x1b/0x40 [ 1434.423431] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 1434.423444] RSP: 0018:ffff8880900af248 EFLAGS: 00010086 [ 1434.456629] 0 [ 1434.467381] 2717 [ 1434.469322] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 1434.469328] RDX: 0000000000000000 RSI: ffffffff878bbb80 RDI: ffffed1012015e3f [ 1434.469333] RBP: ffffffff878b6e40 R08: 0000000000000061 R09: 0000000000000001 [ 1434.469338] R10: 0000000000000000 R11: ffff88804ca38200 R12: 0000000000000000 [ 1434.469342] R13: 0000000000000000 R14: ffff88803b7f30b0 R15: 1ffff11012015e52 [ 1434.469370] ? debug_print_object.cold+0xa7/0xdb [ 1434.488454] 2718 [ 1434.490683] debug_object_assert_init+0x1d3/0x2d0 [ 1434.490695] ? debug_object_active_state+0x330/0x330 [ 1434.490702] ? rtnl_newlink+0x14dc/0x1830 [ 1434.490708] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 1434.490715] ? netlink_rcv_skb+0x125/0x390 [ 1434.490727] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1434.490738] del_timer+0x5d/0xe0 [ 1434.490745] ? process_timeout+0x20/0x20 [ 1434.490758] try_to_grab_pending+0x243/0x610 [ 1434.490769] __cancel_work_timer+0x90/0x460 [ 1434.490780] ? work_on_cpu_safe+0x70/0x70 [ 1434.499424] 2718 [ 1434.503440] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 1434.503455] batadv_nc_mesh_free+0x41/0x120 [ 1434.503465] batadv_mesh_free+0x70/0x150 [ 1434.503473] batadv_mesh_init+0x561/0x630 [ 1434.503482] batadv_softif_init_late+0xa26/0xc90 [ 1434.503490] ? batadv_get_strings+0x40/0x40 [ 1434.503498] ? dev_valid_name+0x1a0/0x1a0 [ 1434.503506] ? batadv_get_strings+0x40/0x40 [ 1434.503514] register_netdevice+0x291/0xe40 [ 1434.503523] ? netdev_change_features+0xa0/0xa0 [ 1434.503531] ? rtnl_create_link+0x129/0x890 [ 1434.503541] rtnl_newlink+0x14dc/0x1830 [ 1434.503547] ? rtnl_newlink+0x43d/0x1830 [ 1434.503555] ? __lock_acquire+0x5fc/0x3f20 [ 1434.503572] ? trace_hardirqs_on+0x10/0x10 [ 1434.533874] 2718 [ 1434.536150] ? rtnl_dellink+0x6a0/0x6a0 [ 1434.536160] ? trace_hardirqs_on+0x10/0x10 [ 1434.536173] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1434.550728] ? deref_stack_reg+0x124/0x1a0 [ 1434.550772] ? lock_acquire+0x170/0x3f0 [ 1434.550780] ? lock_downgrade+0x740/0x740 [ 1434.550789] ? rtnl_dellink+0x6a0/0x6a0 [ 1434.550795] rtnetlink_rcv_msg+0x3be/0xb10 [ 1434.550807] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1434.550815] ? __netlink_lookup+0x345/0x5d0 [ 1434.550829] netlink_rcv_skb+0x125/0x390 [ 1434.550837] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1434.550848] ? netlink_ack+0x9a0/0x9a0 [ 1434.571295] Node 0 [ 1434.574865] netlink_unicast+0x437/0x610 [ 1434.574878] ? netlink_sendskb+0xd0/0xd0 [ 1434.590754] DMA32 free:41392kB min:36200kB low:45248kB high:54296kB active_anon:111604kB inactive_anon:56684kB active_file:3028kB inactive_file:6776kB unevictable:0kB writepending:56kB present:3129332kB managed:2788160kB mlocked:0kB kernel_stack:7712kB pagetables:2900kB bounce:0kB free_pcp:780kB local_pcp:500kB free_cma:0kB [ 1434.593769] ? __check_object_size+0x179/0x230 [ 1434.593786] netlink_sendmsg+0x62e/0xb80 [ 1434.597186] lowmem_reserve[]: [ 1434.601199] ? nlmsg_notify+0x170/0x170 [ 1434.601212] ? security_socket_sendmsg+0x83/0xb0 [ 1434.601218] ? nlmsg_notify+0x170/0x170 [ 1434.601227] sock_sendmsg+0xb5/0x100 [ 1434.601236] SyS_sendto+0x1c7/0x2c0 [ 1434.601244] ? SyS_getpeername+0x220/0x220 [ 1434.601268] ? up_read+0x17/0x30 [ 1434.601278] ? __do_page_fault+0x159/0xad0 [ 1434.601286] ? do_syscall_64+0x4c/0x640 [ 1434.601293] ? SyS_getpeername+0x220/0x220 [ 1434.601301] do_syscall_64+0x1d5/0x640 [ 1434.601318] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1434.601326] RIP: 0033:0x4193fc [ 1434.601330] RSP: 002b:00007ffd7398a220 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1434.601338] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 00000000004193fc [ 1434.601342] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1434.601346] RBP: 0000000000000000 R08: 00007ffd7398a274 R09: 000000000000000c [ 1434.601350] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1434.601354] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1434.606338] Kernel Offset: disabled [ 1434.889880] Rebooting in 86400 seconds..