s_surp=0 hugepages_size=1048576kB [ 1345.885107] Node 0 DMA free:11744kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1345.902185] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1345.937922] Node 0 DMA free:11744kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1345.938238] device hsr_slave_1 left promiscuous mode [ 1345.985601] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1346.005224] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1346.009875] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1346.014009] lowmem_reserve[]: [ 1346.022408] device hsr_slave_0 left promiscuous mode [ 1346.024170] 0 2717 2718 2718 2718 [ 1346.034990] Node 0 DMA32 free:195252kB min:36200kB low:45248kB high:54296kB active_anon:50904kB inactive_anon:43316kB active_file:36kB inactive_file:13740kB unevictable:0kB writepending:148kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2612kB bounce:0kB free_pcp:1352kB local_pcp:732kB free_cma:0kB [ 1346.044935] 19751 total pagecache pages [ 1346.075787] Node 0 DMA32 free:205336kB min:36200kB low:45248kB high:54296kB active_anon:50904kB inactive_anon:43316kB active_file:36kB inactive_file:13740kB unevictable:0kB writepending:156kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2612kB bounce:0kB free_pcp:1268kB local_pcp:620kB free_cma:0kB [ 1346.106234] team0 (unregistering): Port device team_slave_1 removed [ 1346.115026] Bluetooth: hci5 command 0x040f tx timeout [ 1346.130879] team0 (unregistering): Port device team_slave_0 removed [ 1346.140780] 0 pages in swap cache [ 1346.140893] lowmem_reserve[]: [ 1346.144267] Swap cache stats: add 0, delete 0, find 0/0 [ 1346.144271] 0 0 [ 1346.150661] lowmem_reserve[]: 0 0 0 0 0 [ 1346.169249] Free swap = 0kB [ 1346.171871] 0 [ 1346.172271] Total swap = 0kB [ 1346.172279] 0 [ 1346.174069] 2097051 pages RAM [ 1346.177729] 0 [ 1346.181767] Node 0 [ 1346.182191] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1346.183915] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1346.219087] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1346.224950] 0 pages HighMem/MovableOnly [ 1346.236921] 363849 pages reserved [ 1346.240447] 0 pages cma reserved [ 1346.269352] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1346.305755] lowmem_reserve[]: 0 0 0 0 0 [ 1346.309783] Node 1 Normal free:233532kB min:53696kB low:67120kB high:80544kB active_anon:804kB inactive_anon:16104kB active_file:128kB inactive_file:4448kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:444kB bounce:0kB free_pcp:816kB local_pcp:724kB free_cma:0kB [ 1346.326006] bond0 (unregistering): Released all slaves [ 1346.368303] lowmem_reserve[]: 0 0 0 0 0 [ 1346.372426] Node 1 Normal free:262332kB min:53696kB low:67120kB high:80544kB active_anon:804kB inactive_anon:16104kB active_file:128kB inactive_file:4448kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:160kB pagetables:444kB bounce:0kB free_pcp:816kB local_pcp:92kB free_cma:0kB [ 1346.391560] lowmem_reserve[]: 0 0 0 0 0 [ 1346.436998] Node 0 DMA: 2*4kB (UE) 4*8kB (U) 2*16kB (UE) 7*32kB (UE) 4*64kB (UE) 7*128kB (UE) 4*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11176kB [ 1346.452653] lowmem_reserve[]: 0 0 0 0 0 [ 1346.473070] Node 0 DMA32: 5399*4kB (UE) 2096*8kB [ 1346.473107] Node 0 [ 1346.473109] (UE) 1229*16kB (UE) 2414*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 135276kB [ 1346.491650] DMA: 2*4kB (UE) 4*8kB (U) 2*16kB (UE) 7*32kB (UE) 4*64kB (UE) 7*128kB (UE) 4*256kB (UE) 3*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11176kB [ 1346.514935] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1346.535863] Node 1 Normal: 2656*4kB (UM) 1428*8kB (UME) 957*16kB (UE) 488*32kB (UE) 21*64kB (U) 1*128kB (U) 0*256kB 0*512kB 82*1024kB (U) 6*2048kB (U) 6*4096kB (U) = 175280kB [ 1346.544892] Node 0 DMA32: 6299*4kB (UME) 2365*8kB (UME) 1338*16kB (UME) 2510*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 145844kB [ 1346.564876] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1346.594975] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1346.605644] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1346.614891] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1346.626172] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1346.645063] 19751 total pagecache pages [ 1346.649265] Node 1 Normal: 7725*4kB (UM) 2029*8kB (UME) 1177*16kB (UE) 690*32kB (UE) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 1*2048kB (U) 3*4096kB (U) = 104364kB [ 1346.657154] 0 pages in swap cache [ 1346.681093] Swap cache stats: add 0, delete 0, find 0/0 [ 1346.686548] Free swap = 0kB [ 1346.689560] Total swap = 0kB [ 1346.702909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1346.713033] 2097051 pages RAM [ 1346.720033] 0 pages HighMem/MovableOnly [ 1346.734353] 363849 pages reserved [ 1346.734704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1346.740556] 0 pages cma reserved [ 1346.764880] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1346.780573] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1346.795097] 19751 total pagecache pages [ 1346.799110] 0 pages in swap cache [ 1346.811051] Swap cache stats: add 0, delete 0, find 0/0 [ 1346.816494] Free swap = 0kB [ 1346.819556] Total swap = 0kB [ 1346.831505] 2097051 pages RAM [ 1346.834650] 0 pages HighMem/MovableOnly [ 1346.844886] 363849 pages reserved [ 1346.848362] 0 pages cma reserved [ 1346.851751] Out of memory (oom_kill_allocating_task): Kill process 7981 (syz-fuzzer) score 0 or sacrifice child [ 1346.882361] Killed process 8540 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1346.912517] oom_reaper: reaped process 8540 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 00:39:46 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:39:46 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan3\x00'}) [ 1347.604468] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1347.606048] syz-executor.5: [ 1347.631772] syz-executor.0 cpuset= [ 1347.637475] page allocation failure: order:4 [ 1347.638236] / [ 1347.641043] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1347.653195] mems_allowed=0-1 [ 1347.658883] (null) [ 1347.668405] CPU: 0 PID: 8894 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1347.676224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1347.677954] syz-executor.5 cpuset= [ 1347.685583] Call Trace: [ 1347.685614] dump_stack+0x1b2/0x281 [ 1347.685628] warn_alloc.cold+0x96/0x1cc [ 1347.685640] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1347.685650] ? zone_watermark_ok_safe+0x220/0x220 [ 1347.685671] __alloc_pages_nodemask+0x2127/0x2720 [ 1347.685681] ? _raw_spin_unlock_irq+0x24/0x80 [ 1347.685698] ? lock_acquire+0x170/0x3f0 [ 1347.685713] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1347.700924] / [ 1347.704442] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1347.725546] mems_allowed=0-1 [ 1347.727493] ? __mutex_unlock_slowpath+0x75/0x770 [ 1347.742707] alloc_pages_current+0x155/0x260 [ 1347.747121] ion_page_pool_alloc+0x118/0x1b0 [ 1347.751544] ion_system_heap_allocate+0x133/0x8c0 [ 1347.756388] ? ion_alloc+0x187/0x810 [ 1347.760106] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1347.765588] ? ion_system_contig_heap_create+0x130/0x130 [ 1347.771656] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1347.776694] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1347.781580] ion_alloc+0x204/0x810 [ 1347.785154] ? ion_dma_buf_release+0x40/0x40 [ 1347.789754] ? __might_fault+0x177/0x1b0 [ 1347.793855] ion_ioctl+0xea/0x1f0 [ 1347.797314] ? ion_query_heaps+0x360/0x360 [ 1347.801552] ? ion_query_heaps+0x360/0x360 [ 1347.805809] do_vfs_ioctl+0x75a/0xff0 [ 1347.809616] ? ioctl_preallocate+0x1a0/0x1a0 [ 1347.814020] ? lock_downgrade+0x740/0x740 [ 1347.818170] ? __fget+0x225/0x360 [ 1347.821631] ? do_vfs_ioctl+0xff0/0xff0 [ 1347.825616] ? security_file_ioctl+0x83/0xb0 [ 1347.830032] SyS_ioctl+0x7f/0xb0 [ 1347.833397] ? do_vfs_ioctl+0xff0/0xff0 [ 1347.837370] do_syscall_64+0x1d5/0x640 [ 1347.841267] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1347.846460] RIP: 0033:0x4665d9 [ 1347.849645] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1347.857373] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1347.864648] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1347.871964] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1347.879269] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1347.890017] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1347.922641] CPU: 1 PID: 8867 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1347.930498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1347.938429] Mem-Info: [ 1347.940199] Call Trace: [ 1347.940221] dump_stack+0x1b2/0x281 [ 1347.940236] warn_alloc.cold+0x96/0x1cc [ 1347.942695] active_anon:13303 inactive_anon:14855 isolated_anon:0 [ 1347.942695] active_file:233 inactive_file:5146 isolated_file:0 [ 1347.942695] unevictable:0 dirty:55 writeback:0 unstable:0 [ 1347.942695] slab_reclaimable:14200 slab_unreclaimable:116556 [ 1347.942695] mapped:30311 shmem:15121 pagetables:644 bounce:0 [ 1347.942695] free:206299 free_pcp:152 free_cma:0 [ 1347.945216] ? zone_watermark_ok_safe+0x220/0x220 [ 1347.945239] __alloc_pages_nodemask+0x2127/0x2720 [ 1347.945248] ? __schedule+0x893/0x1de0 [ 1347.945265] ? lock_acquire+0x170/0x3f0 [ 1347.949383] Node 0 active_anon:52596kB inactive_anon:43316kB active_file:776kB inactive_file:16028kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:93100kB dirty:188kB writeback:0kB shmem:44316kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1347.952851] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1347.952885] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1347.987647] Node 1 active_anon:616kB inactive_anon:16104kB active_file:156kB inactive_file:4556kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28144kB dirty:32kB writeback:0kB shmem:16168kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1347.992095] ? __mutex_unlock_slowpath+0x75/0x770 [ 1347.992119] alloc_pages_current+0x155/0x260 [ 1347.992133] ion_page_pool_alloc+0x118/0x1b0 [ 1347.997417] Node 0 [ 1348.001061] ion_system_heap_allocate+0x133/0x8c0 [ 1348.001076] ? _raw_spin_unlock+0x29/0x40 [ 1348.001088] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1348.005442] DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1348.033101] ? ion_system_contig_heap_create+0x130/0x130 [ 1348.033113] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1348.033124] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1348.033134] ion_alloc+0x27a/0x810 [ 1348.033155] ? ion_dma_buf_release+0x40/0x40 [ 1348.033167] ? __might_fault+0x177/0x1b0 [ 1348.033178] ion_ioctl+0xea/0x1f0 [ 1348.038440] lowmem_reserve[]: [ 1348.043503] ? ion_query_heaps+0x360/0x360 [ 1348.043516] ? ion_query_heaps+0x360/0x360 [ 1348.043529] do_vfs_ioctl+0x75a/0xff0 [ 1348.071499] 0 [ 1348.075878] ? ioctl_preallocate+0x1a0/0x1a0 [ 1348.075888] ? lock_downgrade+0x740/0x740 [ 1348.075902] ? __fget+0x225/0x360 [ 1348.075910] ? do_vfs_ioctl+0xff0/0xff0 [ 1348.075924] ? security_file_ioctl+0x83/0xb0 [ 1348.080720] 2717 [ 1348.084745] SyS_ioctl+0x7f/0xb0 [ 1348.084754] ? do_vfs_ioctl+0xff0/0xff0 [ 1348.084766] do_syscall_64+0x1d5/0x640 [ 1348.087288] 2718 [ 1348.091865] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1348.091876] RIP: 0033:0x4665d9 [ 1348.096303] 2718 [ 1348.100945] RSP: 002b:00007f642a02e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1348.100957] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1348.100962] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1348.100967] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1348.100972] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1348.100977] R13: 00007ffd773f870f R14: 00007f642a02e300 R15: 0000000000022000 [ 1348.194906] Bluetooth: hci5 command 0x0419 tx timeout [ 1348.206367] 2718 [ 1348.373267] Node 0 DMA32 free:341896kB min:36200kB low:45248kB high:54296kB active_anon:52456kB inactive_anon:43316kB active_file:896kB inactive_file:18828kB unevictable:0kB writepending:248kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2476kB bounce:0kB free_pcp:1328kB local_pcp:600kB free_cma:0kB [ 1348.438044] lowmem_reserve[]: 0 0 0 0 0 [ 1348.448042] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1348.503146] lowmem_reserve[]: 0 0 0 0 0 [ 1348.511714] Node 1 Normal free:968908kB min:53696kB low:67120kB high:80544kB active_anon:616kB inactive_anon:16104kB active_file:156kB inactive_file:4556kB unevictable:0kB writepending:32kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:264kB bounce:0kB free_pcp:672kB local_pcp:0kB free_cma:0kB [ 1348.562729] lowmem_reserve[]: 0 0 0 0 0 [ 1348.567047] Node 0 DMA: 17*4kB (UE) 7*8kB (U) 8*16kB (UE) 8*32kB (UE) 6*64kB (UE) 5*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11516kB [ 1348.572573] IPVS: ftp: loaded support on port[0] = 21 [ 1348.583940] Node 0 DMA32: 3557*4kB (UME) 4115*8kB (UME) 2357*16kB (UME) 3027*32kB (UME) 1422*64kB (UM) 233*128kB (U) 73*256kB (UM) 50*512kB (U) 34*1024kB (U) 0*2048kB 0*4096kB = 381660kB [ 1348.623277] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1348.646909] Node 1 Normal: 9966*4kB (UM) 4056*8kB (UME) 2406*16kB (UME) 1572*32kB (UME) 4153*64kB (UM) 944*128kB (U) 280*256kB (UM) 84*512kB (U) 237*1024kB (U) 24*2048kB (U) 7*4096kB (U) = 982936kB [ 1348.700790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1348.727975] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1348.749211] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1348.773410] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1348.790113] 21560 total pagecache pages [ 1348.794185] 0 pages in swap cache [ 1348.812564] Swap cache stats: add 0, delete 0, find 0/0 [ 1348.828958] Free swap = 0kB [ 1348.850516] Total swap = 0kB [ 1348.863155] 2097051 pages RAM [ 1348.889175] 0 pages HighMem/MovableOnly [ 1348.940704] 363849 pages reserved [ 1348.964494] 0 pages cma reserved 00:39:48 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 1349.071951] chnl_net:caif_netlink_parms(): no params data found [ 1349.496782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.511274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.527759] device bridge_slave_0 entered promiscuous mode [ 1349.551072] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.564992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.587010] device bridge_slave_1 entered promiscuous mode [ 1349.674609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1349.684947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1349.702300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1349.721279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1349.738266] device bridge_slave_1 left promiscuous mode [ 1349.750662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.766676] device bridge_slave_0 left promiscuous mode [ 1349.777761] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.797623] device veth1_macvtap left promiscuous mode [ 1349.805223] device veth0_macvtap left promiscuous mode [ 1349.821719] device veth1_vlan left promiscuous mode [ 1349.835245] device veth0_vlan left promiscuous mode [ 1350.082207] device hsr_slave_1 left promiscuous mode [ 1350.104592] device hsr_slave_0 left promiscuous mode [ 1350.161361] team0 (unregistering): Port device team_slave_1 removed [ 1350.210503] team0 (unregistering): Port device team_slave_0 removed [ 1350.268203] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1350.304324] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1350.383117] bond0 (unregistering): Released all slaves [ 1350.417699] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1350.448748] syz-executor.1 invoked oom-killer: gfp_mask=0x14082c2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=0 [ 1350.492335] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1350.503063] CPU: 0 PID: 9047 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1350.510914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.520465] Call Trace: [ 1350.523066] dump_stack+0x1b2/0x281 [ 1350.526697] dump_header+0x178/0x82f [ 1350.530434] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1350.535562] ? ___ratelimit+0x2cd/0x530 [ 1350.539540] oom_kill_process.cold+0x10/0xa40 [ 1350.544187] out_of_memory+0xe3e/0x1190 [ 1350.548172] ? oom_killer_disable+0x1c0/0x1c0 [ 1350.552665] ? mutex_trylock+0x152/0x1a0 [ 1350.556727] __alloc_pages_nodemask+0x23e1/0x2720 [ 1350.561574] ? ____cache_alloc_node+0xf4/0x1d0 [ 1350.566184] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1350.571022] ? do_raw_spin_unlock+0x164/0x220 [ 1350.575515] ? _raw_spin_unlock+0x29/0x40 [ 1350.579759] alloc_pages_current+0x155/0x260 [ 1350.584169] __vmalloc_area_node+0x40a/0x680 [ 1350.588588] ? __vmalloc_node_range+0x150/0x150 [ 1350.593248] ? __get_vm_area_node+0x27d/0x340 [ 1350.597755] __vmalloc_node_range+0xbe/0x150 [ 1350.602187] vmalloc_user+0x47/0xa0 [ 1350.605829] ? kcov_mmap+0x2b/0x120 [ 1350.609457] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1350.614493] kcov_mmap+0x2b/0x120 [ 1350.617961] ? kmem_cache_alloc+0x35f/0x3c0 [ 1350.622301] mmap_region+0xa1a/0x1220 [ 1350.626113] do_mmap+0x5b3/0xcb0 [ 1350.629510] vm_mmap_pgoff+0x14e/0x1a0 [ 1350.633396] ? vma_is_stack_for_current+0xb0/0xb0 [ 1350.638236] ? __fget+0x225/0x360 [ 1350.641718] SyS_mmap_pgoff+0x249/0x510 [ 1350.645695] ? find_mergeable_anon_vma+0x230/0x230 [ 1350.650644] ? do_syscall_64+0x4c/0x640 [ 1350.654635] ? align_vdso_addr+0x250/0x250 [ 1350.658905] do_syscall_64+0x1d5/0x640 [ 1350.662794] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1350.667999] RIP: 0033:0x466622 [ 1350.671180] RSP: 002b:00007ffd3fdb1528 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1350.678887] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000466622 [ 1350.686172] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000000000000 [ 1350.693457] RBP: 0000000000000000 R08: 00000000000000f0 R09: 0000000000000000 [ 1350.700811] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000056c5d0 [ 1350.709127] R13: 000000000056ca68 R14: 0000000000000000 R15: 00000000000000f1 [ 1350.720201] Mem-Info: [ 1350.722662] active_anon:13381 inactive_anon:14855 isolated_anon:0 [ 1350.722662] active_file:399 inactive_file:403 isolated_file:32 [ 1350.722662] unevictable:0 dirty:34 writeback:0 unstable:0 [ 1350.722662] slab_reclaimable:14172 slab_unreclaimable:115366 [ 1350.722662] mapped:40193 shmem:15121 pagetables:692 bounce:0 [ 1350.722662] free:13900 free_pcp:30 free_cma:0 [ 1350.761084] Node 0 active_anon:52880kB inactive_anon:43308kB active_file:104kB inactive_file:120kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116744kB dirty:0kB writeback:0kB shmem:44304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1350.816332] Node 1 active_anon:644kB inactive_anon:16112kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40928kB dirty:44kB writeback:0kB shmem:16180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1350.884921] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1350.915424] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1350.920476] Node 0 DMA32 free:18052kB min:36200kB low:45248kB high:54296kB active_anon:52780kB inactive_anon:43308kB active_file:52kB inactive_file:404kB unevictable:0kB writepending:292kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2504kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1350.956217] lowmem_reserve[]: 0 0 0 0 0 [ 1350.960502] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1350.995673] lowmem_reserve[]: 0 0 0 0 0 [ 1350.999692] Node 1 Normal free:26560kB min:53696kB low:67120kB high:80544kB active_anon:644kB inactive_anon:16112kB active_file:520kB inactive_file:584kB unevictable:0kB writepending:44kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:264kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1351.003823] syz-executor.5: [ 1351.042527] lowmem_reserve[]: 0 0 0 0 0 [ 1351.053925] Node 0 DMA: 1*4kB (E) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 4*64kB (UE) 5*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10956kB [ 1351.081876] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1351.081969] Node 0 [ 1351.106920] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1351.111943] DMA32: [ 1351.114388] CPU: 1 PID: 8867 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1351.114391] 1789*4kB (UME) [ 1351.116612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1351.116617] Call Trace: [ 1351.116643] dump_stack+0x1b2/0x281 [ 1351.116661] warn_alloc.cold+0x96/0x1cc [ 1351.124590] 846*8kB [ 1351.127376] ? zone_watermark_ok_safe+0x220/0x220 [ 1351.127387] ? usleep_range+0x130/0x130 [ 1351.127396] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1351.127410] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1351.136786] (UME) [ 1351.139338] ? run_timer_softirq+0x5a0/0x5a0 [ 1351.143741] 214*16kB [ 1351.147717] __alloc_pages_nodemask+0x2127/0x2720 [ 1351.147735] ? lock_acquire+0x170/0x3f0 [ 1351.147750] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1351.150052] (UME) [ 1351.154884] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1351.154900] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1351.154920] alloc_pages_current+0x155/0x260 [ 1351.158878] 23*32kB [ 1351.163975] ion_page_pool_alloc+0x118/0x1b0 [ 1351.169007] (UME) [ 1351.171106] ion_system_heap_allocate+0x133/0x8c0 [ 1351.175509] 2*64kB [ 1351.177907] ? _raw_spin_unlock+0x29/0x40 [ 1351.182722] (UM) [ 1351.186691] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1351.186700] ? ion_system_contig_heap_create+0x130/0x130 [ 1351.186710] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1351.186722] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1351.186733] ion_alloc+0x27a/0x810 [ 1351.191665] 0*128kB [ 1351.193809] ? ion_dma_buf_release+0x40/0x40 [ 1351.198318] 0*256kB [ 1351.203722] ? __might_fault+0x177/0x1b0 [ 1351.208177] 0*512kB [ 1351.210475] ion_ioctl+0xea/0x1f0 [ 1351.214988] 0*1024kB [ 1351.217094] ? ion_query_heaps+0x360/0x360 [ 1351.221909] 0*2048kB [ 1351.224142] ? ion_query_heaps+0x360/0x360 [ 1351.228309] 0*4096kB [ 1351.230322] do_vfs_ioctl+0x75a/0xff0 [ 1351.235268] = 18212kB [ 1351.240680] ? ioctl_preallocate+0x1a0/0x1a0 [ 1351.245706] Node 0 [ 1351.250617] ? lock_downgrade+0x740/0x740 [ 1351.254230] Normal: [ 1351.256551] ? __fget+0x225/0x360 [ 1351.256561] ? do_vfs_ioctl+0xff0/0xff0 [ 1351.256572] ? security_file_ioctl+0x83/0xb0 [ 1351.256581] SyS_ioctl+0x7f/0xb0 [ 1351.256590] ? do_vfs_ioctl+0xff0/0xff0 [ 1351.260985] 0*4kB [ 1351.263742] do_syscall_64+0x1d5/0x640 [ 1351.268772] 0*8kB [ 1351.271170] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1351.274811] 0*16kB [ 1351.277235] RIP: 0033:0x4665d9 [ 1351.282236] 0*32kB [ 1351.284664] RSP: 002b:00007f642a02e188 EFLAGS: 00000246 [ 1351.289019] 0*64kB [ 1351.291366] ORIG_RAX: 0000000000000010 [ 1351.295184] 0*128kB [ 1351.297550] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1351.301956] 0*256kB [ 1351.304176] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1351.304183] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1351.308392] 0*512kB [ 1351.310659] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1351.314275] 0*1024kB [ 1351.318232] R13: 00007ffd773f870f R14: 00007f642a02e300 R15: 0000000000022000 [ 1351.433069] 0*2048kB 0*4096kB = 0kB [ 1351.451677] Node 1 Normal: 27*4kB (M) 29*8kB (UME) 20*16kB (ME) 18*32kB (UME) 8*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (M) 4*4096kB (U) = 26964kB [ 1351.482481] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1351.508541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1351.531979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1351.557841] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1351.581429] 15148 total pagecache pages [ 1351.591776] 0 pages in swap cache [ 1351.603770] Swap cache stats: add 0, delete 0, find 0/0 [ 1351.624006] Free swap = 0kB [ 1351.627626] warn_alloc_show_mem: 1 callbacks suppressed [ 1351.627630] Mem-Info: [ 1351.631229] Total swap = 0kB [ 1351.633016] active_anon:13421 inactive_anon:14855 isolated_anon:0 [ 1351.633016] active_file:15 inactive_file:12 isolated_file:0 [ 1351.633016] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1351.633016] slab_reclaimable:14172 slab_unreclaimable:115388 [ 1351.633016] mapped:39372 shmem:15121 pagetables:705 bounce:0 [ 1351.633016] free:14019 free_pcp:45 free_cma:0 [ 1351.645550] 2097051 pages RAM [ 1351.697204] 0 pages HighMem/MovableOnly [ 1351.701231] 363849 pages reserved [ 1351.704686] 0 pages cma reserved [ 1351.715521] Node 0 active_anon:52940kB inactive_anon:43308kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116708kB dirty:0kB writeback:0kB shmem:44304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1351.726807] Out of memory (oom_kill_allocating_task): Kill process 9047 (syz-executor.1) score 0 or sacrifice child [ 1351.773902] Killed process 9047 (syz-executor.1) total-vm:66492kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 1351.786928] Node 1 active_anon:744kB inactive_anon:16112kB active_file:32kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40780kB dirty:0kB writeback:0kB shmem:16180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1351.826987] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1351.844864] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1351.871018] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1351.907663] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1351.908850] CPU: 0 PID: 8864 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1351.912735] Node 0 [ 1351.920638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1351.920643] Call Trace: [ 1351.920664] dump_stack+0x1b2/0x281 [ 1351.920676] dump_header+0x178/0x82f [ 1351.920686] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1351.920694] ? ___ratelimit+0x2cd/0x530 [ 1351.920703] oom_kill_process.cold+0x10/0xa40 [ 1351.920719] out_of_memory+0xe3e/0x1190 [ 1351.920731] ? oom_killer_disable+0x1c0/0x1c0 [ 1351.920742] ? mutex_trylock+0x152/0x1a0 [ 1351.934922] DMA32 free:18032kB min:36200kB low:45248kB high:54296kB active_anon:52940kB inactive_anon:43308kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2504kB bounce:0kB free_pcp:180kB local_pcp:60kB free_cma:0kB [ 1351.938513] __alloc_pages_nodemask+0x23e1/0x2720 [ 1351.942224] lowmem_reserve[]: [ 1351.947513] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1351.947537] alloc_pages_current+0x155/0x260 [ 1351.947548] filemap_fault+0x11a1/0x1ad0 [ 1351.947566] ext4_filemap_fault+0x84/0xb0 [ 1351.947575] __do_fault+0xfa/0x380 [ 1351.947585] __handle_mm_fault+0x2497/0x4620 [ 1351.947595] ? vm_insert_page+0x7c0/0x7c0 [ 1351.947612] ? mark_held_locks+0xa6/0xf0 [ 1351.947622] handle_mm_fault+0x455/0x9c0 [ 1351.947634] __do_page_fault+0x549/0xad0 [ 1351.947650] ? spurious_fault+0x640/0x640 [ 1351.989806] 0 [ 1351.996871] ? do_page_fault+0x60/0x500 [ 1351.996880] ? page_fault+0x2f/0x50 [ 1351.996887] page_fault+0x45/0x50 [ 1351.996895] RIP: 14a4370:0x3 [ 1351.996899] RSP: 14a4320:0000000000000000 EFLAGS: 00000000 [ 1352.031819] Mem-Info: [ 1352.034900] Bluetooth: hci0 command 0x0409 tx timeout [ 1352.049922] active_anon:13421 inactive_anon:14855 isolated_anon:0 [ 1352.049922] active_file:16 inactive_file:11 isolated_file:0 [ 1352.049922] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1352.049922] slab_reclaimable:14172 slab_unreclaimable:115388 [ 1352.049922] mapped:39372 shmem:15121 pagetables:705 bounce:0 [ 1352.049922] free:13957 free_pcp:82 free_cma:0 [ 1352.095449] 0 [ 1352.113557] syz-executor.1: vmalloc: allocation failure, allocated 1126400 of 2101248 bytes [ 1352.115430] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1352.140806] , mode:0x14080c0(GFP_KERNEL|__GFP_ZERO), nodemask= [ 1352.149503] 0 [ 1352.158239] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1352.164874] (null) [ 1352.167342] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1352.171777] CPU: 0 PID: 8894 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1352.180507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1352.184875] 0 [ 1352.189872] Call Trace: [ 1352.189882] 0 [ 1352.191686] dump_stack+0x1b2/0x281 [ 1352.196143] warn_alloc.cold+0x96/0x1cc [ 1352.196155] ? zone_watermark_ok_safe+0x220/0x220 [ 1352.196165] ? usleep_range+0x130/0x130 [ 1352.196174] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1352.196185] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1352.196194] ? run_timer_softirq+0x5a0/0x5a0 [ 1352.196209] __alloc_pages_nodemask+0x2127/0x2720 [ 1352.196225] ? lock_acquire+0x170/0x3f0 [ 1352.196240] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1352.229525] Node 0 [ 1352.231920] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1352.247459] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1352.252925] alloc_pages_current+0x155/0x260 [ 1352.256911] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1352.257332] ion_page_pool_alloc+0x118/0x1b0 [ 1352.286851] ion_system_heap_allocate+0x133/0x8c0 [ 1352.291710] ? ion_alloc+0x187/0x810 [ 1352.295442] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1352.300902] ? ion_system_contig_heap_create+0x130/0x130 [ 1352.306358] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1352.311381] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1352.316227] ion_alloc+0x204/0x810 [ 1352.319774] ? ion_dma_buf_release+0x40/0x40 [ 1352.324177] ? __might_fault+0x177/0x1b0 [ 1352.328261] ion_ioctl+0xea/0x1f0 [ 1352.331712] ? ion_query_heaps+0x360/0x360 [ 1352.335942] ? ion_query_heaps+0x360/0x360 [ 1352.340189] do_vfs_ioctl+0x75a/0xff0 [ 1352.343986] ? ioctl_preallocate+0x1a0/0x1a0 [ 1352.348390] ? lock_downgrade+0x740/0x740 [ 1352.352554] ? __fget+0x225/0x360 [ 1352.356049] ? do_vfs_ioctl+0xff0/0xff0 [ 1352.357500] lowmem_reserve[]: [ 1352.360023] ? security_file_ioctl+0x83/0xb0 [ 1352.360025] 0 0 [ 1352.363141] SyS_ioctl+0x7f/0xb0 [ 1352.372866] ? do_vfs_ioctl+0xff0/0xff0 [ 1352.376837] do_syscall_64+0x1d5/0x640 [ 1352.380743] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1352.385928] RIP: 0033:0x4665d9 [ 1352.389127] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1352.396835] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1352.396899] Node 0 active_anon:52940kB inactive_anon:43308kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116708kB dirty:0kB writeback:0kB shmem:44304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1352.404282] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1352.404292] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1352.444874] 0 [ 1352.448609] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1352.448616] 0 [ 1352.450402] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1352.465271] CPU: 0 PID: 9047 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1352.475018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1352.484375] Call Trace: [ 1352.486978] dump_stack+0x1b2/0x281 [ 1352.490616] warn_alloc.cold+0x96/0x1cc [ 1352.494503] 0 [ 1352.494595] ? zone_watermark_ok_safe+0x220/0x220 [ 1352.494615] __vmalloc_area_node+0x48a/0x680 [ 1352.496470] Node 1 [ 1352.501245] ? __vmalloc_node_range+0x150/0x150 [ 1352.512025] Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:744kB inactive_anon:16112kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:316kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1352.512722] ? __get_vm_area_node+0x27d/0x340 [ 1352.545622] __vmalloc_node_range+0xbe/0x150 [ 1352.547759] Node 1 active_anon:744kB inactive_anon:16112kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40780kB dirty:0kB writeback:0kB shmem:16180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1352.550392] vmalloc_user+0x47/0xa0 [ 1352.581202] ? kcov_mmap+0x2b/0x120 [ 1352.583817] lowmem_reserve[]: [ 1352.584840] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1352.584847] kcov_mmap+0x2b/0x120 [ 1352.584857] ? kmem_cache_alloc+0x35f/0x3c0 [ 1352.584866] mmap_region+0xa1a/0x1220 [ 1352.584880] do_mmap+0x5b3/0xcb0 [ 1352.584897] vm_mmap_pgoff+0x14e/0x1a0 [ 1352.588007] 0 [ 1352.593023] ? vma_is_stack_for_current+0xb0/0xb0 [ 1352.602978] Node 0 [ 1352.605560] ? __fget+0x225/0x360 [ 1352.605573] SyS_mmap_pgoff+0x249/0x510 [ 1352.605585] ? find_mergeable_anon_vma+0x230/0x230 [ 1352.605594] ? do_syscall_64+0x4c/0x640 [ 1352.605605] ? align_vdso_addr+0x250/0x250 [ 1352.608980] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1352.612857] do_syscall_64+0x1d5/0x640 [ 1352.614658] lowmem_reserve[]: [ 1352.619500] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1352.619508] RIP: 0033:0x466622 [ 1352.619512] RSP: 002b:00007ffd3fdb1528 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1352.619520] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000466622 [ 1352.619523] RDX: 0000000000000003 RSI: 0000000000200000 RDI: 0000000000000000 [ 1352.619527] RBP: 0000000000000000 R08: 00000000000000f0 R09: 0000000000000000 [ 1352.619530] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000056c5d0 [ 1352.619534] R13: 000000000056ca68 R14: 0000000000000000 R15: 00000000000000f1 [ 1352.702876] 0 [ 1352.708124] 0 [ 1352.754907] 0 0 0 [ 1352.758892] Node 0 DMA: 1*4kB (E) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 4*64kB (UE) 5*128kB (UE) 3*256kB (UE) 2*512kB (UE) 3*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11980kB [ 1352.785042] 2717 2718 2718 2718 [ 1352.788725] Node 0 DMA32 free:49056kB min:36200kB low:45248kB high:54296kB active_anon:52940kB inactive_anon:43308kB active_file:28kB inactive_file:4828kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2504kB bounce:0kB free_pcp:428kB local_pcp:84kB free_cma:0kB [ 1352.854878] Node 0 DMA32: 1504*4kB (E) 715*8kB (ME) 190*16kB (ME) 19*32kB (UME) 1*64kB (U) 0*128kB 1*256kB (M) 1*512kB (M) 18*1024kB (UM) 6*2048kB (U) 0*4096kB = 46936kB [ 1352.864925] warn_alloc_show_mem: 1 callbacks suppressed [ 1352.864930] Mem-Info: [ 1352.872380] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1352.905269] active_anon:13421 inactive_anon:14855 isolated_anon:0 [ 1352.905269] active_file:14 inactive_file:1213 isolated_file:0 [ 1352.905269] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1352.905269] slab_reclaimable:14163 slab_unreclaimable:115457 [ 1352.905269] mapped:40297 shmem:15121 pagetables:705 bounce:0 [ 1352.905269] free:95203 free_pcp:227 free_cma:0 [ 1352.914910] lowmem_reserve[]: [ 1352.974877] Node 1 Normal: 28*4kB (UM) 29*8kB (UME) 20*16kB (ME) 16*32kB (ME) 129*64kB (UM) 9*128kB (UM) 8*256kB (UM) 5*512kB (UM) 243*1024kB (UM) 32*2048kB (UM) 8*4096kB (U) = 362328kB [ 1353.024876] 0 0 0 0 0 [ 1353.027425] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1353.064906] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1353.067448] Node 0 active_anon:52940kB inactive_anon:43308kB active_file:28kB inactive_file:4828kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120408kB dirty:0kB writeback:0kB shmem:44304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1353.074125] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1353.164877] lowmem_reserve[]: 0 0 0 0 0 [ 1353.168913] Node 1 Normal free:270600kB min:53696kB low:67120kB high:80544kB active_anon:744kB inactive_anon:16112kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:96kB pagetables:316kB bounce:0kB free_pcp:244kB local_pcp:0kB free_cma:0kB [ 1353.227408] Node 1 active_anon:744kB inactive_anon:16112kB active_file:24kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40780kB dirty:0kB writeback:0kB shmem:16180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1353.235504] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1353.284874] lowmem_reserve[]: 0 0 0 0 0 [ 1353.289034] Node 0 DMA: 1*4kB (E) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 7*64kB (UE) 5*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11148kB [ 1353.331937] IPVS: ftp: loaded support on port[0] = 21 [ 1353.334911] Node 0 DMA32: 1517*4kB (UE) 743*8kB (ME) 189*16kB (UME) 20*32kB (UME) 2618*64kB (UME) 438*128kB (U) 66*256kB (UM) 6*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 259260kB [ 1353.337472] Node 0 [ 1353.354939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1353.388806] DMA free:11148kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1353.394971] 16596 total pagecache pages [ 1353.424913] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1353.461741] Node 1 Normal: 28*4kB (UM) 121*8kB (UME) 41*16kB (UME) 45*32kB (UME) 1373*64kB (UM) 46*128kB (UM) 14*256kB (UM) 18*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 109736kB [ 1353.464865] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1353.504882] 0 pages in swap cache [ 1353.508477] Swap cache stats: add 0, delete 0, find 0/0 [ 1353.513836] Free swap = 0kB [ 1353.517504] Node 0 DMA32 free:161504kB min:36200kB low:45248kB high:54296kB active_anon:52940kB inactive_anon:43308kB active_file:532kB inactive_file:5320kB unevictable:0kB writepending:168kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2504kB bounce:0kB free_pcp:244kB local_pcp:92kB free_cma:0kB [ 1353.525471] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1353.567293] Total swap = 0kB [ 1353.570370] 2097051 pages RAM [ 1353.573573] 0 pages HighMem/MovableOnly [ 1353.587869] lowmem_reserve[]: 0 0 0 0 0 [ 1353.592052] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1353.604949] 363849 pages reserved [ 1353.635099] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1353.649973] 0 pages cma reserved [ 1353.665192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1353.679474] lowmem_reserve[]: 0 0 0 0 0 [ 1353.683498] Node 1 Normal free:99760kB min:53696kB low:67120kB high:80544kB active_anon:744kB inactive_anon:16112kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:316kB bounce:0kB free_pcp:180kB local_pcp:60kB free_cma:0kB [ 1353.714900] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1353.745201] 16383 total pagecache pages [ 1353.749217] 0 pages in swap cache [ 1353.752801] Swap cache stats: add 0, delete 0, find 0/0 [ 1353.801595] lowmem_reserve[]: 0 0 0 0 0 [ 1353.805487] Free swap = 0kB [ 1353.809413] Total swap = 0kB [ 1353.812432] 2097051 pages RAM [ 1353.814178] Node 0 DMA: 1*4kB (E) 0*8kB 2*16kB (UE) 2*32kB (UE) 6*64kB (UE) 5*128kB (UE) 3*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11108kB [ 1353.831538] 0 pages HighMem/MovableOnly [ 1353.858618] chnl_net:caif_netlink_parms(): no params data found [ 1353.887662] Node 0 DMA32: 1536*4kB (UME) 774*8kB (UME) 234*16kB (UME) 23*32kB (MEH) 2*64kB (ME) 2*128kB (MH) 76*256kB (U) 6*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 39728kB [ 1353.892329] 363849 pages reserved [ 1353.925021] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1353.944949] 0 pages cma reserved [ 1353.948406] Out of memory (oom_kill_allocating_task): Kill process 8864 (syz-executor.2) score 0 or sacrifice child [ 1353.959339] Node 1 Normal: 9*4kB (UM) 30*8kB (UME) 16*16kB (UME) 12*32kB (UME) 8*64kB (UM) 2*128kB (M) 2*256kB (M) 2*512kB (M) 76*1024kB (U) 28*2048kB (U) 0*4096kB = 138388kB [ 1353.993956] Killed process 8864 (syz-executor.2) total-vm:93120kB, anon-rss:72kB, file-rss:33084kB, shmem-rss:0kB [ 1354.057616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1354.099867] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1354.109156] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1354.118785] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1354.123555] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1354.131304] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1354.154904] 16456 total pagecache pages [ 1354.158948] 0 pages in swap cache [ 1354.159302] CPU: 1 PID: 8894 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1354.163187] Swap cache stats: add 0, delete 0, find 0/0 [ 1354.170446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1354.170450] Call Trace: [ 1354.170469] dump_stack+0x1b2/0x281 [ 1354.170483] warn_alloc.cold+0x96/0x1cc [ 1354.170495] ? zone_watermark_ok_safe+0x220/0x220 [ 1354.170517] __alloc_pages_nodemask+0x2127/0x2720 [ 1354.170526] ? ___preempt_schedule+0x16/0x18 [ 1354.170541] ? lock_acquire+0x170/0x3f0 [ 1354.170557] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1354.170575] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1354.170588] ? __mutex_unlock_slowpath+0x75/0x770 [ 1354.170603] alloc_pages_current+0x155/0x260 [ 1354.170616] ion_page_pool_alloc+0x118/0x1b0 [ 1354.170626] ion_system_heap_allocate+0x133/0x8c0 [ 1354.170638] ? _raw_spin_unlock+0x29/0x40 [ 1354.170647] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1354.170656] ? ion_system_contig_heap_create+0x130/0x130 [ 1354.170667] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1354.170678] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1354.170691] ion_alloc+0x27a/0x810 [ 1354.181937] Free swap = 0kB [ 1354.185516] ? ion_dma_buf_release+0x40/0x40 [ 1354.185530] ? __might_fault+0x177/0x1b0 [ 1354.185540] ion_ioctl+0xea/0x1f0 [ 1354.185548] ? ion_query_heaps+0x360/0x360 [ 1354.185559] ? ion_query_heaps+0x360/0x360 [ 1354.185569] do_vfs_ioctl+0x75a/0xff0 [ 1354.185580] ? ioctl_preallocate+0x1a0/0x1a0 [ 1354.188350] Total swap = 0kB [ 1354.196676] ? lock_downgrade+0x740/0x740 [ 1354.196691] ? __fget+0x225/0x360 [ 1354.196700] ? do_vfs_ioctl+0xff0/0xff0 [ 1354.196711] ? security_file_ioctl+0x83/0xb0 [ 1354.196720] SyS_ioctl+0x7f/0xb0 [ 1354.196728] ? do_vfs_ioctl+0xff0/0xff0 [ 1354.196738] do_syscall_64+0x1d5/0x640 [ 1354.196752] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1354.200923] 2097051 pages RAM [ 1354.205552] RIP: 0033:0x4665d9 [ 1354.205557] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1354.205567] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1354.205571] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1354.205579] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1354.205584] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1354.205589] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1354.314856] Mem-Info: [ 1354.320336] Bluetooth: hci0 command 0x041b tx timeout [ 1354.323179] active_anon:13450 inactive_anon:14855 isolated_anon:0 [ 1354.323179] active_file:746 inactive_file:603 isolated_file:0 [ 1354.323179] unevictable:0 dirty:34 writeback:0 unstable:0 [ 1354.323179] slab_reclaimable:14097 slab_unreclaimable:116479 [ 1354.323179] mapped:40471 shmem:15121 pagetables:713 bounce:0 [ 1354.323179] free:24633 free_pcp:442 free_cma:0 [ 1354.332587] 0 pages HighMem/MovableOnly [ 1354.378698] Node 0 active_anon:53000kB inactive_anon:43308kB active_file:3088kB inactive_file:2344kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121088kB dirty:136kB writeback:0kB shmem:44304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1354.385723] 363849 pages reserved [ 1354.431468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.441684] 0 pages cma reserved [ 1354.468423] Node 1 active_anon:800kB inactive_anon:16112kB active_file:96kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:40796kB dirty:0kB writeback:0kB shmem:16180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1354.534366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.536652] oom_reaper: reaped process 8894 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1354.542535] device bridge_slave_0 entered promiscuous mode [ 1354.565082] Node 0 DMA free:11004kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1354.586490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.608045] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1354.608095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.613170] Node 0 DMA32 free:70592kB min:36200kB low:45248kB high:54296kB active_anon:50816kB inactive_anon:43308kB active_file:2908kB inactive_file:2660kB unevictable:0kB writepending:132kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2524kB bounce:0kB free_pcp:1276kB local_pcp:648kB free_cma:0kB [ 1354.613193] lowmem_reserve[]: 0 0 0 0 0 [ 1354.613211] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1354.613229] lowmem_reserve[]: 0 0 0 0 0 [ 1354.613246] Node 1 Normal free:67144kB min:53696kB low:67120kB high:80544kB active_anon:700kB inactive_anon:16112kB active_file:304kB inactive_file:168kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:328kB bounce:0kB free_pcp:1448kB local_pcp:724kB free_cma:0kB [ 1354.613266] lowmem_reserve[]: 0 0 0 0 0 [ 1354.613285] Node 0 DMA: 3*4kB (UME) 2*8kB (UM) 2*16kB (ME) 2*32kB (ME) 2*64kB (ME) 2*128kB [ 1354.642072] device bridge_slave_1 entered promiscuous mode [ 1354.653766] (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11004kB [ 1354.812179] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1354.818408] Node 0 DMA32: 7526*4kB (UE) 2631*8kB (UEH) 1702*16kB (UEH) 140*32kB (UEH) 0*64kB 1*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 82992kB [ 1354.852307] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1354.897752] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1354.913518] Node 1 Normal: 4224*4kB (UM) 582*8kB (UME) 200*16kB (UME) 305*32kB (UME) 174*64kB (UM) 16*128kB (UM) 10*256kB (UM) 8*512kB (UM) 2*1024kB (U) 10*2048kB (U) 0*4096kB = 76880kB [ 1354.959089] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1354.976476] team0: Port device team_slave_0 added [ 1354.995933] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1354.998857] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1355.003418] team0: Port device team_slave_1 added [ 1355.044916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1355.053526] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1355.099244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1355.116227] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 00:39:54 executing program 2: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2) [ 1355.128951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1355.155451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1355.157287] 20661 total pagecache pages [ 1355.197785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1355.203827] 0 pages in swap cache [ 1355.208438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1355.212804] Swap cache stats: add 0, delete 0, find 0/0 00:39:54 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) 00:39:54 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 1355.239033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1355.260569] Free swap = 0kB [ 1355.263822] Total swap = 0kB [ 1355.265446] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1355.270226] 2097051 pages RAM [ 1355.277050] 0 pages HighMem/MovableOnly [ 1355.281814] 363849 pages reserved [ 1355.285233] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1355.288720] 0 pages cma reserved [ 1355.332189] device hsr_slave_0 entered promiscuous mode [ 1355.339809] device hsr_slave_1 entered promiscuous mode [ 1355.361003] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1355.369936] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1355.496641] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1355.505466] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1355.544865] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1355.551658] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1355.554920] CPU: 1 PID: 9223 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1355.562900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1355.565516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1355.565521] Call Trace: [ 1355.565541] dump_stack+0x1b2/0x281 [ 1355.565556] warn_alloc.cold+0x96/0x1cc [ 1355.565569] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1355.565580] ? zone_watermark_ok_safe+0x220/0x220 [ 1355.565601] __alloc_pages_nodemask+0x2127/0x2720 [ 1355.606083] ? lock_acquire+0x170/0x3f0 [ 1355.610086] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1355.614945] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1355.620408] ? __mutex_unlock_slowpath+0x75/0x770 [ 1355.625252] alloc_pages_current+0x155/0x260 [ 1355.629671] ion_page_pool_alloc+0x118/0x1b0 [ 1355.634083] ion_system_heap_allocate+0x133/0x8c0 [ 1355.638950] ? ion_alloc+0x187/0x810 [ 1355.642675] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1355.648312] ? ion_system_contig_heap_create+0x130/0x130 [ 1355.653800] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1355.659445] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1355.664467] ion_alloc+0x204/0x810 [ 1355.668026] ? ion_dma_buf_release+0x40/0x40 [ 1355.672435] ? __might_fault+0x177/0x1b0 [ 1355.676492] ion_ioctl+0xea/0x1f0 [ 1355.679977] ? ion_query_heaps+0x360/0x360 [ 1355.684917] ? ion_query_heaps+0x360/0x360 [ 1355.689241] do_vfs_ioctl+0x75a/0xff0 [ 1355.693073] ? ioctl_preallocate+0x1a0/0x1a0 [ 1355.697717] ? lock_downgrade+0x740/0x740 [ 1355.702696] ? __fget+0x225/0x360 [ 1355.706266] ? do_vfs_ioctl+0xff0/0xff0 [ 1355.710255] ? security_file_ioctl+0x83/0xb0 [ 1355.714669] SyS_ioctl+0x7f/0xb0 [ 1355.718119] ? do_vfs_ioctl+0xff0/0xff0 [ 1355.722096] do_syscall_64+0x1d5/0x640 [ 1355.726014] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1355.731203] RIP: 0033:0x4665d9 [ 1355.734476] RSP: 002b:00007f2e9a53f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1355.742370] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1355.749664] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1355.759729] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1355.768427] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1355.775786] R13: 00007ffe42256d6f R14: 00007f2e9a53f300 R15: 0000000000022000 [ 1355.803313] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1355.810564] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1355.832451] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1355.844034] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1355.852650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1355.866505] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1355.872598] 8021q: adding VLAN 0 to HW filter on device team0 [ 1355.890071] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1355.901076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1355.910824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1355.923555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1355.930025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1355.946869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1355.963174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1355.983631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1356.005948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1356.026753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.033371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1356.062930] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1356.073462] device bridge_slave_1 left promiscuous mode [ 1356.083628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.102735] device bridge_slave_0 left promiscuous mode [ 1356.108445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.116564] Mem-Info: [ 1356.124223] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1356.136467] active_anon:12736 inactive_anon:14850 isolated_anon:0 [ 1356.136467] active_file:1334 inactive_file:4881 isolated_file:0 [ 1356.136467] unevictable:0 dirty:83 writeback:0 unstable:0 [ 1356.136467] slab_reclaimable:14050 slab_unreclaimable:115469 [ 1356.136467] mapped:39507 shmem:15113 pagetables:637 bounce:0 [ 1356.136467] free:70533 free_pcp:215 free_cma:0 [ 1356.177314] Node 0 active_anon:50412kB inactive_anon:43288kB active_file:5316kB inactive_file:19480kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:149228kB dirty:328kB writeback:0kB shmem:44272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1356.231119] bond0 (unregistering): Released all slaves [ 1356.242615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1356.251549] Node 1 active_anon:532kB inactive_anon:16112kB active_file:20kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8800kB dirty:4kB writeback:0kB shmem:16180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1356.287984] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1356.303200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1356.325539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1356.332531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1356.346163] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1356.367918] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1356.384347] Bluetooth: hci0 command 0x040f tx timeout [ 1356.393733] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1356.401732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1356.409605] Node 0 DMA free:11112kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1356.441069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1356.451738] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1356.462215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1356.470908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1356.481174] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1356.490315] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1356.501153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1356.510606] Node 0 DMA32 free:48508kB min:36200kB low:45248kB high:54296kB active_anon:50412kB inactive_anon:43288kB active_file:5316kB inactive_file:19476kB unevictable:0kB writepending:324kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2444kB bounce:0kB free_pcp:52kB local_pcp:44kB free_cma:0kB [ 1356.544672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1356.567289] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1356.573340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1356.620895] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1356.629876] lowmem_reserve[]: 0 0 0 0 0 [ 1356.634090] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1356.679772] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1356.698120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1356.705824] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1356.725278] lowmem_reserve[]: 0 0 0 0 0 [ 1356.727136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1356.735821] Node 1 Normal free:338688kB min:53696kB low:67120kB high:80544kB active_anon:532kB inactive_anon:16112kB active_file:20kB inactive_file:44kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:400kB bounce:0kB free_pcp:780kB local_pcp:144kB free_cma:0kB [ 1356.797477] lowmem_reserve[]: 0 0 0 0 0 [ 1356.801534] Node 0 DMA: 2*4kB (ME) 8*8kB (UM) 2*16kB (ME) 2*32kB (ME) 3*64kB (UME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11112kB [ 1356.851060] Node 0 DMA32: 7*4kB (UMH) 735*8kB (EH) 187*16kB (UEH) 25*32kB (UEH) 300*64kB (UMH) 56*128kB (UH) 4*256kB (U) 15*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 44772kB [ 1356.895233] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1356.928693] Node 1 Normal: 26*4kB (U) 25*8kB (UE) 452*16kB (UE) 2730*32kB (UME) 2890*64kB (U) 383*128kB (U) 125*256kB (U) 47*512kB (U) 13*1024kB (UM) 0*2048kB 0*4096kB = 398256kB [ 1356.975071] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1357.015149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1357.036769] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1357.040339] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1357.067869] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1357.082253] 21194 total pagecache pages [ 1357.082766] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1357.097667] 0 pages in swap cache [ 1357.101148] Swap cache stats: add 0, delete 0, find 0/0 [ 1357.115125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1357.117805] Free swap = 0kB [ 1357.123456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 00:39:56 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan4\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan3\x00'}) [ 1357.138074] Total swap = 0kB [ 1357.145499] 2097051 pages RAM [ 1357.149895] 0 pages HighMem/MovableOnly [ 1357.162410] 363849 pages reserved [ 1357.175526] 0 pages cma reserved [ 1357.274055] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1357.293165] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1357.321923] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1357.354646] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1357.382095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1357.393152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1357.424688] device veth0_vlan entered promiscuous mode [ 1357.439700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1357.449521] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1357.483172] device veth1_vlan entered promiscuous mode [ 1357.506599] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1357.541903] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1357.579405] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1357.603896] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1357.618925] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1357.632176] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1357.661836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1357.693035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1357.726491] device veth0_macvtap entered promiscuous mode [ 1357.732835] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1357.748371] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1357.773623] device veth1_macvtap entered promiscuous mode [ 1357.788270] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1357.796387] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1357.810912] CPU: 1 PID: 9282 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1357.818744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1357.828451] Call Trace: [ 1357.831051] dump_stack+0x1b2/0x281 [ 1357.834688] warn_alloc.cold+0x96/0x1cc [ 1357.838687] ? zone_watermark_ok_safe+0x220/0x220 [ 1357.843546] __alloc_pages_nodemask+0x2127/0x2720 [ 1357.848399] ? lock_acquire+0x170/0x3f0 [ 1357.852410] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1357.857265] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1357.862750] ? __mutex_unlock_slowpath+0x75/0x770 [ 1357.867591] ? audit_kill_trees+0x230/0x230 [ 1357.871923] alloc_pages_current+0x155/0x260 [ 1357.876334] ion_page_pool_alloc+0x118/0x1b0 [ 1357.880744] ion_system_heap_allocate+0x133/0x8c0 [ 1357.885589] ? ion_alloc+0x187/0x810 [ 1357.889328] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1357.894781] ? ion_system_contig_heap_create+0x130/0x130 [ 1357.900259] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1357.905285] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1357.910133] ion_alloc+0x204/0x810 [ 1357.913686] ? ion_dma_buf_release+0x40/0x40 [ 1357.918100] ? __might_fault+0x177/0x1b0 [ 1357.922183] ion_ioctl+0xea/0x1f0 [ 1357.925638] ? ion_query_heaps+0x360/0x360 [ 1357.929886] ? ion_query_heaps+0x360/0x360 [ 1357.934123] do_vfs_ioctl+0x75a/0xff0 [ 1357.937927] ? ioctl_preallocate+0x1a0/0x1a0 [ 1357.942332] ? lock_downgrade+0x740/0x740 [ 1357.946509] ? __fget+0x225/0x360 [ 1357.949961] ? do_vfs_ioctl+0xff0/0xff0 [ 1357.953936] ? security_file_ioctl+0x83/0xb0 [ 1357.958343] SyS_ioctl+0x7f/0xb0 [ 1357.961704] ? do_vfs_ioctl+0xff0/0xff0 [ 1357.965692] do_syscall_64+0x1d5/0x640 [ 1357.969593] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1357.974785] RIP: 0033:0x4665d9 [ 1357.978083] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1357.985882] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1357.993175] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1358.000453] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1358.007901] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1358.015176] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1358.039380] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1358.054324] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1358.077842] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1358.113417] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1358.155547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1358.175529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.184668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1358.214897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.224782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1358.244946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.246182] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1358.246294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1358.248089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1358.248093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.248099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1358.248102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.248108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1358.248111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1358.249053] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1358.249072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1358.399678] Mem-Info: [ 1358.404197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1358.438238] Bluetooth: hci0 command 0x0419 tx timeout [ 1358.450207] active_anon:12801 inactive_anon:14850 isolated_anon:0 [ 1358.450207] active_file:1341 inactive_file:4956 isolated_file:0 [ 1358.450207] unevictable:0 dirty:110 writeback:0 unstable:0 [ 1358.450207] slab_reclaimable:14050 slab_unreclaimable:115773 [ 1358.450207] mapped:57078 shmem:15113 pagetables:754 bounce:0 [ 1358.450207] free:96435 free_pcp:433 free_cma:0 [ 1358.465419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1358.529079] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1358.535096] Node 0 active_anon:50604kB inactive_anon:43288kB active_file:5344kB inactive_file:19736kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182372kB dirty:392kB writeback:0kB shmem:44272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1358.548793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1358.615015] Node 1 active_anon:600kB inactive_anon:16112kB active_file:20kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:45740kB dirty:48kB writeback:0kB shmem:16180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1358.685585] Node 0 DMA free:11288kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1358.746824] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1358.764913] Node 0 DMA32 free:97212kB min:36200kB low:45248kB high:54296kB active_anon:50604kB inactive_anon:43288kB active_file:5344kB inactive_file:19732kB unevictable:0kB writepending:388kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2624kB bounce:0kB free_pcp:836kB local_pcp:180kB free_cma:0kB [ 1358.827739] lowmem_reserve[]: 0 0 0 0 0 [ 1358.831762] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1358.894879] lowmem_reserve[]: 0 0 0 0 0 [ 1358.898912] Node 1 Normal free:664424kB min:53696kB low:67120kB high:80544kB active_anon:600kB inactive_anon:16112kB active_file:20kB inactive_file:88kB unevictable:0kB writepending:48kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:392kB bounce:0kB free_pcp:796kB local_pcp:164kB free_cma:0kB [ 1358.954865] lowmem_reserve[]: 0 0 0 0 0 [ 1358.958963] Node 0 DMA: 52*4kB (UME) 33*8kB (UM) 9*16kB (UME) 2*32kB (ME) 2*64kB (ME) 2*128kB (ME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 1*4096kB (U) = 12328kB [ 1359.019513] Node 0 DMA32: 134*4kB (UMEH) 768*8kB (EH) 185*16kB (MEH) 23*32kB (UEH) 1078*64kB (UH) 410*128kB (UH) 25*256kB (UMH) 5*512kB (UM) 20*1024kB (UM) 5*2048kB (U) 0*4096kB = 171528kB [ 1359.054866] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1359.076155] Node 1 Normal: 8152*4kB (U) 3811*8kB (U) 3503*16kB (UM) 5003*32kB (U) 2531*64kB (U) 185*128kB (U) 1*256kB (U) 1*512kB (U) 242*1024kB (U) 32*2048kB (U) 9*4096kB (U) = 815880kB [ 1359.123428] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1359.151026] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1359.173283] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1359.202054] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1359.223900] 21347 total pagecache pages [ 1359.241079] 0 pages in swap cache [ 1359.250347] Swap cache stats: add 0, delete 0, find 0/0 [ 1359.269852] Free swap = 0kB [ 1359.279103] Total swap = 0kB [ 1359.286954] 2097051 pages RAM [ 1359.293527] 0 pages HighMem/MovableOnly [ 1359.309235] 363849 pages reserved [ 1359.321102] 0 pages cma reserved [ 1359.347624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1359.354397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.394758] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1359.417964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1359.458494] device bridge_slave_1 left promiscuous mode [ 1359.464079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.490631] device bridge_slave_0 left promiscuous mode [ 1359.515072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.528041] device veth1_macvtap left promiscuous mode [ 1359.533392] device veth0_macvtap left promiscuous mode [ 1359.565033] device veth1_vlan left promiscuous mode [ 1359.570113] device veth0_vlan left promiscuous mode [ 1359.917434] device hsr_slave_1 left promiscuous mode [ 1359.951145] device hsr_slave_0 left promiscuous mode [ 1359.984173] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1359.999984] team0 (unregistering): Port device team_slave_1 removed [ 1360.021560] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1360.032727] CPU: 0 PID: 9307 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1360.040552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1360.050381] Call Trace: [ 1360.053503] dump_stack+0x1b2/0x281 [ 1360.057239] warn_alloc.cold+0x96/0x1cc [ 1360.061236] ? zone_watermark_ok_safe+0x220/0x220 [ 1360.067241] ? __ext4_read_dirblock+0x220/0x810 [ 1360.071931] __alloc_pages_nodemask+0x2127/0x2720 [ 1360.076781] ? _raw_spin_unlock_irq+0x24/0x80 [ 1360.081285] ? lock_acquire+0x170/0x3f0 [ 1360.085269] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1360.090475] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1360.096453] ? __mutex_unlock_slowpath+0x75/0x770 [ 1360.101303] alloc_pages_current+0x155/0x260 [ 1360.105895] ion_page_pool_alloc+0x118/0x1b0 [ 1360.110818] ion_system_heap_allocate+0x133/0x8c0 [ 1360.115756] ? ion_alloc+0x187/0x810 [ 1360.119494] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1360.125507] ? ion_system_contig_heap_create+0x130/0x130 [ 1360.131858] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1360.136996] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1360.142331] ion_alloc+0x204/0x810 [ 1360.145884] ? ion_dma_buf_release+0x40/0x40 [ 1360.150486] ? __might_fault+0x177/0x1b0 [ 1360.154659] ion_ioctl+0xea/0x1f0 [ 1360.158550] ? ion_query_heaps+0x360/0x360 [ 1360.162886] ? ion_query_heaps+0x360/0x360 [ 1360.167650] do_vfs_ioctl+0x75a/0xff0 [ 1360.171606] ? ioctl_preallocate+0x1a0/0x1a0 [ 1360.177080] ? lock_downgrade+0x740/0x740 [ 1360.181230] ? __fget+0x225/0x360 [ 1360.184700] ? do_vfs_ioctl+0xff0/0xff0 [ 1360.188691] ? security_file_ioctl+0x83/0xb0 [ 1360.193102] SyS_ioctl+0x7f/0xb0 [ 1360.196470] ? do_vfs_ioctl+0xff0/0xff0 [ 1360.200536] do_syscall_64+0x1d5/0x640 [ 1360.204427] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1360.209709] RIP: 0033:0x4665d9 [ 1360.212897] RSP: 002b:00007f6041c5c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1360.220974] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1360.229631] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1360.236914] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1360.244183] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1360.251462] R13: 00007ffc3e31159f R14: 00007f6041c5c300 R15: 0000000000022000 [ 1360.259717] team0 (unregistering): Port device team_slave_0 removed [ 1360.298038] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1360.324296] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1360.373990] Mem-Info: [ 1360.377176] active_anon:13240 inactive_anon:14850 isolated_anon:0 [ 1360.377176] active_file:1370 inactive_file:5328 isolated_file:0 [ 1360.377176] unevictable:0 dirty:124 writeback:0 unstable:0 [ 1360.377176] slab_reclaimable:14029 slab_unreclaimable:114866 [ 1360.377176] mapped:57076 shmem:15113 pagetables:781 bounce:0 [ 1360.377176] free:64725 free_pcp:469 free_cma:0 [ 1360.435888] bond0 (unregistering): Released all slaves [ 1360.451299] Node 0 active_anon:52368kB inactive_anon:43288kB active_file:5460kB inactive_file:20024kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:182564kB dirty:448kB writeback:0kB shmem:44272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1360.595255] Node 1 active_anon:592kB inactive_anon:16112kB active_file:20kB inactive_file:1488kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46440kB dirty:48kB writeback:0kB shmem:16180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1360.691300] Node 0 DMA free:11100kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1360.773865] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1360.790138] Node 0 DMA32 free:44900kB min:36200kB low:45248kB high:54296kB active_anon:52768kB inactive_anon:43288kB active_file:7856kB inactive_file:6880kB unevictable:0kB writepending:444kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2732kB bounce:0kB free_pcp:324kB local_pcp:164kB free_cma:0kB [ 1360.914861] lowmem_reserve[]: 0 0 0 0 0 [ 1360.918893] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1360.949719] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 1360.984863] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1360.990015] CPU: 1 PID: 8846 Comm: rs:main Q:Reg Not tainted 4.14.232-syzkaller #0 [ 1360.998086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1361.008446] Call Trace: [ 1361.011039] dump_stack+0x1b2/0x281 [ 1361.014936] dump_header+0x178/0x82f [ 1361.019263] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1361.024372] ? ___ratelimit+0x2cd/0x530 [ 1361.028697] oom_kill_process.cold+0x10/0xa40 [ 1361.033215] out_of_memory+0xe3e/0x1190 [ 1361.037201] ? oom_killer_disable+0x1c0/0x1c0 [ 1361.041716] ? mutex_trylock+0x152/0x1a0 [ 1361.045773] __alloc_pages_nodemask+0x23e1/0x2720 [ 1361.050644] ? trace_hardirqs_on+0x10/0x10 [ 1361.056907] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1361.061756] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1361.066360] alloc_pages_current+0x155/0x260 [ 1361.070874] pagecache_get_page+0x3f5/0xab0 [ 1361.075202] grab_cache_page_write_begin+0x63/0x90 [ 1361.080134] ext4_da_write_begin+0x249/0xe70 [ 1361.086403] ? ext4_write_begin+0x1260/0x1260 [ 1361.091084] generic_perform_write+0x1c9/0x420 [ 1361.095673] ? __mnt_drop_write_file+0x5f/0x90 [ 1361.100610] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 1361.105286] ? current_time+0xb0/0xb0 [ 1361.109091] ? ext4_file_write_iter+0x1cc/0xd20 [ 1361.113765] __generic_file_write_iter+0x227/0x590 [ 1361.118813] ext4_file_write_iter+0x276/0xd20 [ 1361.123309] ? aa_file_perm+0x304/0xab0 [ 1361.127377] ? ext4_file_read_iter+0x330/0x330 [ 1361.131981] ? trace_hardirqs_on+0x10/0x10 [ 1361.136741] ? iov_iter_init+0xa6/0x1c0 [ 1361.140720] __vfs_write+0x44c/0x630 [ 1361.144528] ? kernel_read+0x110/0x110 [ 1361.148429] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1361.153706] vfs_write+0x17f/0x4d0 [ 1361.157353] SyS_write+0xf2/0x210 [ 1361.160845] ? SyS_read+0x210/0x210 [ 1361.164565] ? __do_page_fault+0x159/0xad0 [ 1361.168901] ? do_syscall_64+0x4c/0x640 [ 1361.173333] ? SyS_read+0x210/0x210 [ 1361.176962] do_syscall_64+0x1d5/0x640 [ 1361.180885] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1361.186712] RIP: 0033:0x7fcc02e911cd [ 1361.190521] RSP: 002b:00007fcbfbffe590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1361.198232] RAX: ffffffffffffffda RBX: 00007fcbf0021970 RCX: 00007fcc02e911cd [ 1361.205614] RDX: 0000000000000192 RSI: 00007fcbf0021970 RDI: 0000000000000006 [ 1361.212904] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1361.220184] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fcbf00216f0 [ 1361.227542] R13: 00007fcbfbffe5b0 R14: 0000556ec887f3a0 R15: 0000000000000192 [ 1361.264859] lowmem_reserve[]: 0 0 0 0 0 [ 1361.268906] Node 1 Normal free:53400kB min:53696kB low:67120kB high:80544kB active_anon:644kB inactive_anon:16112kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:48kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:392kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1361.336790] lowmem_reserve[]: 0 0 0 0 0 [ 1361.340824] Node 0 DMA: 1*4kB (E) 21*8kB (U) 9*16kB (UE) 2*32kB (UE) 7*64kB (UE) 6*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11068kB [ 1361.358520] Node 0 DMA32: 1928*4kB (UMEH) 952*8kB (UMEH) 248*16kB (UMEH) 38*32kB (UMEH) 118*64kB (UMH) 31*128kB (UMH) 8*256kB (UMH) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 36128kB [ 1361.394302] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1361.409860] Node 1 Normal: 12*4kB (UM) 10*8kB (UM) 15*16kB (UM) 3*32kB (UM) 69*64kB (U) 179*128kB (UM) 77*256kB (U) 11*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53136kB [ 1361.430032] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1361.440234] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1361.453314] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1361.462747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1361.476025] 15184 total pagecache pages [ 1361.480019] 0 pages in swap cache [ 1361.483461] Swap cache stats: add 0, delete 0, find 0/0 [ 1361.491266] Free swap = 0kB [ 1361.494282] Total swap = 0kB [ 1361.499513] 2097051 pages RAM [ 1361.502630] 0 pages HighMem/MovableOnly [ 1361.509069] 363849 pages reserved [ 1361.512559] 0 pages cma reserved [ 1361.521394] Mem-Info: [ 1361.523864] active_anon:13391 inactive_anon:14850 isolated_anon:0 [ 1361.523864] active_file:17 inactive_file:0 isolated_file:0 [ 1361.523864] unevictable:0 dirty:28 writeback:0 unstable:0 [ 1361.523864] slab_reclaimable:14003 slab_unreclaimable:114295 [ 1361.523864] mapped:52813 shmem:15113 pagetables:781 bounce:0 [ 1361.523864] free:25027 free_pcp:0 free_cma:0 [ 1361.564947] Node 0 active_anon:52920kB inactive_anon:43288kB active_file:64kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165452kB dirty:64kB writeback:0kB shmem:44272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1361.599398] Node 1 active_anon:644kB inactive_anon:16112kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:45800kB dirty:48kB writeback:0kB shmem:16180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1361.634165] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1361.696092] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1361.701142] Node 0 DMA32 free:36100kB min:36200kB low:45248kB high:54296kB active_anon:53320kB inactive_anon:43288kB active_file:156kB inactive_file:0kB unevictable:0kB writepending:460kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2732kB bounce:0kB free_pcp:228kB local_pcp:120kB free_cma:0kB [ 1361.739484] lowmem_reserve[]: 0 0 0 0 0 [ 1361.743515] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1361.777633] lowmem_reserve[]: 0 0 0 0 0 [ 1361.781804] Node 1 Normal free:53400kB min:53696kB low:67120kB high:80544kB active_anon:644kB inactive_anon:16112kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:48kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:392kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1361.818611] lowmem_reserve[]: 0 0 0 0 0 [ 1361.831955] Node 0 DMA: 1*4kB (E) 21*8kB (U) 9*16kB (UE) 2*32kB (UE) 7*64kB (UE) 6*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11068kB [ 1361.859109] Node 0 DMA32: 1927*4kB (UMEH) 955*8kB (UMEH) 248*16kB (UMEH) 38*32kB (UMEH) 118*64kB (UMH) 31*128kB (UMH) 8*256kB (UMH) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 36148kB [ 1361.886932] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1361.908109] Node 1 Normal: 12*4kB (UM) 10*8kB (UM) 15*16kB (UM) 3*32kB (UM) 69*64kB (U) 179*128kB (UM) 77*256kB (U) 11*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53136kB [ 1361.936202] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1361.954523] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1361.974418] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1361.984314] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1362.003426] 15184 total pagecache pages [ 1362.007514] 0 pages in swap cache [ 1362.010970] Swap cache stats: add 0, delete 0, find 0/0 [ 1362.027117] Free swap = 0kB [ 1362.030150] Total swap = 0kB [ 1362.033248] 2097051 pages RAM [ 1362.042538] 0 pages HighMem/MovableOnly [ 1362.050852] 363849 pages reserved [ 1362.054402] 0 pages cma reserved [ 1362.063951] Out of memory (oom_kill_allocating_task): Kill process 8846 (rs:main Q:Reg) score 0 or sacrifice child [ 1362.085219] Killed process 8843 (rsyslogd) total-vm:254332kB, anon-rss:1000kB, file-rss:0kB, shmem-rss:0kB [ 1362.106909] oom_reaper: reaped process 8843 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1362.168574] kthreadd invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1362.211130] kthreadd cpuset=/ mems_allowed=0-1 [ 1362.221396] CPU: 1 PID: 2 Comm: kthreadd Not tainted 4.14.232-syzkaller #0 [ 1362.228524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1362.237906] Call Trace: [ 1362.240499] dump_stack+0x1b2/0x281 [ 1362.244141] dump_header+0x178/0x82f [ 1362.247873] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1362.252997] ? ___ratelimit+0x2cd/0x530 [ 1362.256973] oom_kill_process.cold+0x10/0xa40 [ 1362.261490] ? lock_downgrade+0x740/0x740 [ 1362.265650] out_of_memory+0x2dc/0x1190 [ 1362.269649] ? oom_killer_disable+0x1c0/0x1c0 [ 1362.274147] ? mutex_trylock+0x152/0x1a0 [ 1362.278223] __alloc_pages_nodemask+0x23e1/0x2720 [ 1362.283105] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1362.287944] ? fs_reclaim_release+0xd0/0x110 [ 1362.292363] ? kmem_cache_alloc_node+0x38b/0x410 [ 1362.297298] copy_process.part.0+0x265/0x71c0 [ 1362.301803] ? trace_hardirqs_on+0x10/0x10 [ 1362.306042] ? __lock_acquire+0x5fc/0x3f20 [ 1362.310274] ? kthread_create_on_node+0xd0/0xd0 [ 1362.314937] ? __cleanup_sighand+0x40/0x40 [ 1362.319173] ? lock_downgrade+0x740/0x740 [ 1362.323310] ? trace_hardirqs_on+0x10/0x10 [ 1362.327533] ? _raw_spin_unlock_irq+0x24/0x80 [ 1362.332024] ? kthread_create_on_node+0xd0/0xd0 [ 1362.336699] _do_fork+0x184/0xc80 [ 1362.340160] ? fork_idle+0x270/0x270 [ 1362.343870] ? __schedule+0x893/0x1de0 [ 1362.347749] ? kthreadd+0x4c1/0x770 [ 1362.351370] ? lock_acquire+0x170/0x3f0 [ 1362.355332] ? lock_downgrade+0x740/0x740 [ 1362.359493] ? kthread_create_on_node+0xd0/0xd0 [ 1362.364155] kernel_thread+0x2f/0x40 [ 1362.367949] kthreadd+0x51a/0x770 [ 1362.371394] ? kthread_is_per_cpu+0xd0/0xd0 [ 1362.375702] ? kthread_is_per_cpu+0xd0/0xd0 [ 1362.380534] ? schedule_tail+0x50/0x1e0 [ 1362.384502] ? kthread_is_per_cpu+0xd0/0xd0 [ 1362.388826] ret_from_fork+0x24/0x30 [ 1362.425663] Mem-Info: [ 1362.432331] active_anon:13096 inactive_anon:14849 isolated_anon:0 [ 1362.432331] active_file:37 inactive_file:0 isolated_file:0 [ 1362.432331] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1362.432331] slab_reclaimable:13994 slab_unreclaimable:114058 [ 1362.432331] mapped:52793 shmem:15112 pagetables:759 bounce:0 [ 1362.432331] free:25089 free_pcp:0 free_cma:0 [ 1362.531436] Node 0 active_anon:51908kB inactive_anon:43284kB active_file:56kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165432kB dirty:0kB writeback:0kB shmem:44268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1362.571989] Node 1 active_anon:476kB inactive_anon:16112kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:45740kB dirty:0kB writeback:0kB shmem:16180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1362.612033] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1362.650660] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1362.662586] Node 0 DMA32 free:36052kB min:36200kB low:45248kB high:54296kB active_anon:51908kB inactive_anon:43284kB active_file:64kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2644kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1362.704197] lowmem_reserve[]: 0 0 0 0 0 [ 1362.710459] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1362.748420] lowmem_reserve[]: 0 0 0 0 0 [ 1362.752447] Node 1 Normal free:53236kB min:53696kB low:67120kB high:80544kB active_anon:476kB inactive_anon:16112kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:392kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1362.794235] lowmem_reserve[]: 0 0 0 0 0 [ 1362.800434] Node 0 DMA: 1*4kB (E) 21*8kB (U) 9*16kB (UE) 2*32kB (UE) 7*64kB (UE) 6*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11068kB [ 1362.828014] Node 0 DMA32: 2077*4kB (UMEH) 978*8kB (MEH) 253*16kB (UMEH) 38*32kB (UMEH) 108*64kB (UMH) 31*128kB (UMH) 8*256kB (UMH) 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 36372kB [ 1362.857365] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1362.880586] Node 1 Normal: 25*4kB (UM) 17*8kB (UM) 16*16kB (UM) 4*32kB (UM) 69*64kB (U) 179*128kB (UM) 77*256kB (U) 11*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 53292kB [ 1362.967372] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1363.005774] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1363.014399] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1363.064885] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1363.073490] 15155 total pagecache pages [ 1363.089381] 0 pages in swap cache [ 1363.092861] Swap cache stats: add 0, delete 0, find 0/0 [ 1363.101125] Free swap = 0kB [ 1363.104152] Total swap = 0kB [ 1363.107249] 2097051 pages RAM [ 1363.110347] 0 pages HighMem/MovableOnly [ 1363.114311] 363849 pages reserved [ 1363.117906] 0 pages cma reserved [ 1363.121277] Out of memory: Kill process 9306 (syz-executor.4) score 1005 or sacrifice child [ 1363.130032] Killed process 9307 (syz-executor.4) total-vm:93384kB, anon-rss:2196kB, file-rss:34820kB, shmem-rss:0kB [ 1363.169378] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1363.183088] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1363.280391] CPU: 1 PID: 7981 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1363.287883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1363.297260] Call Trace: [ 1363.299861] dump_stack+0x1b2/0x281 [ 1363.303507] dump_header+0x178/0x82f [ 1363.307222] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1363.312415] ? ___ratelimit+0x2cd/0x530 [ 1363.316396] oom_kill_process.cold+0x10/0xa40 [ 1363.320910] out_of_memory+0xe3e/0x1190 [ 1363.324898] ? oom_killer_disable+0x1c0/0x1c0 [ 1363.329436] ? mutex_trylock+0x152/0x1a0 [ 1363.333765] __alloc_pages_nodemask+0x23e1/0x2720 [ 1363.338644] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1363.343945] alloc_pages_current+0x155/0x260 [ 1363.348373] filemap_fault+0x11a1/0x1ad0 [ 1363.352446] ext4_filemap_fault+0x84/0xb0 [ 1363.357652] __do_fault+0xfa/0x380 [ 1363.361195] __handle_mm_fault+0x2497/0x4620 [ 1363.365606] ? vm_insert_page+0x7c0/0x7c0 [ 1363.369761] ? mark_held_locks+0xa6/0xf0 [ 1363.373821] handle_mm_fault+0x455/0x9c0 [ 1363.378172] __do_page_fault+0x549/0xad0 [ 1363.382239] ? spurious_fault+0x640/0x640 [ 1363.386394] ? do_page_fault+0x60/0x500 [ 1363.390365] ? page_fault+0x2f/0x50 [ 1363.393990] page_fault+0x45/0x50 [ 1363.397441] RIP: ac480:0x13d24e1fb50 [ 1363.401168] RSP: 1e800:000000c0002bbe40 EFLAGS: 00000003 [ 1363.479134] Mem-Info: [ 1363.528824] active_anon:13084 inactive_anon:14849 isolated_anon:0 [ 1363.528824] active_file:38 inactive_file:10 isolated_file:0 [ 1363.528824] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1363.528824] slab_reclaimable:13994 slab_unreclaimable:113741 [ 1363.528824] mapped:52771 shmem:15112 pagetables:729 bounce:0 [ 1363.528824] free:14776 free_pcp:36 free_cma:0 [ 1363.581034] Node 0 active_anon:51896kB inactive_anon:43284kB active_file:148kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165344kB dirty:0kB writeback:0kB shmem:44268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1363.630193] Node 1 active_anon:440kB inactive_anon:16112kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:45740kB dirty:0kB writeback:0kB shmem:16180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1363.674557] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1363.719400] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1363.724475] Node 0 DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:51896kB inactive_anon:43284kB active_file:136kB inactive_file:96kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2544kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1363.769951] lowmem_reserve[]: 0 0 0 0 0 [ 1363.773990] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1363.820723] lowmem_reserve[]: 0 0 0 0 0 [ 1363.824773] Node 1 Normal free:26780kB min:53696kB low:67120kB high:80544kB active_anon:440kB inactive_anon:16112kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:372kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1363.853657] syz-executor.4: [ 1363.890828] lowmem_reserve[]: [ 1363.892803] page allocation failure: order:0 [ 1363.893881] 0 [ 1363.913491] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1363.920170] 0 [ 1363.921569] (null) [ 1363.952004] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1363.952258] 0 [ 1363.972568] CPU: 1 PID: 9307 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1363.975758] 0 0 [ 1363.982179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1363.982186] Call Trace: [ 1363.993694] dump_stack+0x1b2/0x281 [ 1363.993708] warn_alloc.cold+0x96/0x1cc [ 1363.993720] ? zone_watermark_ok_safe+0x220/0x220 [ 1363.993730] ? usleep_range+0x130/0x130 [ 1363.993742] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1363.996329] Node 0 [ 1363.999982] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1364.003941] DMA: [ 1364.008868] ? run_timer_softirq+0x5a0/0x5a0 [ 1364.008885] __alloc_pages_nodemask+0x2127/0x2720 [ 1364.008902] ? lock_acquire+0x170/0x3f0 [ 1364.008917] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1364.012962] 2*4kB [ 1364.018065] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1364.018082] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1364.018101] alloc_pages_current+0x155/0x260 [ 1364.018113] ion_page_pool_alloc+0x118/0x1b0 [ 1364.020346] (UE) [ 1364.025362] ion_system_heap_allocate+0x133/0x8c0 [ 1364.025371] ? ion_alloc+0x187/0x810 [ 1364.025381] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1364.025390] ? ion_system_contig_heap_create+0x130/0x130 [ 1364.025402] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1364.027577] 8*8kB [ 1364.031990] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1364.036881] (U) [ 1364.040846] ion_alloc+0x204/0x810 [ 1364.045826] 9*16kB [ 1364.047972] ? ion_dma_buf_release+0x40/0x40 [ 1364.052446] (UE) [ 1364.057917] ? __might_fault+0x177/0x1b0 [ 1364.057931] ion_ioctl+0xea/0x1f0 [ 1364.057941] ? ion_query_heaps+0x360/0x360 [ 1364.057953] ? ion_query_heaps+0x360/0x360 [ 1364.057965] do_vfs_ioctl+0x75a/0xff0 [ 1364.062389] 2*32kB [ 1364.066798] ? ioctl_preallocate+0x1a0/0x1a0 [ 1364.066808] ? lock_downgrade+0x740/0x740 [ 1364.066821] ? __fget+0x225/0x360 [ 1364.066831] ? do_vfs_ioctl+0xff0/0xff0 [ 1364.068901] (UE) [ 1364.073746] ? security_file_ioctl+0x83/0xb0 [ 1364.077498] 7*64kB [ 1364.082903] SyS_ioctl+0x7f/0xb0 [ 1364.088400] (UE) [ 1364.093746] ? do_vfs_ioctl+0xff0/0xff0 [ 1364.095919] 6*128kB [ 1364.100715] do_syscall_64+0x1d5/0x640 [ 1364.102665] (UE) [ 1364.106205] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1364.106215] RIP: 0033:0x4665d9 [ 1364.106219] RSP: 002b:00007f6041c5c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1364.106228] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1364.106237] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1364.108549] 1*256kB [ 1364.112941] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1364.112948] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1364.115031] (E) [ 1364.119051] R13: 00007ffc3e31159f R14: 00007f6041c5c300 R15: 0000000000022000 [ 1364.122496] 2*512kB [ 1364.154680] Mem-Info: [ 1364.173410] (UE) [ 1364.191722] active_anon:13084 inactive_anon:14849 isolated_anon:0 [ 1364.191722] active_file:16 inactive_file:14 isolated_file:0 [ 1364.191722] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1364.191722] slab_reclaimable:13973 slab_unreclaimable:113692 [ 1364.191722] mapped:52771 shmem:15112 pagetables:729 bounce:0 [ 1364.191722] free:14010 free_pcp:65 free_cma:0 [ 1364.215769] 2*1024kB [ 1364.240444] Node 0 active_anon:51896kB inactive_anon:43284kB active_file:60kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:165344kB dirty:0kB writeback:0kB shmem:44268kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1364.259842] (UE) [ 1364.292807] Node 1 active_anon:440kB inactive_anon:16112kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:45740kB dirty:0kB writeback:0kB shmem:16180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1364.335118] 3*2048kB (UME) 0*4096kB = 10968kB [ 1364.354428] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1364.369708] Node 0 [ 1364.391070] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1364.400442] Node 0 DMA32 free:18168kB min:36200kB low:45248kB high:54296kB active_anon:51896kB inactive_anon:43284kB active_file:60kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2544kB bounce:0kB free_pcp:140kB local_pcp:140kB free_cma:0kB [ 1364.403150] DMA32: 1798*4kB (UME) 903*8kB (UME) 204*16kB (UME) 16*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18192kB [ 1364.451015] lowmem_reserve[]: 0 0 0 0 0 [ 1364.481548] Node 0 [ 1364.493787] Node 0 [ 1364.494024] Normal: [ 1364.502196] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1364.506534] 0*4kB [ 1364.544137] lowmem_reserve[]: [ 1364.547556] 0*8kB [ 1364.550357] 0 [ 1364.550675] 0*16kB [ 1364.552811] 0 [ 1364.554605] 0*32kB [ 1364.574711] 0 [ 1364.579291] 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1364.582938] 0 0 [ 1364.608996] Node 1 Normal: 10*4kB (M) 22*8kB (UM) 13*16kB (UM) 3*32kB (UM) 1*64kB (U) 8*128kB (UM) 77*256kB (U) 11*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26952kB [ 1364.611360] Node 1 [ 1364.640899] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1364.642630] Normal free:26904kB min:53696kB low:67120kB high:80544kB active_anon:440kB inactive_anon:16112kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:128kB pagetables:372kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1364.643163] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1364.672083] lowmem_reserve[]: 0 0 0 0 0 [ 1364.712154] Node 0 DMA: 2*4kB (UE) 8*8kB (U) 9*16kB (UE) 2*32kB (UE) 7*64kB (UE) 6*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 1364.737786] Node 0 DMA32: 1798*4kB (UME) 903*8kB (UME) 204*16kB (UME) 16*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18192kB [ 1364.742970] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1364.757706] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1364.780690] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1364.789511] Node 1 Normal: 10*4kB (M) 22*8kB (UM) 13*16kB (UM) 3*32kB (UM) 1*64kB (U) 8*128kB (UM) 77*256kB (U) 11*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26952kB [ 1364.809274] 15142 total pagecache pages [ 1364.813270] 0 pages in swap cache [ 1364.833243] Swap cache stats: add 0, delete 0, find 0/0 [ 1364.833626] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1364.859881] Free swap = 0kB [ 1364.862945] Total swap = 0kB [ 1364.866441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1364.882121] 2097051 pages RAM [ 1364.891456] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1364.893376] 0 pages HighMem/MovableOnly [ 1364.924248] 363849 pages reserved [ 1364.924439] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1364.933617] 0 pages cma reserved [ 1364.959914] Out of memory (oom_kill_allocating_task): Kill process 7981 (syz-fuzzer) score 0 or sacrifice child [ 1364.963431] 15142 total pagecache pages [ 1364.984096] Killed process 8896 (syz-executor.4) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1364.994467] 0 pages in swap cache [ 1365.043601] oom_reaper: reaped process 9307 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1365.043732] Swap cache stats: add 0, delete 0, find 0/0 [ 1365.083036] Free swap = 0kB [ 1365.102642] Total swap = 0kB [ 1365.103803] oom_reaper: reaped process 8896 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1365.113558] 2097051 pages RAM [ 1365.159804] 0 pages HighMem/MovableOnly [ 1365.163813] 363849 pages reserved [ 1365.202009] kworker/u4:4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1365.206591] 0 pages cma reserved [ 1365.310058] kworker/u4:4 cpuset=/ mems_allowed=0-1 [ 1365.368449] CPU: 1 PID: 2880 Comm: kworker/u4:4 Not tainted 4.14.232-syzkaller #0 [ 1365.376184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1365.385554] Workqueue: events_unbound call_usermodehelper_exec_work [ 1365.391959] Call Trace: [ 1365.394561] dump_stack+0x1b2/0x281 [ 1365.398194] dump_header+0x178/0x82f [ 1365.401911] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1365.407193] ? ___ratelimit+0x2cd/0x530 [ 1365.411178] oom_kill_process.cold+0x10/0xa40 [ 1365.415676] ? lock_downgrade+0x740/0x740 [ 1365.419838] out_of_memory+0x2dc/0x1190 [ 1365.423830] ? oom_killer_disable+0x1c0/0x1c0 [ 1365.428342] ? mutex_trylock+0x152/0x1a0 [ 1365.432417] __alloc_pages_nodemask+0x23e1/0x2720 [ 1365.437266] ? deref_stack_reg+0x124/0x1a0 [ 1365.441530] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1365.446386] ? fs_reclaim_release+0xd0/0x110 [ 1365.450812] ? kmem_cache_alloc_node+0x38b/0x410 [ 1365.455578] copy_process.part.0+0x265/0x71c0 [ 1365.460082] ? __lock_acquire+0x5fc/0x3f20 [ 1365.464350] ? cpuacct_charge+0x1ca/0x350 [ 1365.468500] ? static_obj+0x50/0x50 [ 1365.472130] ? lock_downgrade+0x740/0x740 [ 1365.476293] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1365.481920] ? __cleanup_sighand+0x40/0x40 [ 1365.486173] ? update_curr+0x28d/0x670 [ 1365.490064] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1365.495523] _do_fork+0x184/0xc80 [ 1365.498987] ? fork_idle+0x270/0x270 [ 1365.502702] ? lock_downgrade+0x740/0x740 [ 1365.507065] ? lock_downgrade+0x740/0x740 [ 1365.511567] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1365.516593] ? process_one_work+0x6c4/0x14a0 [ 1365.521021] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1365.526516] kernel_thread+0x2f/0x40 [ 1365.530359] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 1365.535676] ? call_usermodehelper+0x80/0x80 [ 1365.540088] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1365.545545] process_one_work+0x793/0x14a0 [ 1365.549785] ? work_busy+0x320/0x320 [ 1365.553498] ? worker_thread+0x158/0xff0 [ 1365.557564] ? _raw_spin_unlock_irq+0x24/0x80 [ 1365.562091] worker_thread+0x5cc/0xff0 [ 1365.565988] ? rescuer_thread+0xc80/0xc80 [ 1365.570137] kthread+0x30d/0x420 [ 1365.573500] ? kthread_create_on_node+0xd0/0xd0 [ 1365.578171] ret_from_fork+0x24/0x30 [ 1365.870059] IPVS: ftp: loaded support on port[0] = 21 [ 1366.071489] IPVS: ftp: loaded support on port[0] = 21 [ 1366.296667] Mem-Info: [ 1366.299167] active_anon:12634 inactive_anon:14858 isolated_anon:0 [ 1366.299167] active_file:1400 inactive_file:1822 isolated_file:0 [ 1366.299167] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1366.299167] slab_reclaimable:13844 slab_unreclaimable:116364 [ 1366.299167] mapped:46249 shmem:15124 pagetables:722 bounce:0 [ 1366.299167] free:46082 free_pcp:396 free_cma:0 [ 1366.343098] chnl_net:caif_netlink_parms(): no params data found [ 1366.482553] Node 0 active_anon:49340kB inactive_anon:43312kB active_file:652kB inactive_file:584kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131648kB dirty:0kB writeback:0kB shmem:44308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1366.513675] syz-executor.5: page allocation failure: order:4, mode:0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1366.540465] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1366.554866] CPU: 1 PID: 9263 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1366.562681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1366.572038] Call Trace: [ 1366.574649] dump_stack+0x1b2/0x281 [ 1366.578285] warn_alloc.cold+0x96/0x1cc [ 1366.582261] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1366.587278] ? zone_watermark_ok_safe+0x220/0x220 [ 1366.592140] __alloc_pages_nodemask+0x2127/0x2720 [ 1366.596990] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1366.602026] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 1366.607095] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1366.611975] ? mark_held_locks+0xa6/0xf0 [ 1366.616078] ? cache_grow_begin+0x3f/0x700 [ 1366.620429] cache_grow_begin+0x91/0x700 [ 1366.624501] fallback_alloc+0x207/0x2c0 [ 1366.628494] kmem_cache_alloc_trace+0x1f1/0x3d0 [ 1366.633162] can_notifier+0x1ea/0x300 [ 1366.636971] notifier_call_chain+0x108/0x1a0 [ 1366.642247] register_netdevice+0xb98/0xe40 [ 1366.646570] ? netdev_change_features+0xa0/0xa0 [ 1366.651240] vxcan_newlink+0x27d/0x4c0 [ 1366.655256] ? rcu_lockdep_current_cpu_online+0xd1/0x140 [ 1366.660712] ? vxcan_close+0xb0/0xb0 [ 1366.664423] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1366.669442] ? fs_reclaim_release+0xd0/0x110 [ 1366.673858] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1366.679307] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1366.684322] ? __kmalloc_node+0x38/0x70 [ 1366.688294] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 1366.693569] ? __kmalloc_node+0x4c/0x70 [ 1366.697544] ? alloc_netdev_mqs+0x8c0/0xb70 [ 1366.701869] ? rtnl_create_link+0x129/0x890 [ 1366.706205] rtnl_newlink+0xfab/0x1860 [ 1366.710105] ? rtnl_newlink+0x43d/0x1860 [ 1366.714165] ? __lock_acquire+0x5fc/0x3f20 [ 1366.718421] ? vxcan_close+0xb0/0xb0 [ 1366.722143] ? trace_hardirqs_on+0x10/0x10 [ 1366.726376] ? rtnl_dellink+0x6a0/0x6a0 [ 1366.730365] ? trace_hardirqs_on+0x10/0x10 [ 1366.734606] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1366.740504] ? deref_stack_reg+0x124/0x1a0 [ 1366.746090] ? lock_acquire+0x170/0x3f0 [ 1366.750057] ? lock_downgrade+0x740/0x740 [ 1366.754197] ? rtnl_dellink+0x6a0/0x6a0 [ 1366.758169] rtnetlink_rcv_msg+0x3be/0xb10 [ 1366.762420] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1366.767611] ? __netlink_lookup+0x345/0x5d0 [ 1366.771941] netlink_rcv_skb+0x125/0x390 [ 1366.776013] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1366.780521] ? netlink_ack+0x9a0/0x9a0 [ 1366.784419] netlink_unicast+0x437/0x610 [ 1366.788493] ? netlink_sendskb+0xd0/0xd0 [ 1366.792552] ? __check_object_size+0x179/0x230 [ 1366.797132] netlink_sendmsg+0x62e/0xb80 [ 1366.801206] ? nlmsg_notify+0x170/0x170 [ 1366.805184] ? security_socket_sendmsg+0x83/0xb0 [ 1366.809944] ? nlmsg_notify+0x170/0x170 [ 1366.813911] sock_sendmsg+0xb5/0x100 [ 1366.817630] SyS_sendto+0x1c7/0x2c0 [ 1366.822210] ? SyS_getpeername+0x220/0x220 [ 1366.826459] ? sock_poll+0x220/0x220 [ 1366.830198] ? SyS_socket+0x12f/0x1b0 [ 1366.834522] ? move_addr_to_kernel+0x60/0x60 [ 1366.838938] ? do_syscall_64+0x4c/0x640 [ 1366.842908] ? SyS_getpeername+0x220/0x220 [ 1366.847233] do_syscall_64+0x1d5/0x640 [ 1366.851125] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1366.856397] RIP: 0033:0x41956c [ 1366.859601] RSP: 002b:00007ffc498721a0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1366.867479] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041956c [ 1366.875024] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1366.883246] RBP: 0000000000000000 R08: 00007ffc498721f4 R09: 000000000000000c [ 1366.890515] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1366.897785] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1366.918613] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1366.933084] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1366.938308] Node 1 active_anon:1396kB inactive_anon:16120kB active_file:108kB inactive_file:108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:45748kB dirty:0kB writeback:0kB shmem:16188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1366.970650] CPU: 1 PID: 9307 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1366.978506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1366.987871] Call Trace: [ 1366.990468] dump_stack+0x1b2/0x281 [ 1366.994121] warn_alloc.cold+0x96/0x1cc [ 1366.998122] ? zone_watermark_ok_safe+0x220/0x220 [ 1367.003099] __alloc_pages_nodemask+0x2127/0x2720 [ 1367.007963] ? lock_acquire+0x170/0x3f0 [ 1367.012096] ? lock_acquire+0x170/0x3f0 [ 1367.016297] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1367.021162] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1367.026617] ? __mutex_unlock_slowpath+0x75/0x770 [ 1367.031488] alloc_pages_current+0x155/0x260 [ 1367.035915] ion_page_pool_alloc+0x118/0x1b0 [ 1367.040321] ion_system_heap_allocate+0x133/0x8c0 [ 1367.045181] ? _raw_spin_unlock+0x29/0x40 [ 1367.049324] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1367.054258] ? ion_system_contig_heap_create+0x130/0x130 [ 1367.059924] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1367.064956] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1367.070506] ion_alloc+0x27a/0x810 [ 1367.074063] ? ion_dma_buf_release+0x40/0x40 [ 1367.078482] ? __might_fault+0x177/0x1b0 [ 1367.082569] ion_ioctl+0xea/0x1f0 [ 1367.086069] ? ion_query_heaps+0x360/0x360 [ 1367.090304] ? ion_query_heaps+0x360/0x360 [ 1367.094626] do_vfs_ioctl+0x75a/0xff0 [ 1367.098432] ? ioctl_preallocate+0x1a0/0x1a0 [ 1367.103839] ? lock_downgrade+0x740/0x740 [ 1367.108344] ? __fget+0x225/0x360 [ 1367.111792] ? do_vfs_ioctl+0xff0/0xff0 [ 1367.115777] ? security_file_ioctl+0x83/0xb0 [ 1367.120183] SyS_ioctl+0x7f/0xb0 [ 1367.123544] ? do_vfs_ioctl+0xff0/0xff0 [ 1367.127516] do_syscall_64+0x1d5/0x640 [ 1367.131415] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1367.136601] RIP: 0033:0x4665d9 [ 1367.139795] RSP: 002b:00007f6041c5c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1367.147502] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1367.154771] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1367.162146] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1367.169417] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1367.176697] R13: 00007ffc3e31159f R14: 00007f6041c5c300 R15: 0000000000022000 [ 1367.187499] Node 0 DMA free:10992kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1367.216362] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1367.221496] Node 0 DMA32 free:20456kB min:36200kB low:45248kB high:54296kB active_anon:49332kB inactive_anon:43300kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2364kB bounce:0kB free_pcp:52kB local_pcp:0kB free_cma:0kB [ 1367.235324] Mem-Info: [ 1367.252426] lowmem_reserve[]: 0 0 0 0 0 [ 1367.256788] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1367.272551] active_anon:12708 inactive_anon:14856 isolated_anon:0 [ 1367.272551] active_file:18 inactive_file:16 isolated_file:0 [ 1367.272551] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1367.272551] slab_reclaimable:13835 slab_unreclaimable:116624 [ 1367.272551] mapped:44114 shmem:15125 pagetables:722 bounce:0 [ 1367.272551] free:14559 free_pcp:13 free_cma:0 [ 1367.287452] lowmem_reserve[]: [ 1367.324299] Node 0 active_anon:49336kB inactive_anon:43300kB active_file:44kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130716kB dirty:0kB writeback:0kB shmem:44308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1367.341739] 0 [ 1367.359722] Node 1 active_anon:1496kB inactive_anon:16124kB active_file:28kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:45740kB dirty:0kB writeback:0kB shmem:16192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1367.372378] 0 [ 1367.400019] Bluetooth: hci5 command 0x0409 tx timeout [ 1367.400379] Bluetooth: hci3 command 0x0409 tx timeout [ 1367.401953] Node 0 [ 1367.412665] 0 [ 1367.417077] DMA free:11000kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:24kB inactive_file:28kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1367.421317] 0 0 [ 1367.458229] Node 1 Normal free:26780kB min:53696kB low:67120kB high:80544kB active_anon:1496kB inactive_anon:16124kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:524kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1367.498538] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1367.503620] Node 0 DMA32 free:18100kB min:36200kB low:45248kB high:54296kB active_anon:49332kB inactive_anon:43300kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2364kB bounce:0kB free_pcp:172kB local_pcp:52kB free_cma:0kB [ 1367.516987] lowmem_reserve[]: [ 1367.550787] lowmem_reserve[]: [ 1367.553402] 0 [ 1367.553920] 0 [ 1367.560607] 0 0 0 0 [ 1367.564954] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1367.567533] 0 [ 1367.581796] Node 0 DMA: 4*4kB (ME) 4*8kB (UM) 2*16kB (ME) 4*32kB (UME) 4*64kB (UME) 2*128kB (UE) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10960kB [ 1367.587571] 0 [ 1367.609902] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1367.612618] 0 0 [ 1367.622083] CPU: 1 PID: 9307 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1367.623302] Node 0 [ 1367.631086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1367.631091] Call Trace: [ 1367.631112] dump_stack+0x1b2/0x281 [ 1367.631125] warn_alloc.cold+0x96/0x1cc [ 1367.631137] ? zone_watermark_ok_safe+0x220/0x220 [ 1367.631150] ? usleep_range+0x130/0x130 [ 1367.633381] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1367.642724] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1367.642738] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1367.642748] ? run_timer_softirq+0x5a0/0x5a0 [ 1367.642770] __alloc_pages_nodemask+0x2127/0x2720 [ 1367.645373] lowmem_reserve[]: [ 1367.648969] ? lock_acquire+0x170/0x3f0 [ 1367.653002] 0 [ 1367.657857] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1367.657868] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1367.657884] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1367.657903] alloc_pages_current+0x155/0x260 [ 1367.661870] 0 [ 1367.687595] ion_page_pool_alloc+0x118/0x1b0 [ 1367.687606] ion_system_heap_allocate+0x133/0x8c0 [ 1367.687619] ? _raw_spin_unlock+0x29/0x40 [ 1367.687627] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1367.687636] ? ion_system_contig_heap_create+0x130/0x130 [ 1367.687652] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1367.692791] 0 [ 1367.697808] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1367.697821] ion_alloc+0x27a/0x810 [ 1367.697834] ? ion_dma_buf_release+0x40/0x40 [ 1367.697847] ? __might_fault+0x177/0x1b0 [ 1367.702241] 0 [ 1367.707079] ion_ioctl+0xea/0x1f0 [ 1367.707089] ? ion_query_heaps+0x360/0x360 [ 1367.707100] ? ion_query_heaps+0x360/0x360 [ 1367.707110] do_vfs_ioctl+0x75a/0xff0 [ 1367.707121] ? ioctl_preallocate+0x1a0/0x1a0 [ 1367.710226] 0 [ 1367.714193] ? lock_downgrade+0x740/0x740 [ 1367.720803] ? __fget+0x225/0x360 [ 1367.725317] Node 1 [ 1367.730718] ? do_vfs_ioctl+0xff0/0xff0 [ 1367.735157] Normal free:26780kB min:53696kB low:67120kB high:80544kB active_anon:1496kB inactive_anon:16124kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:352kB pagetables:524kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1367.736897] ? security_file_ioctl+0x83/0xb0 [ 1367.741274] lowmem_reserve[]: [ 1367.746110] SyS_ioctl+0x7f/0xb0 [ 1367.746119] ? do_vfs_ioctl+0xff0/0xff0 [ 1367.746130] do_syscall_64+0x1d5/0x640 [ 1367.746144] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1367.746153] RIP: 0033:0x4665d9 [ 1367.750291] 0 [ 1367.755305] RSP: 002b:00007f6041c5c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1367.755315] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1367.755319] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1367.755324] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1367.755328] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1367.755334] R13: 00007ffc3e31159f R14: 00007f6041c5c300 R15: 0000000000022000 [ 1367.765236] Node 0 [ 1367.778842] 0 [ 1367.791097] DMA32: [ 1367.800937] 0 [ 1367.811788] 1813*4kB [ 1367.823791] 0 [ 1367.861959] (UME) [ 1367.876215] 0 [ 1367.885822] 851*8kB [ 1367.889698] Bluetooth: hci1 command 0x0409 tx timeout [ 1367.904283] (ME) [ 1367.935082] 188*16kB [ 1367.949036] Node 0 DMA: 4*4kB (ME) 4*8kB (UM) 2*16kB (ME) 4*32kB (UME) 4*64kB (UME) 2*128kB (UE) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 10960kB [ 1367.959318] (ME) 35*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18188kB [ 1367.983680] Node 0 [ 1367.993316] Node 0 [ 1367.993484] DMA32: [ 1368.006819] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1368.024766] 1595*4kB (ME) 851*8kB (ME) 189*16kB (UME) 21*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 15*1024kB (U) 4*2048kB (U) 0*4096kB = 40500kB [ 1368.055578] Node 1 Normal: 0*4kB 0*8kB 1*16kB (U) 5*32kB (UM) 7*64kB (M) 7*128kB (M) 5*256kB (M) 5*512kB (UM) 59*1024kB (UM) 1*2048kB (U) 0*4096kB = 67824kB [ 1368.086862] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1368.097313] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1368.126860] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1368.146849] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1368.166845] Node 1 Normal: 0*4kB 2*8kB (UM) 1*16kB (U) 1*32kB (M) 0*64kB 0*128kB 1*256kB (U) 0*512kB 231*1024kB (UM) 12*2048kB (U) 0*4096kB = 261440kB [ 1368.206845] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1368.226992] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1368.244907] 16697 total pagecache pages [ 1368.249130] 0 pages in swap cache [ 1368.252787] Swap cache stats: add 0, delete 0, find 0/0 [ 1368.280529] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1368.285465] Free swap = 0kB [ 1368.292182] Total swap = 0kB [ 1368.314932] 2097051 pages RAM [ 1368.318150] 0 pages HighMem/MovableOnly [ 1368.322131] 363849 pages reserved [ 1368.341927] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1368.344885] 0 pages cma reserved [ 1368.354208] Out of memory: Kill process 9280 (syz-executor.0) score 1004 or sacrifice child [ 1368.383586] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1368.415257] 16845 total pagecache pages [ 1368.433161] 0 pages in swap cache [ 1368.454908] Swap cache stats: add 0, delete 0, find 0/0 [ 1368.460302] Free swap = 0kB [ 1368.463615] Killed process 9282 (syz-executor.0) total-vm:93516kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 1368.496168] Total swap = 0kB [ 1368.505096] 2097051 pages RAM [ 1368.514892] 0 pages HighMem/MovableOnly [ 1368.518931] 363849 pages reserved [ 1368.522382] 0 pages cma reserved [ 1368.533719] oom_reaper: reaped process 9282 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1368.571945] IPVS: ftp: loaded support on port[0] = 21 [ 1368.873620] chnl_net:caif_netlink_parms(): no params data found 00:40:08 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) socket$can_bcm(0x1d, 0x2, 0x2) [ 1369.162256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.174308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.182895] device bridge_slave_0 entered promiscuous mode [ 1369.198591] chnl_net:caif_netlink_parms(): no params data found [ 1369.215397] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.221791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.234241] device bridge_slave_1 entered promiscuous mode [ 1369.312411] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1369.338643] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1369.371103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.378896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.387822] device bridge_slave_0 entered promiscuous mode [ 1369.409812] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1369.442152] team0: Port device team_slave_0 added [ 1369.456160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1369.462539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.475470] Bluetooth: hci3 command 0x041b tx timeout [ 1369.480750] Bluetooth: hci5 command 0x041b tx timeout [ 1369.583265] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 1369.603548] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1369.635251] CPU: 0 PID: 9466 Comm: rs:main Q:Reg Not tainted 4.14.232-syzkaller #0 [ 1369.642986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1369.652525] Call Trace: [ 1369.655118] dump_stack+0x1b2/0x281 [ 1369.658774] dump_header+0x178/0x82f [ 1369.662486] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1369.667607] ? ___ratelimit+0x2cd/0x530 [ 1369.671579] oom_kill_process.cold+0x10/0xa40 [ 1369.676078] out_of_memory+0xe3e/0x1190 [ 1369.680066] ? oom_killer_disable+0x1c0/0x1c0 [ 1369.684554] ? mutex_trylock+0x152/0x1a0 [ 1369.688614] __alloc_pages_nodemask+0x23e1/0x2720 [ 1369.693469] ? trace_hardirqs_on+0x10/0x10 [ 1369.697719] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1369.702553] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1369.707145] alloc_pages_current+0x155/0x260 [ 1369.711549] pagecache_get_page+0x3f5/0xab0 [ 1369.715870] grab_cache_page_write_begin+0x63/0x90 [ 1369.720882] ext4_da_write_begin+0x249/0xe70 [ 1369.725285] ? __ext4_journal_stop+0xe7/0x1b0 [ 1369.729773] ? ext4_write_begin+0x1260/0x1260 [ 1369.734271] ? balance_dirty_pages_ratelimited+0x8b2/0x1800 [ 1369.739987] generic_perform_write+0x1c9/0x420 [ 1369.744573] ? __mnt_drop_write_file+0x5f/0x90 [ 1369.749158] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 1369.753833] ? current_time+0xb0/0xb0 [ 1369.757623] ? ext4_file_write_iter+0x1cc/0xd20 [ 1369.762289] __generic_file_write_iter+0x227/0x590 [ 1369.767217] ext4_file_write_iter+0x276/0xd20 [ 1369.771708] ? aa_file_perm+0x304/0xab0 [ 1369.775831] ? ext4_file_read_iter+0x330/0x330 [ 1369.780410] ? trace_hardirqs_on+0x10/0x10 [ 1369.784639] ? iov_iter_init+0xa6/0x1c0 [ 1369.788627] __vfs_write+0x44c/0x630 [ 1369.792338] ? kernel_read+0x110/0x110 [ 1369.796244] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1369.801258] vfs_write+0x17f/0x4d0 [ 1369.804808] SyS_write+0xf2/0x210 [ 1369.808257] ? SyS_read+0x210/0x210 [ 1369.811891] ? do_syscall_64+0x4c/0x640 [ 1369.815851] ? SyS_read+0x210/0x210 [ 1369.819470] do_syscall_64+0x1d5/0x640 [ 1369.823369] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1369.828549] RIP: 0033:0x7fe7380dc1cd [ 1369.832252] RSP: 002b:00007fe735697590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1369.839954] RAX: ffffffffffffffda RBX: 00007fe72c029ff0 RCX: 00007fe7380dc1cd [ 1369.847228] RDX: 00000000000000d0 RSI: 00007fe72c029ff0 RDI: 0000000000000009 [ 1369.854626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1369.866296] R10: 0000000000000000 R11: 0000000000000293 R12: 00007fe72c029d70 [ 1369.873565] R13: 00007fe7356975b0 R14: 00005567162fd800 R15: 00000000000000d0 [ 1370.041617] Bluetooth: hci1 command 0x041b tx timeout 00:40:09 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) [ 1370.238439] device bridge_slave_1 entered promiscuous mode [ 1370.274936] Mem-Info: [ 1370.277396] active_anon:12812 inactive_anon:14853 isolated_anon:0 [ 1370.277396] active_file:361 inactive_file:1740 isolated_file:0 [ 1370.277396] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1370.277396] slab_reclaimable:13834 slab_unreclaimable:116353 [ 1370.277396] mapped:51644 shmem:15121 pagetables:722 bounce:0 [ 1370.277396] free:48770 free_pcp:277 free_cma:0 [ 1370.355425] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1370.368505] team0: Port device team_slave_1 added [ 1370.421611] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1370.421708] Node 0 active_anon:49192kB inactive_anon:43296kB active_file:1396kB inactive_file:1592kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:161308kB dirty:0kB writeback:0kB shmem:44304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1370.459183] syz-executor.3 cpuset= [ 1370.463865] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1370.483474] / mems_allowed=0-1 [ 1370.491656] CPU: 1 PID: 9728 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1370.499504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1370.508882] Call Trace: [ 1370.511478] dump_stack+0x1b2/0x281 [ 1370.514879] Node 1 active_anon:2056kB inactive_anon:16116kB active_file:0kB inactive_file:68kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:52968kB dirty:12kB writeback:0kB shmem:16180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1370.515106] warn_alloc.cold+0x96/0x1cc [ 1370.546326] ? zone_watermark_ok_safe+0x220/0x220 [ 1370.551179] __alloc_pages_nodemask+0x2127/0x2720 [ 1370.556020] ? retint_kernel+0x2d/0x2d [ 1370.559927] ? lock_acquire+0x170/0x3f0 [ 1370.563907] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1370.564879] Node 0 DMA free:11116kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1370.568763] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1370.568776] ? __mutex_unlock_slowpath+0x75/0x770 [ 1370.605195] alloc_pages_current+0x155/0x260 [ 1370.609610] ion_page_pool_alloc+0x118/0x1b0 [ 1370.614036] ion_system_heap_allocate+0x133/0x8c0 [ 1370.618884] ? ion_alloc+0x187/0x810 [ 1370.622611] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1370.624867] lowmem_reserve[]: [ 1370.628070] ? ion_system_contig_heap_create+0x130/0x130 [ 1370.628077] 0 [ 1370.631180] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1370.631193] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1370.644893] 2717 2718 [ 1370.648814] ion_alloc+0x204/0x810 [ 1370.648829] ? ion_dma_buf_release+0x40/0x40 [ 1370.651326] 2718 [ 1370.654919] ? __might_fault+0x177/0x1b0 [ 1370.654933] ion_ioctl+0xea/0x1f0 [ 1370.654942] ? ion_query_heaps+0x360/0x360 [ 1370.654954] ? ion_query_heaps+0x360/0x360 [ 1370.654964] do_vfs_ioctl+0x75a/0xff0 [ 1370.654975] ? ioctl_preallocate+0x1a0/0x1a0 [ 1370.654989] ? lock_downgrade+0x740/0x740 [ 1370.674883] 2718 [ 1370.677437] ? __fget+0x225/0x360 [ 1370.685619] ? do_vfs_ioctl+0xff0/0xff0 [ 1370.685631] ? security_file_ioctl+0x83/0xb0 [ 1370.685640] SyS_ioctl+0x7f/0xb0 [ 1370.685649] ? do_vfs_ioctl+0xff0/0xff0 [ 1370.685660] do_syscall_64+0x1d5/0x640 [ 1370.685675] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1370.685684] RIP: 0033:0x4665d9 [ 1370.704868] Node 0 [ 1370.707003] RSP: 002b:00007f2e9a53f188 EFLAGS: 00000246 [ 1370.711009] DMA32 free:290532kB min:36200kB low:45248kB high:54296kB active_anon:49188kB inactive_anon:43296kB active_file:1396kB inactive_file:2504kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2464kB bounce:0kB free_pcp:760kB local_pcp:704kB free_cma:0kB [ 1370.714859] ORIG_RAX: 0000000000000010 [ 1370.714865] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1370.714870] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1370.714875] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1370.714879] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1370.714884] R13: 00007ffe42256d6f R14: 00007f2e9a53f300 R15: 0000000000022000 [ 1370.763925] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1370.915660] lowmem_reserve[]: 0 0 0 0 0 [ 1370.919687] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1370.984894] lowmem_reserve[]: 0 0 0 0 0 [ 1370.987480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.995041] Node 1 Normal free:76944kB min:53696kB low:67120kB high:80544kB active_anon:2056kB inactive_anon:16116kB active_file:416kB inactive_file:520kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:572kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 1371.009502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.064893] lowmem_reserve[]: 0 0 0 0 0 [ 1371.067759] device bridge_slave_0 entered promiscuous mode [ 1371.068919] Node 0 DMA: 7*4kB (UME) 2*8kB (UM) 8*16kB (UME) 4*32kB (UME) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11116kB [ 1371.091801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1371.102154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1371.128577] warn_alloc_show_mem: 2 callbacks suppressed [ 1371.128582] Mem-Info: [ 1371.152023] active_anon:12849 inactive_anon:14853 isolated_anon:0 [ 1371.152023] active_file:614 inactive_file:1102 isolated_file:0 [ 1371.152023] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1371.152023] slab_reclaimable:13832 slab_unreclaimable:116117 [ 1371.152023] mapped:53914 shmem:15121 pagetables:754 bounce:0 [ 1371.152023] free:120773 free_pcp:407 free_cma:0 [ 1371.164870] Node 0 [ 1371.196022] Node 0 active_anon:49352kB inactive_anon:43296kB active_file:2428kB inactive_file:4376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:162696kB dirty:0kB writeback:0kB shmem:44304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1371.214861] DMA32: [ 1371.227422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1371.240128] 1553*4kB (UMEH) 798*8kB (UEH) 317*16kB (UMEH) 2354*32kB (UME) 3689*64kB (UMH) 389*128kB (UMH) 57*256kB (UM) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 395012kB [ 1371.242493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1371.267427] Node 1 active_anon:2044kB inactive_anon:16116kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52960kB dirty:0kB writeback:0kB shmem:16180kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1371.294889] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1371.297549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1371.324878] Node 1 Normal: 6432*4kB (UM) 4495*8kB (UM) 4570*16kB (UM) 1555*32kB (UM) 85*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 190136kB [ 1371.334981] Node 0 DMA free:11276kB min:204kB low:252kB high:300kB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1371.376445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1371.387608] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1371.397620] team0: Port device team_slave_0 added [ 1371.398227] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1371.402837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.418498] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1371.423871] Node 0 DMA32 free:489480kB min:36200kB low:45248kB high:54296kB active_anon:49348kB inactive_anon:43296kB active_file:2428kB inactive_file:4376kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7040kB pagetables:2400kB bounce:0kB free_pcp:848kB local_pcp:104kB free_cma:0kB [ 1371.424884] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1371.457866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.470131] device bridge_slave_1 entered promiscuous mode [ 1371.476847] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1371.484948] lowmem_reserve[]: 0 0 0 0 0 [ 1371.489735] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1371.504867] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1371.516914] lowmem_reserve[]: [ 1371.525014] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1371.534888] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1371.534894] 16882 total pagecache pages [ 1371.534942] 0 pages in swap cache [ 1371.547686] 0 0 0 0 0 [ 1371.553655] Node 1 Normal free:211276kB min:53696kB low:67120kB high:80544kB active_anon:2044kB inactive_anon:16116kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:616kB bounce:0kB free_pcp:736kB local_pcp:64kB free_cma:0kB [ 1371.564877] Swap cache stats: add 0, delete 0, find 0/0 [ 1371.587793] team0: Port device team_slave_1 added [ 1371.588253] Bluetooth: hci5 command 0x040f tx timeout [ 1371.593497] lowmem_reserve[]: [ 1371.604914] Bluetooth: hci3 command 0x040f tx timeout [ 1371.610485] 0 [ 1371.617494] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1371.629541] 0 0 0 0 [ 1371.634522] Free swap = 0kB [ 1371.645354] Total swap = 0kB [ 1371.648425] 2097051 pages RAM [ 1371.651307] Node 0 DMA: 59*4kB (UME) 19*8kB (UM) 11*16kB (UME) 4*32kB (UME) 3*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11508kB [ 1371.664875] 0 pages HighMem/MovableOnly [ 1371.671806] 363849 pages reserved [ 1371.675470] 0 pages cma reserved [ 1371.678857] Out of memory (oom_kill_allocating_task): Kill process 9466 (rs:main Q:Reg) score 0 or sacrifice child [ 1371.679323] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1371.702998] Node 0 DMA32: 7010*4kB (UMEH) 4707*8kB (UMEH) 4207*16kB (UMEH) 4044*32kB (UME) 3971*64kB (UMH) 428*128kB (UMH) 67*256kB (UM) 3*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 590032kB [ 1371.704944] Killed process 9354 (rsyslogd) total-vm:254332kB, anon-rss:776kB, file-rss:196kB, shmem-rss:0kB [ 1371.725386] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1371.757304] oom_reaper: reaped process 9354 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 00:40:11 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan4\x00'}) [ 1371.784986] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1371.795104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1371.801822] Node 1 Normal: 10323*4kB (UM) 6022*8kB (UM) 5726*16kB (UM) 3495*32kB (UM) 898*64kB (U) 79*128kB (U) 24*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 367676kB [ 1371.819841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1371.824996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1371.829326] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1371.844704] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1371.854433] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1371.863700] 17622 total pagecache pages [ 1371.869518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1371.870393] 0 pages in swap cache [ 1371.880798] Swap cache stats: add 0, delete 0, find 0/0 [ 1371.887104] Free swap = 0kB [ 1371.890235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1371.892323] Total swap = 0kB [ 1371.900838] 2097051 pages RAM [ 1371.905868] 0 pages HighMem/MovableOnly [ 1371.911202] 363849 pages reserved [ 1371.912560] device bridge_slave_1 left promiscuous mode [ 1371.916099] 0 pages cma reserved [ 1371.933341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.953994] device bridge_slave_0 left promiscuous mode [ 1371.970779] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.010491] device veth1_macvtap left promiscuous mode [ 1372.034418] device veth0_macvtap left promiscuous mode [ 1372.055761] device veth1_vlan left promiscuous mode [ 1372.066587] device veth0_vlan left promiscuous mode [ 1372.115278] Bluetooth: hci1 command 0x040f tx timeout [ 1372.296442] device hsr_slave_1 left promiscuous mode [ 1372.311709] device hsr_slave_0 left promiscuous mode [ 1372.351778] team0 (unregistering): Port device team_slave_1 removed [ 1372.374782] team0 (unregistering): Port device team_slave_0 removed [ 1372.397269] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1372.421327] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1372.494508] bond0 (unregistering): Released all slaves [ 1372.554063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1372.566082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1372.631842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1372.672390] device hsr_slave_0 entered promiscuous mode [ 1372.688298] device hsr_slave_1 entered promiscuous mode [ 1372.705834] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1372.730569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1372.741447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1372.800574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1372.829288] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1372.840189] team0: Port device team_slave_0 added [ 1372.857723] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1372.893084] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1372.907115] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1372.914408] team0: Port device team_slave_1 added [ 1372.933577] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1373.080642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1373.093687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1373.185173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1373.216369] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1373.232896] device hsr_slave_0 entered promiscuous mode [ 1373.242600] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1373.253364] CPU: 1 PID: 9785 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1373.253636] device hsr_slave_1 entered promiscuous mode [ 1373.261166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1373.261171] Call Trace: [ 1373.261191] dump_stack+0x1b2/0x281 [ 1373.261205] warn_alloc.cold+0x96/0x1cc [ 1373.261216] ? zone_watermark_ok_safe+0x220/0x220 [ 1373.261239] __alloc_pages_nodemask+0x2127/0x2720 [ 1373.261252] ? _raw_spin_unlock_irq+0x24/0x80 [ 1373.300337] ? lock_acquire+0x170/0x3f0 [ 1373.304341] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1373.309194] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1373.314654] ? __mutex_unlock_slowpath+0x75/0x770 [ 1373.319505] alloc_pages_current+0x155/0x260 [ 1373.323918] ion_page_pool_alloc+0x118/0x1b0 [ 1373.328854] ion_system_heap_allocate+0x133/0x8c0 [ 1373.333700] ? ion_alloc+0x187/0x810 [ 1373.337414] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1373.342869] ? ion_system_contig_heap_create+0x130/0x130 [ 1373.348319] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1373.353351] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1373.358230] ion_alloc+0x204/0x810 [ 1373.361803] ? ion_dma_buf_release+0x40/0x40 [ 1373.366216] ? __might_fault+0x177/0x1b0 [ 1373.370298] ion_ioctl+0xea/0x1f0 [ 1373.373786] ? ion_query_heaps+0x360/0x360 [ 1373.378027] ? ion_query_heaps+0x360/0x360 [ 1373.382295] do_vfs_ioctl+0x75a/0xff0 [ 1373.386098] ? ioctl_preallocate+0x1a0/0x1a0 [ 1373.390775] ? lock_downgrade+0x740/0x740 [ 1373.394934] ? __fget+0x225/0x360 [ 1373.398563] ? do_vfs_ioctl+0xff0/0xff0 [ 1373.402542] ? security_file_ioctl+0x83/0xb0 [ 1373.406956] SyS_ioctl+0x7f/0xb0 [ 1373.410322] ? do_vfs_ioctl+0xff0/0xff0 [ 1373.414298] do_syscall_64+0x1d5/0x640 [ 1373.418188] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1373.423374] RIP: 0033:0x4665d9 [ 1373.426581] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1373.434389] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1373.441662] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1373.448953] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1373.456223] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1373.463497] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1373.471947] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1373.494065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1373.508065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1373.604877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1373.630325] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1373.637449] Bluetooth: hci3 command 0x0419 tx timeout [ 1373.643390] Bluetooth: hci5 command 0x0419 tx timeout [ 1373.659938] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1373.701335] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1373.809680] device hsr_slave_0 entered promiscuous mode [ 1373.830653] device hsr_slave_1 entered promiscuous mode [ 1373.849255] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1373.873501] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1373.938401] Mem-Info: [ 1373.940860] active_anon:12721 inactive_anon:14853 isolated_anon:0 [ 1373.940860] active_file:1894 inactive_file:1871 isolated_file:12 [ 1373.940860] unevictable:0 dirty:26 writeback:0 unstable:0 [ 1373.940860] slab_reclaimable:13824 slab_unreclaimable:114115 [ 1373.940860] mapped:55250 shmem:15121 pagetables:754 bounce:0 [ 1373.940860] free:135728 free_pcp:457 free_cma:0 [ 1373.944745] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1374.024901] Node 0 active_anon:50228kB inactive_anon:43300kB active_file:7532kB inactive_file:7468kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:168040kB dirty:80kB writeback:0kB shmem:44308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1374.092231] Node 1 active_anon:624kB inactive_anon:16112kB active_file:44kB inactive_file:112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52960kB dirty:28kB writeback:0kB shmem:16176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1374.170370] Node 0 DMA free:11120kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1374.205311] Bluetooth: hci1 command 0x0419 tx timeout [ 1374.259008] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1374.269884] Node 0 DMA32 free:45204kB min:36200kB low:45248kB high:54296kB active_anon:50156kB inactive_anon:43300kB active_file:7648kB inactive_file:7396kB unevictable:0kB writepending:96kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2512kB bounce:0kB free_pcp:1048kB local_pcp:512kB free_cma:0kB [ 1374.275576] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1374.342633] lowmem_reserve[]: 0 0 0 0 0 [ 1374.351147] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1374.386716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1374.418444] lowmem_reserve[]: 0 0 0 0 0 [ 1374.422692] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1374.428025] Node 1 Normal free:541944kB min:53696kB low:67120kB high:80544kB active_anon:624kB inactive_anon:16112kB active_file:44kB inactive_file:112kB unevictable:0kB writepending:28kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:416kB bounce:0kB free_pcp:788kB local_pcp:168kB free_cma:0kB [ 1374.448989] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1374.501840] lowmem_reserve[]: 0 0 0 0 0 [ 1374.513167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1374.524898] Node 0 DMA: 1*4kB (E) 0*8kB 30*16kB (UE) 14*32kB (UE) 5*64kB (UE) 3*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11108kB [ 1374.525683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1374.562858] Node 0 DMA32: 1377*4kB (UMEH) 662*8kB (UMEH) 162*16kB (UMEH) 35*32kB (UMEH) 218*64kB (UMH) 101*128kB (UMH) 3*256kB (U) 4*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 45236kB [ 1374.588994] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1374.604502] 8021q: adding VLAN 0 to HW filter on device team0 [ 1374.624955] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1374.649576] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1374.665132] Node 1 Normal: 15*4kB (UM) 38*8kB (UM) 20*16kB (UM) 5902*32kB (UM) 3792*64kB (UM) 596*128kB (U) 102*256kB (U) 44*512kB (U) 30*1024kB (U) 1*2048kB (U) 0*4096kB = 589932kB [ 1374.686901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1374.703804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1374.718762] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1374.729057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.735754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1374.748278] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1374.758320] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1374.765372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1374.784045] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1374.794493] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1374.810048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1374.815896] 18921 total pagecache pages [ 1374.824502] 0 pages in swap cache [ 1374.828554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1374.836275] Swap cache stats: add 0, delete 0, find 0/0 [ 1374.836280] Free swap = 0kB [ 1374.836284] Total swap = 0kB [ 1374.836291] 2097051 pages RAM [ 1374.836295] 0 pages HighMem/MovableOnly [ 1374.836299] 363849 pages reserved [ 1374.836302] 0 pages cma reserved [ 1374.905428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1374.913173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.919594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1374.967659] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1374.995444] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1375.004174] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1375.025156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1375.035730] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1375.045665] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1375.078707] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1375.085519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1375.093429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1375.116213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1375.124697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1375.145437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1375.167338] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1375.198317] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1375.204585] 8021q: adding VLAN 0 to HW filter on device team0 [ 1375.225554] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1375.232677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1375.265759] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1375.275690] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1375.295593] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1375.306801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1375.316720] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1375.323877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1375.335590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1375.343673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1375.375428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1375.383024] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1375.425404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1375.433477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.439922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1375.485479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1375.495075] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1375.501319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1375.527994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1375.538235] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1375.557213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1375.575591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1375.583318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.589835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1375.621226] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1375.638425] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1375.647675] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1375.675258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1375.683211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1375.715535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1375.724013] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1375.747604] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1375.767196] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1375.773292] 8021q: adding VLAN 0 to HW filter on device team0 [ 1375.788934] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1375.810741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1375.828580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1375.848610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1375.857116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1375.888678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1375.896522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.902889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1375.939483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1375.952865] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1375.964222] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1375.985331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1375.992849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1376.025732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1376.045536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1376.065333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1376.085187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.091588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1376.121848] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1376.140850] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1376.159897] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1376.167457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1376.185777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1376.205555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1376.241376] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1376.251247] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1376.263490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1376.278961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1376.299043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1376.321812] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1376.340630] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1376.358966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1376.367214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1376.393070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1376.419001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1376.461346] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1376.498849] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1376.506354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1376.542354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1376.550130] kworker/u4:4 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 1376.565209] kworker/u4:4 cpuset=/ mems_allowed=0-1 [ 1376.581434] CPU: 1 PID: 2880 Comm: kworker/u4:4 Not tainted 4.14.232-syzkaller #0 [ 1376.589078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1376.598442] Workqueue: events_unbound call_usermodehelper_exec_work [ 1376.604849] Call Trace: [ 1376.607442] dump_stack+0x1b2/0x281 [ 1376.611077] dump_header+0x178/0x82f [ 1376.614807] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1376.619916] ? ___ratelimit+0x2cd/0x530 [ 1376.623908] oom_kill_process.cold+0x10/0xa40 [ 1376.628413] ? lock_downgrade+0x740/0x740 [ 1376.632556] out_of_memory+0x2dc/0x1190 [ 1376.636525] ? oom_killer_disable+0x1c0/0x1c0 [ 1376.641026] ? mutex_trylock+0x152/0x1a0 [ 1376.645166] __alloc_pages_nodemask+0x23e1/0x2720 [ 1376.650105] ? mark_held_locks+0xa6/0xf0 [ 1376.654166] ? fprop_reflect_period_percpu.isra.0+0x1c/0x2b0 [ 1376.659976] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1376.664986] ? fs_reclaim_release+0xd0/0x110 [ 1376.669413] ? kmem_cache_alloc_node+0x38b/0x410 [ 1376.674165] copy_process.part.0+0x265/0x71c0 [ 1376.678658] ? __lock_acquire+0x5fc/0x3f20 [ 1376.682902] ? debug_object_activate+0x292/0x490 [ 1376.687741] ? trace_hardirqs_on+0x10/0x10 [ 1376.691965] ? static_obj+0x50/0x50 [ 1376.695587] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1376.701031] ? __cleanup_sighand+0x40/0x40 [ 1376.705261] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1376.710712] _do_fork+0x184/0xc80 [ 1376.714177] ? fork_idle+0x270/0x270 [ 1376.717884] ? mark_held_locks+0xa6/0xf0 [ 1376.721973] ? _raw_spin_unlock_irq+0x24/0x80 [ 1376.726809] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1376.731823] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1376.736306] ? kernel_sigaction+0x13b/0x200 [ 1376.740626] ? recalc_sigpending+0x1d0/0x1d0 [ 1376.745037] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 1376.750570] kernel_thread+0x2f/0x40 [ 1376.754284] call_usermodehelper_exec_work+0x97/0x2a0 [ 1376.759490] ? call_usermodehelper+0x80/0x80 [ 1376.763898] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1376.769356] process_one_work+0x793/0x14a0 [ 1376.773775] ? work_busy+0x320/0x320 [ 1376.777480] ? worker_thread+0x158/0xff0 [ 1376.781547] ? _raw_spin_unlock_irq+0x24/0x80 [ 1376.786044] worker_thread+0x5cc/0xff0 [ 1376.789932] ? rescuer_thread+0xc80/0xc80 [ 1376.794069] kthread+0x30d/0x420 [ 1376.797424] ? kthread_create_on_node+0xd0/0xd0 [ 1376.802107] ret_from_fork+0x24/0x30 [ 1376.820379] Mem-Info: [ 1376.822824] active_anon:12728 inactive_anon:14853 isolated_anon:0 [ 1376.822824] active_file:62 inactive_file:20 isolated_file:4 [ 1376.822824] unevictable:0 dirty:17 writeback:0 unstable:0 [ 1376.822824] slab_reclaimable:13770 slab_unreclaimable:113534 [ 1376.822824] mapped:52905 shmem:15121 pagetables:732 bounce:0 [ 1376.822824] free:25426 free_pcp:73 free_cma:0 [ 1376.858086] Node 0 active_anon:50176kB inactive_anon:43300kB active_file:208kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):16kB mapped:158604kB dirty:4kB writeback:0kB shmem:44308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1376.891365] Node 1 active_anon:736kB inactive_anon:16112kB active_file:40kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:53016kB dirty:64kB writeback:0kB shmem:16176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1376.920006] Node 0 DMA free:11052kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1376.947661] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1376.952818] Node 0 DMA32 free:36116kB min:36200kB low:45248kB high:54296kB active_anon:50176kB inactive_anon:43300kB active_file:520kB inactive_file:356kB unevictable:0kB writepending:104kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2512kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 1376.984274] lowmem_reserve[]: 0 0 0 0 0 [ 1376.988748] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1377.015492] lowmem_reserve[]: 0 0 0 0 0 [ 1377.019626] Node 1 Normal free:53060kB min:53696kB low:67120kB high:80544kB active_anon:640kB inactive_anon:16112kB active_file:44kB inactive_file:0kB unevictable:0kB writepending:100kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:416kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1377.048508] lowmem_reserve[]: 0 0 0 0 0 [ 1377.052526] Node 0 DMA: 1*4kB (E) 1*8kB (U) 23*16kB (UE) 14*32kB (UE) 6*64kB (UE) 3*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11068kB [ 1377.068375] Node 0 DMA32: 1862*4kB (MEH) 837*8kB (UMEH) 240*16kB (UMEH) 63*32kB (MEH) 27*64kB (UMEH) 12*128kB (UMH) 1*256kB (U) 13*512kB (UM) 3*1024kB (U) 1*2048kB (U) 0*4096kB = 35296kB [ 1377.089667] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1377.100845] Node 1 Normal: 37*4kB (M) 35*8kB (UM) 17*16kB (UM) 8*32kB (UM) 2*64kB (UM) 1*128kB (U) 1*256kB (U) 1*512kB (U) 20*1024kB (U) 15*2048kB (U) 0*4096kB = 53180kB [ 1377.119434] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1377.129286] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1377.140419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1377.149692] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1377.161512] 15161 total pagecache pages [ 1377.165868] 0 pages in swap cache [ 1377.169330] Swap cache stats: add 0, delete 0, find 0/0 [ 1377.174698] Free swap = 0kB [ 1377.179958] Total swap = 0kB [ 1377.182985] 2097051 pages RAM [ 1377.186835] 0 pages HighMem/MovableOnly [ 1377.190808] 363849 pages reserved [ 1377.194250] 0 pages cma reserved [ 1377.200205] Out of memory: Kill process 9784 (syz-executor.0) score 1004 or sacrifice child [ 1377.208863] Killed process 9785 (syz-executor.0) total-vm:93516kB, anon-rss:160kB, file-rss:34820kB, shmem-rss:0kB [ 1377.236567] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1377.287165] in:imklog cpuset=/ mems_allowed=0-1 [ 1377.291909] CPU: 0 PID: 9790 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1377.299288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1377.308645] Call Trace: [ 1377.311250] dump_stack+0x1b2/0x281 [ 1377.314888] dump_header+0x178/0x82f [ 1377.318610] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1377.323726] ? ___ratelimit+0x2cd/0x530 [ 1377.327713] oom_kill_process.cold+0x10/0xa40 [ 1377.332243] out_of_memory+0xe3e/0x1190 [ 1377.336255] ? oom_killer_disable+0x1c0/0x1c0 [ 1377.340758] ? mutex_trylock+0x152/0x1a0 [ 1377.344834] __alloc_pages_nodemask+0x23e1/0x2720 [ 1377.349704] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1377.354576] alloc_pages_current+0x155/0x260 [ 1377.358995] filemap_fault+0x11a1/0x1ad0 [ 1377.363073] ext4_filemap_fault+0x84/0xb0 [ 1377.367230] __do_fault+0xfa/0x380 [ 1377.370777] __handle_mm_fault+0x2497/0x4620 [ 1377.375219] ? vm_insert_page+0x7c0/0x7c0 [ 1377.379377] ? lock_downgrade+0x740/0x740 [ 1377.384160] ? mark_held_locks+0xa6/0xf0 [ 1377.388235] handle_mm_fault+0x455/0x9c0 [ 1377.392309] __do_page_fault+0x549/0xad0 [ 1377.396402] ? spurious_fault+0x640/0x640 [ 1377.400558] ? do_page_fault+0x60/0x500 [ 1377.404588] ? page_fault+0x2f/0x50 [ 1377.408246] page_fault+0x45/0x50 [ 1377.411880] RIP: 1fa0:0x1f9f [ 1377.414892] RSP: 0000:00005580ddb709d0 EFLAGS: 7fdabcae1da0 [ 1377.414956] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1377.430999] Mem-Info: [ 1377.447065] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1377.450750] active_anon:12704 inactive_anon:14853 isolated_anon:0 [ 1377.450750] active_file:4 inactive_file:23 isolated_file:0 [ 1377.450750] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1377.450750] slab_reclaimable:13760 slab_unreclaimable:113563 [ 1377.450750] mapped:52885 shmem:15121 pagetables:732 bounce:0 [ 1377.450750] free:13956 free_pcp:67 free_cma:0 [ 1377.452253] CPU: 1 PID: 9785 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1377.485514] Node 0 active_anon:50176kB inactive_anon:43300kB active_file:4kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158580kB dirty:0kB writeback:0kB shmem:44308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1377.493200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1377.521904] Node 1 active_anon:640kB inactive_anon:16112kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52960kB dirty:4kB writeback:0kB shmem:16176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1377.532002] Call Trace: [ 1377.532029] dump_stack+0x1b2/0x281 [ 1377.532042] warn_alloc.cold+0x96/0x1cc [ 1377.532054] ? zone_watermark_ok_safe+0x220/0x220 [ 1377.532064] ? usleep_range+0x130/0x130 [ 1377.532078] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1377.560032] Node 0 [ 1377.562841] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1377.566479] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1377.570397] ? run_timer_softirq+0x5a0/0x5a0 [ 1377.575332] lowmem_reserve[]: [ 1377.579284] __alloc_pages_nodemask+0x2127/0x2720 [ 1377.584452] 0 [ 1377.586785] ? lock_acquire+0x170/0x3f0 [ 1377.586802] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1377.586812] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1377.586829] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1377.591835] 2717 [ 1377.617349] ? alloc_pages_current+0x123/0x260 [ 1377.617360] alloc_pages_current+0x155/0x260 [ 1377.617374] ion_page_pool_alloc+0x118/0x1b0 [ 1377.617385] ion_system_heap_allocate+0x133/0x8c0 [ 1377.622227] 2718 [ 1377.625331] ? ion_alloc+0x187/0x810 [ 1377.625343] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1377.625352] ? ion_system_contig_heap_create+0x130/0x130 [ 1377.625361] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1377.625374] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1377.630194] 2718 [ 1377.631998] ion_alloc+0x204/0x810 [ 1377.636007] 2718 [ 1377.640808] ? ion_dma_buf_release+0x40/0x40 [ 1377.650722] ? __might_fault+0x177/0x1b0 [ 1377.652762] Node 0 [ 1377.657338] ion_ioctl+0xea/0x1f0 [ 1377.657348] ? ion_query_heaps+0x360/0x360 [ 1377.657358] ? ion_query_heaps+0x360/0x360 [ 1377.657369] do_vfs_ioctl+0x75a/0xff0 [ 1377.657380] ? ioctl_preallocate+0x1a0/0x1a0 [ 1377.662041] DMA32 free:18096kB min:36200kB low:45248kB high:54296kB active_anon:50176kB inactive_anon:43300kB active_file:4kB inactive_file:80kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2512kB bounce:0kB free_pcp:148kB local_pcp:36kB free_cma:0kB [ 1377.666450] ? lock_downgrade+0x740/0x740 [ 1377.666465] ? __fget+0x225/0x360 [ 1377.666474] ? do_vfs_ioctl+0xff0/0xff0 [ 1377.666486] ? security_file_ioctl+0x83/0xb0 [ 1377.666500] SyS_ioctl+0x7f/0xb0 [ 1377.671348] lowmem_reserve[]: [ 1377.673532] ? do_vfs_ioctl+0xff0/0xff0 [ 1377.678394] 0 [ 1377.685016] do_syscall_64+0x1d5/0x640 [ 1377.685033] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1377.685044] RIP: 0033:0x4665d9 [ 1377.690493] 0 [ 1377.695839] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1377.695849] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1377.695854] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1377.695858] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1377.695862] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1377.695867] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1377.710381] Mem-Info: [ 1377.729661] 0 [ 1377.736433] active_anon:12704 inactive_anon:14853 isolated_anon:0 [ 1377.736433] active_file:4 inactive_file:23 isolated_file:0 [ 1377.736433] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1377.736433] slab_reclaimable:13760 slab_unreclaimable:113588 [ 1377.736433] mapped:52885 shmem:15121 pagetables:732 bounce:0 [ 1377.736433] free:13956 free_pcp:58 free_cma:0 [ 1377.755654] 0 [ 1377.778054] Node 0 active_anon:50176kB inactive_anon:43300kB active_file:4kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158580kB dirty:0kB writeback:0kB shmem:44308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1377.778073] Node 1 active_anon:640kB inactive_anon:16112kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52960kB dirty:4kB writeback:0kB shmem:16176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1377.796717] 0 [ 1377.796727] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1377.796744] lowmem_reserve[]: 0 0 0 0 0 [ 1377.796761] Node 1 Normal free:26760kB min:53696kB low:67120kB high:80544kB active_anon:640kB inactive_anon:16112kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:416kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1377.796779] lowmem_reserve[]: 0 0 0 0 0 [ 1377.796798] Node 0 DMA: 2*4kB (UE) 0*8kB 17*16kB (UE) 14*32kB (UE) 6*64kB (UE) 3*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 1377.796875] Node 0 DMA32: 1714*4kB (MEH) 787*8kB (MEH) 201*16kB (ME) 34*32kB (UMEH) 5*64kB (UMH) 2*128kB (H) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18032kB [ 1377.796941] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1377.796991] Node 1 Normal: 38*4kB (UM) 34*8kB (UM) 16*16kB (M) 7*32kB (M) 2*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 12*2048kB (U) 0*4096kB = 26760kB [ 1377.797069] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1377.797075] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1377.797081] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1377.797087] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1377.797091] 15161 total pagecache pages [ 1377.797100] 0 pages in swap cache [ 1377.797105] Swap cache stats: add 0, delete 0, find 0/0 [ 1377.797108] Free swap = 0kB [ 1377.797111] Total swap = 0kB [ 1377.797124] 2097051 pages RAM [ 1377.797131] 0 pages HighMem/MovableOnly [ 1377.805382] Node 0 [ 1377.822354] 363849 pages reserved [ 1377.829810] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1377.839198] 0 pages cma reserved [ 1377.839925] lowmem_reserve[]: [ 1377.861437] Out of memory (oom_kill_allocating_task): Kill process 9790 (in:imklog) score 0 or sacrifice child [ 1377.865976] 0 [ 1377.881426] Killed process 9788 (rsyslogd) total-vm:254332kB, anon-rss:412kB, file-rss:0kB, shmem-rss:0kB [ 1378.219742] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1378.245446] oom_reaper: reaped process 9785 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1378.264740] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1378.271619] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1378.284877] 2717 2718 2718 2718 [ 1378.284936] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1378.288270] Node 0 DMA32 free:18064kB min:36200kB low:45248kB high:54296kB active_anon:50076kB inactive_anon:43300kB active_file:44kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7040kB pagetables:2512kB bounce:0kB free_pcp:176kB local_pcp:144kB free_cma:0kB [ 1378.288299] lowmem_reserve[]: 0 [ 1378.306090] in:imklog: [ 1378.331493] oom_reaper: reaped process 9788 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1378.341118] page allocation failure: order:0 [ 1378.352995] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1378.359399] , mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 1378.364429] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1378.383509] in:imklog cpuset=/ mems_allowed=0-1 [ 1378.385360] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1378.390580] syz-executor.2 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1378.401665] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1378.406800] CPU: 0 PID: 9790 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1378.412192] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1378.418303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1378.418307] Call Trace: [ 1378.418325] dump_stack+0x1b2/0x281 [ 1378.418338] warn_alloc.cold+0x96/0x1cc [ 1378.418348] ? zone_watermark_ok_safe+0x220/0x220 [ 1378.418356] ? usleep_range+0x130/0x130 [ 1378.418364] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1378.418375] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1378.418383] ? run_timer_softirq+0x5a0/0x5a0 [ 1378.418396] __alloc_pages_nodemask+0x2127/0x2720 [ 1378.418415] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1378.418439] alloc_pages_current+0x155/0x260 [ 1378.432345] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1378.441633] filemap_fault+0x11a1/0x1ad0 [ 1378.441652] ext4_filemap_fault+0x84/0xb0 [ 1378.441662] __do_fault+0xfa/0x380 [ 1378.441671] __handle_mm_fault+0x2497/0x4620 [ 1378.441681] ? vm_insert_page+0x7c0/0x7c0 [ 1378.441691] ? lock_downgrade+0x740/0x740 [ 1378.441705] ? mark_held_locks+0xa6/0xf0 [ 1378.441715] handle_mm_fault+0x455/0x9c0 [ 1378.455276] 0 [ 1378.456725] __do_page_fault+0x549/0xad0 [ 1378.460761] 0 [ 1378.465859] ? spurious_fault+0x640/0x640 [ 1378.465867] ? do_page_fault+0x60/0x500 [ 1378.465875] ? page_fault+0x2f/0x50 [ 1378.465882] page_fault+0x45/0x50 [ 1378.465889] RIP: 1fa0:0x1f9f [ 1378.465893] RSP: 0000:00005580ddb709d0 EFLAGS: 7fdabcae1da0 [ 1378.482183] (null) [ 1378.494894] 0 [ 1378.511624] , order=0, oom_score_adj=0 [ 1378.514524] 0 [ 1378.525335] syz-executor.2 cpuset= [ 1378.546476] / [ 1378.553820] Node 0 [ 1378.567040] mems_allowed=0-1 [ 1378.574357] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1378.588085] CPU: 0 PID: 9262 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1378.611941] lowmem_reserve[]: [ 1378.615191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1378.615195] Call Trace: [ 1378.615217] dump_stack+0x1b2/0x281 [ 1378.615228] dump_header+0x178/0x82f [ 1378.615239] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1378.615247] ? ___ratelimit+0x2cd/0x530 [ 1378.615257] oom_kill_process.cold+0x10/0xa40 [ 1378.615275] out_of_memory+0xe3e/0x1190 [ 1378.615287] ? oom_killer_disable+0x1c0/0x1c0 [ 1378.615299] ? mutex_trylock+0x152/0x1a0 [ 1378.618999] 0 [ 1378.627807] __alloc_pages_nodemask+0x23e1/0x2720 [ 1378.627828] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1378.627851] alloc_pages_current+0x155/0x260 [ 1378.627862] filemap_fault+0x11a1/0x1ad0 [ 1378.627880] ext4_filemap_fault+0x84/0xb0 [ 1378.627889] __do_fault+0xfa/0x380 [ 1378.627897] __handle_mm_fault+0x2497/0x4620 [ 1378.627906] ? vm_insert_page+0x7c0/0x7c0 [ 1378.627924] ? mark_held_locks+0xa6/0xf0 [ 1378.627935] handle_mm_fault+0x455/0x9c0 [ 1378.627949] __do_page_fault+0x549/0xad0 [ 1378.627959] ? spurious_fault+0x640/0x640 [ 1378.627967] ? do_page_fault+0x60/0x500 [ 1378.627976] ? page_fault+0x2f/0x50 [ 1378.627984] page_fault+0x45/0x50 [ 1378.627990] RIP: 14a4370:0x3 [ 1378.627994] RSP: 14a4320:0000000000000001 EFLAGS: 00000000 [ 1378.642061] Mem-Info: [ 1378.647983] 0 [ 1378.661701] active_anon:12529 inactive_anon:14853 isolated_anon:0 [ 1378.661701] active_file:14 inactive_file:16 isolated_file:0 [ 1378.661701] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1378.661701] slab_reclaimable:13757 slab_unreclaimable:113580 [ 1378.661701] mapped:52875 shmem:15121 pagetables:732 bounce:0 [ 1378.661701] free:14000 free_pcp:214 free_cma:0 [ 1378.664770] 0 [ 1378.673131] Node 0 active_anon:49476kB inactive_anon:43300kB active_file:44kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158540kB dirty:0kB writeback:0kB shmem:44308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1378.681678] 0 [ 1378.699518] Node 1 active_anon:640kB inactive_anon:16112kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52960kB dirty:0kB writeback:0kB shmem:16176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1378.706819] 0 [ 1378.722126] Node 0 [ 1378.739116] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1378.741417] Node 1 [ 1378.743418] lowmem_reserve[]: [ 1378.785543] Normal free:26760kB min:53696kB low:67120kB high:80544kB active_anon:640kB inactive_anon:16112kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:416kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 1378.809524] 0 [ 1378.861693] lowmem_reserve[]: [ 1378.869056] 2717 [ 1378.889586] 0 [ 1378.902845] 2718 [ 1378.916880] 0 [ 1378.918099] 2718 [ 1378.918958] 0 [ 1378.920749] 2718 [ 1378.922817] 0 [ 1378.932723] Node 0 DMA32 free:18272kB min:36200kB low:45248kB high:54296kB active_anon:49476kB inactive_anon:43300kB active_file:44kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7040kB pagetables:2512kB bounce:0kB free_pcp:732kB local_pcp:32kB free_cma:0kB [ 1378.937113] 0 [ 1378.970582] lowmem_reserve[]: [ 1378.972405] 0 0 0 0 0 [ 1378.979052] Node 0 [ 1378.980820] Node 0 [ 1378.980823] DMA: 2*4kB [ 1378.983144] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1378.992121] (UE) [ 1379.015311] lowmem_reserve[]: 0 0 0 0 0 [ 1379.021369] Node 1 Normal free:26760kB min:53696kB low:67120kB high:80544kB active_anon:636kB inactive_anon:16112kB active_file:0kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:416kB bounce:0kB free_pcp:124kB local_pcp:0kB free_cma:0kB [ 1379.031716] 0*8kB [ 1379.055572] lowmem_reserve[]: 0 0 0 0 0 [ 1379.061719] Node 0 DMA: 2*4kB (UE) 0*8kB 17*16kB (UE) 14*32kB (UE) 6*64kB (UE) 3*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 1379.063180] 17*16kB [ 1379.082866] Node 0 DMA32: 1714*4kB (ME) 832*8kB (UMEH) 203*16kB (UMEH) 35*32kB (UME) 5*64kB (UM) 2*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18456kB [ 1379.090150] (UE) [ 1379.105785] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1379.112739] 14*32kB [ 1379.123093] Node 1 [ 1379.123104] (UE) [ 1379.127008] Normal: 38*4kB (UM) 34*8kB (UM) 16*16kB (M) 7*32kB (M) 2*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 12*2048kB (U) 0*4096kB = 26760kB [ 1379.140309] 6*64kB (UE) 3*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 1379.147871] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1379.167413] Node 0 DMA32: 1714*4kB (ME) 832*8kB (UMEH) 203*16kB (UMEH) 35*32kB (UME) 5*64kB (UM) 2*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18456kB [ 1379.168523] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1379.196581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1379.197580] Node 0 [ 1379.208987] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1379.214006] Normal: [ 1379.222492] 15151 total pagecache pages [ 1379.224496] 0*4kB [ 1379.228052] 0 pages in swap cache [ 1379.234543] Swap cache stats: add 0, delete 0, find 0/0 [ 1379.241666] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1379.247308] Free swap = 0kB [ 1379.253795] Total swap = 0kB [ 1379.261187] Node 1 Normal: 38*4kB (UM) 34*8kB (UM) 16*16kB (M) 7*32kB (M) 2*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 12*2048kB (U) 0*4096kB = 26760kB [ 1379.264459] 2097051 pages RAM [ 1379.287268] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1379.287371] 0 pages HighMem/MovableOnly [ 1379.302612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1379.305618] 363849 pages reserved [ 1379.323090] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1379.324841] 0 pages cma reserved [ 1379.334346] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1379.342827] Out of memory (oom_kill_allocating_task): Kill process 9262 (syz-executor.2) score 0 or sacrifice child [ 1379.352974] 15151 total pagecache pages [ 1379.354857] Killed process 9262 (syz-executor.2) total-vm:93120kB, anon-rss:88kB, file-rss:33912kB, shmem-rss:0kB [ 1379.359913] 0 pages in swap cache [ 1379.379040] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1379.421440] Swap cache stats: add 0, delete 0, find 0/0 [ 1379.461299] Free swap = 0kB [ 1379.464348] Total swap = 0kB [ 1379.481583] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1379.482089] 2097051 pages RAM [ 1379.488056] CPU: 0 PID: 9259 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1379.497913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1379.503561] 0 pages HighMem/MovableOnly [ 1379.507270] Call Trace: [ 1379.507291] dump_stack+0x1b2/0x281 [ 1379.507303] dump_header+0x178/0x82f [ 1379.507313] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1379.507322] ? ___ratelimit+0x2cd/0x530 [ 1379.507331] oom_kill_process.cold+0x10/0xa40 [ 1379.507349] out_of_memory+0xe3e/0x1190 [ 1379.507363] ? oom_killer_disable+0x1c0/0x1c0 [ 1379.507370] ? mutex_trylock+0x152/0x1a0 [ 1379.507379] __alloc_pages_nodemask+0x23e1/0x2720 [ 1379.507398] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1379.507422] alloc_pages_current+0x155/0x260 [ 1379.507432] filemap_fault+0x11a1/0x1ad0 [ 1379.507453] ext4_filemap_fault+0x84/0xb0 [ 1379.507463] __do_fault+0xfa/0x380 [ 1379.507474] __handle_mm_fault+0x2497/0x4620 [ 1379.524477] 363849 pages reserved [ 1379.526490] ? vm_insert_page+0x7c0/0x7c0 [ 1379.526508] ? mark_held_locks+0xa6/0xf0 [ 1379.526518] handle_mm_fault+0x455/0x9c0 [ 1379.526530] __do_page_fault+0x549/0xad0 [ 1379.526543] ? spurious_fault+0x640/0x640 [ 1379.526551] ? do_page_fault+0x60/0x500 [ 1379.526560] ? page_fault+0x2f/0x50 [ 1379.526571] page_fault+0x45/0x50 [ 1379.530543] 0 pages cma reserved [ 1379.535126] RIP: 4bf7e5:0x3 [ 1379.535131] RSP: 0000:00000000004bf7e5 EFLAGS: 00000000 [ 1379.544861] Mem-Info: [ 1379.630901] active_anon:12528 inactive_anon:14853 isolated_anon:0 [ 1379.630901] active_file:52 inactive_file:170 isolated_file:0 [ 1379.630901] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1379.630901] slab_reclaimable:13754 slab_unreclaimable:113559 [ 1379.630901] mapped:52900 shmem:15121 pagetables:695 bounce:0 [ 1379.630901] free:26493 free_pcp:101 free_cma:0 [ 1379.684515] Node 0 active_anon:49476kB inactive_anon:43300kB active_file:196kB inactive_file:3668kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160340kB dirty:0kB writeback:0kB shmem:44308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1379.724074] Node 1 active_anon:636kB inactive_anon:16112kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52960kB dirty:0kB writeback:0kB shmem:16176kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1379.770893] Node 0 DMA free:11112kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:120kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1379.890211] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1379.897876] Node 0 DMA32 free:350080kB min:36200kB low:45248kB high:54296kB active_anon:49676kB inactive_anon:43300kB active_file:2160kB inactive_file:7628kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7040kB pagetables:2512kB bounce:0kB free_pcp:456kB local_pcp:340kB free_cma:0kB [ 1379.959899] lowmem_reserve[]: 0 0 0 0 0 [ 1379.986429] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1380.114892] lowmem_reserve[]: 0 0 0 0 0 [ 1380.119261] Node 1 Normal free:285856kB min:53696kB low:67120kB high:80544kB active_anon:636kB inactive_anon:16112kB active_file:52kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:416kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1380.121011] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1380.204913] lowmem_reserve[]: 0 0 0 0 0 [ 1380.209393] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 4*16kB (UE) 3*32kB (UE) 10*64kB (UE) 7*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11952kB [ 1380.258301] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1380.275472] Node 0 DMA32: 1525*4kB (UME) 683*8kB (UEH) 646*16kB (UEH) 434*32kB (UE) 2257*64kB (UMH) 548*128kB (UMH) 90*256kB (UH) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 273420kB [ 1380.292623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1380.305603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 00:40:19 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) [ 1380.359620] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1380.379306] Node 1 Normal: 41*4kB (UM) 52*8kB (UM) 29*16kB (UM) 19*32kB (UM) 3523*64kB (UM) 319*128kB (U) 48*256kB (U) 22*512kB (U) 27*1024kB (U) 10*2048kB (U) 0*4096kB = 339636kB [ 1380.433435] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1380.456458] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1380.458834] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready 00:40:19 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) [ 1380.484905] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1380.488772] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1380.493625] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 00:40:19 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) [ 1380.530927] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1380.555341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1380.563945] 19341 total pagecache pages [ 1380.564718] device veth0_vlan entered promiscuous mode 00:40:19 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) [ 1380.604994] 0 pages in swap cache [ 1380.610524] Swap cache stats: add 0, delete 0, find 0/0 [ 1380.617676] Free swap = 0kB [ 1380.624100] Total swap = 0kB [ 1380.627752] device veth1_vlan entered promiscuous mode [ 1380.632141] 2097051 pages RAM [ 1380.643128] 0 pages HighMem/MovableOnly [ 1380.646250] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1380.662516] 363849 pages reserved [ 1380.667266] 0 pages cma reserved [ 1380.671723] Out of memory (oom_kill_allocating_task): Kill process 9259 (syz-executor.1) score 0 or sacrifice child [ 1380.686103] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1380.696795] Killed process 9259 (syz-executor.1) total-vm:93120kB, anon-rss:84kB, file-rss:32796kB, shmem-rss:0kB [ 1380.722898] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1380.748575] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1380.778987] device veth0_macvtap entered promiscuous mode [ 1380.786746] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1380.814141] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1380.818671] device veth1_macvtap entered promiscuous mode [ 1380.826373] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1380.837405] CPU: 0 PID: 9785 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1380.845301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1380.846419] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1380.854682] Call Trace: [ 1380.854707] dump_stack+0x1b2/0x281 [ 1380.867143] warn_alloc.cold+0x96/0x1cc [ 1380.871118] ? zone_watermark_ok_safe+0x220/0x220 [ 1380.875976] __alloc_pages_nodemask+0x2127/0x2720 [ 1380.880818] ? __schedule+0x893/0x1de0 [ 1380.884710] ? lock_acquire+0x170/0x3f0 [ 1380.888605] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1380.888684] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1380.900528] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1380.906128] ? __mutex_unlock_slowpath+0x75/0x770 [ 1380.911118] alloc_pages_current+0x155/0x260 [ 1380.915530] ion_page_pool_alloc+0x118/0x1b0 [ 1380.919939] ion_system_heap_allocate+0x133/0x8c0 [ 1380.920466] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1380.924783] ? _raw_spin_unlock+0x29/0x40 [ 1380.935871] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1380.940803] ? ion_system_contig_heap_create+0x130/0x130 [ 1380.946267] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1380.947620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1380.951726] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1380.966453] ion_alloc+0x27a/0x810 [ 1380.970001] ? ion_dma_buf_release+0x40/0x40 [ 1380.974416] ? __might_fault+0x177/0x1b0 [ 1380.978482] ion_ioctl+0xea/0x1f0 [ 1380.982018] ? ion_query_heaps+0x360/0x360 [ 1380.985608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1380.986253] ? ion_query_heaps+0x360/0x360 [ 1380.999856] do_vfs_ioctl+0x75a/0xff0 [ 1381.003888] ? ioctl_preallocate+0x1a0/0x1a0 [ 1381.005643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1381.008301] ? lock_downgrade+0x740/0x740 [ 1381.022196] ? __fget+0x225/0x360 [ 1381.025680] ? do_vfs_ioctl+0xff0/0xff0 [ 1381.029661] ? security_file_ioctl+0x83/0xb0 [ 1381.034073] SyS_ioctl+0x7f/0xb0 [ 1381.037440] ? do_vfs_ioctl+0xff0/0xff0 [ 1381.037461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1381.041419] do_syscall_64+0x1d5/0x640 [ 1381.055725] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1381.060919] RIP: 0033:0x4665d9 [ 1381.064120] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1381.066835] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1381.074514] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1381.074524] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1381.096539] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1381.104790] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1381.105752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1381.113227] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1381.138071] warn_alloc_show_mem: 1 callbacks suppressed [ 1381.138075] Mem-Info: [ 1381.147108] active_anon:12774 inactive_anon:14852 isolated_anon:0 [ 1381.147108] active_file:1260 inactive_file:2947 isolated_file:0 [ 1381.147108] unevictable:0 dirty:32 writeback:0 unstable:0 [ 1381.147108] slab_reclaimable:13686 slab_unreclaimable:114254 [ 1381.147108] mapped:55584 shmem:15120 pagetables:679 bounce:0 [ 1381.147108] free:116671 free_pcp:393 free_cma:0 [ 1381.169870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1381.192021] Node 0 active_anon:50508kB inactive_anon:43300kB active_file:5032kB inactive_file:11776kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:169376kB dirty:128kB writeback:0kB shmem:44308kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1381.215548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1381.222895] Node 1 active_anon:588kB inactive_anon:16108kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52960kB dirty:0kB writeback:0kB shmem:16172kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1381.255550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1381.258467] Node 0 DMA free:11112kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:56kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1381.275560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1381.294515] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1381.308589] Node 0 DMA32 free:433772kB min:36200kB low:45248kB high:54296kB active_anon:50508kB inactive_anon:43300kB active_file:4960kB inactive_file:11720kB unevictable:0kB writepending:176kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2388kB bounce:0kB free_pcp:728kB local_pcp:92kB free_cma:0kB [ 1381.339273] lowmem_reserve[]: 0 0 0 0 0 [ 1381.343360] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1381.359437] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1381.370799] lowmem_reserve[]: 0 0 0 0 0 [ 1381.380167] Node 1 Normal free:130680kB min:53696kB low:67120kB high:80544kB active_anon:588kB inactive_anon:16108kB active_file:8kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:328kB bounce:0kB free_pcp:676kB local_pcp:0kB free_cma:0kB [ 1381.398618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1381.411213] lowmem_reserve[]: 0 0 0 0 0 [ 1381.422914] Node 0 DMA: 31*4kB (UE) 4*8kB (U) 4*16kB (UE) 3*32kB (UE) 1*64kB (E) 4*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11132kB [ 1381.444072] Node 0 DMA32: 18320*4kB (UMEH) 11291*8kB (UMEH) 6463*16kB (UMEH) 5122*32kB (UMEH) 823*64kB (UMH) 28*128kB (UH) 4*256kB (UH) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 488200kB [ 1381.472064] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1381.487998] Node 1 Normal: 11964*4kB (UM) 6219*8kB (UM) 2427*16kB (UM) 349*32kB (UM) 65*64kB (UM) 12*128kB (UM) 4*256kB (U) 44*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 176856kB [ 1381.510490] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1381.526133] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1381.538755] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1381.548583] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1381.561129] 19346 total pagecache pages [ 1381.565626] 0 pages in swap cache [ 1381.569104] Swap cache stats: add 0, delete 0, find 0/0 [ 1381.574546] Free swap = 0kB [ 1381.581472] Total swap = 0kB [ 1381.584518] 2097051 pages RAM [ 1381.592824] 0 pages HighMem/MovableOnly [ 1381.600752] 363849 pages reserved [ 1381.604213] 0 pages cma reserved [ 1383.638161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1383.647209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1383.656268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1383.663668] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1383.671887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1383.680040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1383.688814] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1383.696495] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1383.706251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1383.714786] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1383.722594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1383.731616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1383.738873] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1383.746985] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1383.759605] IPVS: ftp: loaded support on port[0] = 21 [ 1383.817769] syz-executor.1 (9259) used greatest stack depth: 23896 bytes left 00:40:23 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:40:23 executing program 2: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2) 00:40:23 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) [ 1384.400981] chnl_net:caif_netlink_parms(): no params data found [ 1384.637302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.656848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.678807] device bridge_slave_0 entered promiscuous mode [ 1384.702839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.722277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.742550] device bridge_slave_1 entered promiscuous mode [ 1384.830079] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1384.851429] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1384.920859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1384.946675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1384.963460] device bridge_slave_1 left promiscuous mode [ 1384.995142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.003603] device bridge_slave_0 left promiscuous mode [ 1385.015144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.171464] device hsr_slave_1 left promiscuous mode [ 1385.193466] device hsr_slave_0 left promiscuous mode [ 1385.232951] team0 (unregistering): Port device team_slave_1 removed [ 1385.254033] team0 (unregistering): Port device team_slave_0 removed [ 1385.271156] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1385.282421] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1385.349637] bond0 (unregistering): Released all slaves [ 1385.356955] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1385.397447] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1385.413419] team0: Port device team_slave_0 added [ 1385.419531] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1385.422467] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1385.434954] CPU: 1 PID: 10029 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1385.442863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1385.452250] Call Trace: [ 1385.455024] dump_stack+0x1b2/0x281 [ 1385.458662] warn_alloc.cold+0x96/0x1cc [ 1385.462641] ? zone_watermark_ok_safe+0x220/0x220 [ 1385.467501] __alloc_pages_nodemask+0x2127/0x2720 [ 1385.472352] ? __schedule+0x893/0x1de0 [ 1385.476358] ? lock_acquire+0x170/0x3f0 [ 1385.480340] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1385.485205] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1385.490682] ? __mutex_unlock_slowpath+0x75/0x770 [ 1385.495529] alloc_pages_current+0x155/0x260 [ 1385.499949] ion_page_pool_alloc+0x118/0x1b0 [ 1385.504361] ion_system_heap_allocate+0x133/0x8c0 [ 1385.509226] ? ion_alloc+0x187/0x810 [ 1385.513143] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1385.518596] ? ion_system_contig_heap_create+0x130/0x130 [ 1385.524052] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1385.529103] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1385.533959] ion_alloc+0x204/0x810 [ 1385.537540] ? ion_dma_buf_release+0x40/0x40 [ 1385.541954] ? __might_fault+0x177/0x1b0 [ 1385.546014] ion_ioctl+0xea/0x1f0 [ 1385.550440] ? ion_query_heaps+0x360/0x360 [ 1385.554777] ? ion_query_heaps+0x360/0x360 [ 1385.559010] do_vfs_ioctl+0x75a/0xff0 [ 1385.562821] ? ioctl_preallocate+0x1a0/0x1a0 [ 1385.567227] ? lock_downgrade+0x740/0x740 [ 1385.571378] ? __fget+0x225/0x360 [ 1385.574831] ? do_vfs_ioctl+0xff0/0xff0 [ 1385.578805] ? security_file_ioctl+0x83/0xb0 [ 1385.583214] SyS_ioctl+0x7f/0xb0 [ 1385.586575] ? do_vfs_ioctl+0xff0/0xff0 [ 1385.590550] do_syscall_64+0x1d5/0x640 [ 1385.594465] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1385.599662] RIP: 0033:0x4665d9 [ 1385.602855] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1385.610564] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1385.617833] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1385.625140] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1385.632413] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1385.640382] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1385.665605] team0: Port device team_slave_1 added [ 1385.708675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1385.718680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1385.748937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1385.754326] Bluetooth: hci0 command 0x0409 tx timeout [ 1385.761175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1385.776789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1385.807522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1385.836892] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1385.856481] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1385.920313] device hsr_slave_0 entered promiscuous mode [ 1385.937752] device hsr_slave_1 entered promiscuous mode [ 1385.956932] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1385.987031] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1386.018586] Mem-Info: [ 1386.023536] active_anon:13306 inactive_anon:14852 isolated_anon:0 [ 1386.023536] active_file:1850 inactive_file:5666 isolated_file:0 [ 1386.023536] unevictable:0 dirty:97 writeback:0 unstable:0 [ 1386.023536] slab_reclaimable:13650 slab_unreclaimable:112439 [ 1386.023536] mapped:57935 shmem:15117 pagetables:693 bounce:0 [ 1386.023536] free:507351 free_pcp:146 free_cma:0 [ 1386.096151] Node 0 active_anon:52912kB inactive_anon:43308kB active_file:7420kB inactive_file:22772kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208192kB dirty:408kB writeback:0kB shmem:44304kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1386.155250] Node 1 active_anon:368kB inactive_anon:16100kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23604kB dirty:12kB writeback:0kB shmem:16164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1386.213232] Node 0 DMA free:11492kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1386.249777] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1386.255366] Node 0 DMA32 free:1525636kB min:36200kB low:45248kB high:54296kB active_anon:52812kB inactive_anon:43308kB active_file:7332kB inactive_file:22772kB unevictable:0kB writepending:408kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2672kB bounce:0kB free_pcp:940kB local_pcp:836kB free_cma:0kB [ 1386.287214] lowmem_reserve[]: 0 0 0 0 0 [ 1386.287509] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1386.291271] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1386.325329] lowmem_reserve[]: 0 0 0 0 0 [ 1386.329393] Node 1 Normal free:875692kB min:53696kB low:67120kB high:80544kB active_anon:368kB inactive_anon:16100kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:248kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1386.359364] lowmem_reserve[]: 0 0 0 0 0 [ 1386.363429] Node 0 DMA: 13*4kB (UE) 34*8kB (UM) 28*16kB (UE) 23*32kB (UME) 12*64kB (UE) 10*128kB (UME) 5*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 0*4096kB = 11492kB [ 1386.380530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1386.381345] Node 0 DMA32: 1439*4kB (UEH) 12040*8kB (UMEH) 13153*16kB (UEH) 9430*32kB (UEH) 1549*64kB (UMEH) 3023*128kB (UMH) 1156*256kB (UH) 248*512kB (UH) 2*1024kB (U) 0*2048kB 0*4096kB = 1525324kB [ 1386.391793] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1386.422267] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1386.427627] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1386.440615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1386.458585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1386.465527] Node 1 Normal: 2863*4kB (UM) 3358*8kB (UM) 2826*16kB (U) 2533*32kB (U) 6260*64kB (U) 2326*128kB (U) 48*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 875756kB [ 1386.489607] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1386.498956] 8021q: adding VLAN 0 to HW filter on device team0 [ 1386.508445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1386.520966] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1386.530380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1386.541428] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1386.551405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1386.561545] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1386.571797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.578215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1386.589266] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1386.599424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1386.607381] 22545 total pagecache pages [ 1386.613308] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1386.623750] 0 pages in swap cache [ 1386.632391] Swap cache stats: add 0, delete 0, find 0/0 [ 1386.639260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1386.648411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1386.649573] Free swap = 0kB [ 1386.662596] Total swap = 0kB [ 1386.665308] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.670547] 2097051 pages RAM [ 1386.672123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1386.679147] 0 pages HighMem/MovableOnly [ 1386.695288] 363849 pages reserved [ 1386.698750] 0 pages cma reserved [ 1386.704868] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1386.714557] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1386.735792] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1386.743750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1386.768310] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1386.775524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1386.783444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1386.805795] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1386.815656] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1386.831143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1386.849471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1386.873265] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1386.884590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1386.898766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1386.921673] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1386.932021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1386.947253] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1386.953400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1386.964545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1386.976778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1386.993896] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1387.003331] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1387.011522] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1387.019598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1387.032561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1387.133433] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1387.144663] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1387.157879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1387.168116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1387.224537] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1387.233958] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1387.244254] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1387.259231] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1387.267949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1387.279546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1387.291322] device veth0_vlan entered promiscuous mode [ 1387.306733] device veth1_vlan entered promiscuous mode [ 1387.313936] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1387.331602] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1387.357147] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1387.369668] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1387.392605] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1387.438436] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1387.457954] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1387.475261] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1387.482998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1387.494664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1387.505633] device veth0_macvtap entered promiscuous mode [ 1387.511979] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1387.527970] device veth1_macvtap entered promiscuous mode [ 1387.534459] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1387.549964] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1387.563926] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1387.587371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1387.601881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.613428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1387.628893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.638148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1387.652586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.669473] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1387.676595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1387.683646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1387.697757] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1387.707974] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1387.722230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1387.738791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1387.757352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.768855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1387.781272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.794371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1387.805007] Bluetooth: hci0 command 0x041b tx timeout [ 1387.811979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.823742] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1387.835221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1387.842575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1387.855839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 00:40:27 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) 00:40:27 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 1388.161432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1388.171092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1388.180895] device bridge_slave_1 left promiscuous mode [ 1388.187858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.197577] device bridge_slave_0 left promiscuous mode [ 1388.204004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.281649] device hsr_slave_1 left promiscuous mode [ 1388.290492] device hsr_slave_0 left promiscuous mode [ 1388.311360] team0 (unregistering): Port device team_slave_1 removed [ 1388.337834] team0 (unregistering): Port device team_slave_0 removed [ 1388.362485] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1388.389220] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1388.427839] bond0 (unregistering): Released all slaves [ 1388.669418] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1388.695393] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1388.700576] CPU: 1 PID: 10257 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1388.708506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1388.717872] Call Trace: [ 1388.720477] dump_stack+0x1b2/0x281 [ 1388.724109] warn_alloc.cold+0x96/0x1cc [ 1388.728092] ? zone_watermark_ok_safe+0x220/0x220 [ 1388.733151] __alloc_pages_nodemask+0x2127/0x2720 [ 1388.737999] ? lock_acquire+0x170/0x3f0 [ 1388.741973] ? lock_acquire+0x170/0x3f0 [ 1388.745953] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1388.750807] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1388.756264] ? __mutex_unlock_slowpath+0x75/0x770 [ 1388.761114] ? retint_kernel+0x2d/0x2d [ 1388.765047] alloc_pages_current+0x155/0x260 [ 1388.769500] ion_page_pool_alloc+0x118/0x1b0 [ 1388.773923] ion_system_heap_allocate+0x133/0x8c0 [ 1388.778780] ? ion_alloc+0x187/0x810 [ 1388.782504] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1388.787981] ? ion_system_contig_heap_create+0x130/0x130 [ 1388.793454] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1388.798511] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1388.803374] ion_alloc+0x204/0x810 [ 1388.806964] ? ion_dma_buf_release+0x40/0x40 [ 1388.811392] ? __might_fault+0x177/0x1b0 [ 1388.815467] ion_ioctl+0xea/0x1f0 [ 1388.818934] ? ion_query_heaps+0x360/0x360 [ 1388.823183] ? ion_query_heaps+0x360/0x360 [ 1388.827454] do_vfs_ioctl+0x75a/0xff0 [ 1388.831270] ? ioctl_preallocate+0x1a0/0x1a0 [ 1388.835687] ? lock_downgrade+0x740/0x740 [ 1388.839856] ? __fget+0x225/0x360 [ 1388.843318] ? do_vfs_ioctl+0xff0/0xff0 [ 1388.847324] ? security_file_ioctl+0x83/0xb0 [ 1388.851753] SyS_ioctl+0x7f/0xb0 [ 1388.855139] ? do_vfs_ioctl+0xff0/0xff0 [ 1388.859122] do_syscall_64+0x1d5/0x640 [ 1388.863027] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1388.868226] RIP: 0033:0x4665d9 [ 1388.871431] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1388.879171] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1388.886477] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1388.893756] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1388.901068] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1388.908377] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1389.155606] Mem-Info: [ 1389.158078] active_anon:13359 inactive_anon:14857 isolated_anon:0 [ 1389.158078] active_file:1874 inactive_file:5763 isolated_file:0 [ 1389.158078] unevictable:0 dirty:131 writeback:0 unstable:0 [ 1389.158078] slab_reclaimable:13639 slab_unreclaimable:112478 [ 1389.158078] mapped:58001 shmem:15125 pagetables:757 bounce:0 [ 1389.158078] free:106779 free_pcp:51 free_cma:0 [ 1389.225295] Node 0 active_anon:53096kB inactive_anon:43328kB active_file:7476kB inactive_file:23052kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208400kB dirty:500kB writeback:0kB shmem:44336kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1389.284997] Node 1 active_anon:340kB inactive_anon:16100kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23604kB dirty:24kB writeback:0kB shmem:16164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1389.342120] Node 0 DMA free:11092kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1389.395063] Bluetooth: hci5 command 0x0409 tx timeout [ 1389.395298] Bluetooth: hci1 command 0x0409 tx timeout [ 1389.416190] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1389.429390] Node 0 DMA32 free:63576kB min:36200kB low:45248kB high:54296kB active_anon:53096kB inactive_anon:43328kB active_file:7388kB inactive_file:23052kB unevictable:0kB writepending:500kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2780kB bounce:0kB free_pcp:660kB local_pcp:0kB free_cma:0kB [ 1389.503101] lowmem_reserve[]: 0 0 0 0 0 [ 1389.513162] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1389.571176] lowmem_reserve[]: 0 0 0 0 0 [ 1389.575884] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1389.582672] Node 1 Normal free:163652kB min:53696kB low:67120kB high:80544kB active_anon:340kB inactive_anon:16100kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:248kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1389.604872] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1389.643102] CPU: 0 PID: 10273 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1389.651459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1389.660191] lowmem_reserve[]: [ 1389.660911] Call Trace: [ 1389.660914] 0 0 [ 1389.664028] dump_stack+0x1b2/0x281 [ 1389.664046] warn_alloc.cold+0x96/0x1cc [ 1389.673286] 0 [ 1389.676178] ? zone_watermark_ok_safe+0x220/0x220 [ 1389.676201] __alloc_pages_nodemask+0x2127/0x2720 [ 1389.676218] ? lock_acquire+0x170/0x3f0 [ 1389.676232] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1389.676250] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1389.676262] ? __mutex_unlock_slowpath+0x75/0x770 [ 1389.676273] ? alloc_pages_current+0x21c/0x260 [ 1389.676283] alloc_pages_current+0x155/0x260 [ 1389.676297] ion_page_pool_alloc+0x118/0x1b0 [ 1389.683351] 0 [ 1389.687752] ion_system_heap_allocate+0x133/0x8c0 [ 1389.687762] ? ion_alloc+0x187/0x810 [ 1389.687772] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1389.687780] ? ion_system_contig_heap_create+0x130/0x130 [ 1389.687791] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1389.687802] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1389.687813] ion_alloc+0x204/0x810 [ 1389.687825] ? ion_dma_buf_release+0x40/0x40 [ 1389.687837] ? __might_fault+0x177/0x1b0 [ 1389.699015] 0 [ 1389.702106] ion_ioctl+0xea/0x1f0 [ 1389.702117] ? ion_query_heaps+0x360/0x360 [ 1389.720569] ? ion_query_heaps+0x360/0x360 [ 1389.724575] Node 0 [ 1389.727192] do_vfs_ioctl+0x75a/0xff0 [ 1389.727205] ? ioctl_preallocate+0x1a0/0x1a0 [ 1389.727215] ? lock_downgrade+0x740/0x740 [ 1389.727228] ? __fget+0x225/0x360 [ 1389.727237] ? do_vfs_ioctl+0xff0/0xff0 [ 1389.727248] ? security_file_ioctl+0x83/0xb0 [ 1389.727258] SyS_ioctl+0x7f/0xb0 [ 1389.727265] ? do_vfs_ioctl+0xff0/0xff0 [ 1389.727281] do_syscall_64+0x1d5/0x640 [ 1389.734339] DMA: [ 1389.736455] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1389.736464] RIP: 0033:0x4665d9 [ 1389.736468] RSP: 002b:00007f62027c1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1389.736478] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1389.736484] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1389.736489] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1389.736493] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1389.736498] R13: 00007ffc4c66559f R14: 00007f62027c1300 R15: 0000000000022000 [ 1389.874948] Bluetooth: hci0 command 0x040f tx timeout [ 1389.876574] 13*4kB (UE) 23*8kB (UM) 28*16kB (UE) 23*32kB (UME) 1*64kB (E) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11084kB [ 1389.897958] Node 0 DMA32: 1353*4kB (MEH) 11680*8kB (UMEH) 12764*16kB (UMEH) 3564*32kB (UEH) 54*64kB (UH) 3*128kB (H) 2*256kB (H) 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 421988kB [ 1389.914263] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1389.928527] Node 1 Normal: 2860*4kB (U) 3229*8kB (U) 2827*16kB (U) 2534*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 163592kB [ 1389.942299] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1389.961455] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1389.984896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1389.993774] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1390.024449] 22639 total pagecache pages [ 1390.037594] 0 pages in swap cache [ 1390.041076] Swap cache stats: add 0, delete 0, find 0/0 [ 1390.056802] Free swap = 0kB [ 1390.059850] Total swap = 0kB [ 1390.062865] 2097051 pages RAM [ 1390.076944] 0 pages HighMem/MovableOnly [ 1390.080943] 363849 pages reserved [ 1390.084393] 0 pages cma reserved [ 1390.281796] IPVS: ftp: loaded support on port[0] = 21 [ 1390.403698] IPVS: ftp: loaded support on port[0] = 21 00:40:29 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) socket$can_bcm(0x1d, 0x2, 0x2) 00:40:29 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 00:40:29 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) 00:40:29 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) 00:40:29 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) 00:40:29 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) 00:40:29 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) [ 1390.702545] chnl_net:caif_netlink_parms(): no params data found [ 1390.738654] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1390.790741] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1390.817653] CPU: 0 PID: 10389 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1390.825582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1390.835029] Call Trace: [ 1390.837626] dump_stack+0x1b2/0x281 [ 1390.841265] warn_alloc.cold+0x96/0x1cc [ 1390.845256] ? zone_watermark_ok_safe+0x220/0x220 [ 1390.850147] __alloc_pages_nodemask+0x2127/0x2720 [ 1390.855543] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1390.860039] ? finish_task_switch+0x178/0x610 [ 1390.864536] ? finish_task_switch+0x14d/0x610 [ 1390.869053] ? lock_acquire+0x170/0x3f0 [ 1390.873056] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1390.877922] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1390.883382] ? __mutex_unlock_slowpath+0x75/0x770 [ 1390.888244] ? alloc_pages_current+0x73/0x260 [ 1390.892955] alloc_pages_current+0x155/0x260 [ 1390.897380] ion_page_pool_alloc+0x118/0x1b0 [ 1390.901889] ion_system_heap_allocate+0x133/0x8c0 [ 1390.907146] ? ion_alloc+0x187/0x810 [ 1390.910889] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1390.916363] ? ion_system_contig_heap_create+0x130/0x130 [ 1390.921830] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1390.926857] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1390.931755] ion_alloc+0x204/0x810 [ 1390.935422] ? ion_dma_buf_release+0x40/0x40 [ 1390.939843] ? __might_fault+0x177/0x1b0 [ 1390.943915] ion_ioctl+0xea/0x1f0 [ 1390.947385] ? ion_query_heaps+0x360/0x360 [ 1390.951634] ? ion_query_heaps+0x360/0x360 [ 1390.955881] do_vfs_ioctl+0x75a/0xff0 [ 1390.959684] ? ioctl_preallocate+0x1a0/0x1a0 [ 1390.964196] ? lock_downgrade+0x740/0x740 [ 1390.968367] ? __fget+0x225/0x360 [ 1390.971833] ? do_vfs_ioctl+0xff0/0xff0 [ 1390.975817] ? security_file_ioctl+0x83/0xb0 [ 1390.980232] SyS_ioctl+0x7f/0xb0 [ 1390.983777] ? do_vfs_ioctl+0xff0/0xff0 [ 1390.987761] do_syscall_64+0x1d5/0x640 [ 1390.991667] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1390.996867] RIP: 0033:0x4665d9 [ 1391.000739] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1391.008977] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1391.016276] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1391.023548] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1391.030821] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1391.033203] chnl_net:caif_netlink_parms(): no params data found [ 1391.038104] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1391.257146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.263619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.295928] device bridge_slave_0 entered promiscuous mode [ 1391.305769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.315378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.322723] device bridge_slave_1 entered promiscuous mode [ 1391.438763] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1391.456247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.462641] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.474934] Bluetooth: hci1 command 0x041b tx timeout [ 1391.483776] device bridge_slave_0 entered promiscuous mode [ 1391.486902] Bluetooth: hci5 command 0x041b tx timeout [ 1391.501396] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1391.562807] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.569776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.586780] device bridge_slave_1 entered promiscuous mode [ 1391.593381] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1391.619167] team0: Port device team_slave_0 added [ 1391.625506] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1391.645475] team0: Port device team_slave_1 added [ 1391.653164] warn_alloc_show_mem: 1 callbacks suppressed [ 1391.653168] Mem-Info: [ 1391.679179] active_anon:13410 inactive_anon:14857 isolated_anon:0 [ 1391.679179] active_file:1884 inactive_file:5763 isolated_file:0 [ 1391.679179] unevictable:0 dirty:146 writeback:0 unstable:0 [ 1391.679179] slab_reclaimable:13564 slab_unreclaimable:112244 [ 1391.679179] mapped:58049 shmem:15125 pagetables:783 bounce:0 [ 1391.679179] free:61221 free_pcp:171 free_cma:0 [ 1391.721543] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1391.760306] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1391.778474] Node 0 active_anon:53180kB inactive_anon:43328kB active_file:7516kB inactive_file:23036kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208592kB dirty:544kB writeback:0kB shmem:44336kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1391.841866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1391.856051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1391.875274] Node 1 active_anon:460kB inactive_anon:16100kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23604kB dirty:40kB writeback:0kB shmem:16164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1391.938711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1391.955144] Node 0 DMA free:11100kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1391.964921] Bluetooth: hci0 command 0x0419 tx timeout [ 1391.997379] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1392.010153] team0: Port device team_slave_0 added [ 1392.028154] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1392.029453] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1392.056367] Node 0 DMA32 free:44548kB min:36200kB low:45248kB high:54296kB active_anon:53180kB inactive_anon:43328kB active_file:7428kB inactive_file:23036kB unevictable:0kB writepending:544kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:2884kB bounce:0kB free_pcp:316kB local_pcp:268kB free_cma:0kB [ 1392.068574] team0: Port device team_slave_1 added [ 1392.130785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.139455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1392.170323] lowmem_reserve[]: 0 0 0 0 0 [ 1392.179002] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1392.211795] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1392.232706] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1392.234996] lowmem_reserve[]: 0 0 0 0 0 [ 1392.241962] Node 1 Normal free:53712kB min:53696kB low:67120kB high:80544kB active_anon:368kB inactive_anon:16100kB active_file:20kB inactive_file:28kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:252kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1392.247597] CPU: 0 PID: 10383 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1392.281586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1392.285029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.292183] Call Trace: [ 1392.305854] dump_stack+0x1b2/0x281 [ 1392.309511] warn_alloc.cold+0x96/0x1cc [ 1392.313498] ? zone_watermark_ok_safe+0x220/0x220 [ 1392.318629] __alloc_pages_nodemask+0x2127/0x2720 [ 1392.323566] ? io_schedule_timeout+0x140/0x140 [ 1392.326098] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1392.328165] ? lock_acquire+0x170/0x3f0 [ 1392.339200] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1392.344254] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1392.349270] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1392.349722] ? __mutex_unlock_slowpath+0x75/0x770 [ 1392.361416] alloc_pages_current+0x155/0x260 [ 1392.365835] ion_page_pool_alloc+0x118/0x1b0 [ 1392.366913] lowmem_reserve[]: 0 [ 1392.370250] ion_system_heap_allocate+0x133/0x8c0 [ 1392.370261] ? ion_alloc+0x187/0x810 [ 1392.373551] 0 [ 1392.378392] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1392.378404] ? ion_system_contig_heap_create+0x130/0x130 [ 1392.378413] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1392.378424] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1392.378434] ion_alloc+0x204/0x810 [ 1392.378448] ? ion_dma_buf_release+0x40/0x40 [ 1392.378459] ? __might_fault+0x177/0x1b0 [ 1392.378469] ion_ioctl+0xea/0x1f0 [ 1392.378478] ? ion_query_heaps+0x360/0x360 [ 1392.378489] ? ion_query_heaps+0x360/0x360 [ 1392.378503] do_vfs_ioctl+0x75a/0xff0 [ 1392.414922] 0 [ 1392.418275] ? ioctl_preallocate+0x1a0/0x1a0 [ 1392.421723] 0 [ 1392.425950] ? lock_downgrade+0x740/0x740 [ 1392.425964] ? __fget+0x225/0x360 [ 1392.425973] ? do_vfs_ioctl+0xff0/0xff0 [ 1392.425984] ? security_file_ioctl+0x83/0xb0 [ 1392.425993] SyS_ioctl+0x7f/0xb0 [ 1392.426001] ? do_vfs_ioctl+0xff0/0xff0 [ 1392.426011] do_syscall_64+0x1d5/0x640 [ 1392.426025] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1392.426033] RIP: 0033:0x4665d9 [ 1392.426038] RSP: 002b:00007f62027c1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1392.426048] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1392.426057] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1392.457788] 0 [ 1392.458341] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1392.465662] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1392.465668] R13: 00007ffc4c66559f R14: 00007f62027c1300 R15: 0000000000022000 [ 1392.568272] device hsr_slave_0 entered promiscuous mode [ 1392.574626] device hsr_slave_1 entered promiscuous mode [ 1392.616841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.635180] Node 0 DMA: 1*4kB (E) 2*8kB (UM) 26*16kB (UE) 24*32kB (UME) 4*64kB (UE) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11060kB [ 1392.635874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1392.681292] Node 0 DMA32: 1371*4kB (UMEH) 747*8kB (UMEH) 1118*16kB (UMEH) 858*32kB (UMEH) 515*64kB (UMH) 50*128kB (UMH) 2*256kB (H) 1*512kB (H) 0*1024kB 0*2048kB 0*4096kB = 97188kB [ 1392.719016] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1392.719838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.747836] Node 1 Normal: 3*4kB (UM) 2*8kB (M) 4*16kB (UM) 4*32kB (UM) 6*64kB (UM) 4*128kB (UM) 1*256kB (M) 2*512kB (UM) 0*1024kB 25*2048kB (U) 0*4096kB = 53596kB [ 1392.783583] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1392.786103] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1392.803580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.809057] Mem-Info: [ 1392.813021] active_anon:13312 inactive_anon:14857 isolated_anon:0 [ 1392.813021] active_file:3111 inactive_file:3594 isolated_file:21 [ 1392.813021] unevictable:0 dirty:151 writeback:0 unstable:0 [ 1392.813021] slab_reclaimable:13560 slab_unreclaimable:113065 [ 1392.813021] mapped:57883 shmem:15125 pagetables:784 bounce:0 [ 1392.813021] free:66496 free_pcp:252 free_cma:0 [ 1392.820635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1392.854054] Node 0 active_anon:52880kB inactive_anon:43328kB active_file:12524kB inactive_file:14348kB unevictable:0kB isolated(anon):0kB isolated(file):84kB mapped:208028kB dirty:552kB writeback:0kB shmem:44336kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1392.884956] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1392.908678] Node 1 active_anon:368kB inactive_anon:16100kB active_file:20kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23604kB dirty:52kB writeback:0kB shmem:16164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1392.934966] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1392.945013] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:88kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1392.964977] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1392.983512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.986087] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1393.005074] Node 0 DMA32 free:134016kB min:36200kB low:45248kB high:54296kB active_anon:53024kB inactive_anon:43324kB active_file:12700kB inactive_file:14424kB unevictable:0kB writepending:576kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2928kB bounce:0kB free_pcp:852kB local_pcp:676kB free_cma:0kB [ 1393.006071] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1393.042269] 21854 total pagecache pages [ 1393.055554] 0 pages in swap cache [ 1393.059040] Swap cache stats: add 0, delete 0, find 0/0 [ 1393.059105] lowmem_reserve[]: [ 1393.064499] Free swap = 0kB [ 1393.064503] Total swap = 0kB [ 1393.064511] 2097051 pages RAM [ 1393.064514] 0 pages HighMem/MovableOnly [ 1393.064517] 363849 pages reserved [ 1393.064519] 0 pages cma reserved [ 1393.102596] 0 0 0 0 0 [ 1393.105637] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1393.112555] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1393.118761] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1393.150743] lowmem_reserve[]: 0 0 0 0 0 [ 1393.169563] Node 1 Normal free:53596kB min:53696kB low:67120kB high:80544kB active_anon:368kB inactive_anon:16100kB active_file:20kB inactive_file:44kB unevictable:0kB writepending:56kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:252kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1393.212628] lowmem_reserve[]: 0 0 0 0 0 [ 1393.223959] Node 0 DMA: 1*4kB (E) 2*8kB (UM) 26*16kB (UE) 24*32kB (UME) 4*64kB (UE) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 11060kB [ 1393.230294] device hsr_slave_0 entered promiscuous mode [ 1393.251305] Node 0 DMA32: 1364*4kB (UMEH) 667*8kB (MEH) 197*16kB (MEH) 36*32kB (UMEH) 372*64kB (UMH) 53*128kB (UMH) 2*256kB (H) 1*512kB (H) 0*1024kB 1*2048kB (M) 0*4096kB = 48760kB [ 1393.267990] device hsr_slave_1 entered promiscuous mode [ 1393.274484] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1393.281442] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1393.302249] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1393.303388] Node 1 Normal: 3*4kB (UM) 2*8kB (M) 4*16kB (UM) 4*32kB (UM) 6*64kB (UM) 4*128kB (UM) 1*256kB (M) 2*512kB (UM) 0*1024kB 25*2048kB (U) 0*4096kB = 53596kB [ 1393.326645] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1393.337185] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1393.364578] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1393.376047] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1393.386757] 21846 total pagecache pages [ 1393.390840] 0 pages in swap cache [ 1393.394559] Swap cache stats: add 0, delete 0, find 0/0 [ 1393.410239] Free swap = 0kB [ 1393.417050] Total swap = 0kB [ 1393.426821] 2097051 pages RAM [ 1393.432474] 0 pages HighMem/MovableOnly [ 1393.439714] 363849 pages reserved [ 1393.443520] 0 pages cma reserved [ 1393.565023] Bluetooth: hci5 command 0x040f tx timeout [ 1393.578085] Bluetooth: hci1 command 0x040f tx timeout [ 1393.610377] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1393.652645] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1393.757684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1393.766807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1393.796087] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1393.811309] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1393.822208] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1393.835771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1393.843428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1393.868220] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1393.877865] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1393.883970] 8021q: adding VLAN 0 to HW filter on device team0 [ 1393.895523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1393.902687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1393.927984] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1393.934088] 8021q: adding VLAN 0 to HW filter on device team0 [ 1393.942830] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1393.955422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1393.963298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1393.985476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.992046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1394.017766] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1394.028778] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1394.037455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1394.044805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1394.062920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1394.085424] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.091833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1394.099813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1394.108528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1394.116967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.123344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1394.142560] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1394.152517] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1394.165807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1394.173380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1394.186484] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1394.194271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.200757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1394.215465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1394.226041] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1394.241266] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1394.251140] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1394.264241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1394.274326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1394.297617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1394.320582] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1394.341575] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1394.357910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1394.375679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1394.383460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1394.405553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1394.415961] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1394.424031] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1394.456312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1394.468259] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1394.488498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1394.508316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1394.528320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1394.548336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1394.570723] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1394.588903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1394.605649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1394.614524] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1394.649620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1394.665607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1394.675583] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1394.683879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1394.719020] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1394.735631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1394.759195] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1394.771960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1394.785552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1394.793315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1394.815663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1394.842631] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1394.858617] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1394.871935] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1394.879142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1394.891639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1394.900510] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1394.917674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1394.924582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1394.942089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1394.958764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1395.167699] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1395.183186] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1395.191075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1395.200749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1395.212678] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1395.230074] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1395.237515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1395.252109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1395.308734] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1395.317475] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1395.324534] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1395.341800] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1395.348951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1395.363230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1395.372046] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1395.389449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1395.402900] device veth0_vlan entered promiscuous mode [ 1395.412141] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1395.425362] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1395.433016] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1395.449957] device veth1_vlan entered promiscuous mode [ 1395.460957] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1395.470553] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1395.483734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1395.491998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1395.504475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1395.516436] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1395.531220] device veth0_vlan entered promiscuous mode [ 1395.538554] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1395.551303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1395.559463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1395.574468] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1395.588535] device veth1_vlan entered promiscuous mode [ 1395.594641] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1395.605418] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1395.618892] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1395.634975] Bluetooth: hci1 command 0x0419 tx timeout [ 1395.640283] Bluetooth: hci5 command 0x0419 tx timeout [ 1395.656616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1395.664394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1395.688881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1395.708985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1395.732517] device veth0_macvtap entered promiscuous mode [ 1395.745810] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1395.761088] device veth1_macvtap entered promiscuous mode [ 1395.777539] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1395.786775] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1395.801958] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1395.809648] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1395.817853] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1395.825616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1395.833505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1395.846749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1395.857701] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1395.868795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1395.879235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.888966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1395.900320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.910008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1395.920124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.930425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1395.940670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.951397] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1395.959397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1395.968259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1395.977527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1395.988423] device veth0_macvtap entered promiscuous mode [ 1396.009583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1396.019827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.035740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1396.046034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.057418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1396.068159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.078424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1396.088984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.100229] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1396.110937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1396.120686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1396.129986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1396.144217] device veth1_macvtap entered promiscuous mode [ 1396.180233] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1396.194000] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1396.221406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1396.237863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.247079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1396.260712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.272464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1396.290805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.300129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1396.316163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.329229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1396.341176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.357271] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1396.364354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1396.378493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1396.387693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1396.404740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1396.420427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.429988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1396.445864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.458695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1396.470429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.483737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1396.498455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.507881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1396.525262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.540614] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1396.547722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1396.556539] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1396.564394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1397.588376] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1397.591631] syz-executor.1: [ 1397.606133] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1397.614496] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1397.639831] CPU: 1 PID: 10752 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1397.647751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1397.657111] Call Trace: [ 1397.659715] dump_stack+0x1b2/0x281 [ 1397.663360] warn_alloc.cold+0x96/0x1cc [ 1397.667095] syz-executor.1 cpuset=/ [ 1397.667430] ? zone_watermark_ok_safe+0x220/0x220 [ 1397.667452] __alloc_pages_nodemask+0x2127/0x2720 [ 1397.680104] mems_allowed=0-1 [ 1397.681653] ? lock_acquire+0x170/0x3f0 [ 1397.681703] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1397.693817] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1397.699372] ? __mutex_unlock_slowpath+0x75/0x770 [ 1397.704362] alloc_pages_current+0x155/0x260 [ 1397.708800] ion_page_pool_alloc+0x118/0x1b0 [ 1397.713221] ion_system_heap_allocate+0x133/0x8c0 [ 1397.718074] ? ion_alloc+0x187/0x810 [ 1397.721794] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1397.727531] ? ion_system_contig_heap_create+0x130/0x130 [ 1397.733420] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1397.738446] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1397.743293] ion_alloc+0x204/0x810 [ 1397.746859] ? ion_dma_buf_release+0x40/0x40 [ 1397.751275] ? __might_fault+0x177/0x1b0 [ 1397.755363] ion_ioctl+0xea/0x1f0 [ 1397.758819] ? ion_query_heaps+0x360/0x360 [ 1397.763063] ? ion_query_heaps+0x360/0x360 [ 1397.767293] do_vfs_ioctl+0x75a/0xff0 [ 1397.771094] ? ioctl_preallocate+0x1a0/0x1a0 [ 1397.775499] ? lock_downgrade+0x740/0x740 [ 1397.779732] ? __fget+0x225/0x360 [ 1397.783185] ? do_vfs_ioctl+0xff0/0xff0 [ 1397.788566] ? security_file_ioctl+0x83/0xb0 [ 1397.792981] SyS_ioctl+0x7f/0xb0 [ 1397.796357] ? do_vfs_ioctl+0xff0/0xff0 [ 1397.800332] do_syscall_64+0x1d5/0x640 [ 1397.804246] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1397.809429] RIP: 0033:0x4665d9 [ 1397.812616] RSP: 002b:00007f7ec8572188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1397.820320] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1397.827589] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1397.834888] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1397.842156] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1397.849440] R13: 00007fff53496b8f R14: 00007f7ec8572300 R15: 0000000000022000 [ 1397.857894] CPU: 0 PID: 10750 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1397.865971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1397.875320] Call Trace: [ 1397.877911] dump_stack+0x1b2/0x281 [ 1397.881551] warn_alloc.cold+0x96/0x1cc [ 1397.885528] ? zone_watermark_ok_safe+0x220/0x220 [ 1397.890392] __alloc_pages_nodemask+0x2127/0x2720 [ 1397.895230] ? __schedule+0x893/0x1de0 [ 1397.899118] ? lock_acquire+0x170/0x3f0 [ 1397.903122] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1397.908057] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1397.913505] ? __mutex_unlock_slowpath+0x75/0x770 [ 1397.918345] alloc_pages_current+0x155/0x260 [ 1397.922767] ion_page_pool_alloc+0x118/0x1b0 [ 1397.928124] ion_system_heap_allocate+0x133/0x8c0 [ 1397.932980] ? ion_alloc+0x187/0x810 [ 1397.936690] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1397.942402] ? ion_system_contig_heap_create+0x130/0x130 [ 1397.948293] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1397.953422] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1397.959421] ion_alloc+0x204/0x810 [ 1397.962990] ? ion_dma_buf_release+0x40/0x40 [ 1397.967398] ? __might_fault+0x177/0x1b0 [ 1397.971455] ion_ioctl+0xea/0x1f0 [ 1397.974905] ? ion_query_heaps+0x360/0x360 [ 1397.979135] ? ion_query_heaps+0x360/0x360 [ 1397.983372] do_vfs_ioctl+0x75a/0xff0 [ 1397.987166] ? ioctl_preallocate+0x1a0/0x1a0 [ 1397.991567] ? lock_downgrade+0x740/0x740 [ 1397.995727] ? __fget+0x225/0x360 [ 1398.000056] ? do_vfs_ioctl+0xff0/0xff0 [ 1398.004034] ? security_file_ioctl+0x83/0xb0 [ 1398.008524] SyS_ioctl+0x7f/0xb0 [ 1398.011880] ? do_vfs_ioctl+0xff0/0xff0 [ 1398.015850] do_syscall_64+0x1d5/0x640 [ 1398.019751] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1398.025109] RIP: 0033:0x4665d9 [ 1398.028311] RSP: 002b:00007f696b00b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1398.036019] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1398.043285] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1398.050742] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1398.058357] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1398.065636] R13: 00007ffd618ef30f R14: 00007f696b00b300 R15: 0000000000022000 [ 1398.169370] Mem-Info: [ 1398.171840] active_anon:13850 inactive_anon:14856 isolated_anon:0 [ 1398.171840] active_file:263 inactive_file:282 isolated_file:0 [ 1398.171840] unevictable:0 dirty:61 writeback:4 unstable:0 [ 1398.171840] slab_reclaimable:13507 slab_unreclaimable:113630 [ 1398.171840] mapped:53472 shmem:15124 pagetables:765 bounce:0 [ 1398.171840] free:25520 free_pcp:271 free_cma:0 [ 1398.210520] Node 0 active_anon:55032kB inactive_anon:43324kB active_file:888kB inactive_file:820kB unevictable:0kB isolated(anon):0kB isolated(file):120kB mapped:190184kB dirty:96kB writeback:16kB shmem:44332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 16384kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1398.239140] Node 1 active_anon:368kB inactive_anon:16100kB active_file:20kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23604kB dirty:48kB writeback:0kB shmem:16164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1398.266614] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1398.346699] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1398.351790] Node 0 DMA32 free:36088kB min:36200kB low:45248kB high:54296kB active_anon:55032kB inactive_anon:43324kB active_file:428kB inactive_file:344kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2808kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1398.385497] lowmem_reserve[]: 0 0 0 0 0 [ 1398.389532] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1398.415699] lowmem_reserve[]: 0 0 0 0 0 [ 1398.420314] Node 1 Normal free:53680kB min:53696kB low:67120kB high:80544kB active_anon:368kB inactive_anon:16100kB active_file:20kB inactive_file:44kB unevictable:0kB writepending:48kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:252kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1398.451358] lowmem_reserve[]: 0 0 0 0 0 [ 1398.457717] Node 0 DMA: 2*4kB (UE) 2*8kB (U) 28*16kB (UE) 23*32kB (UE) 6*64kB (UE) 10*128kB (UE) 4*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 11064kB [ 1398.473548] Node 0 DMA32: 2040*4kB (UMEH) 925*8kB (UMEH) 330*16kB (UMEH) 100*32kB (MEH) 49*64kB (MEH) 21*128kB (MH) 12*256kB (UMH) 7*512kB (UMH) 0*1024kB 0*2048kB 0*4096kB = 36520kB [ 1398.490149] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1398.503932] Node 1 Normal: 9*4kB (UM) 5*8kB (UM) 3*16kB (M) 1170*32kB (UM) 5*64kB (M) 2*128kB (M) 1*256kB (U) 28*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 53756kB [ 1398.518884] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1398.528667] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1398.537313] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1398.546243] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1398.557441] 15202 total pagecache pages [ 1398.561519] 0 pages in swap cache [ 1398.567472] Swap cache stats: add 0, delete 0, find 0/0 [ 1398.572853] Free swap = 0kB [ 1398.575945] Total swap = 0kB [ 1398.578995] 2097051 pages RAM [ 1398.582101] 0 pages HighMem/MovableOnly [ 1398.586151] 363849 pages reserved [ 1398.589610] 0 pages cma reserved [ 1398.718275] oom_reaper: reaped process 10389 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1398.858079] oom_reaper: reaped process 10752 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1398.900540] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1398.932219] systemd-journal cpuset=/ mems_allowed=0-1 [ 1398.962834] CPU: 1 PID: 8865 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1398.970762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1398.980297] Call Trace: [ 1398.982906] dump_stack+0x1b2/0x281 [ 1398.986634] dump_header+0x178/0x82f [ 1398.990357] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1398.995478] ? ___ratelimit+0x2cd/0x530 [ 1398.999492] oom_kill_process.cold+0x10/0xa40 [ 1399.003998] out_of_memory+0xe3e/0x1190 [ 1399.007991] ? oom_killer_disable+0x1c0/0x1c0 [ 1399.012485] ? mutex_trylock+0x152/0x1a0 [ 1399.016545] __alloc_pages_nodemask+0x23e1/0x2720 [ 1399.021403] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1399.026266] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1399.031657] ? cache_grow_begin+0x3f/0x700 [ 1399.035891] cache_grow_begin+0x91/0x700 [ 1399.039954] fallback_alloc+0x207/0x2c0 [ 1399.043928] kmem_cache_alloc+0x1e5/0x3c0 [ 1399.048083] getname_flags+0xc8/0x550 [ 1399.051892] user_path_at_empty+0x2a/0x50 [ 1399.056049] SyS_faccessat+0x21b/0x680 [ 1399.059946] ? SyS_fallocate+0x80/0x80 [ 1399.063826] ? do_syscall_64+0x4c/0x640 [ 1399.067796] ? SyS_faccessat+0x680/0x680 [ 1399.071850] do_syscall_64+0x1d5/0x640 [ 1399.075738] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1399.080938] RIP: 0033:0x7f3e31fef9c7 [ 1399.084649] RSP: 002b:00007ffe6b51a008 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 1399.092366] RAX: ffffffffffffffda RBX: 00007ffe6b51cf20 RCX: 00007f3e31fef9c7 [ 1399.099976] RDX: 00007f3e32a60a00 RSI: 0000000000000000 RDI: 00005591a30c19a3 [ 1399.107239] RBP: 00007ffe6b51a040 R08: 0000000000000000 R09: 0000000000000000 [ 1399.114502] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1399.121949] R13: 0000000000000000 R14: 00007ffe6b51cf20 R15: 00007ffe6b51a530 [ 1399.139874] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1399.148664] Mem-Info: [ 1399.154480] active_anon:13320 inactive_anon:14856 isolated_anon:0 [ 1399.154480] active_file:28 inactive_file:7 isolated_file:0 [ 1399.154480] unevictable:0 dirty:8 writeback:0 unstable:0 [ 1399.154480] slab_reclaimable:13490 slab_unreclaimable:113442 [ 1399.154480] mapped:53036 shmem:15124 pagetables:764 bounce:0 [ 1399.154480] free:13723 free_pcp:149 free_cma:0 [ 1399.164746] syz-executor.1 cpuset= [ 1399.192870] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1399.212963] Node 0 active_anon:52912kB inactive_anon:43324kB active_file:68kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:188528kB dirty:32kB writeback:0kB shmem:44332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1399.213862] syz-executor.2 cpuset= [ 1399.248099] syz-executor.0: [ 1399.248590] / [ 1399.251679] page allocation failure: order:0 [ 1399.254692] mems_allowed=0-1 [ 1399.263131] Node 1 active_anon:368kB inactive_anon:16100kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23604kB dirty:0kB writeback:0kB shmem:16164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1399.264914] CPU: 0 PID: 10750 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1399.299455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1399.303552] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1399.310376] Call Trace: [ 1399.310399] dump_stack+0x1b2/0x281 [ 1399.310412] warn_alloc.cold+0x96/0x1cc [ 1399.310423] ? zone_watermark_ok_safe+0x220/0x220 [ 1399.310432] ? usleep_range+0x130/0x130 [ 1399.310440] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1399.310452] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1399.310461] ? run_timer_softirq+0x5a0/0x5a0 [ 1399.310477] __alloc_pages_nodemask+0x2127/0x2720 [ 1399.310491] ? lock_acquire+0x170/0x3f0 [ 1399.331111] (null) [ 1399.333485] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1399.343141] syz-executor.0 cpuset= [ 1399.347563] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1399.347581] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1399.347599] alloc_pages_current+0x155/0x260 [ 1399.347611] ion_page_pool_alloc+0x118/0x1b0 [ 1399.347620] ion_system_heap_allocate+0x133/0x8c0 [ 1399.347629] ? ion_alloc+0x187/0x810 [ 1399.347639] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1399.347655] ? ion_system_contig_heap_create+0x130/0x130 [ 1399.347665] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1399.347676] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1399.347686] ion_alloc+0x204/0x810 [ 1399.347699] ? ion_dma_buf_release+0x40/0x40 [ 1399.347711] ? __might_fault+0x177/0x1b0 [ 1399.347722] ion_ioctl+0xea/0x1f0 [ 1399.363313] / [ 1399.368011] ? ion_query_heaps+0x360/0x360 [ 1399.371674] Node 0 [ 1399.376028] ? ion_query_heaps+0x360/0x360 [ 1399.376040] do_vfs_ioctl+0x75a/0xff0 [ 1399.376052] ? ioctl_preallocate+0x1a0/0x1a0 [ 1399.376061] ? lock_downgrade+0x740/0x740 [ 1399.376074] ? __fget+0x225/0x360 [ 1399.376083] ? do_vfs_ioctl+0xff0/0xff0 [ 1399.376095] ? security_file_ioctl+0x83/0xb0 [ 1399.376105] SyS_ioctl+0x7f/0xb0 [ 1399.376115] ? do_vfs_ioctl+0xff0/0xff0 [ 1399.393864] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1399.395272] do_syscall_64+0x1d5/0x640 [ 1399.395288] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1399.395296] RIP: 0033:0x4665d9 [ 1399.395301] RSP: 002b:00007f696b00b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1399.395310] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1399.395315] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1399.395321] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1399.395326] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1399.395331] R13: 00007ffd618ef30f R14: 00007f696b00b300 R15: 0000000000022000 [ 1399.399037] / [ 1399.404768] lowmem_reserve[]: [ 1399.410030] mems_allowed=0-1 [ 1399.410084] CPU: 0 PID: 10752 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1399.410090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1399.410093] Call Trace: [ 1399.410113] dump_stack+0x1b2/0x281 [ 1399.410127] warn_alloc.cold+0x96/0x1cc [ 1399.410141] ? zone_watermark_ok_safe+0x220/0x220 [ 1399.423716] mems_allowed=0-1 [ 1399.423922] ? usleep_range+0x130/0x130 [ 1399.447263] 0 [ 1399.448301] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1399.452083] 2717 [ 1399.456516] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1399.456527] ? run_timer_softirq+0x5a0/0x5a0 [ 1399.456543] __alloc_pages_nodemask+0x2127/0x2720 [ 1399.456558] ? lock_acquire+0x170/0x3f0 [ 1399.456572] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1399.456581] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1399.456598] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1399.456612] ? retint_kernel+0x2d/0x2d [ 1399.456625] alloc_pages_current+0x155/0x260 [ 1399.456636] ion_page_pool_alloc+0x118/0x1b0 [ 1399.456655] ion_system_heap_allocate+0x133/0x8c0 [ 1399.492991] 2718 [ 1399.505485] ? ion_alloc+0x187/0x810 [ 1399.505497] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1399.505506] ? ion_system_contig_heap_create+0x130/0x130 [ 1399.505515] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1399.505526] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1399.505535] ion_alloc+0x204/0x810 [ 1399.505549] ? ion_dma_buf_release+0x40/0x40 [ 1399.505562] ? __might_fault+0x177/0x1b0 [ 1399.505573] ion_ioctl+0xea/0x1f0 [ 1399.505582] ? ion_query_heaps+0x360/0x360 [ 1399.505594] ? ion_query_heaps+0x360/0x360 [ 1399.505604] do_vfs_ioctl+0x75a/0xff0 [ 1399.505614] ? ioctl_preallocate+0x1a0/0x1a0 [ 1399.505624] ? lock_downgrade+0x740/0x740 [ 1399.505636] ? __fget+0x225/0x360 [ 1399.505652] ? do_vfs_ioctl+0xff0/0xff0 [ 1399.569967] 2718 [ 1399.570461] ? security_file_ioctl+0x83/0xb0 [ 1399.593483] 2718 [ 1399.594099] SyS_ioctl+0x7f/0xb0 [ 1399.618955] ? do_vfs_ioctl+0xff0/0xff0 [ 1399.624000] Node 0 [ 1399.628406] do_syscall_64+0x1d5/0x640 [ 1399.628421] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1399.628429] RIP: 0033:0x4665d9 [ 1399.628434] RSP: 002b:00007f7ec8572188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1399.628443] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1399.628448] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1399.628453] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1399.628457] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1399.628462] R13: 00007fff53496b8f R14: 00007f7ec8572300 R15: 0000000000022000 [ 1399.633555] warn_alloc_show_mem: 1 callbacks suppressed [ 1399.633559] Mem-Info: [ 1399.651659] CPU: 1 PID: 10389 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1399.656863] active_anon:13320 inactive_anon:14856 isolated_anon:0 [ 1399.656863] active_file:43 inactive_file:0 isolated_file:0 [ 1399.656863] unevictable:0 dirty:8 writeback:0 unstable:0 [ 1399.656863] slab_reclaimable:13490 slab_unreclaimable:113442 [ 1399.656863] mapped:53033 shmem:15124 pagetables:764 bounce:0 [ 1399.656863] free:13723 free_pcp:151 free_cma:0 [ 1399.660579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1399.665061] Node 0 active_anon:52912kB inactive_anon:43324kB active_file:168kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:188528kB dirty:32kB writeback:0kB shmem:44332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1399.669832] Call Trace: [ 1399.671900] Node 1 active_anon:368kB inactive_anon:16100kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23604kB dirty:0kB writeback:0kB shmem:16164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1399.675601] dump_stack+0x1b2/0x281 [ 1399.675615] warn_alloc.cold+0x96/0x1cc [ 1399.675626] ? zone_watermark_ok_safe+0x220/0x220 [ 1399.675637] ? usleep_range+0x130/0x130 [ 1399.675649] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1399.681100] Node 0 [ 1399.686558] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1399.686568] ? run_timer_softirq+0x5a0/0x5a0 [ 1399.686585] __alloc_pages_nodemask+0x2127/0x2720 [ 1399.686600] ? lock_acquire+0x170/0x3f0 [ 1399.694895] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1399.696456] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1399.699990] lowmem_reserve[]: [ 1399.704434] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1399.708532] 0 [ 1399.711940] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1399.716226] 2717 [ 1399.720441] ? retint_kernel+0x2d/0x2d [ 1399.724226] 2718 [ 1399.728661] alloc_pages_current+0x155/0x260 [ 1399.728676] ion_page_pool_alloc+0x118/0x1b0 [ 1399.728685] ion_system_heap_allocate+0x133/0x8c0 [ 1399.728696] ? ion_alloc+0x187/0x810 [ 1399.732870] 2718 [ 1399.736395] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1399.736407] ? ion_system_contig_heap_create+0x130/0x130 [ 1399.736416] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1399.736428] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1399.736441] ion_alloc+0x204/0x810 [ 1399.740411] 2718 [ 1399.742471] ? ion_dma_buf_release+0x40/0x40 [ 1399.748929] ? __might_fault+0x177/0x1b0 [ 1399.752278] Node 0 [ 1399.756268] ion_ioctl+0xea/0x1f0 [ 1399.756279] ? ion_query_heaps+0x360/0x360 [ 1399.756290] ? ion_query_heaps+0x360/0x360 [ 1399.756301] do_vfs_ioctl+0x75a/0xff0 [ 1399.756312] ? ioctl_preallocate+0x1a0/0x1a0 [ 1399.764905] DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:52912kB inactive_anon:43324kB active_file:168kB inactive_file:0kB unevictable:0kB writepending:32kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2804kB bounce:0kB free_pcp:344kB local_pcp:144kB free_cma:0kB [ 1399.767610] ? lock_downgrade+0x740/0x740 [ 1399.770783] lowmem_reserve[]: [ 1399.778491] ? __fget+0x225/0x360 [ 1399.778502] ? do_vfs_ioctl+0xff0/0xff0 [ 1399.778513] ? security_file_ioctl+0x83/0xb0 [ 1399.778522] SyS_ioctl+0x7f/0xb0 [ 1399.778533] ? do_vfs_ioctl+0xff0/0xff0 [ 1399.804873] 0 [ 1399.807770] do_syscall_64+0x1d5/0x640 [ 1399.834878] 0 [ 1399.863899] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1399.863908] RIP: 0033:0x4665d9 [ 1399.863913] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1399.863927] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1399.875289] syz-executor.2: [ 1399.901070] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1399.901076] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1399.901081] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1399.901085] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1399.917639] DMA32 free:20992kB min:36200kB low:45248kB high:54296kB active_anon:52912kB inactive_anon:43324kB active_file:168kB inactive_file:0kB unevictable:0kB writepending:32kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2804kB bounce:0kB free_pcp:348kB local_pcp:196kB free_cma:0kB [ 1399.939410] 0 [ 1399.949342] lowmem_reserve[]: [ 1399.954613] 0 [ 1399.954785] 0 [ 1399.961961] 0 [ 1399.970678] 0 [ 1400.005129] 0 [ 1400.011309] page allocation failure: order:4 [ 1400.011502] 0 [ 1400.013304] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1400.022691] 0 [ 1400.024742] (null) [ 1400.036079] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1400.036102] lowmem_reserve[]: 0 0 [ 1400.052454] Node 0 [ 1400.059865] syz-executor.2 cpuset= [ 1400.072527] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1400.073426] / [ 1400.079945] lowmem_reserve[]: [ 1400.088478] 0 [ 1400.100356] 0 [ 1400.107083] mems_allowed=0-1 [ 1400.146096] 0 [ 1400.156432] 0 [ 1400.167740] 0 [ 1400.175223] 0 [ 1400.184571] 0 [ 1400.194440] 0 [ 1400.195388] Node 1 Normal free:43320kB min:53696kB low:67120kB high:80544kB active_anon:368kB inactive_anon:16100kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:252kB bounce:0kB free_pcp:760kB local_pcp:640kB free_cma:0kB [ 1400.195411] lowmem_reserve[]: 0 0 0 0 0 [ 1400.195428] Node 0 DMA: 1*4kB (E) 0*8kB 23*16kB (UE) 23*32kB (UE) 6*64kB (UE) 10*128kB (UE) 4*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10964kB [ 1400.195503] Node 0 DMA32: 1652*4kB (UME) 742*8kB (UME) 191*16kB (UME) 32*32kB (UME) 11*64kB (UM) 3*128kB (M) 3*256kB (UM) 3*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 21040kB [ 1400.195570] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1400.195620] Node 1 Normal: 62*4kB (UM) 62*8kB (UM) 65*16kB (UM) 792*32kB (UM) 5*64kB (M) 2*128kB (M) 1*256kB (U) 28*512kB (U) 1*1024kB (M) 0*2048kB 0*4096kB = 43320kB [ 1400.195699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1400.195706] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1400.195712] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1400.195719] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1400.195722] 15165 total pagecache pages [ 1400.195732] 0 pages in swap cache [ 1400.195738] Swap cache stats: add 0, delete 0, find 0/0 [ 1400.195741] Free swap = 0kB [ 1400.195745] Total swap = 0kB [ 1400.195752] 2097051 pages RAM [ 1400.195755] 0 pages HighMem/MovableOnly [ 1400.195759] 363849 pages reserved [ 1400.195762] 0 pages cma reserved [ 1400.225382] CPU: 0 PID: 10752 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1400.253786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1400.253791] Call Trace: [ 1400.253814] dump_stack+0x1b2/0x281 [ 1400.253827] warn_alloc.cold+0x96/0x1cc [ 1400.253838] ? zone_watermark_ok_safe+0x220/0x220 [ 1400.253859] __alloc_pages_nodemask+0x2127/0x2720 [ 1400.253869] ? _raw_spin_unlock_irq+0x24/0x80 [ 1400.253883] ? lock_acquire+0x170/0x3f0 [ 1400.253898] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1400.253915] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1400.253927] ? __mutex_unlock_slowpath+0x75/0x770 [ 1400.253941] alloc_pages_current+0x155/0x260 [ 1400.253954] ion_page_pool_alloc+0x118/0x1b0 [ 1400.259574] Node 1 [ 1400.260655] ion_system_heap_allocate+0x133/0x8c0 [ 1400.262471] Normal free:78272kB min:53696kB low:67120kB high:80544kB active_anon:368kB inactive_anon:16100kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:252kB bounce:0kB free_pcp:992kB local_pcp:236kB free_cma:0kB [ 1400.264253] ? _raw_spin_unlock+0x29/0x40 [ 1400.266128] lowmem_reserve[]: [ 1400.267850] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1400.272268] 0 [ 1400.274060] ? ion_system_contig_heap_create+0x130/0x130 [ 1400.286446] 0 [ 1400.310569] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1400.310584] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1400.310595] ion_alloc+0x27a/0x810 [ 1400.310608] ? ion_dma_buf_release+0x40/0x40 [ 1400.310620] ? __might_fault+0x177/0x1b0 [ 1400.310630] ion_ioctl+0xea/0x1f0 [ 1400.310637] ? ion_query_heaps+0x360/0x360 [ 1400.310649] ? ion_query_heaps+0x360/0x360 [ 1400.310659] do_vfs_ioctl+0x75a/0xff0 [ 1400.310670] ? ioctl_preallocate+0x1a0/0x1a0 [ 1400.310679] ? lock_downgrade+0x740/0x740 [ 1400.310692] ? __fget+0x225/0x360 [ 1400.310701] ? do_vfs_ioctl+0xff0/0xff0 [ 1400.310712] ? security_file_ioctl+0x83/0xb0 [ 1400.310724] SyS_ioctl+0x7f/0xb0 [ 1400.360361] 0 [ 1400.361741] ? do_vfs_ioctl+0xff0/0xff0 [ 1400.363524] 0 [ 1400.365317] do_syscall_64+0x1d5/0x640 [ 1400.365333] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1400.365341] RIP: 0033:0x4665d9 [ 1400.365345] RSP: 002b:00007f7ec8572188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1400.365354] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1400.365358] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1400.365363] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1400.365369] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1400.365374] R13: 00007fff53496b8f R14: 00007f7ec8572300 R15: 0000000000022000 [ 1400.785075] 0 [ 1400.786931] Node 0 DMA: 1*4kB (E) 0*8kB 23*16kB (UE) 23*32kB (UE) 6*64kB (UE) 10*128kB (UE) 4*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10964kB [ 1400.802408] Node 0 DMA32: 1519*4kB (UME) 10026*8kB (UME) 3707*16kB (UME) 1114*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 181244kB [ 1400.817332] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1400.828641] Node 1 Normal: 62*4kB (U) 64*8kB (U) 63*16kB (U) 818*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27944kB [ 1400.842047] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1400.850986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1400.867186] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1400.868004] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1400.890367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1400.899020] 15446 total pagecache pages [ 1400.903227] 0 pages in swap cache [ 1400.909189] Swap cache stats: add 0, delete 0, find 0/0 [ 1400.914735] Free swap = 0kB [ 1400.931574] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1400.934923] Total swap = 0kB [ 1400.940034] 2097051 pages RAM [ 1400.943357] 0 pages HighMem/MovableOnly [ 1400.947799] 363849 pages reserved [ 1400.947832] CPU: 0 PID: 10750 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1400.951331] 0 pages cma reserved [ 1400.959218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1400.959223] Call Trace: [ 1400.959246] dump_stack+0x1b2/0x281 [ 1400.959259] warn_alloc.cold+0x96/0x1cc [ 1400.959270] ? zone_watermark_ok_safe+0x220/0x220 [ 1400.959292] __alloc_pages_nodemask+0x2127/0x2720 [ 1400.959308] ? lock_acquire+0x170/0x3f0 [ 1400.959321] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1400.959339] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1400.959351] ? __mutex_unlock_slowpath+0x75/0x770 [ 1400.962831] Out of memory (oom_kill_allocating_task): Kill process 8865 (systemd-journal) score 0 or sacrifice child [ 1400.972214] ? retint_kernel+0x2d/0x2d [ 1400.972230] alloc_pages_current+0x155/0x260 [ 1400.972242] ion_page_pool_alloc+0x118/0x1b0 [ 1400.972252] ion_system_heap_allocate+0x133/0x8c0 [ 1400.972262] ? _raw_spin_unlock+0x29/0x40 [ 1400.972270] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1400.972279] ? ion_system_contig_heap_create+0x130/0x130 [ 1400.972292] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1401.024965] Killed process 8865 (systemd-journal) total-vm:46096kB, anon-rss:488kB, file-rss:4kB, shmem-rss:3012kB [ 1401.028892] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1401.079705] ion_alloc+0x27a/0x810 [ 1401.083578] ? ion_dma_buf_release+0x40/0x40 [ 1401.088408] ? __might_fault+0x177/0x1b0 [ 1401.093945] ion_ioctl+0xea/0x1f0 [ 1401.097860] ? ion_query_heaps+0x360/0x360 [ 1401.102390] ? ion_query_heaps+0x360/0x360 [ 1401.107039] do_vfs_ioctl+0x75a/0xff0 [ 1401.110912] ? ioctl_preallocate+0x1a0/0x1a0 [ 1401.115352] ? lock_downgrade+0x740/0x740 [ 1401.119784] ? __fget+0x225/0x360 [ 1401.123363] ? do_vfs_ioctl+0xff0/0xff0 [ 1401.127983] ? security_file_ioctl+0x83/0xb0 [ 1401.132411] SyS_ioctl+0x7f/0xb0 [ 1401.135785] ? do_vfs_ioctl+0xff0/0xff0 [ 1401.139777] do_syscall_64+0x1d5/0x640 [ 1401.143704] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1401.150579] RIP: 0033:0x4665d9 [ 1401.153909] RSP: 002b:00007f696b00b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1401.161728] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1401.169183] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1401.176819] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1401.184353] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1401.191976] R13: 00007ffd618ef30f R14: 00007f696b00b300 R15: 0000000000022000 [ 1401.228852] oom_reaper: reaped process 10750 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1401.241660] warn_alloc_show_mem: 3 callbacks suppressed [ 1401.241664] Mem-Info: [ 1401.265134] active_anon:12689 inactive_anon:14856 isolated_anon:0 [ 1401.265134] active_file:134 inactive_file:293 isolated_file:0 [ 1401.265134] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1401.265134] slab_reclaimable:13478 slab_unreclaimable:113436 [ 1401.265134] mapped:52470 shmem:15124 pagetables:764 bounce:0 [ 1401.265134] free:73237 free_pcp:392 free_cma:0 [ 1401.315330] Node 0 active_anon:50488kB inactive_anon:43324kB active_file:532kB inactive_file:1968kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186676kB dirty:0kB writeback:0kB shmem:44332kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1401.345130] Node 1 active_anon:268kB inactive_anon:16100kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23604kB dirty:0kB writeback:0kB shmem:16164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1401.381435] Node 0 DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1401.419255] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1401.425713] Node 0 DMA32 free:319108kB min:36200kB low:45248kB high:54296kB active_anon:50488kB inactive_anon:43324kB active_file:632kB inactive_file:2968kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2804kB bounce:0kB free_pcp:1300kB local_pcp:620kB free_cma:0kB [ 1401.485054] lowmem_reserve[]: 0 0 0 0 0 [ 1401.489928] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1401.535646] lowmem_reserve[]: 0 0 0 0 0 [ 1401.540213] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1401.544947] Node 1 Normal free:27944kB min:53696kB low:67120kB high:80544kB active_anon:368kB inactive_anon:16100kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:252kB bounce:0kB free_pcp:296kB local_pcp:296kB free_cma:0kB [ 1401.584009] lowmem_reserve[]: 0 0 0 0 0 [ 1401.591309] Node 0 DMA: 1*4kB (E) 0*8kB 23*16kB (UE) 23*32kB (UE) 6*64kB (UE) 10*128kB (UE) 4*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 2*2048kB (ME) 0*4096kB = 10964kB [ 1401.593104] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1401.611077] Node 0 DMA32: 3884*4kB (UE) 9633*8kB (UE) 6390*16kB (UME) 3829*32kB (UME) 520*64kB (UM) 55*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 357688kB [ 1401.611150] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1401.611200] Node 1 Normal: 62*4kB (U) 64*8kB (U) 63*16kB (U) 818*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 27944kB [ 1401.611263] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1401.611269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1401.611275] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1401.611281] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1401.625624] systemd[1]: Stopped Journal Service. [ 1401.671132] 16812 total pagecache pages [ 1401.765375] 0 pages in swap cache [ 1401.770081] Swap cache stats: add 0, delete 0, find 0/0 [ 1401.770455] systemd[1]: Starting Journal Service... [ 1401.779606] Free swap = 0kB [ 1401.796636] Total swap = 0kB [ 1401.805551] 2097051 pages RAM [ 1401.811581] 0 pages HighMem/MovableOnly [ 1401.820352] 363849 pages reserved [ 1401.835066] 0 pages cma reserved [ 1401.994053] systemd-journald[10756]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1402.035547] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1402.075136] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1402.083535] CPU: 1 PID: 10389 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1402.092118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1402.103246] Call Trace: [ 1402.106946] dump_stack+0x1b2/0x281 [ 1402.111510] warn_alloc.cold+0x96/0x1cc [ 1402.115875] ? zone_watermark_ok_safe+0x220/0x220 [ 1402.121227] __alloc_pages_nodemask+0x2127/0x2720 [ 1402.126975] ? lock_acquire+0x170/0x3f0 [ 1402.132873] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1402.138969] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1402.144788] ? __mutex_unlock_slowpath+0x75/0x770 [ 1402.150214] ? retint_kernel+0x2d/0x2d [ 1402.155688] alloc_pages_current+0x155/0x260 [ 1402.161368] ion_page_pool_alloc+0x118/0x1b0 [ 1402.166813] ion_system_heap_allocate+0x133/0x8c0 [ 1402.172155] ? _raw_spin_unlock+0x29/0x40 [ 1402.178037] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1402.183483] ? ion_system_contig_heap_create+0x130/0x130 [ 1402.189885] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1402.195850] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1402.201885] ion_alloc+0x27a/0x810 [ 1402.206455] ? ion_dma_buf_release+0x40/0x40 [ 1402.211343] ? __might_fault+0x177/0x1b0 [ 1402.216803] ion_ioctl+0xea/0x1f0 [ 1402.221809] ? ion_query_heaps+0x360/0x360 [ 1402.226802] ? ion_query_heaps+0x360/0x360 [ 1402.231160] do_vfs_ioctl+0x75a/0xff0 [ 1402.235527] ? ioctl_preallocate+0x1a0/0x1a0 [ 1402.240647] ? lock_downgrade+0x740/0x740 [ 1402.245108] ? __fget+0x225/0x360 [ 1402.248601] ? do_vfs_ioctl+0xff0/0xff0 [ 1402.252690] ? security_file_ioctl+0x83/0xb0 [ 1402.257795] SyS_ioctl+0x7f/0xb0 [ 1402.261430] ? do_vfs_ioctl+0xff0/0xff0 [ 1402.266403] do_syscall_64+0x1d5/0x640 [ 1402.270517] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1402.276423] RIP: 0033:0x4665d9 [ 1402.280274] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1402.291359] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1402.299958] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1402.311553] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1402.323491] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1402.332914] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1402.512889] systemd[1]: Started Journal Service. [ 1402.694917] Mem-Info: [ 1402.697692] active_anon:12800 inactive_anon:16865 isolated_anon:0 [ 1402.697692] active_file:1144 inactive_file:2113 isolated_file:19 [ 1402.697692] unevictable:0 dirty:37 writeback:0 unstable:0 [ 1402.697692] slab_reclaimable:13444 slab_unreclaimable:113794 [ 1402.697692] mapped:54566 shmem:17149 pagetables:723 bounce:0 [ 1402.697692] free:108862 free_pcp:226 free_cma:0 [ 1402.799046] Node 0 active_anon:51012kB inactive_anon:51360kB active_file:4372kB inactive_file:8248kB unevictable:0kB isolated(anon):0kB isolated(file):76kB mapped:194560kB dirty:144kB writeback:0kB shmem:52432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1402.884926] Node 1 active_anon:188kB inactive_anon:16100kB active_file:204kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23704kB dirty:4kB writeback:0kB shmem:16164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1402.945569] Node 0 DMA free:11532kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1403.019170] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1403.025705] Node 0 DMA32 free:84740kB min:36200kB low:45248kB high:54296kB active_anon:51012kB inactive_anon:51440kB active_file:4292kB inactive_file:8008kB unevictable:0kB writepending:148kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2776kB bounce:0kB free_pcp:972kB local_pcp:228kB free_cma:0kB [ 1403.118878] lowmem_reserve[]: 0 0 0 0 0 [ 1403.123287] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1403.184933] lowmem_reserve[]: 0 0 0 0 0 [ 1403.189002] Node 1 Normal free:1049732kB min:53696kB low:67120kB high:80544kB active_anon:188kB inactive_anon:16100kB active_file:216kB inactive_file:372kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:164kB bounce:0kB free_pcp:348kB local_pcp:208kB free_cma:0kB [ 1403.264887] lowmem_reserve[]: 0 0 0 0 0 [ 1403.269394] Node 0 DMA: 1*4kB (E) 3*8kB (U) 4*16kB (UE) 2*32kB (UE) 8*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11548kB [ 1403.286425] Node 0 DMA32: 21*4kB (UE) 148*8kB (UME) 2854*16kB (UE) 4389*32kB (UME) 963*64kB (U) 85*128kB (U) 6*256kB (U) 28*512kB (U) 27*1024kB (U) 1*2048kB (M) 0*4096kB = 305460kB [ 1403.304575] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1403.317221] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 1*16kB (M) 1*32kB (U) 6373*64kB (UM) 580*128kB (U) 593*256kB (U) 114*512kB (UM) 331*1024kB (U) 9*2048kB (U) 0*4096kB = 1049732kB [ 1403.335439] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1403.344659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1403.355571] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1403.375920] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1403.395752] 20534 total pagecache pages [ 1403.400153] 0 pages in swap cache [ 1403.403706] Swap cache stats: add 0, delete 0, find 0/0 00:40:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 00:40:42 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2) 00:40:42 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) 00:40:42 executing program 2: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2) 00:40:42 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2) [ 1403.424164] Free swap = 0kB [ 1403.429482] Total swap = 0kB [ 1403.438571] 2097051 pages RAM [ 1403.443504] 0 pages HighMem/MovableOnly [ 1403.450718] 363849 pages reserved [ 1403.456535] 0 pages cma reserved 00:40:42 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 1404.675690] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1404.710412] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1404.748983] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1404.751764] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1404.754708] CPU: 1 PID: 10765 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1404.754715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1404.754719] Call Trace: [ 1404.754741] dump_stack+0x1b2/0x281 [ 1404.754755] warn_alloc.cold+0x96/0x1cc [ 1404.773532] syz-executor.1 cpuset= [ 1404.774375] ? zone_watermark_ok_safe+0x220/0x220 [ 1404.792276] (null) [ 1404.798100] __alloc_pages_nodemask+0x2127/0x2720 [ 1404.798115] ? lock_acquire+0x170/0x3f0 [ 1404.798127] ? lock_acquire+0x170/0x3f0 [ 1404.798141] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1404.798159] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1404.798177] ? __mutex_unlock_slowpath+0x75/0x770 [ 1404.806281] / [ 1404.806856] ? alloc_pages_current+0x37/0x260 [ 1404.810511] , order=0, oom_score_adj=0 [ 1404.815610] alloc_pages_current+0x155/0x260 [ 1404.815627] ion_page_pool_alloc+0x118/0x1b0 [ 1404.815637] ion_system_heap_allocate+0x133/0x8c0 [ 1404.815646] ? ion_alloc+0x187/0x810 [ 1404.815657] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1404.815671] ? ion_system_contig_heap_create+0x130/0x130 [ 1404.815685] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1404.888598] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1404.893611] ion_alloc+0x204/0x810 [ 1404.897266] ? ion_dma_buf_release+0x40/0x40 [ 1404.901878] ? __might_fault+0x177/0x1b0 [ 1404.906295] ion_ioctl+0xea/0x1f0 [ 1404.909857] ? ion_query_heaps+0x360/0x360 [ 1404.914372] ? ion_query_heaps+0x360/0x360 [ 1404.920274] do_vfs_ioctl+0x75a/0xff0 [ 1404.924581] ? ioctl_preallocate+0x1a0/0x1a0 [ 1404.929277] ? lock_downgrade+0x740/0x740 [ 1404.933451] ? __fget+0x225/0x360 [ 1404.937009] ? do_vfs_ioctl+0xff0/0xff0 [ 1404.948436] ? security_file_ioctl+0x83/0xb0 [ 1404.953046] SyS_ioctl+0x7f/0xb0 [ 1404.956431] ? do_vfs_ioctl+0xff0/0xff0 [ 1404.960430] do_syscall_64+0x1d5/0x640 [ 1404.964342] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1404.969614] RIP: 0033:0x4665d9 [ 1404.972818] RSP: 002b:00007f62027c1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1404.980638] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1404.988146] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1404.996050] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1405.004589] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1405.012561] R13: 00007ffc4c66559f R14: 00007f62027c1300 R15: 0000000000022000 [ 1405.024924] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1405.025344] mems_allowed=0-1 [ 1405.048579] systemd-journal cpuset=/ mems_allowed=0-1 [ 1405.061632] CPU: 0 PID: 10756 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1405.070494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1405.072240] syz-executor.5 cpuset= [ 1405.080794] Call Trace: [ 1405.080817] dump_stack+0x1b2/0x281 [ 1405.080828] dump_header+0x178/0x82f [ 1405.080837] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1405.080846] ? ___ratelimit+0x2cd/0x530 [ 1405.080855] oom_kill_process.cold+0x10/0xa40 [ 1405.080871] out_of_memory+0xe3e/0x1190 [ 1405.080883] ? oom_killer_disable+0x1c0/0x1c0 [ 1405.080891] ? mutex_trylock+0x152/0x1a0 [ 1405.080903] __alloc_pages_nodemask+0x23e1/0x2720 [ 1405.080923] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1405.080947] alloc_pages_current+0x155/0x260 [ 1405.080956] filemap_fault+0x11a1/0x1ad0 [ 1405.080977] ext4_filemap_fault+0x84/0xb0 [ 1405.080987] __do_fault+0xfa/0x380 [ 1405.081030] __handle_mm_fault+0x2497/0x4620 [ 1405.081041] ? vm_insert_page+0x7c0/0x7c0 [ 1405.081050] ? lock_downgrade+0x740/0x740 [ 1405.081064] ? mark_held_locks+0xa6/0xf0 [ 1405.110283] / [ 1405.114045] handle_mm_fault+0x455/0x9c0 [ 1405.131398] mems_allowed=0-1 [ 1405.133029] __do_page_fault+0x549/0xad0 [ 1405.133042] ? spurious_fault+0x640/0x640 [ 1405.189732] ? do_page_fault+0x60/0x500 [ 1405.193913] ? page_fault+0x2f/0x50 [ 1405.197995] page_fault+0x45/0x50 [ 1405.201811] RIP: 9d104c88:0x556f2370a958 [ 1405.206456] RSP: 2544d1e0:0000000000002a04 EFLAGS: ffffffffffffffff [ 1405.208065] CPU: 1 PID: 10768 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1405.224419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1405.234710] Call Trace: [ 1405.237736] dump_stack+0x1b2/0x281 [ 1405.241874] warn_alloc.cold+0x96/0x1cc [ 1405.245920] ? zone_watermark_ok_safe+0x220/0x220 [ 1405.252320] __alloc_pages_nodemask+0x2127/0x2720 [ 1405.257905] ? __schedule+0x893/0x1de0 [ 1405.263330] ? lock_acquire+0x170/0x3f0 [ 1405.267385] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1405.272702] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1405.278867] ? __mutex_unlock_slowpath+0x75/0x770 [ 1405.284265] alloc_pages_current+0x155/0x260 [ 1405.289021] ion_page_pool_alloc+0x118/0x1b0 [ 1405.293639] ion_system_heap_allocate+0x133/0x8c0 [ 1405.298713] ? ion_alloc+0x187/0x810 [ 1405.302822] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1405.309176] ? ion_system_contig_heap_create+0x130/0x130 [ 1405.315471] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1405.320753] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1405.326221] ion_alloc+0x204/0x810 [ 1405.330138] ? ion_dma_buf_release+0x40/0x40 [ 1405.335387] ? __might_fault+0x177/0x1b0 [ 1405.339605] ion_ioctl+0xea/0x1f0 [ 1405.343075] ? ion_query_heaps+0x360/0x360 [ 1405.347421] ? ion_query_heaps+0x360/0x360 [ 1405.352120] do_vfs_ioctl+0x75a/0xff0 [ 1405.356031] ? ioctl_preallocate+0x1a0/0x1a0 [ 1405.360485] ? lock_downgrade+0x740/0x740 [ 1405.365445] ? __fget+0x225/0x360 [ 1405.369488] ? do_vfs_ioctl+0xff0/0xff0 [ 1405.373864] ? security_file_ioctl+0x83/0xb0 [ 1405.378394] SyS_ioctl+0x7f/0xb0 [ 1405.381797] ? do_vfs_ioctl+0xff0/0xff0 [ 1405.385956] do_syscall_64+0x1d5/0x640 [ 1405.391212] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1405.397175] RIP: 0033:0x4665d9 [ 1405.400470] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1405.408539] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1405.416678] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1405.424614] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1405.432121] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1405.439743] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1405.447190] CPU: 0 PID: 10763 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1405.455517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1405.465686] Call Trace: [ 1405.468740] dump_stack+0x1b2/0x281 [ 1405.473494] warn_alloc.cold+0x96/0x1cc [ 1405.477817] ? zone_watermark_ok_safe+0x220/0x220 [ 1405.483719] __alloc_pages_nodemask+0x2127/0x2720 [ 1405.488738] ? lock_acquire+0x170/0x3f0 [ 1405.492964] ? lock_acquire+0x170/0x3f0 [ 1405.496967] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1405.502323] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1405.507956] ? __mutex_unlock_slowpath+0x75/0x770 [ 1405.513534] alloc_pages_current+0x155/0x260 [ 1405.518232] ion_page_pool_alloc+0x118/0x1b0 [ 1405.523164] ion_system_heap_allocate+0x133/0x8c0 [ 1405.528206] ? ion_alloc+0x187/0x810 [ 1405.532080] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1405.538048] ? ion_system_contig_heap_create+0x130/0x130 [ 1405.543872] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1405.549082] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1405.554207] ion_alloc+0x204/0x810 [ 1405.558146] ? ion_dma_buf_release+0x40/0x40 [ 1405.562841] ? __might_fault+0x177/0x1b0 [ 1405.566930] ion_ioctl+0xea/0x1f0 [ 1405.570648] ? ion_query_heaps+0x360/0x360 [ 1405.575442] ? ion_query_heaps+0x360/0x360 [ 1405.580986] do_vfs_ioctl+0x75a/0xff0 [ 1405.585044] ? ioctl_preallocate+0x1a0/0x1a0 [ 1405.589474] ? lock_downgrade+0x740/0x740 [ 1405.594066] ? __fget+0x225/0x360 [ 1405.597539] ? do_vfs_ioctl+0xff0/0xff0 [ 1405.601812] ? security_file_ioctl+0x83/0xb0 [ 1405.606726] SyS_ioctl+0x7f/0xb0 [ 1405.610194] ? do_vfs_ioctl+0xff0/0xff0 [ 1405.614242] do_syscall_64+0x1d5/0x640 [ 1405.618507] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1405.623793] RIP: 0033:0x4665d9 [ 1405.627144] RSP: 002b:00007f696b00b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1405.638408] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1405.647276] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1405.656024] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1405.664858] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1405.672240] R13: 00007ffd618ef30f R14: 00007f696b00b300 R15: 0000000000022000 [ 1405.722222] Mem-Info: [ 1405.731356] active_anon:12906 inactive_anon:16888 isolated_anon:0 [ 1405.731356] active_file:16 inactive_file:113 isolated_file:3 [ 1405.731356] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1405.731356] slab_reclaimable:13413 slab_unreclaimable:113532 [ 1405.731356] mapped:52661 shmem:17172 pagetables:816 bounce:0 [ 1405.731356] free:80767 free_pcp:391 free_cma:0 [ 1405.769363] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1405.775301] Mem-Info: [ 1405.789861] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1405.799668] active_anon:12906 inactive_anon:16888 isolated_anon:0 [ 1405.799668] active_file:16 inactive_file:338 isolated_file:3 [ 1405.799668] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1405.799668] slab_reclaimable:13413 slab_unreclaimable:113532 [ 1405.799668] mapped:52861 shmem:17172 pagetables:816 bounce:0 [ 1405.799668] free:73001 free_pcp:207 free_cma:0 [ 1405.801083] CPU: 0 PID: 10758 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1405.847977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1405.859016] Call Trace: [ 1405.861629] dump_stack+0x1b2/0x281 [ 1405.865569] warn_alloc.cold+0x96/0x1cc [ 1405.869656] ? zone_watermark_ok_safe+0x220/0x220 [ 1405.874153] Node 0 active_anon:51456kB inactive_anon:51452kB active_file:60kB inactive_file:1348kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:187840kB dirty:0kB writeback:0kB shmem:52524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1405.874755] __alloc_pages_nodemask+0x2127/0x2720 [ 1405.909891] ? lock_acquire+0x170/0x3f0 [ 1405.914148] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1405.919239] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1405.925074] ? __mutex_unlock_slowpath+0x75/0x770 [ 1405.930287] alloc_pages_current+0x155/0x260 [ 1405.932168] Node 0 active_anon:51456kB inactive_anon:51452kB active_file:660kB inactive_file:476kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:187840kB dirty:0kB writeback:0kB shmem:52524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1405.935481] ion_page_pool_alloc+0x118/0x1b0 [ 1405.935492] ion_system_heap_allocate+0x133/0x8c0 [ 1405.935501] ? ion_alloc+0x187/0x810 [ 1405.935511] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1405.935520] ? ion_system_contig_heap_create+0x130/0x130 [ 1405.935529] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1405.935540] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1405.935550] ion_alloc+0x204/0x810 [ 1405.988962] Node 1 active_anon:168kB inactive_anon:16100kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23604kB dirty:0kB writeback:0kB shmem:16164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1405.990847] ? ion_dma_buf_release+0x40/0x40 [ 1405.990864] ? __might_fault+0x177/0x1b0 [ 1406.004066] Node 0 [ 1406.004877] ion_ioctl+0xea/0x1f0 [ 1406.004889] ? ion_query_heaps+0x360/0x360 [ 1406.004900] ? ion_query_heaps+0x360/0x360 [ 1406.004910] do_vfs_ioctl+0x75a/0xff0 [ 1406.004921] ? ioctl_preallocate+0x1a0/0x1a0 [ 1406.004931] ? lock_downgrade+0x740/0x740 [ 1406.004945] ? __fget+0x225/0x360 [ 1406.004954] ? do_vfs_ioctl+0xff0/0xff0 [ 1406.004966] ? security_file_ioctl+0x83/0xb0 [ 1406.004975] SyS_ioctl+0x7f/0xb0 [ 1406.004983] ? do_vfs_ioctl+0xff0/0xff0 [ 1406.004999] do_syscall_64+0x1d5/0x640 [ 1406.060422] Node 1 active_anon:168kB inactive_anon:16100kB active_file:24kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23604kB dirty:0kB writeback:0kB shmem:16164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1406.063042] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1406.063057] RIP: 0033:0x4665d9 [ 1406.080001] Node 0 [ 1406.082108] RSP: 002b:00007f7ec8572188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1406.082120] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1406.082125] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1406.082134] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1406.093466] DMA free:11144kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1406.093565] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1406.106492] lowmem_reserve[]: [ 1406.106801] R13: 00007fff53496b8f R14: 00007f7ec8572300 R15: 0000000000022000 [ 1406.156265] DMA free:11144kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1406.310069] 0 2717 2718 2718 2718 [ 1406.318621] Node 0 DMA32 free:331740kB min:36200kB low:45248kB high:54296kB active_anon:51460kB inactive_anon:51452kB active_file:772kB inactive_file:1568kB unevictable:0kB writepending:60kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:3100kB bounce:0kB free_pcp:848kB local_pcp:156kB free_cma:0kB [ 1406.389027] lowmem_reserve[]: 0 0 0 0 0 [ 1406.393368] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1406.424878] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1406.430188] Node 0 DMA32 free:355328kB min:36200kB low:45248kB high:54296kB active_anon:51460kB inactive_anon:51452kB active_file:772kB inactive_file:1568kB unevictable:0kB writepending:60kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:3100kB bounce:0kB free_pcp:156kB local_pcp:20kB free_cma:0kB [ 1406.460566] lowmem_reserve[]: 0 0 0 0 0 [ 1406.477237] Node 1 Normal free:106512kB min:53696kB low:67120kB high:80544kB active_anon:168kB inactive_anon:16100kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:164kB bounce:0kB free_pcp:648kB local_pcp:16kB free_cma:0kB [ 1406.524905] lowmem_reserve[]: 0 0 0 0 0 [ 1406.529154] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1406.554518] lowmem_reserve[]: [ 1406.564154] lowmem_reserve[]: 0 0 0 0 0 [ 1406.568031] 0 [ 1406.571430] Node 1 Normal free:106512kB min:53696kB low:67120kB high:80544kB active_anon:168kB inactive_anon:16100kB active_file:28kB inactive_file:32kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:164kB bounce:0kB free_pcp:648kB local_pcp:632kB free_cma:0kB [ 1406.571454] lowmem_reserve[]: 0 0 0 0 0 [ 1406.571477] Node 0 [ 1406.573507] 0 0 0 0 [ 1406.615007] DMA: 2*4kB (UE) 16*8kB (U) 26*16kB (UE) 23*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11144kB [ 1406.620580] Node 0 DMA: 2*4kB (UE) 16*8kB (U) 26*16kB (UE) 23*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11144kB [ 1406.672577] Node 0 DMA32: 19*4kB (ME) 151*8kB (UME) 152*16kB (E) 1555*32kB (UE) 1902*64kB (U) 292*128kB (U) 92*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 236132kB [ 1406.686540] Node 0 [ 1406.688857] Node 0 [ 1406.689978] DMA32: [ 1406.700431] Normal: [ 1406.701167] 20*4kB [ 1406.704947] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1406.712802] (UME) [ 1406.730223] Node 1 Normal: 48*4kB (UM) 24*8kB (U) 837*16kB (U) 1616*32kB (U) 1*64kB (U) 2*128kB (U) 1*256kB (U) 1*512kB (U) 39*1024kB (U) 0*2048kB 0*4096kB = 106512kB [ 1406.741024] 151*8kB [ 1406.767975] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1406.774368] (UME) [ 1406.791384] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1406.798788] 153*16kB [ 1406.814929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1406.819051] (UE) 853*32kB (UE) 1902*64kB (U) 292*128kB (U) 92*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 213688kB [ 1406.844880] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1406.864918] 17986 total pagecache pages [ 1406.868940] 0 pages in swap cache [ 1406.872410] Swap cache stats: add 0, delete 0, find 0/0 [ 1406.884909] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1406.894882] Free swap = 0kB [ 1406.898769] Total swap = 0kB [ 1406.899591] Node 1 Normal: [ 1406.901781] 2097051 pages RAM [ 1406.901787] 0 pages HighMem/MovableOnly [ 1406.904731] 2*4kB [ 1406.912218] warn_alloc_show_mem: 2 callbacks suppressed [ 1406.912221] Mem-Info: [ 1406.934880] 363849 pages reserved [ 1406.938360] 0 pages cma reserved [ 1406.941723] Out of memory (oom_kill_allocating_task): Kill process 10756 (systemd-journal) score 0 or sacrifice child [ 1406.953952] (M) 1*8kB (U) 54*16kB (U) 1616*32kB (U) 1*64kB (U) 2*128kB (U) 1*256kB (U) 1*512kB (U) 39*1024kB (U) 0*2048kB 0*4096kB = 93616kB [ 1406.958786] active_anon:12907 inactive_anon:16888 isolated_anon:0 [ 1406.958786] active_file:257 inactive_file:214 isolated_file:32 [ 1406.958786] unevictable:0 dirty:16 writeback:0 unstable:0 [ 1406.958786] slab_reclaimable:13413 slab_unreclaimable:113503 [ 1406.958786] mapped:53081 shmem:17172 pagetables:816 bounce:0 [ 1406.958786] free:30503 free_pcp:237 free_cma:0 [ 1407.014887] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1407.019448] Killed process 10756 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1524kB [ 1407.023828] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1407.041819] Node 0 active_anon:51068kB inactive_anon:51452kB active_file:440kB inactive_file:296kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:185980kB dirty:0kB writeback:4kB shmem:52524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1407.078185] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1407.084930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1407.111850] in:imklog cpuset=/ mems_allowed=0-1 [ 1407.117195] CPU: 0 PID: 9956 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1407.124571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1407.127058] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1407.134277] Call Trace: [ 1407.145489] dump_stack+0x1b2/0x281 [ 1407.149211] dump_header+0x178/0x82f [ 1407.152931] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1407.156725] 17204 total pagecache pages [ 1407.158034] ? ___ratelimit+0x2cd/0x530 [ 1407.162004] 0 pages in swap cache [ 1407.165969] oom_kill_process.cold+0x10/0xa40 [ 1407.165989] out_of_memory+0xe3e/0x1190 [ 1407.166001] ? oom_killer_disable+0x1c0/0x1c0 [ 1407.166010] ? mutex_trylock+0x152/0x1a0 [ 1407.166020] __alloc_pages_nodemask+0x23e1/0x2720 [ 1407.166039] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1407.166063] alloc_pages_current+0x155/0x260 [ 1407.166073] filemap_fault+0x11a1/0x1ad0 [ 1407.194923] Swap cache stats: add 0, delete 0, find 0/0 [ 1407.196769] ext4_filemap_fault+0x84/0xb0 [ 1407.201275] Free swap = 0kB [ 1407.205334] __do_fault+0xfa/0x380 [ 1407.205343] __handle_mm_fault+0x2497/0x4620 [ 1407.205353] ? vm_insert_page+0x7c0/0x7c0 [ 1407.205363] ? lock_downgrade+0x740/0x740 [ 1407.205376] ? mark_held_locks+0xa6/0xf0 [ 1407.205385] handle_mm_fault+0x455/0x9c0 [ 1407.205396] __do_page_fault+0x549/0xad0 [ 1407.205407] ? spurious_fault+0x640/0x640 [ 1407.225302] Total swap = 0kB [ 1407.225856] ? do_page_fault+0x60/0x500 [ 1407.229994] 2097051 pages RAM [ 1407.234168] ? page_fault+0x2f/0x50 [ 1407.261673] 0 pages HighMem/MovableOnly [ 1407.264781] page_fault+0x45/0x50 [ 1407.272189] RIP: 1fa0:0x1f9f [ 1407.275213] RSP: 0000:000055ee74bb39d0 EFLAGS: 7ff0bcd0bda0 [ 1407.279042] 363849 pages reserved [ 1407.288579] Node 1 active_anon:168kB inactive_anon:16100kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23604kB dirty:4kB writeback:0kB shmem:16164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1407.322191] 0 pages cma reserved [ 1407.326871] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1407.334956] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1407.363629] lowmem_reserve[]: [ 1407.374115] syz-executor.0 cpuset= [ 1407.375370] 0 2717 2718 2718 2718 [ 1407.395009] Node 0 DMA32 free:18312kB min:36200kB low:45248kB high:54296kB active_anon:51016kB inactive_anon:51448kB active_file:440kB inactive_file:360kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:3000kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 1407.401067] / mems_allowed=0-1 [ 1407.429720] CPU: 1 PID: 10389 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1407.437618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1407.440286] lowmem_reserve[]: [ 1407.446972] Call Trace: [ 1407.446996] dump_stack+0x1b2/0x281 [ 1407.447009] warn_alloc.cold+0x96/0x1cc [ 1407.447023] ? zone_watermark_ok_safe+0x220/0x220 [ 1407.450120] 0 [ 1407.452700] ? usleep_range+0x130/0x130 [ 1407.456358] 0 [ 1407.460295] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1407.465128] 0 [ 1407.466927] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1407.470885] 0 [ 1407.472677] ? run_timer_softirq+0x5a0/0x5a0 [ 1407.477792] 0 [ 1407.479570] __alloc_pages_nodemask+0x2127/0x2720 [ 1407.486353] ? lock_acquire+0x170/0x3f0 [ 1407.486369] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1407.486382] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1407.490767] Node 0 [ 1407.492580] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1407.497535] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1407.501469] alloc_pages_current+0x155/0x260 [ 1407.506318] lowmem_reserve[]: [ 1407.510796] ion_page_pool_alloc+0x118/0x1b0 [ 1407.513002] 0 [ 1407.518470] ion_system_heap_allocate+0x133/0x8c0 [ 1407.518484] ? _raw_spin_unlock+0x29/0x40 [ 1407.518492] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1407.518501] ? ion_system_contig_heap_create+0x130/0x130 [ 1407.518516] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1407.543945] 0 [ 1407.548361] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1407.548375] ion_alloc+0x27a/0x810 [ 1407.551457] 0 [ 1407.555862] ? ion_dma_buf_release+0x40/0x40 [ 1407.555875] ? __might_fault+0x177/0x1b0 [ 1407.555887] ion_ioctl+0xea/0x1f0 [ 1407.557666] 0 [ 1407.562536] ? ion_query_heaps+0x360/0x360 [ 1407.566701] 0 [ 1407.571693] ? ion_query_heaps+0x360/0x360 [ 1407.582219] do_vfs_ioctl+0x75a/0xff0 [ 1407.584090] Node 1 [ 1407.588922] ? ioctl_preallocate+0x1a0/0x1a0 [ 1407.588931] ? lock_downgrade+0x740/0x740 [ 1407.588944] ? __fget+0x225/0x360 [ 1407.588956] ? do_vfs_ioctl+0xff0/0xff0 [ 1407.592513] Normal free:27264kB min:53696kB low:67120kB high:80544kB active_anon:168kB inactive_anon:16100kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:164kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1407.594295] ? security_file_ioctl+0x83/0xb0 [ 1407.598703] lowmem_reserve[]: [ 1407.602810] SyS_ioctl+0x7f/0xb0 [ 1407.606269] 0 [ 1407.608029] ? do_vfs_ioctl+0xff0/0xff0 [ 1407.612254] 0 [ 1407.614051] do_syscall_64+0x1d5/0x640 [ 1407.618306] 0 [ 1407.622262] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1407.624465] 0 [ 1407.628868] RIP: 0033:0x4665d9 [ 1407.628872] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1407.628881] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1407.628885] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1407.628890] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1407.628895] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1407.628900] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1407.631814] Mem-Info: [ 1407.633042] 0 [ 1407.636826] active_anon:12796 inactive_anon:16887 isolated_anon:0 [ 1407.636826] active_file:22 inactive_file:21 isolated_file:0 [ 1407.636826] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1407.636826] slab_reclaimable:13413 slab_unreclaimable:113164 [ 1407.636826] mapped:52246 shmem:17172 pagetables:791 bounce:0 [ 1407.636826] free:14136 free_pcp:37 free_cma:0 [ 1407.670632] Node 0 active_anon:51016kB inactive_anon:51448kB active_file:80kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185380kB dirty:12kB writeback:0kB shmem:52524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1407.690491] Node 0 [ 1407.692672] Node 1 active_anon:168kB inactive_anon:16100kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23604kB dirty:4kB writeback:0kB shmem:16164kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1407.693071] DMA: [ 1407.698405] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1407.698425] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1407.698446] Node 0 DMA32 free:18312kB min:36200kB low:45248kB high:54296kB active_anon:51016kB inactive_anon:51448kB active_file:40kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:3000kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 1407.698463] lowmem_reserve[]: 0 0 0 0 0 [ 1407.698486] Node 0 [ 1407.712860] 2*4kB [ 1407.720010] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1407.743132] (UE) [ 1407.751135] lowmem_reserve[]: [ 1407.763642] 0*8kB [ 1407.802437] 0 [ 1407.822336] 23*16kB [ 1407.850730] 0 [ 1407.877240] (UE) [ 1407.892308] 0 0 0 [ 1407.961313] Node 1 Normal free:27264kB min:53696kB low:67120kB high:80544kB active_anon:168kB inactive_anon:16100kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:164kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1407.968747] 23*32kB [ 1407.991427] lowmem_reserve[]: 0 0 0 0 0 [ 1407.999626] Node 0 DMA: 2*4kB (UE) 0*8kB 23*16kB (UE) 23*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 1408.034566] (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 1408.034764] Node 0 DMA32: 30*4kB (UE) 2558*8kB (UMEH) 637*16kB (UMEH) 118*32kB (UMEH) 213*64kB (UH) 47*128kB (UMH) 42*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 64952kB [ 1408.064431] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1408.099748] Node 0 DMA32: 41*4kB (UMEH) 1673*8kB (UMEH) 629*16kB (UMEH) 1059*32kB (UMEH) 213*64kB (UH) 47*128kB (UMH) 42*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 87900kB [ 1408.100416] Node 1 Normal: 2*4kB (M) 57*8kB (U) 2*16kB (U) 0*32kB 2*64kB (UM) 0*128kB 1*256kB (U) 0*512kB 26*1024kB (U) 0*2048kB 0*4096kB = 27504kB [ 1408.170534] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1408.171011] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1408.196869] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1408.225249] Node 1 Normal: 678*4kB (UM) 77*8kB (U) 539*16kB (U) 26*32kB (U) 112*64kB (UM) 4*128kB (U) 1*256kB (U) 0*512kB 26*1024kB (U) 0*2048kB 0*4096kB = 47344kB [ 1408.265520] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1408.269142] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1408.294753] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1408.295116] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1408.303454] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1408.329371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1408.354030] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1408.355031] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1408.364042] 18697 total pagecache pages [ 1408.396509] 18808 total pagecache pages [ 1408.401149] 0 pages in swap cache [ 1408.401915] systemd[1]: Stopped Journal Service. [ 1408.405856] Swap cache stats: add 0, delete 0, find 0/0 [ 1408.439435] 0 pages in swap cache [ 1408.442921] Swap cache stats: add 0, delete 0, find 0/0 [ 1408.471884] systemd[1]: Starting Journal Service... [ 1408.473217] Free swap = 0kB [ 1408.478000] Free swap = 0kB [ 1408.483530] Total swap = 0kB [ 1408.494946] Total swap = 0kB [ 1408.497996] 2097051 pages RAM [ 1408.500047] 2097051 pages RAM [ 1408.501217] 0 pages HighMem/MovableOnly [ 1408.504226] 0 pages HighMem/MovableOnly [ 1408.514860] 363849 pages reserved [ 1408.516981] 363849 pages reserved [ 1408.518413] 0 pages cma reserved [ 1408.522267] 0 pages cma reserved [ 1408.531436] Out of memory (oom_kill_allocating_task): Kill process 9956 (in:imklog) score 0 or sacrifice child [ 1408.544796] Killed process 9948 (rsyslogd) total-vm:254332kB, anon-rss:972kB, file-rss:0kB, shmem-rss:0kB [ 1408.566220] oom_reaper: reaped process 9948 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1408.592443] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1408.658938] systemd[1]: rsyslog.service: Unit entered failed state. [ 1408.674768] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1408.862174] systemd-journald[10773]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1409.111623] oom_reaper: reaped process 10763 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1409.207418] oom_reaper: reaped process 10768 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1409.231893] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1409.249419] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1409.252576] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1409.266664] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1409.285410] CPU: 0 PID: 10765 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1409.290009] syz-executor.1 cpuset= [ 1409.293417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1409.293427] / [ 1409.296953] Call Trace: [ 1409.310633] dump_stack+0x1b2/0x281 [ 1409.314272] warn_alloc.cold+0x96/0x1cc [ 1409.318267] ? zone_watermark_ok_safe+0x220/0x220 [ 1409.323138] ? wait_for_completion_io+0x10/0x10 [ 1409.327825] __alloc_pages_nodemask+0x2127/0x2720 [ 1409.332700] ? lock_acquire+0x170/0x3f0 [ 1409.336701] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1409.341572] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1409.346422] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1409.351881] ? retint_kernel+0x2d/0x2d [ 1409.355774] alloc_pages_current+0x155/0x260 [ 1409.360974] ion_page_pool_alloc+0x118/0x1b0 [ 1409.365388] ion_system_heap_allocate+0x133/0x8c0 [ 1409.370240] ? ion_alloc+0x187/0x810 [ 1409.373959] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1409.379416] ? ion_system_contig_heap_create+0x130/0x130 [ 1409.384898] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1409.389922] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1409.394791] ion_alloc+0x204/0x810 [ 1409.398344] ? ion_dma_buf_release+0x40/0x40 [ 1409.402754] ? __might_fault+0x177/0x1b0 [ 1409.406825] ion_ioctl+0xea/0x1f0 [ 1409.410536] ? ion_query_heaps+0x360/0x360 [ 1409.415131] ? ion_query_heaps+0x360/0x360 [ 1409.419385] do_vfs_ioctl+0x75a/0xff0 [ 1409.423184] ? ioctl_preallocate+0x1a0/0x1a0 [ 1409.427590] ? lock_downgrade+0x740/0x740 [ 1409.431743] ? __fget+0x225/0x360 [ 1409.435197] ? do_vfs_ioctl+0xff0/0xff0 [ 1409.439177] ? security_file_ioctl+0x83/0xb0 [ 1409.443616] SyS_ioctl+0x7f/0xb0 [ 1409.446987] ? do_vfs_ioctl+0xff0/0xff0 [ 1409.451065] do_syscall_64+0x1d5/0x640 [ 1409.454957] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1409.460147] RIP: 0033:0x4665d9 [ 1409.463329] RSP: 002b:00007f62027c1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1409.471039] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1409.478303] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1409.490173] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1409.498222] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1409.506794] R13: 00007ffc4c66559f R14: 00007f62027c1300 R15: 0000000000022000 [ 1409.519373] oom_reaper: reaped process 10765 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1409.529499] mems_allowed=0-1 [ 1409.532617] CPU: 1 PID: 10763 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1409.534895] syz-executor.5 cpuset= [ 1409.540514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1409.540523] Call Trace: [ 1409.544086] / [ 1409.553465] dump_stack+0x1b2/0x281 [ 1409.558157] mems_allowed=0-1 [ 1409.561365] warn_alloc.cold+0x96/0x1cc [ 1409.568443] ? zone_watermark_ok_safe+0x220/0x220 [ 1409.573297] ? usleep_range+0x130/0x130 [ 1409.577314] ? try_to_free_pages+0x23f/0x6e0 [ 1409.582589] ? _find_next_bit+0xdb/0x100 [ 1409.586839] ? run_timer_softirq+0x5a0/0x5a0 [ 1409.591434] __alloc_pages_nodemask+0x2127/0x2720 [ 1409.596295] ? lock_acquire+0x170/0x3f0 [ 1409.600270] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1409.605117] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1409.609621] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1409.615170] alloc_pages_current+0x155/0x260 [ 1409.619592] ion_page_pool_alloc+0x118/0x1b0 [ 1409.624005] ion_system_heap_allocate+0x133/0x8c0 [ 1409.628867] ? ion_alloc+0x187/0x810 [ 1409.632599] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1409.638053] ? ion_system_contig_heap_create+0x130/0x130 [ 1409.647535] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1409.652649] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1409.657506] ion_alloc+0x204/0x810 [ 1409.661052] ? ion_dma_buf_release+0x40/0x40 [ 1409.665470] ? __might_fault+0x177/0x1b0 [ 1409.669586] ion_ioctl+0xea/0x1f0 [ 1409.673039] ? ion_query_heaps+0x360/0x360 [ 1409.677278] ? ion_query_heaps+0x360/0x360 [ 1409.681510] do_vfs_ioctl+0x75a/0xff0 [ 1409.685310] ? ioctl_preallocate+0x1a0/0x1a0 [ 1409.689713] ? lock_downgrade+0x740/0x740 [ 1409.693861] ? __fget+0x225/0x360 [ 1409.697313] ? do_vfs_ioctl+0xff0/0xff0 [ 1409.701732] ? security_file_ioctl+0x83/0xb0 [ 1409.706156] SyS_ioctl+0x7f/0xb0 [ 1409.709518] ? do_vfs_ioctl+0xff0/0xff0 [ 1409.713490] do_syscall_64+0x1d5/0x640 [ 1409.717397] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1409.722598] RIP: 0033:0x4665d9 [ 1409.725871] RSP: 002b:00007f696b00b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1409.733592] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1409.740883] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1409.748166] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1409.755436] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1409.764010] R13: 00007ffd618ef30f R14: 00007f696b00b300 R15: 0000000000022000 [ 1409.764889] warn_alloc_show_mem: 1 callbacks suppressed [ 1409.764892] Mem-Info: [ 1409.776414] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1409.793765] CPU: 1 PID: 10768 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1409.797360] active_anon:12604 inactive_anon:17281 isolated_anon:0 [ 1409.797360] active_file:27 inactive_file:4 isolated_file:0 [ 1409.797360] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1409.797360] slab_reclaimable:13359 slab_unreclaimable:113330 [ 1409.797360] mapped:52210 shmem:17581 pagetables:757 bounce:0 [ 1409.797360] free:13941 free_pcp:141 free_cma:0 [ 1409.801676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1409.834903] Node 0 active_anon:50200kB inactive_anon:51388kB active_file:24kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185296kB dirty:0kB writeback:0kB shmem:52524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1409.844726] Call Trace: [ 1409.872729] Node 1 active_anon:216kB inactive_anon:17736kB active_file:84kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:23544kB dirty:0kB writeback:0kB shmem:17800kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1409.875264] dump_stack+0x1b2/0x281 [ 1409.875279] warn_alloc.cold+0x96/0x1cc [ 1409.902399] Node 0 [ 1409.905979] ? zone_watermark_ok_safe+0x220/0x220 [ 1409.905990] ? usleep_range+0x130/0x130 [ 1409.906001] ? try_to_free_pages+0x23f/0x6e0 [ 1409.909973] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1409.912194] ? _find_next_bit+0xdb/0x100 [ 1409.917065] lowmem_reserve[]: [ 1409.920988] ? run_timer_softirq+0x5a0/0x5a0 [ 1409.925408] 0 [ 1409.950894] __alloc_pages_nodemask+0x2127/0x2720 [ 1409.950913] ? lock_acquire+0x170/0x3f0 [ 1409.950928] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1409.954996] 2717 [ 1409.958072] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1409.962472] 2718 [ 1409.964269] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1409.969181] 2718 [ 1409.973202] ? alloc_pages_current+0x21c/0x260 [ 1409.978064] 2718 [ 1409.980104] alloc_pages_current+0x155/0x260 [ 1409.986646] ion_page_pool_alloc+0x118/0x1b0 [ 1409.986656] ion_system_heap_allocate+0x133/0x8c0 [ 1409.986665] ? ion_alloc+0x187/0x810 [ 1409.986676] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1409.986695] ? ion_system_contig_heap_create+0x130/0x130 [ 1409.992133] Node 0 [ 1409.994185] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1409.998800] DMA32 free:18064kB min:36200kB low:45248kB high:54296kB active_anon:50112kB inactive_anon:51388kB active_file:24kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2864kB bounce:0kB free_pcp:440kB local_pcp:120kB free_cma:0kB [ 1410.000813] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1410.005580] lowmem_reserve[]: [ 1410.009946] ion_alloc+0x204/0x810 [ 1410.014767] 0 [ 1410.018476] ? ion_dma_buf_release+0x40/0x40 [ 1410.018488] ? __might_fault+0x177/0x1b0 [ 1410.018499] ion_ioctl+0xea/0x1f0 [ 1410.018510] ? ion_query_heaps+0x360/0x360 [ 1410.024046] 0 [ 1410.029590] ? ion_query_heaps+0x360/0x360 [ 1410.029601] do_vfs_ioctl+0x75a/0xff0 [ 1410.029613] ? ioctl_preallocate+0x1a0/0x1a0 [ 1410.029625] ? lock_downgrade+0x740/0x740 [ 1410.031843] 0 [ 1410.036852] ? __fget+0x225/0x360 [ 1410.036862] ? do_vfs_ioctl+0xff0/0xff0 [ 1410.036874] ? security_file_ioctl+0x83/0xb0 [ 1410.036885] SyS_ioctl+0x7f/0xb0 [ 1410.065220] 0 [ 1410.070022] ? do_vfs_ioctl+0xff0/0xff0 [ 1410.073099] 0 [ 1410.076749] do_syscall_64+0x1d5/0x640 [ 1410.076763] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1410.076772] RIP: 0033:0x4665d9 [ 1410.076776] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1410.082971] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1410.082979] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1410.087083] Node 0 [ 1410.090483] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1410.090491] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 00:40:49 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) 00:40:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 1410.094882] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1410.096616] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1410.100842] lowmem_reserve[]: [ 1410.115117] systemd cpuset= [ 1410.205249] 0 [ 1410.241257] / mems_allowed=0-1 [ 1410.260885] CPU: 1 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 1410.267843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1410.277220] Call Trace: [ 1410.279846] dump_stack+0x1b2/0x281 [ 1410.283509] dump_header+0x178/0x82f [ 1410.287235] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1410.292353] ? ___ratelimit+0x2cd/0x530 [ 1410.296341] oom_kill_process.cold+0x10/0xa40 [ 1410.300856] ? lock_downgrade+0x740/0x740 [ 1410.305023] out_of_memory+0x2dc/0x1190 [ 1410.309186] ? oom_killer_disable+0x1c0/0x1c0 [ 1410.310315] 0 [ 1410.313730] ? mutex_trylock+0x152/0x1a0 [ 1410.313732] 0 0 [ 1410.315528] __alloc_pages_nodemask+0x23e1/0x2720 [ 1410.315549] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1410.315572] alloc_pages_current+0x155/0x260 [ 1410.336121] filemap_fault+0x11a1/0x1ad0 [ 1410.340207] ext4_filemap_fault+0x84/0xb0 [ 1410.344375] __do_fault+0xfa/0x380 [ 1410.347917] __handle_mm_fault+0x2497/0x4620 [ 1410.348137] 0 [ 1410.352324] ? vm_insert_page+0x7c0/0x7c0 [ 1410.352344] ? mark_held_locks+0xa6/0xf0 [ 1410.352354] handle_mm_fault+0x455/0x9c0 [ 1410.366458] __do_page_fault+0x549/0xad0 [ 1410.370536] ? spurious_fault+0x640/0x640 [ 1410.370548] ? do_page_fault+0x60/0x500 [ 1410.378785] ? page_fault+0x2f/0x50 [ 1410.382501] page_fault+0x45/0x50 [ 1410.385958] RIP: 0001:0xffffffffffffffff [ 1410.390015] RSP: 7fbd2f50:00007ffeadc5f5d0 EFLAGS: 7ffeadc5f300 [ 1410.395304] Node 1 [ 1410.403208] Mem-Info: [ 1410.409277] active_anon:12580 inactive_anon:17281 isolated_anon:0 [ 1410.409277] active_file:55 inactive_file:1768 isolated_file:0 [ 1410.409277] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1410.409277] slab_reclaimable:13358 slab_unreclaimable:112928 [ 1410.409277] mapped:53501 shmem:17581 pagetables:757 bounce:0 [ 1410.409277] free:124731 free_pcp:189 free_cma:0 00:40:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x2, 0x1}) [ 1410.417904] Normal free:321584kB min:53696kB low:67120kB high:80544kB active_anon:212kB inactive_anon:17736kB active_file:184kB inactive_file:5540kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:164kB bounce:0kB free_pcp:360kB local_pcp:220kB free_cma:0kB [ 1410.474485] Node 0 active_anon:50108kB inactive_anon:51388kB active_file:36kB inactive_file:1732kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186296kB dirty:0kB writeback:0kB shmem:52524kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 00:40:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x2, 0x1}) 00:40:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x2, 0x1}) [ 1410.589034] Node 1 active_anon:212kB inactive_anon:17736kB active_file:984kB inactive_file:4840kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:27908kB dirty:0kB writeback:0kB shmem:17800kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 00:40:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x0, 0x1}) [ 1410.653270] warn_alloc_show_mem: 1 callbacks suppressed [ 1410.653274] Mem-Info: [ 1410.684751] active_anon:12630 inactive_anon:17281 isolated_anon:0 [ 1410.684751] active_file:305 inactive_file:1618 isolated_file:0 [ 1410.684751] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1410.684751] slab_reclaimable:13358 slab_unreclaimable:113057 [ 1410.684751] mapped:53601 shmem:17581 pagetables:794 bounce:0 [ 1410.684751] free:118733 free_pcp:308 free_cma:0 [ 1410.726353] lowmem_reserve[]: 0 0 0 0 0 [ 1410.740507] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 20*16kB (UE) 22*32kB (UE) 6*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11152kB [ 1410.745063] Node 0 DMA free:11152kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1410.806520] Node 0 active_anon:50308kB inactive_anon:54688kB active_file:336kB inactive_file:1404kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186496kB dirty:0kB writeback:0kB shmem:55824kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1410.820877] Node 0 [ 1410.843426] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1410.858681] Node 0 DMA32 free:45236kB min:36200kB low:45248kB high:54296kB active_anon:50308kB inactive_anon:54688kB active_file:336kB inactive_file:1404kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:3012kB bounce:0kB free_pcp:828kB local_pcp:552kB free_cma:0kB [ 1410.873315] DMA32: [ 1410.908259] Node 1 active_anon:212kB inactive_anon:20936kB active_file:2584kB inactive_file:3568kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:30008kB dirty:0kB writeback:0kB shmem:21000kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1410.959366] lowmem_reserve[]: 0 0 0 0 0 [ 1410.962180] 328*4kB [ 1410.967918] Node 0 [ 1410.970171] (UMEH) [ 1410.972639] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1410.980293] 217*8kB [ 1411.010544] Node 0 DMA free:11012kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1411.041454] lowmem_reserve[]: 0 0 0 0 0 [ 1411.045549] Node 1 Normal free:26872kB min:53696kB low:67120kB high:80544kB active_anon:212kB inactive_anon:20936kB active_file:908kB inactive_file:772kB unevictable:0kB writepending:28kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:164kB bounce:0kB free_pcp:688kB local_pcp:0kB free_cma:0kB [ 1411.056737] (UMEH) [ 1411.078826] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1411.093788] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1411.098909] Node 0 DMA32 free:17704kB min:36200kB low:45248kB high:54296kB active_anon:50204kB inactive_anon:54740kB active_file:0kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2968kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1411.115686] 157*16kB (UMEH) 167*32kB (UEH) 3*64kB (UMH) 1*128kB (H) 32*256kB (U) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 20440kB [ 1411.135363] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1411.163203] Node 0 [ 1411.166215] lowmem_reserve[]: 0 0 0 0 0 [ 1411.166238] Node 0 DMA: 1*4kB (E) 0*8kB 16*16kB (UE) 22*32kB (UE) 5*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11012kB [ 1411.176707] syz-executor.1: [ 1411.189717] CPU: 1 PID: 10777 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1411.201227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1411.204880] Normal: [ 1411.210585] Call Trace: [ 1411.210595] 0*4kB [ 1411.212924] dump_stack+0x1b2/0x281 [ 1411.221247] warn_alloc.cold+0x96/0x1cc [ 1411.222816] page allocation failure: order:4 [ 1411.225218] ? zone_watermark_ok_safe+0x220/0x220 [ 1411.225239] __alloc_pages_nodemask+0x2127/0x2720 [ 1411.225256] ? lock_acquire+0x170/0x3f0 [ 1411.225270] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1411.229667] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1411.234509] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1411.239385] 0*8kB [ 1411.243293] ? __mutex_unlock_slowpath+0x75/0x770 [ 1411.248149] 0*16kB [ 1411.255201] alloc_pages_current+0x155/0x260 [ 1411.255216] ion_page_pool_alloc+0x118/0x1b0 [ 1411.255225] ion_system_heap_allocate+0x133/0x8c0 [ 1411.255236] ? ion_alloc+0x187/0x810 [ 1411.261218] (null) [ 1411.263345] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1411.268221] syz-executor.1 cpuset= [ 1411.270399] ? ion_system_contig_heap_create+0x130/0x130 [ 1411.274776] / [ 1411.279185] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1411.284086] 0*32kB [ 1411.287818] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1411.287831] ion_alloc+0x204/0x810 [ 1411.287845] ? ion_dma_buf_release+0x40/0x40 [ 1411.289973] 0*64kB [ 1411.295414] ? __might_fault+0x177/0x1b0 [ 1411.295426] ion_ioctl+0xea/0x1f0 [ 1411.295435] ? ion_query_heaps+0x360/0x360 [ 1411.295449] ? ion_query_heaps+0x360/0x360 [ 1411.298991] mems_allowed=0-1 [ 1411.304414] do_vfs_ioctl+0x75a/0xff0 [ 1411.306156] 0*128kB [ 1411.311112] ? ioctl_preallocate+0x1a0/0x1a0 [ 1411.313328] 0*256kB [ 1411.318217] ? lock_downgrade+0x740/0x740 [ 1411.318231] ? __fget+0x225/0x360 [ 1411.318239] ? do_vfs_ioctl+0xff0/0xff0 [ 1411.318250] ? security_file_ioctl+0x83/0xb0 [ 1411.318260] SyS_ioctl+0x7f/0xb0 [ 1411.318269] ? do_vfs_ioctl+0xff0/0xff0 [ 1411.334873] 0*512kB [ 1411.335873] do_syscall_64+0x1d5/0x640 [ 1411.340080] 0*1024kB [ 1411.344665] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1411.364875] 0*2048kB [ 1411.364926] RIP: 0033:0x4665d9 [ 1411.368375] 0*4096kB = 0kB [ 1411.372346] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 [ 1411.384874] Node 1 [ 1411.386337] ORIG_RAX: 0000000000000010 [ 1411.390212] Normal: [ 1411.392618] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1411.414881] 71*4kB [ 1411.417889] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1411.420199] (UM) [ 1411.427455] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1411.427461] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1411.427465] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1411.430835] lowmem_reserve[]: [ 1411.450559] CPU: 0 PID: 10763 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1411.454887] 0 [ 1411.461137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1411.464512] 0 [ 1411.472413] Call Trace: [ 1411.472437] dump_stack+0x1b2/0x281 [ 1411.472449] warn_alloc.cold+0x96/0x1cc [ 1411.472462] ? zone_watermark_ok_safe+0x220/0x220 [ 1411.472483] __alloc_pages_nodemask+0x2127/0x2720 [ 1411.472504] ? lock_acquire+0x170/0x3f0 [ 1411.474309] Node 0 [ 1411.483753] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1411.483770] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1411.483782] ? __mutex_unlock_slowpath+0x75/0x770 [ 1411.483790] ? retint_kernel+0x2d/0x2d [ 1411.483802] alloc_pages_current+0x155/0x260 [ 1411.483815] ion_page_pool_alloc+0x118/0x1b0 [ 1411.483825] ion_system_heap_allocate+0x133/0x8c0 [ 1411.483837] ? _raw_spin_unlock+0x29/0x40 [ 1411.483848] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1411.488366] DMA32: [ 1411.491878] ? ion_system_contig_heap_create+0x130/0x130 [ 1411.495886] 375*4kB [ 1411.500668] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1411.500683] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1411.507928] 0 [ 1411.509479] ion_alloc+0x27a/0x810 [ 1411.511712] 0 [ 1411.516555] ? ion_dma_buf_release+0x40/0x40 [ 1411.516568] ? __might_fault+0x177/0x1b0 [ 1411.516578] ion_ioctl+0xea/0x1f0 [ 1411.516587] ? ion_query_heaps+0x360/0x360 [ 1411.516597] ? ion_query_heaps+0x360/0x360 [ 1411.516607] do_vfs_ioctl+0x75a/0xff0 [ 1411.516619] ? ioctl_preallocate+0x1a0/0x1a0 [ 1411.522093] (UMEH) [ 1411.526937] ? lock_downgrade+0x740/0x740 [ 1411.526953] ? __fget+0x225/0x360 [ 1411.526963] ? do_vfs_ioctl+0xff0/0xff0 [ 1411.526974] ? security_file_ioctl+0x83/0xb0 [ 1411.526983] SyS_ioctl+0x7f/0xb0 [ 1411.526992] ? do_vfs_ioctl+0xff0/0xff0 [ 1411.527003] do_syscall_64+0x1d5/0x640 [ 1411.527016] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1411.527025] RIP: 0033:0x4665d9 [ 1411.527029] RSP: 002b:00007f696b00b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1411.527039] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1411.527044] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1411.527053] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1411.533221] 0 [ 1411.535330] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1411.535336] R13: 00007ffd618ef30f R14: 00007f696b00b300 R15: 0000000000022000 [ 1411.541673] 49*8kB [ 1411.550433] 235*8kB [ 1411.554315] (UM) [ 1411.562542] (UMEH) [ 1411.564874] 44*16kB [ 1411.574520] (UM) [ 1411.582682] 158*16kB [ 1411.588244] 27*32kB [ 1411.594400] Node 0 [ 1411.599133] (UM) 16*64kB (UM) 62*128kB (UM) 55*256kB (UM) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB [ 1411.609603] (UMEH) [ 1411.614134] = 26820kB [ 1411.614688] 167*32kB [ 1411.619408] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1411.629462] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1411.633148] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1411.634702] lowmem_reserve[]: [ 1411.647255] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1411.661221] (UEH) [ 1411.691469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1411.706991] 0 [ 1411.723844] 19270 total pagecache pages [ 1411.737110] 0 [ 1411.750345] syz-executor.1: [ 1411.780574] 1*64kB [ 1411.788878] 0 pages in swap cache [ 1411.801383] (H) [ 1411.813012] page allocation failure: order:0 [ 1411.813278] 2*128kB [ 1411.817393] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1411.817403] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1411.817425] CPU: 0 PID: 10763 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1411.817430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1411.817434] Call Trace: [ 1411.817454] dump_stack+0x1b2/0x281 [ 1411.826142] (UH) [ 1411.829660] warn_alloc.cold+0x96/0x1cc [ 1411.831962] 20*256kB [ 1411.839582] ? zone_watermark_ok_safe+0x220/0x220 [ 1411.839593] ? usleep_range+0x130/0x130 [ 1411.839601] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1411.839613] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1411.839622] ? run_timer_softirq+0x5a0/0x5a0 [ 1411.839637] __alloc_pages_nodemask+0x2127/0x2720 [ 1411.839651] ? lock_acquire+0x170/0x3f0 [ 1411.839666] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1411.839675] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1411.839693] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1411.851692] 0 [ 1411.853455] ? retint_kernel+0x2d/0x2d [ 1411.862880] 0 [ 1411.865410] alloc_pages_current+0x155/0x260 [ 1411.865425] ion_page_pool_alloc+0x118/0x1b0 [ 1411.865434] ion_system_heap_allocate+0x133/0x8c0 [ 1411.865447] ? _raw_spin_unlock+0x29/0x40 [ 1411.865456] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1411.865464] ? ion_system_contig_heap_create+0x130/0x130 [ 1411.865474] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1411.865484] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1411.865497] ion_alloc+0x27a/0x810 [ 1411.875660] (U) [ 1411.875781] ? ion_dma_buf_release+0x40/0x40 [ 1411.878165] 2*512kB [ 1411.883004] ? __might_fault+0x177/0x1b0 [ 1411.891496] 0 [ 1411.892185] ion_ioctl+0xea/0x1f0 [ 1411.901855] ? ion_query_heaps+0x360/0x360 [ 1411.910912] (UM) [ 1411.915819] ? ion_query_heaps+0x360/0x360 [ 1411.915830] do_vfs_ioctl+0x75a/0xff0 [ 1411.915843] ? ioctl_preallocate+0x1a0/0x1a0 [ 1411.915852] ? lock_downgrade+0x740/0x740 [ 1411.915865] ? __fget+0x225/0x360 [ 1411.915874] ? do_vfs_ioctl+0xff0/0xff0 [ 1411.915888] ? security_file_ioctl+0x83/0xb0 [ 1411.924603] Node 1 [ 1411.928781] SyS_ioctl+0x7f/0xb0 [ 1411.928790] ? do_vfs_ioctl+0xff0/0xff0 [ 1411.928801] do_syscall_64+0x1d5/0x640 [ 1411.928815] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1411.928824] RIP: 0033:0x4665d9 [ 1411.928828] RSP: 002b:00007f696b00b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1411.928838] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1411.928844] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1411.928849] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1411.928853] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1411.928859] R13: 00007ffd618ef30f R14: 00007f696b00b300 R15: 0000000000022000 [ 1411.943781] Swap cache stats: add 0, delete 0, find 0/0 [ 1411.947330] 0*1024kB [ 1411.954293] Free swap = 0kB [ 1411.954335] 0*2048kB [ 1411.968704] Total swap = 0kB [ 1411.971980] Normal free:26696kB min:53696kB low:67120kB high:80544kB active_anon:232kB inactive_anon:20940kB active_file:48kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:168kB bounce:0kB free_pcp:136kB local_pcp:0kB free_cma:0kB [ 1411.974692] 2097051 pages RAM [ 1411.978845] 0*4096kB [ 1411.996923] 0 pages HighMem/MovableOnly [ 1411.999652] lowmem_reserve[]: [ 1412.000961] 363849 pages reserved [ 1412.005252] 0 0 0 0 0 [ 1412.005272] Node 0 DMA: 1*4kB (E) 0*8kB 13*16kB (UE) 22*32kB (UE) [ 1412.018159] 0 pages cma reserved [ 1412.022282] = 17716kB [ 1412.188285] 5*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 1412.201929] Node 0 DMA32: 375*4kB (UME) 278*8kB (UME) 160*16kB (UME) 169*32kB (UE) 257*64kB (U) 82*128kB (U) 33*256kB (U) 2*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 52204kB [ 1412.218374] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1412.229232] warn_alloc_show_mem: 1 callbacks suppressed [ 1412.229235] Mem-Info: [ 1412.244871] Node 1 Normal: 0*4kB 70*8kB (U) 3*16kB (U) 0*32kB 2936*64kB (UM) 292*128kB (UM) 91*256kB (UM) 3*512kB (M) 164*1024kB (UM) 32*2048kB (U) 5*4096kB (U) = 504672kB [ 1412.275534] active_anon:12609 inactive_anon:18920 isolated_anon:0 [ 1412.275534] active_file:65 inactive_file:268 isolated_file:0 [ 1412.275534] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1412.275534] slab_reclaimable:13358 slab_unreclaimable:112794 [ 1412.275534] mapped:52728 shmem:19220 pagetables:784 bounce:0 [ 1412.275534] free:150392 free_pcp:400 free_cma:0 [ 1412.311818] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1412.324926] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1412.334969] Node 0 active_anon:50204kB inactive_anon:54740kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185296kB dirty:0kB writeback:0kB shmem:55876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1412.364890] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1412.373742] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1412.404877] 19587 total pagecache pages [ 1412.409145] 0 pages in swap cache [ 1412.412889] Swap cache stats: add 0, delete 0, find 0/0 [ 1412.424892] Node 1 active_anon:232kB inactive_anon:20940kB active_file:256kB inactive_file:1064kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25616kB dirty:0kB writeback:0kB shmem:21004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1412.475041] Free swap = 0kB [ 1412.478064] Total swap = 0kB [ 1412.481087] 2097051 pages RAM [ 1412.484377] 0 pages HighMem/MovableOnly [ 1412.491194] 363849 pages reserved [ 1412.494895] 0 pages cma reserved [ 1412.507929] Node 0 DMA free:11260kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1412.548166] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1412.554724] Node 0 DMA32 free:188776kB min:36200kB low:45248kB high:54296kB active_anon:50204kB inactive_anon:54740kB active_file:4kB inactive_file:2608kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2968kB bounce:0kB free_pcp:764kB local_pcp:700kB free_cma:0kB [ 1412.617090] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1412.648191] Node 1 Normal: 57*4kB (UM) 116*8kB (UM) 42*16kB (UM) 78*32kB (UM) 3820*64kB (UM) 905*128kB (UM) 182*256kB (UM) 10*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 416356kB [ 1412.655611] lowmem_reserve[]: 0 0 0 0 0 [ 1412.699365] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1412.715595] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1412.725854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1412.800472] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1412.805594] lowmem_reserve[]: 0 0 0 0 0 [ 1412.813423] Node 1 Normal free:265192kB min:53696kB low:67120kB high:80544kB active_anon:232kB inactive_anon:20940kB active_file:372kB inactive_file:548kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:168kB bounce:0kB free_pcp:1332kB local_pcp:640kB free_cma:0kB [ 1412.818246] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1412.927151] 20153 total pagecache pages [ 1412.934548] lowmem_reserve[]: 0 0 0 0 0 [ 1412.940037] 0 pages in swap cache [ 1412.950186] Swap cache stats: add 0, delete 0, find 0/0 [ 1412.957306] Node 0 DMA: 1*4kB (E) 1*8kB (U) 15*16kB (UE) 22*32kB (UE) 7*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11132kB [ 1412.968245] Free swap = 0kB [ 1412.992669] Total swap = 0kB [ 1413.011376] Node 0 DMA32: 62*4kB (ME) 976*8kB (UME) 3305*16kB (UME) 1467*32kB (UE) 9*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 108456kB [ 1413.015161] 2097051 pages RAM [ 1413.026661] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1413.040817] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1413.053299] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1413.058581] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1413.070777] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1413.078526] 0 pages HighMem/MovableOnly [ 1413.079868] CPU: 1 PID: 10768 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1413.087445] 363849 pages reserved [ 1413.091170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1413.091175] Call Trace: [ 1413.091194] dump_stack+0x1b2/0x281 [ 1413.091211] warn_alloc.cold+0x96/0x1cc [ 1413.101984] 0 pages cma reserved [ 1413.104033] ? zone_watermark_ok_safe+0x220/0x220 [ 1413.104058] __alloc_pages_nodemask+0x2127/0x2720 [ 1413.104070] ? lock_acquire+0x170/0x3f0 [ 1413.104083] ? lock_acquire+0x170/0x3f0 [ 1413.104099] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1413.104116] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1413.118870] Out of memory: Kill process 10757 (syz-executor.2) score 1004 or sacrifice child [ 1413.124198] ? __mutex_unlock_slowpath+0x75/0x770 [ 1413.124219] alloc_pages_current+0x155/0x260 [ 1413.150303] Killed process 10758 (syz-executor.2) total-vm:93384kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 1413.157157] ion_page_pool_alloc+0x118/0x1b0 [ 1413.157169] ion_system_heap_allocate+0x133/0x8c0 [ 1413.157182] ? _raw_spin_unlock+0x29/0x40 [ 1413.157191] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1413.157202] ? ion_system_contig_heap_create+0x130/0x130 [ 1413.202175] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1413.207203] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1413.212119] ion_alloc+0x27a/0x810 [ 1413.215672] ? ion_dma_buf_release+0x40/0x40 [ 1413.220089] ? __might_fault+0x177/0x1b0 [ 1413.224161] ion_ioctl+0xea/0x1f0 [ 1413.227619] ? ion_query_heaps+0x360/0x360 [ 1413.231864] ? ion_query_heaps+0x360/0x360 [ 1413.236105] do_vfs_ioctl+0x75a/0xff0 [ 1413.239909] ? ioctl_preallocate+0x1a0/0x1a0 [ 1413.244385] ? lock_downgrade+0x740/0x740 [ 1413.248545] ? __fget+0x225/0x360 [ 1413.252002] ? do_vfs_ioctl+0xff0/0xff0 [ 1413.255979] ? security_file_ioctl+0x83/0xb0 [ 1413.260390] SyS_ioctl+0x7f/0xb0 [ 1413.263778] ? do_vfs_ioctl+0xff0/0xff0 [ 1413.267756] do_syscall_64+0x1d5/0x640 [ 1413.271661] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1413.277198] RIP: 0033:0x4665d9 [ 1413.280393] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1413.288105] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1413.295382] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1413.303352] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1413.312284] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1413.319579] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1413.329932] CPU: 1 PID: 10765 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1413.337822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1413.347195] Call Trace: [ 1413.349880] dump_stack+0x1b2/0x281 [ 1413.353517] warn_alloc.cold+0x96/0x1cc [ 1413.357538] ? zone_watermark_ok_safe+0x220/0x220 [ 1413.362398] __alloc_pages_nodemask+0x2127/0x2720 [ 1413.367247] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1413.372270] ? lock_acquire+0x170/0x3f0 [ 1413.376247] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1413.381096] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1413.386552] ? __mutex_unlock_slowpath+0x75/0x770 [ 1413.391422] alloc_pages_current+0x155/0x260 [ 1413.395831] ion_page_pool_alloc+0x118/0x1b0 [ 1413.400324] ion_system_heap_allocate+0x133/0x8c0 [ 1413.405275] ? _raw_spin_unlock+0x29/0x40 [ 1413.409423] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1413.414354] ? ion_system_contig_heap_create+0x130/0x130 [ 1413.420328] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1413.425350] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1413.430223] ion_alloc+0x27a/0x810 [ 1413.433867] ? ion_dma_buf_release+0x40/0x40 [ 1413.438399] ? __might_fault+0x177/0x1b0 [ 1413.442482] ion_ioctl+0xea/0x1f0 [ 1413.445964] ? ion_query_heaps+0x360/0x360 [ 1413.450210] ? ion_query_heaps+0x360/0x360 [ 1413.454497] do_vfs_ioctl+0x75a/0xff0 [ 1413.458307] ? ioctl_preallocate+0x1a0/0x1a0 [ 1413.462717] ? lock_downgrade+0x740/0x740 [ 1413.466977] ? __fget+0x225/0x360 [ 1413.470462] ? do_vfs_ioctl+0xff0/0xff0 [ 1413.474837] ? security_file_ioctl+0x83/0xb0 [ 1413.479251] SyS_ioctl+0x7f/0xb0 [ 1413.483157] ? do_vfs_ioctl+0xff0/0xff0 [ 1413.488297] do_syscall_64+0x1d5/0x640 [ 1413.492192] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1413.497380] RIP: 0033:0x4665d9 [ 1413.500565] RSP: 002b:00007f62027c1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1413.508391] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1413.515664] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1413.523041] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1413.530424] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1413.537879] R13: 00007ffc4c66559f R14: 00007f62027c1300 R15: 0000000000022000 [ 1413.559578] net_ratelimit: 12 callbacks suppressed [ 1413.559583] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1413.571267] ICMPv6: ndisc: ndisc_alloc_skb failed to allocate an skb [ 1413.574907] warn_alloc_show_mem: 1 callbacks suppressed [ 1413.574911] Mem-Info: [ 1413.586830] oom_reaper: reaped process 10758 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1413.590166] active_anon:12612 inactive_anon:18920 isolated_anon:0 [ 1413.590166] active_file:29 inactive_file:15 isolated_file:3 [ 1413.590166] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1413.590166] slab_reclaimable:13358 slab_unreclaimable:113252 [ 1413.590166] mapped:52560 shmem:19220 pagetables:784 bounce:0 [ 1413.590166] free:13850 free_pcp:36 free_cma:0 [ 1413.598398] Node 1 Normal: [ 1413.634744] Node 0 active_anon:50216kB inactive_anon:54740kB active_file:40kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:185336kB dirty:0kB writeback:0kB shmem:55876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1413.636491] 13*4kB [ 1413.641154] Node 1 active_anon:232kB inactive_anon:20940kB active_file:76kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):12kB mapped:24904kB dirty:4kB writeback:0kB shmem:21004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1413.666751] (UM) [ 1413.672658] Node 0 [ 1413.696495] 77*8kB (UM) 54*16kB (UM) 129*32kB (UM) 9*64kB (UM) 5*128kB (M) 54*256kB (U) 10*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 26844kB [ 1413.710744] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1413.713355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1413.748155] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1413.750956] lowmem_reserve[]: [ 1413.757098] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1413.769093] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1413.774921] 0 2717 2718 2718 2718 [ 1413.777737] 19275 total pagecache pages [ 1413.781237] Node 0 [ 1413.785709] 0 pages in swap cache [ 1413.791482] Swap cache stats: add 0, delete 0, find 0/0 [ 1413.791568] DMA32 free:17916kB min:36200kB low:45248kB high:54296kB active_anon:50216kB inactive_anon:54740kB active_file:216kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2968kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1413.796993] Free swap = 0kB [ 1413.833764] Total swap = 0kB [ 1413.836841] 2097051 pages RAM [ 1413.839971] 0 pages HighMem/MovableOnly [ 1413.844025] 363849 pages reserved [ 1413.847539] 0 pages cma reserved [ 1413.851071] lowmem_reserve[]: 0 0 0 0 0 [ 1413.856935] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1413.894921] lowmem_reserve[]: 0 0 0 0 0 [ 1413.899219] Node 1 Normal free:26612kB min:53696kB low:67120kB high:80544kB active_anon:232kB inactive_anon:20940kB active_file:76kB inactive_file:48kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:168kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1413.928589] lowmem_reserve[]: 0 0 0 0 0 [ 1413.932699] Node 0 DMA: 1*4kB (E) 2*8kB (U) 13*16kB (UE) 22*32kB (UE) 5*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10980kB [ 1413.950625] Node 0 DMA32: 371*4kB (UME) 245*8kB (UME) 157*16kB (UME) 325*32kB (UE) 6*64kB (U) 0*128kB 3*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18020kB [ 1413.971790] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1413.982689] Node 1 Normal: 13*4kB (UM) 89*8kB (UM) 54*16kB (UM) 129*32kB (UM) 9*64kB (UM) 5*128kB (M) 54*256kB (U) 10*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 26940kB [ 1413.983331] oom_reaper: reaped process 10777 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1413.998257] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1413.998265] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1413.998271] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1413.998278] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1413.998282] 19275 total pagecache pages [ 1413.998291] 0 pages in swap cache [ 1414.055391] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1414.076017] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1414.081939] CPU: 1 PID: 7978 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1414.089379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1414.098756] Call Trace: [ 1414.101358] dump_stack+0x1b2/0x281 [ 1414.105004] dump_header+0x178/0x82f [ 1414.108721] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1414.113824] ? ___ratelimit+0x2cd/0x530 [ 1414.117800] oom_kill_process.cold+0x10/0xa40 [ 1414.122564] out_of_memory+0xe3e/0x1190 [ 1414.126540] ? oom_killer_disable+0x1c0/0x1c0 [ 1414.131034] ? mutex_trylock+0x152/0x1a0 [ 1414.135093] __alloc_pages_nodemask+0x23e1/0x2720 [ 1414.139942] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1414.144792] alloc_pages_current+0x155/0x260 [ 1414.149196] filemap_fault+0x11a1/0x1ad0 [ 1414.153259] ext4_filemap_fault+0x84/0xb0 [ 1414.157469] __do_fault+0xfa/0x380 [ 1414.161283] __handle_mm_fault+0x2497/0x4620 [ 1414.165687] ? vm_insert_page+0x7c0/0x7c0 [ 1414.169834] ? lock_downgrade+0x740/0x740 [ 1414.173984] ? mark_held_locks+0xa6/0xf0 [ 1414.178045] handle_mm_fault+0x455/0x9c0 [ 1414.182191] __do_page_fault+0x549/0xad0 [ 1414.186248] ? spurious_fault+0x640/0x640 [ 1414.190390] ? do_page_fault+0x60/0x500 [ 1414.194365] ? page_fault+0x2f/0x50 [ 1414.197983] page_fault+0x45/0x50 [ 1414.201465] RIP: 0000:0x947a5c [ 1414.204750] RSP: 2e000:000000c00003dec8 EFLAGS: 0043b6a0 [ 1414.211277] Swap cache stats: add 0, delete 0, find 0/0 [ 1414.222236] Free swap = 0kB [ 1414.224891] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1414.229588] Total swap = 0kB [ 1414.240145] 2097051 pages RAM [ 1414.243259] 0 pages HighMem/MovableOnly [ 1414.251499] 363849 pages reserved [ 1414.255007] 0 pages cma reserved [ 1414.261050] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1414.269103] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1414.270433] CPU: 0 PID: 10758 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1414.283549] syz-executor.0: [ 1414.289223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1414.289228] Call Trace: [ 1414.289251] dump_stack+0x1b2/0x281 [ 1414.289264] warn_alloc.cold+0x96/0x1cc [ 1414.289276] ? zone_watermark_ok_safe+0x220/0x220 [ 1414.289285] ? usleep_range+0x130/0x130 [ 1414.289293] ? try_to_free_pages+0x23f/0x6e0 [ 1414.289303] ? _find_next_bit+0xdb/0x100 [ 1414.289313] ? run_timer_softirq+0x5a0/0x5a0 [ 1414.289328] __alloc_pages_nodemask+0x2127/0x2720 [ 1414.289342] ? lock_acquire+0x170/0x3f0 [ 1414.289356] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1414.289366] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1414.289383] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1414.289404] alloc_pages_current+0x155/0x260 [ 1414.289415] ion_page_pool_alloc+0x118/0x1b0 [ 1414.289425] ion_system_heap_allocate+0x133/0x8c0 [ 1414.289435] ? ion_alloc+0x187/0x810 [ 1414.289445] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1414.289454] ? ion_system_contig_heap_create+0x130/0x130 [ 1414.289464] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1414.289478] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1414.303003] page allocation failure: order:0 [ 1414.304482] ion_alloc+0x204/0x810 [ 1414.324548] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1414.326526] ? ion_dma_buf_release+0x40/0x40 [ 1414.326539] ? __might_fault+0x177/0x1b0 [ 1414.326550] ion_ioctl+0xea/0x1f0 [ 1414.326558] ? ion_query_heaps+0x360/0x360 [ 1414.326569] ? ion_query_heaps+0x360/0x360 [ 1414.326579] do_vfs_ioctl+0x75a/0xff0 [ 1414.326590] ? ioctl_preallocate+0x1a0/0x1a0 [ 1414.330665] (null) [ 1414.335089] ? lock_downgrade+0x740/0x740 [ 1414.335104] ? __fget+0x225/0x360 [ 1414.335113] ? do_vfs_ioctl+0xff0/0xff0 [ 1414.335130] ? security_file_ioctl+0x83/0xb0 [ 1414.335140] SyS_ioctl+0x7f/0xb0 [ 1414.335148] ? do_vfs_ioctl+0xff0/0xff0 [ 1414.335159] do_syscall_64+0x1d5/0x640 [ 1414.335174] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1414.335183] RIP: 0033:0x4665d9 [ 1414.335188] RSP: 002b:00007f7ec8572188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1414.335198] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1414.335203] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1414.335208] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1414.335213] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1414.335218] R13: 00007fff53496b8f R14: 00007f7ec8572300 R15: 0000000000022000 [ 1414.340485] syz-executor.4: [ 1414.348720] syz-executor.5 cpuset= [ 1414.359543] page allocation failure: order:0 [ 1414.363729] syz-executor.0 cpuset= [ 1414.382030] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1414.382228] / [ 1414.390000] (null) [ 1414.392759] mems_allowed=0-1 [ 1414.407908] syz-executor.4 cpuset= [ 1414.416993] / [ 1414.562109] / [ 1414.565371] CPU: 1 PID: 10768 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1414.575229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1414.584607] Call Trace: [ 1414.587232] dump_stack+0x1b2/0x281 [ 1414.591733] warn_alloc.cold+0x96/0x1cc [ 1414.595803] ? zone_watermark_ok_safe+0x220/0x220 [ 1414.601447] ? usleep_range+0x130/0x130 [ 1414.606309] ? try_to_free_pages+0x23f/0x6e0 [ 1414.610835] ? _find_next_bit+0xdb/0x100 [ 1414.614907] ? run_timer_softirq+0x5a0/0x5a0 [ 1414.619325] __alloc_pages_nodemask+0x2127/0x2720 [ 1414.624207] ? lock_acquire+0x170/0x3f0 [ 1414.628190] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1414.633030] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1414.637551] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1414.643013] alloc_pages_current+0x155/0x260 [ 1414.647431] ion_page_pool_alloc+0x118/0x1b0 [ 1414.651842] ion_system_heap_allocate+0x133/0x8c0 [ 1414.656829] ? _raw_spin_unlock+0x29/0x40 [ 1414.660989] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1414.665947] ? ion_system_contig_heap_create+0x130/0x130 [ 1414.671408] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1414.676572] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1414.682216] ion_alloc+0x27a/0x810 [ 1414.685762] ? ion_dma_buf_release+0x40/0x40 [ 1414.690195] ? __might_fault+0x177/0x1b0 [ 1414.694262] ion_ioctl+0xea/0x1f0 [ 1414.697717] ? ion_query_heaps+0x360/0x360 [ 1414.701957] ? ion_query_heaps+0x360/0x360 [ 1414.704977] mems_allowed=0-1 [ 1414.706252] do_vfs_ioctl+0x75a/0xff0 [ 1414.713147] ? ioctl_preallocate+0x1a0/0x1a0 [ 1414.717845] ? lock_downgrade+0x740/0x740 [ 1414.722005] ? __fget+0x225/0x360 [ 1414.725460] ? do_vfs_ioctl+0xff0/0xff0 [ 1414.729816] ? security_file_ioctl+0x83/0xb0 [ 1414.734228] SyS_ioctl+0x7f/0xb0 [ 1414.737588] ? do_vfs_ioctl+0xff0/0xff0 [ 1414.741564] do_syscall_64+0x1d5/0x640 [ 1414.745558] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1414.750748] RIP: 0033:0x4665d9 [ 1414.753926] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1414.761637] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1414.769013] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1414.776390] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1414.783672] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1414.790969] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1414.805543] Mem-Info: [ 1414.807990] active_anon:12564 inactive_anon:18920 isolated_anon:0 [ 1414.807990] active_file:17 inactive_file:42 isolated_file:0 [ 1414.807990] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1414.807990] slab_reclaimable:13358 slab_unreclaimable:113134 [ 1414.807990] mapped:52560 shmem:19220 pagetables:757 bounce:0 [ 1414.807990] free:20722 free_pcp:60 free_cma:0 [ 1414.822219] CPU: 0 PID: 10765 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1414.849319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1414.858687] Call Trace: [ 1414.861297] dump_stack+0x1b2/0x281 [ 1414.864939] warn_alloc.cold+0x96/0x1cc [ 1414.868934] ? zone_watermark_ok_safe+0x220/0x220 [ 1414.873792] ? usleep_range+0x130/0x130 [ 1414.878123] ? try_to_free_pages+0x23f/0x6e0 [ 1414.882570] ? _find_next_bit+0xdb/0x100 [ 1414.884940] Node 0 active_anon:50024kB inactive_anon:54740kB active_file:12kB inactive_file:2912kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:186900kB dirty:0kB writeback:0kB shmem:55876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1414.886747] ? run_timer_softirq+0x5a0/0x5a0 [ 1414.919472] __alloc_pages_nodemask+0x2127/0x2720 [ 1414.924336] ? lock_acquire+0x170/0x3f0 [ 1414.928417] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1414.933452] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1414.938057] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1414.943523] alloc_pages_current+0x155/0x260 [ 1414.944922] Node 1 active_anon:232kB inactive_anon:20940kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24940kB dirty:0kB writeback:0kB shmem:21004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1414.947936] ion_page_pool_alloc+0x118/0x1b0 [ 1414.979432] ion_system_heap_allocate+0x133/0x8c0 [ 1414.984308] ? _raw_spin_unlock+0x29/0x40 [ 1414.988657] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1414.993592] ? ion_system_contig_heap_create+0x130/0x130 [ 1414.999070] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1415.004188] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1415.004940] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1415.009221] ion_alloc+0x27a/0x810 [ 1415.009236] ? ion_dma_buf_release+0x40/0x40 [ 1415.043301] ? __might_fault+0x177/0x1b0 [ 1415.047370] ion_ioctl+0xea/0x1f0 [ 1415.051175] ? ion_query_heaps+0x360/0x360 [ 1415.055502] ? ion_query_heaps+0x360/0x360 [ 1415.059758] do_vfs_ioctl+0x75a/0xff0 [ 1415.063650] ? ioctl_preallocate+0x1a0/0x1a0 [ 1415.065464] lowmem_reserve[]: [ 1415.068317] ? lock_downgrade+0x740/0x740 [ 1415.068331] ? __fget+0x225/0x360 [ 1415.071532] 0 [ 1415.076036] ? do_vfs_ioctl+0xff0/0xff0 [ 1415.076048] ? security_file_ioctl+0x83/0xb0 [ 1415.076057] SyS_ioctl+0x7f/0xb0 [ 1415.076065] ? do_vfs_ioctl+0xff0/0xff0 [ 1415.076076] do_syscall_64+0x1d5/0x640 [ 1415.076090] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1415.076099] RIP: 0033:0x4665d9 [ 1415.076103] RSP: 002b:00007f62027c1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1415.076116] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1415.094919] 2717 [ 1415.097085] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1415.100960] 2718 [ 1415.106139] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1415.106149] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1415.106154] R13: 00007ffc4c66559f R14: 00007f62027c1300 R15: 0000000000022000 [ 1415.125881] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1415.151447] warn_alloc_show_mem: 2 callbacks suppressed [ 1415.151451] Mem-Info: [ 1415.185045] 2718 2718 [ 1415.187939] Node 0 DMA32 free:272456kB min:36200kB low:45248kB high:54296kB active_anon:50024kB inactive_anon:54740kB active_file:120kB inactive_file:6308kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2860kB bounce:0kB free_pcp:296kB local_pcp:140kB free_cma:0kB [ 1415.218461] active_anon:12564 inactive_anon:18920 isolated_anon:0 [ 1415.218461] active_file:44 inactive_file:1641 isolated_file:0 [ 1415.218461] unevictable:0 dirty:1 writeback:0 unstable:0 [ 1415.218461] slab_reclaimable:13354 slab_unreclaimable:113291 [ 1415.218461] mapped:53722 shmem:19220 pagetables:757 bounce:0 [ 1415.218461] free:199186 free_pcp:75 free_cma:0 [ 1415.236753] systemd[1]: Stopped System Logging Service. [ 1415.274954] mems_allowed=0-1 [ 1415.278750] CPU: 0 PID: 10777 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1415.286671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1415.296056] Call Trace: [ 1415.298650] dump_stack+0x1b2/0x281 [ 1415.302506] warn_alloc.cold+0x96/0x1cc [ 1415.306488] ? zone_watermark_ok_safe+0x220/0x220 [ 1415.311339] ? usleep_range+0x130/0x130 [ 1415.315312] ? try_to_free_pages+0x23f/0x6e0 [ 1415.319728] ? _find_next_bit+0xdb/0x100 [ 1415.323806] ? run_timer_softirq+0x5a0/0x5a0 [ 1415.324957] lowmem_reserve[]: 0 0 [ 1415.328491] __alloc_pages_nodemask+0x2127/0x2720 [ 1415.328508] ? lock_acquire+0x170/0x3f0 [ 1415.331948] 0 [ 1415.336789] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1415.336799] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1415.336814] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1415.336832] alloc_pages_current+0x155/0x260 [ 1415.336843] ion_page_pool_alloc+0x118/0x1b0 [ 1415.336852] ion_system_heap_allocate+0x133/0x8c0 [ 1415.336861] ? ion_alloc+0x187/0x810 [ 1415.336871] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1415.336880] ? ion_system_contig_heap_create+0x130/0x130 [ 1415.336890] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1415.336900] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1415.336910] ion_alloc+0x204/0x810 [ 1415.336923] ? ion_dma_buf_release+0x40/0x40 [ 1415.364927] Node 0 active_anon:50024kB inactive_anon:54740kB active_file:120kB inactive_file:7608kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:191048kB dirty:0kB writeback:0kB shmem:55876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1415.368509] ? __might_fault+0x177/0x1b0 [ 1415.373350] Node 1 active_anon:232kB inactive_anon:20940kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24940kB dirty:4kB writeback:0kB shmem:21004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1415.377050] ion_ioctl+0xea/0x1f0 [ 1415.377061] ? ion_query_heaps+0x360/0x360 [ 1415.377072] ? ion_query_heaps+0x360/0x360 [ 1415.377081] do_vfs_ioctl+0x75a/0xff0 [ 1415.377092] ? ioctl_preallocate+0x1a0/0x1a0 [ 1415.377101] ? lock_downgrade+0x740/0x740 [ 1415.377113] ? __fget+0x225/0x360 [ 1415.377121] ? do_vfs_ioctl+0xff0/0xff0 [ 1415.377133] ? security_file_ioctl+0x83/0xb0 [ 1415.377143] SyS_ioctl+0x7f/0xb0 [ 1415.377150] ? do_vfs_ioctl+0xff0/0xff0 [ 1415.377160] do_syscall_64+0x1d5/0x640 [ 1415.377179] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1415.404923] 0 [ 1415.405836] RIP: 0033:0x4665d9 [ 1415.438771] Node 0 [ 1415.439160] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1415.534100] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1415.534909] 0 [ 1415.541375] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1415.541384] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1415.550445] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1415.550452] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1415.584916] DMA free:11944kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1415.585057] systemd[1]: Starting System Logging Service... [ 1415.676101] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1415.681194] Node 0 DMA32 free:268672kB min:36200kB low:45248kB high:54296kB active_anon:50124kB inactive_anon:54740kB active_file:220kB inactive_file:8108kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:3008kB bounce:0kB free_pcp:844kB local_pcp:716kB free_cma:0kB [ 1415.719274] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1415.800326] lowmem_reserve[]: 0 0 0 0 0 [ 1415.815969] Node 1 Normal free:239088kB min:53696kB low:67120kB high:80544kB active_anon:232kB inactive_anon:20940kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:168kB bounce:0kB free_pcp:620kB local_pcp:620kB free_cma:0kB [ 1415.855065] lowmem_reserve[]: 0 0 0 0 0 [ 1415.859428] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1415.934991] lowmem_reserve[]: 0 0 0 0 0 [ 1415.939043] Node 0 DMA: 2*4kB (UE) 3*8kB (U) 13*16kB (UE) 22*32kB (UE) 1*64kB (E) 11*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11120kB [ 1415.964894] lowmem_reserve[]: 0 0 0 0 0 [ 1415.968922] Node 1 Normal free:26884kB min:53696kB low:67120kB high:80544kB active_anon:232kB inactive_anon:20940kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:168kB bounce:0kB free_pcp:624kB local_pcp:624kB free_cma:0kB [ 1416.026345] Node 0 DMA32: 4242*4kB (UE) 1739*8kB (UE) 3626*16kB (UME) 2078*32kB (UME) 126*64kB (UM) 1*128kB (M) 1*256kB (M) 1*512kB (M) 14*1024kB (U) 0*2048kB 0*4096kB = 178688kB [ 1416.075572] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1416.090408] lowmem_reserve[]: 0 0 0 0 0 [ 1416.096464] Node 0 DMA: 2*4kB (UE) 6*8kB (U) 14*16kB (UE) 22*32kB (UE) 1*64kB (E) 10*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11032kB [ 1416.137512] Node 1 Normal: 1311*4kB (UM) 480*8kB (UM) 120*16kB (UM) 183*32kB (UM) 865*64kB (UM) 6*128kB (UM) 1*256kB (U) 7*512kB (UM) 207*1024kB (U) 32*2048kB (U) 5*4096kB (U) = 374812kB [ 1416.164877] Node 0 DMA32: 4266*4kB (UME) 1292*8kB (UME) 3649*16kB (UME) 2085*32kB (UME) 1756*64kB (U) 317*128kB (U) 11*256kB (UM) 5*512kB (UM) 13*1024kB (U) 0*2048kB 0*4096kB = 324152kB [ 1416.178825] warn_alloc_show_mem: 1 callbacks suppressed [ 1416.178829] Mem-Info: [ 1416.200343] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1416.209631] active_anon:12649 inactive_anon:18920 isolated_anon:0 [ 1416.209631] active_file:257 inactive_file:2569 isolated_file:0 [ 1416.209631] unevictable:0 dirty:11 writeback:0 unstable:0 [ 1416.209631] slab_reclaimable:13329 slab_unreclaimable:118019 [ 1416.209631] mapped:54754 shmem:19220 pagetables:774 bounce:0 [ 1416.209631] free:209761 free_pcp:512 free_cma:0 [ 1416.226223] Node 0 [ 1416.247391] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1416.276896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1416.296197] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1416.309038] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1416.327433] Node 1 Normal: 1311*4kB (UM) 480*8kB (UM) 120*16kB (UM) 183*32kB (UM) 3314*64kB (UM) 555*128kB (UM) 144*256kB (U) 19*512kB (UM) 207*1024kB (U) 32*2048kB (U) 5*4096kB (U) = 644572kB [ 1416.335378] Node 0 active_anon:50468kB inactive_anon:54740kB active_file:1372kB inactive_file:10220kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:193784kB dirty:20kB writeback:0kB shmem:55876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1416.354920] 22188 total pagecache pages [ 1416.377046] systemd[1]: Started System Logging Service. [ 1416.404019] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1416.440818] 0 pages in swap cache [ 1416.444297] Swap cache stats: add 0, delete 0, find 0/0 [ 1416.449924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1416.475165] Node 1 active_anon:228kB inactive_anon:20940kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25232kB dirty:24kB writeback:0kB shmem:21004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1416.478711] Free swap = 0kB [ 1416.509786] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1416.531727] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1416.554916] 22262 total pagecache pages [ 1416.554932] Node 0 DMA free:11464kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1416.558930] 0 pages in swap cache [ 1416.558939] Swap cache stats: add 0, delete 0, find 0/0 [ 1416.600422] Total swap = 0kB [ 1416.603457] 2097051 pages RAM [ 1416.607746] 0 pages HighMem/MovableOnly [ 1416.611713] 363849 pages reserved [ 1416.624938] 0 pages cma reserved [ 1416.628327] Out of memory (oom_kill_allocating_task): Kill process 7978 (syz-fuzzer) score 0 or sacrifice child [ 1416.658908] Free swap = 0kB [ 1416.661978] Total swap = 0kB [ 1416.665289] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1416.665412] Killed process 9726 (syz-executor.4) total-vm:84924kB, anon-rss:68kB, file-rss:0kB, shmem-rss:0kB [ 1416.670347] Node 0 [ 1416.681270] 2097051 pages RAM [ 1416.694911] 0 pages HighMem/MovableOnly [ 1416.699143] 363849 pages reserved [ 1416.702631] 0 pages cma reserved [ 1416.702933] systemd[1]: Started Journal Service. [ 1416.723407] DMA32 free:514088kB min:36200kB low:45248kB high:54296kB active_anon:50968kB inactive_anon:54740kB active_file:1372kB inactive_file:10720kB unevictable:0kB writepending:316kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2928kB bounce:0kB free_pcp:1320kB local_pcp:652kB free_cma:0kB [ 1416.729728] oom_reaper: reaped process 9726 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 00:40:55 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x0, 0x1}) [ 1416.820109] lowmem_reserve[]: 0 0 0 0 0 [ 1416.850432] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1416.886005] lowmem_reserve[]: 0 0 0 0 0 [ 1416.890801] Node 1 Normal free:1253424kB min:53696kB low:67120kB high:80544kB active_anon:228kB inactive_anon:20940kB active_file:56kB inactive_file:56kB unevictable:0kB writepending:24kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:168kB bounce:0kB free_pcp:1404kB local_pcp:736kB free_cma:0kB [ 1416.926228] lowmem_reserve[]: 0 0 0 0 0 [ 1416.942316] Node 0 DMA: 33*4kB (UE) 27*8kB (U) 16*16kB (UE) 22*32kB (UE) 7*64kB (UE) 10*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11740kB [ 1416.963092] Node 0 DMA32: 3970*4kB (UME) 8833*8kB (UME) 7935*16kB (UME) 3430*32kB (UME) 2654*64kB (U) 969*128kB (U) 134*256kB (UM) 5*512kB (U) 12*1024kB (U) 0*2048kB 0*4096kB = 666304kB [ 1416.989213] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1417.000021] Node 1 Normal: 6625*4kB (UM) 3078*8kB (UM) 1238*16kB (UM) 966*32kB (UM) 5641*64kB (UM) 2076*128kB (UM) 469*256kB (U) 40*512kB (UM) 316*1024kB (U) 36*2048kB (U) 5*4096kB (U) = 1286932kB [ 1417.025282] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1417.034151] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1417.048373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1417.057990] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1417.071069] 22779 total pagecache pages [ 1417.077386] 0 pages in swap cache [ 1417.080864] Swap cache stats: add 0, delete 0, find 0/0 [ 1417.090690] Free swap = 0kB [ 1417.093718] Total swap = 0kB [ 1417.098420] 2097051 pages RAM [ 1417.101528] 0 pages HighMem/MovableOnly [ 1417.110318] 363849 pages reserved [ 1417.113781] 0 pages cma reserved [ 1417.862724] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1417.885395] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1417.890576] CPU: 1 PID: 10758 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1417.898496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1417.907942] Call Trace: [ 1417.910547] dump_stack+0x1b2/0x281 [ 1417.914190] warn_alloc.cold+0x96/0x1cc [ 1417.918179] ? zone_watermark_ok_safe+0x220/0x220 [ 1417.923054] __alloc_pages_nodemask+0x2127/0x2720 [ 1417.927906] ? io_schedule_timeout+0x140/0x140 [ 1417.932518] ? lock_acquire+0x170/0x3f0 [ 1417.936506] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1417.941382] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1417.946845] ? __mutex_unlock_slowpath+0x75/0x770 [ 1417.951736] ? alloc_pages_current+0x135/0x260 [ 1417.956331] alloc_pages_current+0x155/0x260 [ 1417.960747] ion_page_pool_alloc+0x118/0x1b0 [ 1417.965160] ion_system_heap_allocate+0x133/0x8c0 [ 1417.970009] ? _raw_spin_unlock+0x29/0x40 [ 1417.974163] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1417.979098] ? ion_system_contig_heap_create+0x130/0x130 [ 1417.984549] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1417.989573] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1417.994525] ion_alloc+0x27a/0x810 [ 1417.998069] ? ion_dma_buf_release+0x40/0x40 [ 1418.002483] ? __might_fault+0x177/0x1b0 [ 1418.006555] ion_ioctl+0xea/0x1f0 [ 1418.010009] ? ion_query_heaps+0x360/0x360 [ 1418.014245] ? ion_query_heaps+0x360/0x360 [ 1418.018478] do_vfs_ioctl+0x75a/0xff0 [ 1418.022286] ? ioctl_preallocate+0x1a0/0x1a0 [ 1418.026699] ? lock_downgrade+0x740/0x740 [ 1418.030862] ? __fget+0x225/0x360 [ 1418.034314] ? do_vfs_ioctl+0xff0/0xff0 [ 1418.038306] ? security_file_ioctl+0x83/0xb0 [ 1418.042728] SyS_ioctl+0x7f/0xb0 [ 1418.046096] ? do_vfs_ioctl+0xff0/0xff0 [ 1418.050075] do_syscall_64+0x1d5/0x640 [ 1418.053966] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1418.059172] RIP: 0033:0x4665d9 [ 1418.062383] RSP: 002b:00007f7ec8572188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1418.070096] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1418.077476] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1418.084750] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1418.092024] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1418.099308] R13: 00007fff53496b8f R14: 00007f7ec8572300 R15: 0000000000022000 [ 1418.113825] Mem-Info: [ 1418.116407] active_anon:12854 inactive_anon:18918 isolated_anon:0 [ 1418.116407] active_file:1696 inactive_file:2503 isolated_file:0 [ 1418.116407] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1418.116407] slab_reclaimable:13229 slab_unreclaimable:119032 [ 1418.116407] mapped:46796 shmem:19217 pagetables:714 bounce:0 [ 1418.116407] free:126644 free_pcp:29 free_cma:0 [ 1418.156448] Node 0 active_anon:51232kB inactive_anon:54732kB active_file:6716kB inactive_file:9968kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:169164kB dirty:20kB writeback:0kB shmem:55864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1418.188703] Node 1 active_anon:184kB inactive_anon:20940kB active_file:68kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18020kB dirty:4kB writeback:0kB shmem:21004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1418.219878] Node 0 DMA free:11012kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1418.224964] Bluetooth: hci4 command 0x0406 tx timeout [ 1418.252114] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1418.258107] Node 0 DMA32 free:301712kB min:36200kB low:45248kB high:54296kB active_anon:51232kB inactive_anon:54732kB active_file:6716kB inactive_file:9968kB unevictable:0kB writepending:20kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2732kB bounce:0kB free_pcp:200kB local_pcp:116kB free_cma:0kB [ 1418.292324] lowmem_reserve[]: 0 0 0 0 0 [ 1418.298951] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1418.331424] lowmem_reserve[]: 0 0 0 0 0 [ 1418.336154] Node 1 Normal free:100760kB min:53696kB low:67120kB high:80544kB active_anon:184kB inactive_anon:20940kB active_file:68kB inactive_file:44kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:124kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1418.367255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1418.370133] lowmem_reserve[]: 0 0 0 0 0 [ 1418.373971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1418.380795] Node 0 DMA: 9*4kB (UE) 30*8kB (U) 25*16kB (UE) 21*32kB (UE) 1*64kB (E) 3*128kB (UE) 4*256kB (UE) 2*512kB (UE) 1*1024kB (E) 3*2048kB (UME) 0*4096kB = 11012kB [ 1418.406588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1418.409551] Node 0 DMA32: 25*4kB (UME) 176*8kB (UME) 164*16kB (ME) 5652*32kB [ 1418.413297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1418.422319] device bridge_slave_1 left promiscuous mode [ 1418.432889] (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 185060kB [ 1418.441619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.442551] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1418.463725] device bridge_slave_0 left promiscuous mode [ 1418.463993] Node 1 [ 1418.469359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.473086] Normal: 1230*4kB (UM) 1848*8kB (U) 1828*16kB (U) 1619*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 100760kB [ 1418.497819] device veth1_macvtap left promiscuous mode [ 1418.498790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1418.503141] device veth0_macvtap left promiscuous mode [ 1418.514468] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1418.531742] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1418.534992] device veth1_vlan left promiscuous mode [ 1418.542123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1418.554982] device veth0_vlan left promiscuous mode [ 1418.562754] 23416 total pagecache pages [ 1418.567753] 0 pages in swap cache [ 1418.571302] Swap cache stats: add 0, delete 0, find 0/0 [ 1418.583000] Free swap = 0kB [ 1418.586835] Total swap = 0kB [ 1418.589880] 2097051 pages RAM [ 1418.592983] 0 pages HighMem/MovableOnly [ 1418.602713] 363849 pages reserved [ 1418.606981] 0 pages cma reserved [ 1418.768026] device hsr_slave_1 left promiscuous mode [ 1418.785396] device hsr_slave_0 left promiscuous mode [ 1418.815281] team0 (unregistering): Port device team_slave_1 removed [ 1418.838968] team0 (unregistering): Port device team_slave_0 removed [ 1418.858547] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1418.878779] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1418.942582] bond0 (unregistering): Released all slaves 00:40:58 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) socket$can_bcm(0x1d, 0x2, 0x2) 00:40:58 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:40:58 executing program 2: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:40:58 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) socket$can_bcm(0x1d, 0x2, 0x2) 00:40:58 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) 00:40:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x0, 0x1}) 00:40:58 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2}) [ 1420.033595] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1420.033722] syz-executor.3: [ 1420.046992] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1420.084739] page allocation failure: order:4 [ 1420.087776] syz-executor.5 cpuset= [ 1420.100060] syz-executor.0 cpuset= [ 1420.101482] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1420.105742] / [ 1420.122270] / [ 1420.124258] (null) [ 1420.128462] mems_allowed=0-1 [ 1420.136401] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1420.139921] CPU: 0 PID: 10812 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1420.149420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1420.158798] Call Trace: [ 1420.161393] dump_stack+0x1b2/0x281 [ 1420.165026] warn_alloc.cold+0x96/0x1cc [ 1420.169093] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1420.174111] ? zone_watermark_ok_safe+0x220/0x220 [ 1420.178969] __alloc_pages_nodemask+0x2127/0x2720 [ 1420.183855] ? lock_acquire+0x170/0x3f0 [ 1420.187840] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1420.192692] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1420.198151] ? __mutex_unlock_slowpath+0x75/0x770 [ 1420.203355] alloc_pages_current+0x155/0x260 [ 1420.207770] ion_page_pool_alloc+0x118/0x1b0 [ 1420.212193] ion_system_heap_allocate+0x133/0x8c0 [ 1420.217128] ? ion_alloc+0x187/0x810 [ 1420.220872] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1420.226329] ? ion_system_contig_heap_create+0x130/0x130 [ 1420.231788] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1420.236810] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1420.241661] ion_alloc+0x204/0x810 [ 1420.245258] ? ion_dma_buf_release+0x40/0x40 [ 1420.249681] ? __might_fault+0x177/0x1b0 [ 1420.253975] ion_ioctl+0xea/0x1f0 [ 1420.257336] mems_allowed=0-1 [ 1420.257464] ? ion_query_heaps+0x360/0x360 [ 1420.265606] ? ion_query_heaps+0x360/0x360 [ 1420.269854] do_vfs_ioctl+0x75a/0xff0 [ 1420.273760] ? ioctl_preallocate+0x1a0/0x1a0 [ 1420.278182] ? lock_downgrade+0x740/0x740 [ 1420.282381] ? __fget+0x225/0x360 [ 1420.285873] ? do_vfs_ioctl+0xff0/0xff0 [ 1420.289858] ? security_file_ioctl+0x83/0xb0 [ 1420.294296] SyS_ioctl+0x7f/0xb0 [ 1420.297660] ? do_vfs_ioctl+0xff0/0xff0 [ 1420.301988] do_syscall_64+0x1d5/0x640 [ 1420.305893] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1420.311088] RIP: 0033:0x4665d9 [ 1420.314294] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1420.322003] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1420.329378] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1420.336847] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1420.344211] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1420.351517] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1420.359878] CPU: 1 PID: 10804 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1420.367806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1420.377254] Call Trace: [ 1420.379860] dump_stack+0x1b2/0x281 [ 1420.383525] warn_alloc.cold+0x96/0x1cc [ 1420.387517] ? zone_watermark_ok_safe+0x220/0x220 [ 1420.392507] __alloc_pages_nodemask+0x2127/0x2720 [ 1420.397362] ? __schedule+0x893/0x1de0 [ 1420.401273] ? lock_acquire+0x170/0x3f0 [ 1420.405283] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1420.410345] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1420.416254] ? __mutex_unlock_slowpath+0x75/0x770 [ 1420.421125] alloc_pages_current+0x155/0x260 [ 1420.425565] ion_page_pool_alloc+0x118/0x1b0 [ 1420.429983] ion_system_heap_allocate+0x133/0x8c0 [ 1420.434845] ? ion_alloc+0x187/0x810 [ 1420.438570] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1420.444037] ? ion_system_contig_heap_create+0x130/0x130 [ 1420.449508] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1420.454534] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1420.459391] ion_alloc+0x204/0x810 [ 1420.462970] ? ion_dma_buf_release+0x40/0x40 [ 1420.467449] ? __might_fault+0x177/0x1b0 [ 1420.471607] ion_ioctl+0xea/0x1f0 [ 1420.475103] ? ion_query_heaps+0x360/0x360 [ 1420.479395] ? ion_query_heaps+0x360/0x360 [ 1420.483662] do_vfs_ioctl+0x75a/0xff0 [ 1420.487488] ? ioctl_preallocate+0x1a0/0x1a0 [ 1420.491904] ? lock_downgrade+0x740/0x740 [ 1420.496089] ? __fget+0x225/0x360 [ 1420.499596] ? do_vfs_ioctl+0xff0/0xff0 [ 1420.503845] ? security_file_ioctl+0x83/0xb0 [ 1420.508267] SyS_ioctl+0x7f/0xb0 [ 1420.511637] ? do_vfs_ioctl+0xff0/0xff0 [ 1420.515628] do_syscall_64+0x1d5/0x640 [ 1420.519714] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1420.524926] RIP: 0033:0x4665d9 [ 1420.528119] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1420.536052] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1420.543348] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1420.550652] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1420.557930] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1420.565306] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1420.576636] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1420.576915] CPU: 1 PID: 10818 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1420.597841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1420.607205] Call Trace: [ 1420.609803] dump_stack+0x1b2/0x281 [ 1420.613493] warn_alloc.cold+0x96/0x1cc [ 1420.617478] ? zone_watermark_ok_safe+0x220/0x220 [ 1420.622345] __alloc_pages_nodemask+0x2127/0x2720 [ 1420.627213] ? lock_acquire+0x170/0x3f0 [ 1420.627854] syz-executor.1 cpuset= [ 1420.631220] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1420.631241] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1420.631254] ? __mutex_unlock_slowpath+0x75/0x770 [ 1420.631268] alloc_pages_current+0x155/0x260 [ 1420.642994] / [ 1420.645107] ion_page_pool_alloc+0x118/0x1b0 [ 1420.660048] mems_allowed=0-1 [ 1420.660625] ion_system_heap_allocate+0x133/0x8c0 [ 1420.669064] ? ion_alloc+0x187/0x810 [ 1420.672786] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1420.678255] ? ion_system_contig_heap_create+0x130/0x130 [ 1420.683715] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1420.688751] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1420.693617] ion_alloc+0x204/0x810 [ 1420.697181] ? ion_dma_buf_release+0x40/0x40 [ 1420.701588] ? __might_fault+0x177/0x1b0 [ 1420.705681] ion_ioctl+0xea/0x1f0 [ 1420.709138] ? ion_query_heaps+0x360/0x360 [ 1420.713555] ? ion_query_heaps+0x360/0x360 [ 1420.717823] do_vfs_ioctl+0x75a/0xff0 [ 1420.721623] ? ioctl_preallocate+0x1a0/0x1a0 [ 1420.726025] ? lock_downgrade+0x740/0x740 [ 1420.730189] ? __fget+0x225/0x360 [ 1420.733729] ? do_vfs_ioctl+0xff0/0xff0 [ 1420.737707] ? security_file_ioctl+0x83/0xb0 [ 1420.742140] SyS_ioctl+0x7f/0xb0 [ 1420.745502] ? do_vfs_ioctl+0xff0/0xff0 [ 1420.749837] do_syscall_64+0x1d5/0x640 [ 1420.753732] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1420.758910] RIP: 0033:0x4665d9 [ 1420.762088] RSP: 002b:00007f2e9a53f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1420.769833] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1420.777099] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1420.784365] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1420.791634] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1420.799012] R13: 00007ffe42256d6f R14: 00007f2e9a53f300 R15: 0000000000022000 [ 1420.824214] CPU: 0 PID: 10809 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1420.832154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1420.841516] Call Trace: [ 1420.844158] dump_stack+0x1b2/0x281 [ 1420.847817] warn_alloc.cold+0x96/0x1cc [ 1420.851795] ? zone_watermark_ok_safe+0x220/0x220 [ 1420.856687] __alloc_pages_nodemask+0x2127/0x2720 [ 1420.861535] ? io_schedule_timeout+0x140/0x140 [ 1420.866129] ? lock_acquire+0x170/0x3f0 [ 1420.870206] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1420.875056] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1420.880513] ? __mutex_unlock_slowpath+0x75/0x770 [ 1420.885360] alloc_pages_current+0x155/0x260 [ 1420.889778] ion_page_pool_alloc+0x118/0x1b0 [ 1420.894203] ion_system_heap_allocate+0x133/0x8c0 [ 1420.899163] ? ion_alloc+0x187/0x810 [ 1420.902914] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1420.908383] ? ion_system_contig_heap_create+0x130/0x130 [ 1420.913840] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1420.918863] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1420.923729] ion_alloc+0x204/0x810 [ 1420.927294] ? ion_dma_buf_release+0x40/0x40 [ 1420.931707] ? __might_fault+0x177/0x1b0 [ 1420.935861] ion_ioctl+0xea/0x1f0 [ 1420.939316] ? ion_query_heaps+0x360/0x360 [ 1420.943554] ? ion_query_heaps+0x360/0x360 [ 1420.947798] do_vfs_ioctl+0x75a/0xff0 [ 1420.951604] ? ioctl_preallocate+0x1a0/0x1a0 [ 1420.956033] ? lock_downgrade+0x740/0x740 [ 1420.960195] ? __fget+0x225/0x360 [ 1420.963651] ? do_vfs_ioctl+0xff0/0xff0 [ 1420.967630] ? security_file_ioctl+0x83/0xb0 [ 1420.972041] SyS_ioctl+0x7f/0xb0 [ 1420.975578] ? do_vfs_ioctl+0xff0/0xff0 [ 1420.979581] do_syscall_64+0x1d5/0x640 [ 1420.983478] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1420.988665] RIP: 0033:0x4665d9 [ 1420.991862] RSP: 002b:00007f696b00b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1420.999668] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1421.007156] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1421.014530] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1421.021914] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1421.029193] R13: 00007ffd618ef30f R14: 00007f696b00b300 R15: 0000000000022000 [ 1421.043119] Mem-Info: [ 1421.049023] active_anon:12927 inactive_anon:18918 isolated_anon:0 [ 1421.049023] active_file:2129 inactive_file:4929 isolated_file:12 [ 1421.049023] unevictable:0 dirty:78 writeback:0 unstable:0 [ 1421.049023] slab_reclaimable:13225 slab_unreclaimable:117982 [ 1421.049023] mapped:48935 shmem:19217 pagetables:792 bounce:0 [ 1421.049023] free:287799 free_pcp:54 free_cma:0 [ 1421.088846] Node 0 active_anon:51540kB inactive_anon:54732kB active_file:8452kB inactive_file:19716kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:177852kB dirty:260kB writeback:0kB shmem:55864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1421.121556] Node 1 active_anon:168kB inactive_anon:20940kB active_file:68kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18020kB dirty:64kB writeback:0kB shmem:21004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1421.156067] Node 0 DMA free:12100kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1421.233849] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1421.263332] Node 0 DMA32 free:747168kB min:36200kB low:45248kB high:54296kB active_anon:51540kB inactive_anon:54732kB active_file:8552kB inactive_file:19816kB unevictable:0kB writepending:260kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7360kB pagetables:3044kB bounce:0kB free_pcp:432kB local_pcp:228kB free_cma:0kB [ 1421.353555] lowmem_reserve[]: 0 0 0 0 0 [ 1421.367911] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1421.438293] lowmem_reserve[]: 0 0 0 0 0 [ 1421.452359] Node 1 Normal free:930588kB min:53696kB low:67120kB high:80544kB active_anon:168kB inactive_anon:20940kB active_file:68kB inactive_file:64kB unevictable:0kB writepending:64kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:124kB bounce:0kB free_pcp:620kB local_pcp:0kB free_cma:0kB [ 1421.564316] lowmem_reserve[]: 0 0 0 0 0 [ 1421.577660] Node 0 DMA: 9*4kB (UE) 30*8kB (U) 25*16kB (UE) 21*32kB (UE) 14*64kB (UE) 4*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 12228kB [ 1421.629784] Node 0 DMA32: 8*4kB (UE) 108*8kB (UE) 163*16kB (UME) 3567*32kB (UME) 1348*64kB (UE) 1097*128kB (UM) 316*256kB (UM) 52*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 451856kB [ 1421.683234] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1421.702451] Node 1 Normal: 1230*4kB (UM) 1838*8kB (U) 1816*16kB (UM) 1613*32kB (U) 7206*64kB (UM) 1469*128kB (UM) 490*256kB (U) 185*512kB (U) 89*1024kB (U) 6*2048kB (U) 0*4096kB = 1073096kB [ 1421.763191] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1421.790947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1421.823854] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1421.847694] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1421.868754] 26269 total pagecache pages [ 1421.886024] 0 pages in swap cache [ 1421.898640] Swap cache stats: add 0, delete 0, find 0/0 [ 1421.915237] Free swap = 0kB [ 1421.925240] Total swap = 0kB [ 1421.935277] 2097051 pages RAM [ 1421.946391] 0 pages HighMem/MovableOnly [ 1421.958414] 363849 pages reserved [ 1421.967543] 0 pages cma reserved [ 1423.105267] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1423.156629] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1423.161815] CPU: 0 PID: 10811 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1423.163100] oom_reaper: reaped process 10818 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1423.169686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1423.169691] Call Trace: [ 1423.169712] dump_stack+0x1b2/0x281 [ 1423.169731] warn_alloc.cold+0x96/0x1cc [ 1423.169743] ? zone_watermark_ok_safe+0x220/0x220 [ 1423.169764] __alloc_pages_nodemask+0x2127/0x2720 [ 1423.169773] ? io_schedule_timeout+0x140/0x140 [ 1423.169789] ? lock_acquire+0x170/0x3f0 [ 1423.169803] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1423.169830] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1423.228361] ? __mutex_unlock_slowpath+0x75/0x770 [ 1423.233227] alloc_pages_current+0x155/0x260 [ 1423.237647] ion_page_pool_alloc+0x118/0x1b0 [ 1423.242065] ion_system_heap_allocate+0x133/0x8c0 [ 1423.246917] ? ion_alloc+0x187/0x810 [ 1423.250646] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1423.256106] ? ion_system_contig_heap_create+0x130/0x130 [ 1423.261591] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1423.265332] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 1423.266818] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1423.266831] ion_alloc+0x204/0x810 [ 1423.284941] , order=0, oom_score_adj=0 [ 1423.285901] ? ion_dma_buf_release+0x40/0x40 [ 1423.289871] systemd-journal cpuset=/ [ 1423.294359] ? __might_fault+0x177/0x1b0 [ 1423.294373] ion_ioctl+0xea/0x1f0 [ 1423.305587] ? ion_query_heaps+0x360/0x360 [ 1423.309836] ? ion_query_heaps+0x360/0x360 [ 1423.314090] do_vfs_ioctl+0x75a/0xff0 [ 1423.317904] mems_allowed=0-1 [ 1423.317983] ? ioctl_preallocate+0x1a0/0x1a0 [ 1423.325492] ? lock_downgrade+0x740/0x740 [ 1423.329646] ? __fget+0x225/0x360 [ 1423.333113] ? do_vfs_ioctl+0xff0/0xff0 [ 1423.337085] ? security_file_ioctl+0x83/0xb0 [ 1423.341490] SyS_ioctl+0x7f/0xb0 [ 1423.344864] ? do_vfs_ioctl+0xff0/0xff0 [ 1423.348843] do_syscall_64+0x1d5/0x640 [ 1423.352740] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1423.357929] RIP: 0033:0x4665d9 [ 1423.361111] RSP: 002b:00007f7ec8572188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1423.368826] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1423.376110] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1423.383384] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1423.390656] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1423.398043] R13: 00007fff53496b8f R14: 00007f7ec8572300 R15: 0000000000022000 [ 1423.417140] CPU: 1 PID: 10773 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1423.425139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1423.431302] warn_alloc_show_mem: 3 callbacks suppressed [ 1423.431306] Mem-Info: [ 1423.434523] Call Trace: [ 1423.439951] active_anon:12893 inactive_anon:18917 isolated_anon:0 [ 1423.439951] active_file:40 inactive_file:6 isolated_file:0 [ 1423.439951] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1423.439951] slab_reclaimable:13206 slab_unreclaimable:117091 [ 1423.439951] mapped:52745 shmem:19216 pagetables:815 bounce:0 [ 1423.439951] free:13944 free_pcp:83 free_cma:0 [ 1423.442301] dump_stack+0x1b2/0x281 [ 1423.444910] Node 0 active_anon:51352kB inactive_anon:54728kB active_file:112kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192960kB dirty:0kB writeback:0kB shmem:55860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1423.478010] dump_header+0x178/0x82f [ 1423.478022] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1423.478030] ? ___ratelimit+0x2cd/0x530 [ 1423.478039] oom_kill_process.cold+0x10/0xa40 [ 1423.478056] out_of_memory+0xe3e/0x1190 [ 1423.481680] Node 1 active_anon:220kB inactive_anon:20940kB active_file:48kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18020kB dirty:0kB writeback:0kB shmem:21004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1423.510418] ? oom_killer_disable+0x1c0/0x1c0 [ 1423.510428] ? mutex_trylock+0x152/0x1a0 [ 1423.510438] __alloc_pages_nodemask+0x23e1/0x2720 [ 1423.510458] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1423.514168] Node 0 [ 1423.519290] alloc_pages_current+0x155/0x260 [ 1423.519304] filemap_fault+0x11a1/0x1ad0 [ 1423.519323] ext4_filemap_fault+0x84/0xb0 [ 1423.519336] __do_fault+0xfa/0x380 [ 1423.523309] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1423.527783] __handle_mm_fault+0x2497/0x4620 [ 1423.527794] ? vm_insert_page+0x7c0/0x7c0 [ 1423.527812] ? mark_held_locks+0xa6/0xf0 [ 1423.527823] handle_mm_fault+0x455/0x9c0 [ 1423.531811] lowmem_reserve[]: [ 1423.558805] __do_page_fault+0x549/0xad0 [ 1423.558818] ? spurious_fault+0x640/0x640 [ 1423.558826] ? do_page_fault+0x60/0x500 [ 1423.558834] ? page_fault+0x2f/0x50 [ 1423.558841] page_fault+0x45/0x50 [ 1423.558853] RIP: 0001:0xffffffffffffffff [ 1423.563347] 0 [ 1423.567417] RSP: 5dd071e0:00007ffff9a17a70 EFLAGS: 7ffff9a17880 [ 1423.594951] syz-executor.3: [ 1423.614109] 2717 [ 1423.663522] page allocation failure: order:0 [ 1423.673080] 2718 2718 2718 [ 1423.693885] Node 0 DMA32 free:17980kB min:36200kB low:45248kB high:54296kB active_anon:51352kB inactive_anon:54728kB active_file:32kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:3136kB bounce:0kB free_pcp:212kB local_pcp:0kB free_cma:0kB [ 1423.694429] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1423.727126] lowmem_reserve[]: 0 0 0 0 0 [ 1423.738265] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1423.752780] (null) [ 1423.768511] Mem-Info: [ 1423.770993] active_anon:12893 inactive_anon:18917 isolated_anon:0 [ 1423.770993] active_file:15 inactive_file:6 isolated_file:0 [ 1423.770993] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1423.770993] slab_reclaimable:13206 slab_unreclaimable:117091 [ 1423.770993] mapped:52745 shmem:19216 pagetables:815 bounce:0 [ 1423.770993] free:13944 free_pcp:83 free_cma:0 [ 1423.808279] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1423.813439] CPU: 1 PID: 10818 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1423.813706] lowmem_reserve[]: [ 1423.821320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1423.821325] Call Trace: [ 1423.821347] dump_stack+0x1b2/0x281 [ 1423.821360] warn_alloc.cold+0x96/0x1cc [ 1423.821372] ? zone_watermark_ok_safe+0x220/0x220 [ 1423.821382] ? usleep_range+0x130/0x130 [ 1423.821390] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1423.821402] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1423.821414] ? run_timer_softirq+0x5a0/0x5a0 [ 1423.832062] 0 [ 1423.833867] __alloc_pages_nodemask+0x2127/0x2720 [ 1423.837402] 0 [ 1423.840133] ? lock_acquire+0x170/0x3f0 [ 1423.844087] 0 [ 1423.848927] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1423.848937] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1423.848954] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1423.848968] ? alloc_pages_current+0x21c/0x260 [ 1423.852956] Node 0 active_anon:51352kB inactive_anon:54728kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192960kB dirty:0kB writeback:0kB shmem:55860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1423.858023] alloc_pages_current+0x155/0x260 [ 1423.858038] ion_page_pool_alloc+0x118/0x1b0 [ 1423.858048] ion_system_heap_allocate+0x133/0x8c0 [ 1423.858058] ? ion_alloc+0x187/0x810 [ 1423.863069] Node 1 active_anon:220kB inactive_anon:20940kB active_file:0kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:18020kB dirty:0kB writeback:0kB shmem:21004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1423.867726] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1423.867737] ? ion_system_contig_heap_create+0x130/0x130 [ 1423.867747] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1423.867758] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1423.867769] ion_alloc+0x204/0x810 [ 1423.869568] 0 [ 1423.874394] ? ion_dma_buf_release+0x40/0x40 [ 1423.876210] 0 [ 1423.880145] ? __might_fault+0x177/0x1b0 [ 1423.886774] ion_ioctl+0xea/0x1f0 [ 1423.886784] ? ion_query_heaps+0x360/0x360 [ 1423.886795] ? ion_query_heaps+0x360/0x360 [ 1423.886808] do_vfs_ioctl+0x75a/0xff0 [ 1423.891392] Node 0 [ 1423.896827] ? ioctl_preallocate+0x1a0/0x1a0 [ 1423.896837] ? lock_downgrade+0x740/0x740 [ 1423.896849] ? __fget+0x225/0x360 [ 1423.896859] ? do_vfs_ioctl+0xff0/0xff0 [ 1423.901439] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1423.929999] ? security_file_ioctl+0x83/0xb0 [ 1423.930011] SyS_ioctl+0x7f/0xb0 [ 1423.930019] ? do_vfs_ioctl+0xff0/0xff0 [ 1423.930030] do_syscall_64+0x1d5/0x640 [ 1423.930044] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1423.935724] Node 1 [ 1423.940531] RIP: 0033:0x4665d9 [ 1423.945683] Normal free:26828kB min:53696kB low:67120kB high:80544kB active_anon:220kB inactive_anon:20940kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:124kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1423.949491] RSP: 002b:00007f2e9a53f188 EFLAGS: 00000246 [ 1423.976601] lowmem_reserve[]: [ 1423.982001] ORIG_RAX: 0000000000000010 [ 1423.982011] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1423.987535] lowmem_reserve[]: [ 1423.992482] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1423.992490] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1423.997384] 0 [ 1424.000846] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1424.000853] R13: 00007ffe42256d6f R14: 00007f2e9a53f300 R15: 0000000000022000 [ 1424.002650] 2717 [ 1424.031056] 0 [ 1424.043373] 2718 [ 1424.142897] 0 [ 1424.156176] 2718 2718 [ 1424.210186] Node 0 DMA32 free:106876kB min:36200kB low:45248kB high:54296kB active_anon:51256kB inactive_anon:54728kB active_file:56kB inactive_file:3164kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7392kB pagetables:3136kB bounce:0kB free_pcp:732kB local_pcp:20kB free_cma:0kB [ 1424.224981] 0 [ 1424.261166] lowmem_reserve[]: 0 0 0 0 0 [ 1424.269031] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1424.299995] lowmem_reserve[]: 0 0 0 0 0 [ 1424.305317] Node 1 Normal free:125148kB min:53696kB low:67120kB high:80544kB active_anon:220kB inactive_anon:20940kB active_file:116kB inactive_file:512kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:124kB bounce:0kB free_pcp:204kB local_pcp:0kB free_cma:0kB [ 1424.324942] 0 0 [ 1424.354998] Node 0 DMA: 2*4kB (UE) 0*8kB 1*16kB (E) 2*32kB (UE) 14*64kB (UE) 4*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 1424.358125] lowmem_reserve[]: 0 0 0 0 0 [ 1424.400296] Node 0 DMA32: 973*4kB (UE) 2764*8kB (UME) 6494*16kB (UME) 1752*32kB (UE) 415*64kB (UME) 219*128kB (UM) 14*256kB (UM) 3*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 247732kB [ 1424.400829] Node 0 [ 1424.417646] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1424.431101] Node 1 Normal: 1*4kB (M) 1*8kB (U) 1*16kB (M) 0*32kB 1070*64kB (UM) 27*128kB (UM) 2*256kB (UM) 1*512kB (M) 25*1024kB (UM) 13*2048kB (UM) 0*4096kB = 125212kB [ 1424.437550] DMA: 2*4kB (UE) 0*8kB 1*16kB (E) 2*32kB (UE) 14*64kB (UE) 4*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 1424.495345] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1424.540011] Node 0 DMA32: 1093*4kB (UME) 2925*8kB (UME) 6763*16kB (UME) 2524*32kB (UME) 1121*64kB (UME) 332*128kB (UM) 16*256kB (UM) 3*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 338668kB [ 1424.545520] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1424.595620] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1424.600811] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1424.607150] Node 1 Normal: 1*4kB (M) 1*8kB (U) 1*16kB (M) 0*32kB 1070*64kB (UM) 27*128kB (UM) 2*256kB (UM) 1*512kB (M) 15*1024kB (UM) 13*2048kB (UM) 0*4096kB = 114972kB [ 1424.644986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1424.691614] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1424.704953] 21134 total pagecache pages [ 1424.709217] 0 pages in swap cache [ 1424.712669] Swap cache stats: add 0, delete 0, find 0/0 [ 1424.725685] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1424.736119] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1424.758689] Free swap = 0kB [ 1424.761738] Total swap = 0kB [ 1424.764753] 2097051 pages RAM [ 1424.783282] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1424.798181] 0 pages HighMem/MovableOnly [ 1424.802176] 363849 pages reserved [ 1424.815623] 21356 total pagecache pages [ 1424.818026] 0 pages cma reserved [ 1424.826595] 0 pages in swap cache [ 1424.875610] Swap cache stats: add 0, delete 0, find 0/0 [ 1424.886286] Free swap = 0kB [ 1424.905015] Total swap = 0kB [ 1424.908219] 2097051 pages RAM [ 1424.911541] 0 pages HighMem/MovableOnly [ 1424.920247] 363849 pages reserved [ 1424.923758] 0 pages cma reserved [ 1424.927660] Out of memory (oom_kill_allocating_task): Kill process 10773 (systemd-journal) score 0 or sacrifice child [ 1424.969683] IPVS: ftp: loaded support on port[0] = 21 [ 1424.974981] Killed process 10773 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:0kB, shmem-rss:1864kB [ 1425.014165] oom_reaper: reaped process 10773 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:2024kB [ 1425.066876] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1425.099360] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1425.145476] systemd[1]: Stopped Journal Service. [ 1425.389563] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1425.403665] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1425.404330] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1425.433639] CPU: 0 PID: 10820 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1425.441522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1425.450885] Call Trace: [ 1425.453507] dump_stack+0x1b2/0x281 [ 1425.457166] dump_header+0x178/0x82f [ 1425.459990] syz-executor.3 cpuset=/ [ 1425.460909] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1425.464597] mems_allowed=0-1 [ 1425.469691] ? ___ratelimit+0x2cd/0x530 [ 1425.469703] oom_kill_process.cold+0x10/0xa40 [ 1425.469721] out_of_memory+0xe3e/0x1190 [ 1425.469733] ? oom_killer_disable+0x1c0/0x1c0 [ 1425.469741] ? mutex_trylock+0x152/0x1a0 [ 1425.469752] __alloc_pages_nodemask+0x23e1/0x2720 [ 1425.498677] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1425.503545] ? mark_held_locks+0xa6/0xf0 [ 1425.507694] ? cache_grow_begin+0x3f/0x700 [ 1425.511933] cache_grow_begin+0x91/0x700 [ 1425.516002] fallback_alloc+0x207/0x2c0 [ 1425.519987] __kmalloc_track_caller+0x20e/0x400 [ 1425.524669] ? __devinet_sysctl_register+0x83/0x250 [ 1425.529728] kmemdup+0x23/0x50 [ 1425.532964] __devinet_sysctl_register+0x83/0x250 [ 1425.537826] ? inet_netconf_notify_devconf+0x190/0x190 [ 1425.543311] ? __local_bh_enable_ip+0xc1/0x170 [ 1425.547895] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1425.552937] devinet_sysctl_register+0x134/0x1f0 [ 1425.557710] inetdev_init+0x202/0x410 [ 1425.561536] inetdev_event+0x8b4/0x10a0 [ 1425.565515] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1425.570710] ? devinet_init_net+0x450/0x450 [ 1425.575047] ? cfg802154_netdev_notifier_call+0x2ea/0x660 [ 1425.580683] notifier_call_chain+0x108/0x1a0 [ 1425.585198] register_netdevice+0xb98/0xe40 [ 1425.589545] ? netdev_change_features+0xa0/0xa0 [ 1425.594675] __tun_chr_ioctl.isra.0+0x15a8/0x3430 [ 1425.599540] ? tun_attach.isra.0+0x1060/0x1060 [ 1425.604217] ? do_lock_file_wait+0x210/0x210 [ 1425.608627] ? trace_hardirqs_on+0x10/0x10 [ 1425.612860] ? trace_hardirqs_on+0x10/0x10 [ 1425.617215] ? do_dup2+0x1d7/0x3d0 [ 1425.620761] ? __tun_chr_ioctl.isra.0+0x3430/0x3430 [ 1425.625788] do_vfs_ioctl+0x75a/0xff0 [ 1425.629594] ? dnotify_flush+0x19/0x2c0 [ 1425.633942] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1425.639745] ? ioctl_preallocate+0x1a0/0x1a0 [ 1425.644163] ? lock_acquire+0x170/0x3f0 [ 1425.648144] ? dnotify_flush+0x19/0x2c0 [ 1425.652126] ? fput+0xb/0x140 [ 1425.655229] ? filp_close+0x102/0x140 [ 1425.659034] ? security_file_ioctl+0x83/0xb0 [ 1425.663541] SyS_ioctl+0x7f/0xb0 [ 1425.666920] ? do_vfs_ioctl+0xff0/0xff0 [ 1425.670897] do_syscall_64+0x1d5/0x640 [ 1425.674785] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1425.679972] RIP: 0033:0x466397 [ 1425.683159] RSP: 002b:00007ffee6cd2758 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1425.691404] RAX: ffffffffffffffda RBX: 00007ffee6cd2e28 RCX: 0000000000466397 [ 1425.694964] syz-executor.5: [ 1425.698857] RDX: 00007ffee6cd2780 RSI: 00000000400454ca RDI: 00000000000000f0 [ 1425.698865] RBP: 00007ffee6cd28c0 R08: 00007ffee6cd2780 R09: 0000000000000000 [ 1425.701917] page allocation failure: order:0 [ 1425.709350] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1425.709355] R13: 000000000056ca68 R14: 0000000000000000 R15: 00000000000000f8 [ 1425.731206] Mem-Info: [ 1425.738222] CPU: 1 PID: 10818 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1425.747848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1425.754122] active_anon:12961 inactive_anon:18918 isolated_anon:0 [ 1425.754122] active_file:19 inactive_file:12 isolated_file:0 [ 1425.754122] unevictable:0 dirty:20 writeback:0 unstable:0 [ 1425.754122] slab_reclaimable:13208 slab_unreclaimable:116844 [ 1425.754122] mapped:52272 shmem:19220 pagetables:812 bounce:0 [ 1425.754122] free:13808 free_pcp:60 free_cma:0 [ 1425.757289] Call Trace: [ 1425.757311] dump_stack+0x1b2/0x281 [ 1425.757325] warn_alloc.cold+0x96/0x1cc [ 1425.757337] ? zone_watermark_ok_safe+0x220/0x220 [ 1425.757361] __alloc_pages_nodemask+0x2127/0x2720 [ 1425.790921] Node 0 active_anon:51620kB inactive_anon:54736kB active_file:0kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192596kB dirty:76kB writeback:0kB shmem:55876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1425.793504] ? lock_acquire+0x170/0x3f0 [ 1425.797127] Node 1 active_anon:224kB inactive_anon:20936kB active_file:104kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16492kB dirty:4kB writeback:0kB shmem:21004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1425.801071] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1425.805933] Node 0 [ 1425.810733] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1425.846791] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1425.869691] ? __mutex_unlock_slowpath+0x75/0x770 [ 1425.869707] alloc_pages_current+0x155/0x260 [ 1425.869721] ion_page_pool_alloc+0x118/0x1b0 [ 1425.869733] ion_system_heap_allocate+0x133/0x8c0 [ 1425.874572] lowmem_reserve[]: [ 1425.876800] ? _raw_spin_unlock+0x29/0x40 [ 1425.876810] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1425.876819] ? ion_system_contig_heap_create+0x130/0x130 [ 1425.876833] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1425.882275] 0 [ 1425.907890] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1425.907902] ion_alloc+0x27a/0x810 [ 1425.907916] ? ion_dma_buf_release+0x40/0x40 [ 1425.907928] ? __might_fault+0x177/0x1b0 [ 1425.912779] 2717 [ 1425.917183] ion_ioctl+0xea/0x1f0 [ 1425.917193] ? ion_query_heaps+0x360/0x360 [ 1425.917204] ? ion_query_heaps+0x360/0x360 [ 1425.917214] do_vfs_ioctl+0x75a/0xff0 [ 1425.917226] ? ioctl_preallocate+0x1a0/0x1a0 [ 1425.921620] 2718 [ 1425.926456] ? lock_downgrade+0x740/0x740 [ 1425.926469] ? __fget+0x225/0x360 [ 1425.926479] ? do_vfs_ioctl+0xff0/0xff0 [ 1425.926494] ? security_file_ioctl+0x83/0xb0 [ 1425.929591] 2718 [ 1425.933822] SyS_ioctl+0x7f/0xb0 [ 1425.938771] 2718 [ 1425.944183] ? do_vfs_ioctl+0xff0/0xff0 [ 1425.950999] do_syscall_64+0x1d5/0x640 [ 1425.955852] Node 0 [ 1425.959348] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1425.963741] DMA32 free:17540kB min:36200kB low:45248kB high:54296kB active_anon:51520kB inactive_anon:54736kB active_file:36kB inactive_file:20kB unevictable:0kB writepending:76kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:3128kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1425.967785] RIP: 0033:0x4665d9 [ 1425.967790] RSP: 002b:00007f2e9a53f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1425.967799] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1425.967803] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1425.967808] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1425.967813] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1425.967817] R13: 00007ffe42256d6f R14: 00007f2e9a53f300 R15: 0000000000022000 [ 1425.968676] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1425.970612] lowmem_reserve[]: [ 1425.973616] (null) [ 1426.000530] 0 [ 1426.004146] syz-executor.5 cpuset= [ 1426.030898] 0 [ 1426.031710] / [ 1426.067039] 0 [ 1426.071721] mems_allowed=0-1 [ 1426.100316] 0 [ 1426.108172] CPU: 1 PID: 10804 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1426.132963] 0 [ 1426.133939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1426.143686] Call Trace: [ 1426.147762] Node 0 [ 1426.154869] dump_stack+0x1b2/0x281 [ 1426.154884] warn_alloc.cold+0x96/0x1cc [ 1426.154899] ? zone_watermark_ok_safe+0x220/0x220 [ 1426.157516] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1426.159745] ? usleep_range+0x130/0x130 [ 1426.163357] lowmem_reserve[]: [ 1426.167325] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1426.167339] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1426.167348] ? run_timer_softirq+0x5a0/0x5a0 [ 1426.167365] __alloc_pages_nodemask+0x2127/0x2720 [ 1426.167381] ? lock_acquire+0x170/0x3f0 [ 1426.172207] 0 [ 1426.197193] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1426.197203] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1426.197219] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1426.197237] alloc_pages_current+0x155/0x260 [ 1426.201199] 0 [ 1426.204300] ion_page_pool_alloc+0x118/0x1b0 [ 1426.209440] 0 [ 1426.214412] ion_system_heap_allocate+0x133/0x8c0 [ 1426.218845] 0 [ 1426.223640] ? ion_alloc+0x187/0x810 [ 1426.227628] 0 [ 1426.229384] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1426.238703] ? ion_system_contig_heap_create+0x130/0x130 [ 1426.238714] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1426.238725] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1426.238739] ion_alloc+0x204/0x810 [ 1426.244192] Node 1 [ 1426.248594] ? ion_dma_buf_release+0x40/0x40 [ 1426.248607] ? __might_fault+0x177/0x1b0 [ 1426.248618] ion_ioctl+0xea/0x1f0 [ 1426.248627] ? ion_query_heaps+0x360/0x360 [ 1426.250429] Normal free:27188kB min:53696kB low:67120kB high:80544kB active_anon:160kB inactive_anon:20936kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:120kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1426.254840] ? ion_query_heaps+0x360/0x360 [ 1426.254851] do_vfs_ioctl+0x75a/0xff0 [ 1426.254863] ? ioctl_preallocate+0x1a0/0x1a0 [ 1426.254875] ? lock_downgrade+0x740/0x740 [ 1426.256658] lowmem_reserve[]: [ 1426.261496] ? __fget+0x225/0x360 [ 1426.263284] 0 [ 1426.266990] ? do_vfs_ioctl+0xff0/0xff0 [ 1426.267002] ? security_file_ioctl+0x83/0xb0 [ 1426.267012] SyS_ioctl+0x7f/0xb0 [ 1426.267020] ? do_vfs_ioctl+0xff0/0xff0 [ 1426.267031] do_syscall_64+0x1d5/0x640 [ 1426.268813] 0 [ 1426.274278] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1426.279745] 0 [ 1426.284712] RIP: 0033:0x4665d9 [ 1426.289662] 0 [ 1426.293147] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 [ 1426.295396] 0 [ 1426.299776] ORIG_RAX: 0000000000000010 [ 1426.307257] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1426.307262] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1426.307267] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1426.307271] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1426.307276] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1426.308149] warn_alloc_show_mem: 1 callbacks suppressed [ 1426.308153] Mem-Info: [ 1426.312949] Node 0 [ 1426.339562] active_anon:12979 inactive_anon:18918 isolated_anon:0 [ 1426.339562] active_file:17 inactive_file:16 isolated_file:0 [ 1426.339562] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1426.339562] slab_reclaimable:13208 slab_unreclaimable:116849 [ 1426.339562] mapped:52225 shmem:19220 pagetables:867 bounce:0 [ 1426.339562] free:13933 free_pcp:73 free_cma:0 [ 1426.339580] Node 0 active_anon:51756kB inactive_anon:54736kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:192516kB dirty:0kB writeback:0kB shmem:55876kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1426.339596] Node 1 active_anon:160kB inactive_anon:20936kB active_file:40kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:16384kB dirty:0kB writeback:0kB shmem:21004kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1426.339600] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1426.339621] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1426.339642] Node 0 DMA32 free:17576kB min:36200kB low:45248kB high:54296kB active_anon:51756kB inactive_anon:54736kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:3348kB bounce:0kB free_pcp:172kB local_pcp:172kB free_cma:0kB [ 1426.339661] lowmem_reserve[]: 0 0 0 [ 1426.344011] Bluetooth: hci0 command 0x0409 tx timeout [ 1426.347772] 0 0 [ 1426.347781] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1426.377079] DMA: [ 1426.380202] lowmem_reserve[]: [ 1426.382206] 2*4kB [ 1426.386052] 0 0 0 0 0 [ 1426.386071] Node 1 Normal free:27188kB min:53696kB low:67120kB high:80544kB active_anon:160kB inactive_anon:20936kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:120kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1426.386094] lowmem_reserve[]: 0 0 0 0 0 [ 1426.386114] Node 0 DMA: 2*4kB (UE) 4*8kB (U) 3*16kB (UE) 4*32kB (UE) 12*64kB (UE) 4*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 1426.386196] Node 0 [ 1426.409985] (UE) [ 1426.411479] DMA32: [ 1426.434501] 4*8kB [ 1426.451073] 428*4kB [ 1426.466375] (U) [ 1426.501443] (ME) [ 1426.566597] 3*16kB [ 1426.577908] 250*8kB [ 1426.649404] (UE) [ 1426.709912] systemd[1]: Starting Journal Service... [ 1426.755875] (UME) 172*16kB (ME) 349*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17632kB [ 1426.811562] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1426.829862] Node 1 Normal: 56*4kB (UM) 9*8kB (UM) 9*16kB (U) 450*32kB (UM) 1420*64kB (UM) 6*128kB (U) 0*256kB 0*512kB 93*1024kB (U) 3*2048kB (U) 1*4096kB (U) = 211960kB [ 1426.847377] 4*32kB (UE) 12*64kB (UE) 4*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 1426.885366] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1426.888364] Node 0 DMA32: 235*4kB (UME) 244*8kB (UME) 173*16kB (UME) 24*32kB (ME) 222*64kB (U) 126*128kB (U) 26*256kB (U) 0*512kB 16*1024kB (U) 0*2048kB 0*4096kB = 59804kB [ 1426.914943] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1426.923582] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1426.935401] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1426.966515] 20930 total pagecache pages [ 1426.970595] 0 pages in swap cache [ 1426.974045] Swap cache stats: add 0, delete 0, find 0/0 [ 1426.974920] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1427.014932] Free swap = 0kB [ 1427.017993] Total swap = 0kB [ 1427.021009] 2097051 pages RAM [ 1427.024129] 0 pages HighMem/MovableOnly [ 1427.029747] Node 1 Normal: 1*4kB (U) 1*8kB (M) 0*16kB 1*32kB (U) 826*64kB (U) 7*128kB (UM) 0*256kB 1*512kB (M) 94*1024kB (UM) 4*2048kB (UM) 0*4096kB = 158764kB [ 1427.045523] 363849 pages reserved [ 1427.050327] 0 pages cma reserved [ 1427.071769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1427.081379] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1427.166629] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1427.206894] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1427.233411] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1427.261446] 19301 total pagecache pages [ 1427.269475] 0 pages in swap cache [ 1427.273147] Swap cache stats: add 0, delete 0, find 0/0 [ 1427.275074] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1427.281193] Free swap = 0kB [ 1427.289713] CPU: 1 PID: 10804 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1427.292385] Total swap = 0kB [ 1427.297602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1427.297607] Call Trace: [ 1427.297627] dump_stack+0x1b2/0x281 [ 1427.297640] warn_alloc.cold+0x96/0x1cc [ 1427.297652] ? zone_watermark_ok_safe+0x220/0x220 [ 1427.297675] __alloc_pages_nodemask+0x2127/0x2720 [ 1427.297686] ? lock_acquire+0x170/0x3f0 [ 1427.297700] ? lock_acquire+0x170/0x3f0 [ 1427.297724] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1427.300879] 2097051 pages RAM [ 1427.310086] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1427.310099] ? __mutex_unlock_slowpath+0x75/0x770 [ 1427.310114] alloc_pages_current+0x155/0x260 [ 1427.310127] ion_page_pool_alloc+0x118/0x1b0 [ 1427.312721] 0 pages HighMem/MovableOnly [ 1427.316335] ion_system_heap_allocate+0x133/0x8c0 [ 1427.316347] ? _raw_spin_unlock+0x29/0x40 [ 1427.316356] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1427.316366] ? ion_system_contig_heap_create+0x130/0x130 [ 1427.320335] 363849 pages reserved [ 1427.325167] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1427.325180] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1427.325192] ion_alloc+0x27a/0x810 [ 1427.325206] ? ion_dma_buf_release+0x40/0x40 [ 1427.330028] 0 pages cma reserved [ 1427.334019] ? __might_fault+0x177/0x1b0 [ 1427.338016] Out of memory (oom_kill_allocating_task): Kill process 10820 (syz-executor.4) score 0 or sacrifice child [ 1427.342826] ion_ioctl+0xea/0x1f0 [ 1427.346256] Killed process 10820 (syz-executor.4) total-vm:93120kB, anon-rss:76kB, file-rss:33512kB, shmem-rss:0kB [ 1427.351450] ? ion_query_heaps+0x360/0x360 [ 1427.351462] ? ion_query_heaps+0x360/0x360 [ 1427.351474] do_vfs_ioctl+0x75a/0xff0 [ 1427.351487] ? ioctl_preallocate+0x1a0/0x1a0 [ 1427.351497] ? lock_downgrade+0x740/0x740 [ 1427.351511] ? __fget+0x225/0x360 [ 1427.465919] ? do_vfs_ioctl+0xff0/0xff0 [ 1427.469890] ? security_file_ioctl+0x83/0xb0 [ 1427.474294] SyS_ioctl+0x7f/0xb0 [ 1427.477678] ? do_vfs_ioctl+0xff0/0xff0 [ 1427.481652] do_syscall_64+0x1d5/0x640 [ 1427.485718] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1427.490900] RIP: 0033:0x4665d9 [ 1427.494090] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1427.501808] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1427.509220] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1427.516520] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1427.523823] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1427.531183] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1427.721459] systemd-journald[10854]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. 00:41:07 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) [ 1428.181801] oom_reaper: reaped process 10804 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1428.248104] warn_alloc_show_mem: 1 callbacks suppressed [ 1428.248108] Mem-Info: [ 1428.275690] active_anon:12911 inactive_anon:20949 isolated_anon:0 [ 1428.275690] active_file:544 inactive_file:5209 isolated_file:0 [ 1428.275690] unevictable:0 dirty:14 writeback:0 unstable:0 [ 1428.275690] slab_reclaimable:13236 slab_unreclaimable:115968 [ 1428.275690] mapped:47784 shmem:21264 pagetables:791 bounce:0 [ 1428.275690] free:152006 free_pcp:196 free_cma:0 [ 1428.404924] Node 0 active_anon:50748kB inactive_anon:55736kB active_file:40kB inactive_file:488kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157984kB dirty:4kB writeback:0kB shmem:56868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1428.494936] Node 1 active_anon:896kB inactive_anon:28060kB active_file:2136kB inactive_file:20348kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:33152kB dirty:52kB writeback:0kB shmem:28188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1428.564974] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1428.654900] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1428.664921] Node 0 DMA32 free:43056kB min:36200kB low:45248kB high:54296kB active_anon:50748kB inactive_anon:55736kB active_file:40kB inactive_file:488kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2972kB bounce:0kB free_pcp:332kB local_pcp:120kB free_cma:0kB [ 1428.754963] lowmem_reserve[]: 0 0 0 0 0 [ 1428.758998] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1428.828422] lowmem_reserve[]: 0 0 0 0 0 [ 1428.832467] Node 1 Normal free:155616kB min:53696kB low:67120kB high:80544kB active_anon:896kB inactive_anon:28060kB active_file:2136kB inactive_file:20348kB unevictable:0kB writepending:52kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:256kB pagetables:192kB bounce:0kB free_pcp:404kB local_pcp:232kB free_cma:0kB [ 1428.950652] lowmem_reserve[]: 0 0 0 0 0 [ 1428.965934] Node 0 DMA: 2*4kB (UE) 0*8kB 2*16kB (UE) 1*32kB (E) 10*64kB (UE) 4*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10952kB [ 1429.021163] Node 0 DMA32: 172*4kB (UME) 276*8kB (UME) 601*16kB (UME) 40*32kB (UME) 1*64kB (U) 24*128kB (U) 26*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 23584kB [ 1429.064896] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1429.084931] Node 1 Normal: 94*4kB (UM) 61*8kB (UM) 51*16kB (ME) 46*32kB (UM) 470*64kB (UME) 63*128kB (UM) 130*256kB (UM) 7*512kB (UM) 4*1024kB (UM) 6*2048kB (UM) 6*4096kB (U) = 119120kB [ 1429.124934] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1429.133801] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1429.198764] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1429.264943] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1429.273555] 23387 total pagecache pages [ 1429.318085] 0 pages in swap cache [ 1429.321572] Swap cache stats: add 0, delete 0, find 0/0 [ 1429.358087] Free swap = 0kB [ 1429.361134] Total swap = 0kB [ 1429.364148] 2097051 pages RAM [ 1429.400452] 0 pages HighMem/MovableOnly [ 1429.413819] systemd[1]: Started Journal Service. [ 1429.431450] 363849 pages reserved [ 1429.457336] 0 pages cma reserved [ 1429.633873] oom_reaper: reaped process 10811 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1429.655544] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1429.671385] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1429.714904] CPU: 0 PID: 10811 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1429.726120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1429.735474] Call Trace: [ 1429.738072] dump_stack+0x1b2/0x281 [ 1429.741705] warn_alloc.cold+0x96/0x1cc [ 1429.745684] ? zone_watermark_ok_safe+0x220/0x220 [ 1429.750524] ? usleep_range+0x130/0x130 [ 1429.754540] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1429.759654] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1429.764676] ? run_timer_softirq+0x5a0/0x5a0 [ 1429.769094] __alloc_pages_nodemask+0x2127/0x2720 [ 1429.773946] ? lock_acquire+0x170/0x3f0 [ 1429.777927] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1429.782783] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1429.787298] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1429.792754] ? retint_kernel+0x2d/0x2d [ 1429.796656] alloc_pages_current+0x155/0x260 [ 1429.801092] ion_page_pool_alloc+0x118/0x1b0 [ 1429.805505] ion_system_heap_allocate+0x133/0x8c0 [ 1429.808964] syz-executor.5 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1429.810340] ? ion_alloc+0x187/0x810 [ 1429.810354] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1429.823051] (null) [ 1429.824573] ? ion_system_contig_heap_create+0x130/0x130 [ 1429.833507] , order=0, oom_score_adj=1000 [ 1429.837700] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1429.837715] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1429.837733] ion_alloc+0x204/0x810 [ 1429.837754] ? ion_dma_buf_release+0x40/0x40 [ 1429.837765] ? __might_fault+0x177/0x1b0 [ 1429.837776] ion_ioctl+0xea/0x1f0 [ 1429.837785] ? ion_query_heaps+0x360/0x360 [ 1429.837796] ? ion_query_heaps+0x360/0x360 [ 1429.837805] do_vfs_ioctl+0x75a/0xff0 [ 1429.837817] ? ioctl_preallocate+0x1a0/0x1a0 [ 1429.837830] ? lock_downgrade+0x740/0x740 [ 1429.842166] syz-executor.3: [ 1429.847155] ? __fget+0x225/0x360 [ 1429.847164] ? do_vfs_ioctl+0xff0/0xff0 [ 1429.847175] ? security_file_ioctl+0x83/0xb0 [ 1429.847184] SyS_ioctl+0x7f/0xb0 [ 1429.847192] ? do_vfs_ioctl+0xff0/0xff0 [ 1429.847203] do_syscall_64+0x1d5/0x640 [ 1429.847217] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1429.847225] RIP: 0033:0x4665d9 [ 1429.847230] RSP: 002b:00007f7ec8572188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1429.847240] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1429.847246] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1429.847251] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1429.847256] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1429.847261] R13: 00007fff53496b8f R14: 00007f7ec8572300 R15: 0000000000022000 [ 1429.984932] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1429.991318] CPU: 1 PID: 10804 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1429.999704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1430.009204] Call Trace: [ 1430.015288] dump_stack+0x1b2/0x281 [ 1430.018933] dump_header+0x178/0x82f [ 1430.022682] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1430.027796] ? ___ratelimit+0x2cd/0x530 [ 1430.031785] oom_kill_process.cold+0x10/0xa40 [ 1430.036305] out_of_memory+0xe3e/0x1190 [ 1430.040382] ? oom_killer_disable+0x1c0/0x1c0 [ 1430.044899] ? mutex_trylock+0x152/0x1a0 [ 1430.048964] __alloc_pages_nodemask+0x23e1/0x2720 [ 1430.053839] ? lock_acquire+0x170/0x3f0 [ 1430.057837] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1430.062792] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1430.067304] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1430.072831] alloc_pages_current+0x155/0x260 [ 1430.077277] ion_page_pool_alloc+0x118/0x1b0 [ 1430.081700] ion_system_heap_allocate+0x133/0x8c0 [ 1430.084892] Mem-Info: [ 1430.090786] ? _raw_spin_unlock+0x29/0x40 [ 1430.093205] active_anon:12916 inactive_anon:20949 isolated_anon:0 [ 1430.093205] active_file:66 inactive_file:1056 isolated_file:0 [ 1430.093205] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1430.093205] slab_reclaimable:13233 slab_unreclaimable:117919 [ 1430.093205] mapped:53431 shmem:21264 pagetables:828 bounce:0 [ 1430.093205] free:39056 free_pcp:112 free_cma:0 [ 1430.097352] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1430.097361] ? ion_system_contig_heap_create+0x130/0x130 [ 1430.097371] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1430.097381] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1430.097391] ion_alloc+0x27a/0x810 [ 1430.097404] ? ion_dma_buf_release+0x40/0x40 [ 1430.097415] ? __might_fault+0x177/0x1b0 [ 1430.097444] ion_ioctl+0xea/0x1f0 [ 1430.168012] ? ion_query_heaps+0x360/0x360 [ 1430.172785] ? ion_query_heaps+0x360/0x360 [ 1430.177029] do_vfs_ioctl+0x75a/0xff0 [ 1430.180841] ? ioctl_preallocate+0x1a0/0x1a0 [ 1430.184909] Node 0 active_anon:50740kB inactive_anon:55736kB active_file:104kB inactive_file:4248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:161328kB dirty:0kB writeback:0kB shmem:56868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1430.185289] ? lock_downgrade+0x740/0x740 [ 1430.222974] ? __fget+0x225/0x360 [ 1430.226446] ? do_vfs_ioctl+0xff0/0xff0 [ 1430.230433] ? security_file_ioctl+0x83/0xb0 [ 1430.234857] SyS_ioctl+0x7f/0xb0 [ 1430.238318] ? do_vfs_ioctl+0xff0/0xff0 [ 1430.242306] do_syscall_64+0x1d5/0x640 [ 1430.244900] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1430.246202] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1430.246212] RIP: 0033:0x4665d9 [ 1430.264553] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1430.268231] Node 1 active_anon:924kB inactive_anon:28060kB active_file:160kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52396kB dirty:0kB writeback:0kB shmem:28188kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1430.272290] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1430.300293] (null) [ 1430.308670] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1430.308676] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1430.308680] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1430.308685] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1430.361856] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1430.383635] Mem-Info: [ 1430.392498] active_anon:12926 inactive_anon:20950 isolated_anon:0 [ 1430.392498] active_file:21 inactive_file:28 isolated_file:0 [ 1430.392498] unevictable:0 dirty:18 writeback:0 unstable:0 [ 1430.392498] slab_reclaimable:13233 slab_unreclaimable:118137 [ 1430.392498] mapped:52599 shmem:21265 pagetables:835 bounce:0 [ 1430.392498] free:18793 free_pcp:138 free_cma:0 [ 1430.394160] syz-executor.3 cpuset= [ 1430.428719] Node 0 active_anon:50660kB inactive_anon:55736kB active_file:44kB inactive_file:180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158064kB dirty:68kB writeback:0kB shmem:56868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1430.429570] lowmem_reserve[]: [ 1430.432696] Node 1 active_anon:1044kB inactive_anon:28064kB active_file:40kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52332kB dirty:4kB writeback:0kB shmem:28192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1430.463640] 0 2717 2718 2718 2718 [ 1430.499309] Node 0 DMA32 free:35900kB min:36200kB low:45248kB high:54296kB active_anon:50660kB inactive_anon:55736kB active_file:108kB inactive_file:580kB unevictable:0kB writepending:68kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2972kB bounce:0kB free_pcp:504kB local_pcp:20kB free_cma:0kB [ 1430.513033] / mems_allowed=0-1 [ 1430.536287] CPU: 1 PID: 10818 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1430.544347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1430.545810] lowmem_reserve[]: [ 1430.553813] Call Trace: [ 1430.553823] 0 [ 1430.556966] dump_stack+0x1b2/0x281 [ 1430.556980] warn_alloc.cold+0x96/0x1cc [ 1430.556992] ? zone_watermark_ok_safe+0x220/0x220 [ 1430.557005] ? usleep_range+0x130/0x130 [ 1430.559577] 0 [ 1430.561488] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1430.565126] 0 [ 1430.569054] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1430.573963] 0 [ 1430.577933] ? run_timer_softirq+0x5a0/0x5a0 [ 1430.577950] __alloc_pages_nodemask+0x2127/0x2720 [ 1430.577968] ? lock_acquire+0x170/0x3f0 [ 1430.577983] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1430.579762] 0 [ 1430.584898] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1430.584914] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1430.584933] alloc_pages_current+0x155/0x260 [ 1430.584944] ion_page_pool_alloc+0x118/0x1b0 [ 1430.591743] ion_system_heap_allocate+0x133/0x8c0 [ 1430.593531] Node 0 [ 1430.598041] ? _raw_spin_unlock+0x29/0x40 [ 1430.598051] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1430.598059] ? ion_system_contig_heap_create+0x130/0x130 [ 1430.598069] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1430.598083] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1430.603116] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1430.607248] ion_alloc+0x27a/0x810 [ 1430.607263] ? ion_dma_buf_release+0x40/0x40 [ 1430.607275] ? __might_fault+0x177/0x1b0 [ 1430.607285] ion_ioctl+0xea/0x1f0 [ 1430.607292] ? ion_query_heaps+0x360/0x360 [ 1430.607303] ? ion_query_heaps+0x360/0x360 [ 1430.607312] do_vfs_ioctl+0x75a/0xff0 [ 1430.607325] ? ioctl_preallocate+0x1a0/0x1a0 [ 1430.612941] lowmem_reserve[]: [ 1430.614777] ? lock_downgrade+0x740/0x740 [ 1430.619286] 0 [ 1430.624697] ? __fget+0x225/0x360 [ 1430.629121] 0 [ 1430.633507] ? do_vfs_ioctl+0xff0/0xff0 [ 1430.638395] 0 [ 1430.640598] ? security_file_ioctl+0x83/0xb0 [ 1430.644735] 0 [ 1430.649679] SyS_ioctl+0x7f/0xb0 [ 1430.649689] ? do_vfs_ioctl+0xff0/0xff0 [ 1430.649700] do_syscall_64+0x1d5/0x640 [ 1430.649715] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1430.649726] RIP: 0033:0x4665d9 [ 1430.655223] 0 [ 1430.660200] RSP: 002b:00007f2e9a53f188 EFLAGS: 00000246 [ 1430.692015] ORIG_RAX: 0000000000000010 [ 1430.692023] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1430.692027] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1430.692032] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1430.692036] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1430.692041] R13: 00007ffe42256d6f R14: 00007f2e9a53f300 R15: 0000000000022000 [ 1430.695152] Node 0 [ 1430.730387] Node 1 [ 1430.736962] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1430.776388] Normal free:27172kB min:53696kB low:67120kB high:80544kB active_anon:1044kB inactive_anon:28064kB active_file:40kB inactive_file:32kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:368kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1430.874479] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1430.913803] Node 0 DMA32 free:35828kB min:36200kB low:45248kB high:54296kB active_anon:50660kB inactive_anon:55736kB active_file:108kB inactive_file:580kB unevictable:0kB writepending:68kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2972kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1430.979717] lowmem_reserve[]: 0 0 0 0 0 [ 1430.983773] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1431.012833] lowmem_reserve[]: 0 0 0 0 0 [ 1431.047983] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 10*64kB (UE) 4*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 1431.067099] Node 0 DMA32: 180*4kB (UME) 265*8kB (UME) 176*16kB (UME) 27*32kB (UME) 306*64kB (U) 39*128kB (U) 19*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35960kB [ 1431.073738] lowmem_reserve[]: 0 [ 1431.084287] Node 0 [ 1431.087982] 0 0 0 0 [ 1431.091686] Normal: [ 1431.092549] Node 1 [ 1431.092552] 0*4kB 0*8kB [ 1431.095133] Normal free:27172kB min:53696kB low:67120kB high:80544kB active_anon:1044kB inactive_anon:28064kB active_file:40kB inactive_file:32kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:368kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1431.098503] 0*16kB [ 1431.099909] lowmem_reserve[]: 0 0 0 0 0 [ 1431.134088] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1431.137656] Node 0 [ 1431.147256] Node 1 Normal: 75*4kB (UME) 56*8kB (UME) 49*16kB (M) 52*32kB (UM) 51*64kB (UME) 20*128kB (UM) 7*256kB (M) 6*512kB (M) 3*1024kB (M) 5*2048kB (UM) 0*4096kB = 27196kB [ 1431.150498] DMA: [ 1431.175243] Mem-Info: [ 1431.179730] active_anon:12926 inactive_anon:20950 isolated_anon:0 [ 1431.179730] active_file:1 inactive_file:8 isolated_file:0 [ 1431.179730] unevictable:0 dirty:18 writeback:0 unstable:0 [ 1431.179730] slab_reclaimable:13233 slab_unreclaimable:117931 [ 1431.179730] mapped:52624 shmem:21265 pagetables:835 bounce:0 [ 1431.179730] free:18485 free_pcp:0 free_cma:0 [ 1431.194290] 2*4kB (UE) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 10*64kB (UE) 4*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 1431.224925] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1431.244162] Node 0 DMA32: 182*4kB (UME) 269*8kB (UME) 176*16kB (UME) 27*32kB (UME) 308*64kB (U) 39*128kB (U) 19*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36128kB [ 1431.258277] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1431.270542] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1431.283729] Node 1 Normal: 75*4kB (UME) 56*8kB (UME) 49*16kB (M) 52*32kB (UM) 51*64kB (UME) 20*128kB (UM) 7*256kB (M) 6*512kB (M) 3*1024kB (M) 5*2048kB (UM) 0*4096kB = 27196kB [ 1431.284231] Node 0 active_anon:50660kB inactive_anon:55736kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158164kB dirty:68kB writeback:0kB shmem:56868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1431.306344] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1431.339407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1431.343231] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1431.348491] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1431.369967] 21287 total pagecache pages [ 1431.371396] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1431.373986] 0 pages in swap cache [ 1431.390708] Swap cache stats: add 0, delete 0, find 0/0 [ 1431.396182] Free swap = 0kB [ 1431.399213] Total swap = 0kB [ 1431.400134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1431.402224] 2097051 pages RAM [ 1431.418227] 0 pages HighMem/MovableOnly [ 1431.422238] 363849 pages reserved [ 1431.425799] 0 pages cma reserved [ 1431.427411] Node 1 active_anon:1044kB inactive_anon:28064kB active_file:40kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52332kB dirty:4kB writeback:0kB shmem:28192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1431.482197] 21435 total pagecache pages [ 1431.498273] 0 pages in swap cache [ 1431.501840] Swap cache stats: add 0, delete 0, find 0/0 [ 1431.525051] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1431.538159] Free swap = 0kB [ 1431.551439] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1431.585097] Total swap = 0kB [ 1431.588131] 2097051 pages RAM [ 1431.591278] 0 pages HighMem/MovableOnly [ 1431.594921] Node 0 DMA32 free:88456kB min:36200kB low:45248kB high:54296kB active_anon:50660kB inactive_anon:55736kB active_file:8kB inactive_file:36kB unevictable:0kB writepending:68kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2972kB bounce:0kB free_pcp:384kB local_pcp:356kB free_cma:0kB [ 1431.624286] 363849 pages reserved [ 1431.627792] 0 pages cma reserved [ 1431.631152] Out of memory (oom_kill_allocating_task): Kill process 10804 (syz-executor.5) score 0 or sacrifice child [ 1431.694967] lowmem_reserve[]: 0 0 0 0 0 [ 1431.697673] Killed process 10804 (syz-executor.5) total-vm:93384kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1431.699193] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1431.699215] lowmem_reserve[]: 0 0 0 0 0 [ 1431.699242] Node 1 Normal free:221968kB min:53696kB low:67120kB high:80544kB active_anon:1044kB inactive_anon:28064kB active_file:40kB inactive_file:3332kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:368kB bounce:0kB free_pcp:436kB local_pcp:212kB free_cma:0kB [ 1431.757606] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1431.854926] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1431.860115] CPU: 1 PID: 10804 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1431.868266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1431.877622] Call Trace: [ 1431.880226] dump_stack+0x1b2/0x281 [ 1431.883859] warn_alloc.cold+0x96/0x1cc [ 1431.887841] ? zone_watermark_ok_safe+0x220/0x220 [ 1431.892698] ? wait_for_completion_io+0x10/0x10 [ 1431.897390] __alloc_pages_nodemask+0x2127/0x2720 [ 1431.902236] ? lock_acquire+0x170/0x3f0 [ 1431.906214] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1431.911055] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1431.915558] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1431.921108] alloc_pages_current+0x155/0x260 [ 1431.925594] ion_page_pool_alloc+0x118/0x1b0 [ 1431.930099] ion_system_heap_allocate+0x133/0x8c0 [ 1431.935060] ? _raw_spin_unlock+0x29/0x40 [ 1431.939212] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1431.944162] ? ion_system_contig_heap_create+0x130/0x130 [ 1431.944893] lowmem_reserve[]: [ 1431.949700] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1431.949708] 0 [ 1431.952812] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1431.964558] ion_alloc+0x27a/0x810 [ 1431.968225] ? ion_dma_buf_release+0x40/0x40 [ 1431.972660] ? __might_fault+0x177/0x1b0 [ 1431.976744] ion_ioctl+0xea/0x1f0 [ 1431.980195] ? ion_query_heaps+0x360/0x360 [ 1431.984522] ? ion_query_heaps+0x360/0x360 [ 1431.984875] 0 0 [ 1431.988758] do_vfs_ioctl+0x75a/0xff0 [ 1431.988770] ? ioctl_preallocate+0x1a0/0x1a0 [ 1431.990730] 0 [ 1431.994534] ? lock_downgrade+0x740/0x740 [ 1432.004919] ? __fget+0x225/0x360 [ 1432.008398] ? do_vfs_ioctl+0xff0/0xff0 [ 1432.012494] ? security_file_ioctl+0x83/0xb0 [ 1432.016921] SyS_ioctl+0x7f/0xb0 [ 1432.020399] ? do_vfs_ioctl+0xff0/0xff0 [ 1432.024394] do_syscall_64+0x1d5/0x640 [ 1432.024894] 0 [ 1432.028290] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1432.030079] Node 0 [ 1432.035267] RIP: 0033:0x4665d9 [ 1432.035272] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1432.035280] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1432.035285] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1432.035290] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1432.035294] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1432.035299] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1432.230427] oom_reaper: reaped process 10809 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1432.308814] DMA: 1*4kB (E) 0*8kB 1*16kB (E) 2*32kB (UE) 10*64kB (UE) 4*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 1432.326754] Node 0 DMA32: 175*4kB (UME) 270*8kB (UME) 175*16kB (ME) 27*32kB (ME) 1*64kB (U) 45*128kB (U) 23*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18236kB [ 1432.342990] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1432.355089] Mem-Info: [ 1432.356104] Node 1 [ 1432.357535] active_anon:12910 inactive_anon:20950 isolated_anon:0 [ 1432.357535] active_file:9 inactive_file:0 isolated_file:2 [ 1432.357535] unevictable:0 dirty:21 writeback:0 unstable:0 [ 1432.357535] slab_reclaimable:13229 slab_unreclaimable:117911 [ 1432.357535] mapped:52650 shmem:21265 pagetables:835 bounce:0 [ 1432.357535] free:13985 free_pcp:1 free_cma:0 [ 1432.357543] Normal: [ 1432.359789] Node 0 active_anon:50580kB inactive_anon:55736kB active_file:16kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158112kB dirty:12kB writeback:0kB shmem:56868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1432.404889] 64*4kB [ 1432.426444] Node 1 active_anon:1060kB inactive_anon:28064kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:52488kB dirty:72kB writeback:0kB shmem:28192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1432.429683] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1432.456954] Node 0 [ 1432.465051] syz-executor.2: [ 1432.466626] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1432.468803] page allocation failure: order:4 [ 1432.471886] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1432.507170] Node 0 DMA32 free:17692kB min:36200kB low:45248kB high:54296kB active_anon:50580kB inactive_anon:55736kB active_file:16kB inactive_file:16kB unevictable:0kB writepending:12kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2972kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1432.534892] (UME) 55*8kB (UME) 48*16kB (UM) 47*32kB (UM) 47*64kB (ME) 16*128kB (M) 40*256kB (UM) 17*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 26968kB [ 1432.535988] lowmem_reserve[]: [ 1432.549369] (null), order=0, oom_score_adj=0 [ 1432.562122] in:imklog cpuset=/ mems_allowed=0-1 [ 1432.566905] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1432.575159] 0 0 0 0 0 [ 1432.577740] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1432.594938] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1432.603611] CPU: 1 PID: 10790 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1432.619564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1432.628921] Call Trace: [ 1432.631583] dump_stack+0x1b2/0x281 [ 1432.634893] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1432.635221] dump_header+0x178/0x82f [ 1432.644039] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1432.647758] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1432.647768] ? ___ratelimit+0x2cd/0x530 [ 1432.647778] oom_kill_process.cold+0x10/0xa40 [ 1432.647796] out_of_memory+0xe3e/0x1190 [ 1432.647809] ? oom_killer_disable+0x1c0/0x1c0 [ 1432.674909] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1432.678818] ? mutex_trylock+0x152/0x1a0 [ 1432.691468] __alloc_pages_nodemask+0x23e1/0x2720 [ 1432.696353] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1432.701243] alloc_pages_current+0x155/0x260 [ 1432.704884] 21309 total pagecache pages [ 1432.705836] filemap_fault+0x11a1/0x1ad0 [ 1432.709796] 0 pages in swap cache [ 1432.713884] ext4_filemap_fault+0x84/0xb0 [ 1432.721462] __do_fault+0xfa/0x380 [ 1432.724884] Swap cache stats: add 0, delete 0, find 0/0 [ 1432.724998] __handle_mm_fault+0x2497/0x4620 [ 1432.730442] Free swap = 0kB [ 1432.734851] ? vm_insert_page+0x7c0/0x7c0 [ 1432.734862] ? lock_downgrade+0x740/0x740 [ 1432.734874] ? mark_held_locks+0xa6/0xf0 [ 1432.734884] handle_mm_fault+0x455/0x9c0 [ 1432.734897] __do_page_fault+0x549/0xad0 [ 1432.754875] Total swap = 0kB [ 1432.758521] ? spurious_fault+0x640/0x640 [ 1432.761560] 2097051 pages RAM [ 1432.765699] ? do_page_fault+0x60/0x500 [ 1432.765708] ? page_fault+0x2f/0x50 [ 1432.765715] page_fault+0x45/0x50 [ 1432.765723] RIP: ffffffff:0x1f9f [ 1432.765727] RSP: 6e01378b:0000000000000000 EFLAGS: 7fdafc651308 [ 1432.766994] syz-executor.2 cpuset= [ 1432.789514] 0 pages HighMem/MovableOnly [ 1432.805013] lowmem_reserve[]: 0 0 0 0 0 [ 1432.809029] Node 1 Normal free:26828kB min:53696kB low:67120kB high:80544kB active_anon:1060kB inactive_anon:28064kB active_file:396kB inactive_file:0kB unevictable:0kB writepending:72kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:368kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1432.823617] 363849 pages reserved [ 1432.839222] / mems_allowed=0-1 [ 1432.846038] CPU: 1 PID: 10811 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1432.853927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1432.863315] Call Trace: [ 1432.864900] 0 pages cma reserved [ 1432.866022] dump_stack+0x1b2/0x281 [ 1432.872991] warn_alloc.cold+0x96/0x1cc [ 1432.876969] ? zone_watermark_ok_safe+0x220/0x220 [ 1432.881824] __alloc_pages_nodemask+0x2127/0x2720 [ 1432.886678] ? lock_acquire+0x170/0x3f0 [ 1432.890740] ? lock_acquire+0x170/0x3f0 [ 1432.894980] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1432.899834] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1432.905293] ? __mutex_unlock_slowpath+0x75/0x770 [ 1432.910151] alloc_pages_current+0x155/0x260 [ 1432.914564] ion_page_pool_alloc+0x118/0x1b0 [ 1432.918984] ion_system_heap_allocate+0x133/0x8c0 [ 1432.923837] ? _raw_spin_unlock+0x29/0x40 [ 1432.927989] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1432.933006] ? ion_system_contig_heap_create+0x130/0x130 [ 1432.938457] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1432.943473] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1432.948313] ion_alloc+0x27a/0x810 [ 1432.951854] ? ion_dma_buf_release+0x40/0x40 [ 1432.956526] ? __might_fault+0x177/0x1b0 [ 1432.960584] ion_ioctl+0xea/0x1f0 [ 1432.964030] ? ion_query_heaps+0x360/0x360 [ 1432.968264] ? ion_query_heaps+0x360/0x360 [ 1432.972504] do_vfs_ioctl+0x75a/0xff0 [ 1432.976302] ? ioctl_preallocate+0x1a0/0x1a0 [ 1432.980703] ? lock_downgrade+0x740/0x740 [ 1432.984897] ? __fget+0x225/0x360 [ 1432.988389] ? do_vfs_ioctl+0xff0/0xff0 [ 1432.992361] ? security_file_ioctl+0x83/0xb0 [ 1432.996767] SyS_ioctl+0x7f/0xb0 [ 1433.000128] ? do_vfs_ioctl+0xff0/0xff0 [ 1433.004127] do_syscall_64+0x1d5/0x640 [ 1433.008022] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1433.013210] RIP: 0033:0x4665d9 [ 1433.016394] RSP: 002b:00007f7ec8572188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1433.024114] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1433.031411] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1433.038678] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1433.045945] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1433.053209] R13: 00007fff53496b8f R14: 00007f7ec8572300 R15: 0000000000022000 [ 1433.074900] lowmem_reserve[]: 0 0 0 0 0 [ 1433.078924] Node 0 DMA: 1*4kB (E) 0*8kB 1*16kB (E) 2*32kB (UE) 10*64kB (UE) 4*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10964kB [ 1433.114915] Node 0 DMA32: 175*4kB (ME) 272*8kB (UME) 175*16kB (ME) 28*32kB (UME) 1893*64kB (UE) 459*128kB (U) 60*256kB (U) 25*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 216684kB [ 1433.175011] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1433.268205] Mem-Info: [ 1433.270648] active_anon:12910 inactive_anon:20950 isolated_anon:0 [ 1433.270648] active_file:11 inactive_file:12 isolated_file:0 [ 1433.270648] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1433.270648] slab_reclaimable:13229 slab_unreclaimable:117930 [ 1433.270648] mapped:52613 shmem:21265 pagetables:835 bounce:0 [ 1433.270648] free:184774 free_pcp:680 free_cma:0 [ 1433.274904] Node 1 Normal: 970*4kB (UME) 944*8kB (UME) 922*16kB (UM) 914*32kB (UM) 3519*64kB (UME) 348*128kB (UM) 92*256kB (UM) 52*512kB (UM) 192*1024kB (U) 32*2048kB (U) 1*4096kB (U) = 641608kB [ 1433.394079] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1433.414914] Node 0 active_anon:50580kB inactive_anon:55736kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158120kB dirty:0kB writeback:0kB shmem:56868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1433.454912] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1433.475699] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1433.484560] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1433.544983] 21288 total pagecache pages [ 1433.584928] 0 pages in swap cache [ 1433.588504] Swap cache stats: add 0, delete 0, find 0/0 [ 1433.593872] Free swap = 0kB [ 1433.597049] Total swap = 0kB [ 1433.601469] 2097051 pages RAM [ 1433.604568] 0 pages HighMem/MovableOnly [ 1433.609251] 363849 pages reserved [ 1433.612813] 0 pages cma reserved [ 1433.654918] Node 1 active_anon:1060kB inactive_anon:28064kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52332kB dirty:0kB writeback:0kB shmem:28192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1433.715733] Mem-Info: [ 1433.736083] active_anon:12910 inactive_anon:20950 isolated_anon:0 [ 1433.736083] active_file:11 inactive_file:62 isolated_file:0 [ 1433.736083] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1433.736083] slab_reclaimable:13229 slab_unreclaimable:117930 [ 1433.736083] mapped:52638 shmem:21265 pagetables:835 bounce:0 [ 1433.736083] free:323952 free_pcp:667 free_cma:0 [ 1433.748047] Node 0 DMA free:11188kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1433.895084] Node 0 active_anon:50580kB inactive_anon:55736kB active_file:756kB inactive_file:4536kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:161920kB dirty:0kB writeback:0kB shmem:56868kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1433.954381] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1433.965881] Node 0 DMA32 free:240920kB min:36200kB low:45248kB high:54296kB active_anon:50780kB inactive_anon:55736kB active_file:956kB inactive_file:5336kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:3120kB bounce:0kB free_pcp:528kB local_pcp:120kB free_cma:0kB [ 1433.984911] Node 1 active_anon:1060kB inactive_anon:28064kB active_file:36kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52332kB dirty:0kB writeback:0kB shmem:28192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1434.089039] Node 0 DMA free:11196kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1434.114885] lowmem_reserve[]: 0 0 0 0 0 [ 1434.119870] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1434.145831] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1434.180278] Node 0 DMA32 free:185480kB min:36200kB low:45248kB high:54296kB active_anon:50788kB inactive_anon:55744kB active_file:2780kB inactive_file:4924kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:3060kB bounce:0kB free_pcp:976kB local_pcp:272kB free_cma:0kB [ 1434.221650] lowmem_reserve[]: 0 0 0 0 0 [ 1434.225716] Node 1 Normal free:947696kB min:53696kB low:67120kB high:80544kB active_anon:960kB inactive_anon:28064kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:368kB bounce:0kB free_pcp:1280kB local_pcp:660kB free_cma:0kB [ 1434.272339] lowmem_reserve[]: 0 0 0 0 0 [ 1434.283081] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1434.300502] IPVS: ftp: loaded support on port[0] = 21 [ 1434.323603] lowmem_reserve[]: 0 0 0 0 0 [ 1434.327718] Node 0 DMA: 3*4kB (UE) 5*8kB (U) 1*16kB (E) 3*32kB (UE) 13*64kB (UE) 4*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11236kB [ 1434.349681] lowmem_reserve[]: 0 0 0 0 0 [ 1434.354236] Node 1 Normal free:947696kB min:53696kB low:67120kB high:80544kB active_anon:960kB inactive_anon:28064kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:368kB bounce:0kB free_pcp:1280kB local_pcp:620kB free_cma:0kB [ 1434.355813] Node 0 DMA32: 121*4kB (UE) [ 1434.386897] lowmem_reserve[]: 0 0 0 0 0 [ 1434.397329] Node 0 DMA: 3*4kB (UE) 5*8kB (U) 1*16kB (E) 3*32kB (UE) 13*64kB (UE) 4*128kB (UE) 2*256kB (UE) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11236kB [ 1434.414402] Node 0 DMA32: 121*4kB (UE) 183*8kB (UE) 154*16kB (UME) 17*32kB (UME) 903*64kB (UE) 582*128kB (UM) 67*256kB (UM) 25*512kB (U) 12*1024kB (U) 0*2048kB 0*4096kB = 179484kB [ 1434.424953] 183*8kB (UE) 153*16kB (UE) 18*32kB (UME) 909*64kB (UE) 582*128kB (UM) 67*256kB (UM) 26*512kB (UM) 12*1024kB (U) 0*2048kB 0*4096kB = 180396kB [ 1434.433925] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1434.457874] Node 1 Normal: 1552*4kB (UME) 1695*8kB (UME) 1632*16kB (UM) 1629*32kB (UM) 4975*64kB (UME) 752*128kB (UM) 202*256kB (UM) 91*512kB (UM) 225*1024kB (UM) 44*2048kB (U) 4*4096kB (U) = 947864kB [ 1434.471701] Node 0 [ 1434.477632] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1434.485445] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB [ 1434.489797] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1434.494152] 0*4096kB [ 1434.500578] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1434.516323] = 0kB [ 1434.520333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1434.521558] Node 1 [ 1434.530901] 23893 total pagecache pages 00:41:13 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1, 0xffffffffffffffff}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2) [ 1434.535446] Normal: 1552*4kB (UME) 1695*8kB (UME) 1632*16kB (UM) 1629*32kB (UM) 4975*64kB (UME) 752*128kB (UM) 202*256kB [ 1434.538621] 0 pages in swap cache [ 1434.550394] Swap cache stats: add 0, delete 0, find 0/0 [ 1434.560293] Free swap = 0kB [ 1434.563609] Total swap = 0kB [ 1434.568028] 2097051 pages RAM [ 1434.571527] 0 pages HighMem/MovableOnly [ 1434.578814] 363849 pages reserved [ 1434.582885] (UM) 91*512kB (UM) 225*1024kB (UM) 44*2048kB (U) 4*4096kB (U) = 947864kB [ 1434.583109] 0 pages cma reserved [ 1434.604562] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1434.630321] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1434.657481] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1434.689842] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1434.708290] chnl_net:caif_netlink_parms(): no params data found [ 1434.716384] 24300 total pagecache pages [ 1434.720404] 0 pages in swap cache [ 1434.723857] Swap cache stats: add 0, delete 0, find 0/0 [ 1434.743894] Free swap = 0kB [ 1434.753366] Total swap = 0kB [ 1434.762226] 2097051 pages RAM [ 1434.769792] 0 pages HighMem/MovableOnly [ 1434.780178] 363849 pages reserved [ 1434.784337] 0 pages cma reserved [ 1434.791490] Out of memory (oom_kill_allocating_task): Kill process 10790 (in:imklog) score 0 or sacrifice child 00:41:14 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) 00:41:14 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) 00:41:14 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) socket$can_bcm(0x1d, 0x2, 0x2) [ 1434.804024] Killed process 10788 (rsyslogd) total-vm:254332kB, anon-rss:824kB, file-rss:0kB, shmem-rss:0kB [ 1434.818875] oom_reaper: reaped process 10788 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1435.221982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.260452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.268118] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1435.303379] device bridge_slave_0 entered promiscuous mode [ 1435.326604] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1435.350433] CPU: 1 PID: 10987 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1435.358345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1435.367727] Call Trace: [ 1435.370318] dump_stack+0x1b2/0x281 [ 1435.373944] warn_alloc.cold+0x96/0x1cc [ 1435.377919] ? zone_watermark_ok_safe+0x220/0x220 [ 1435.382777] __alloc_pages_nodemask+0x2127/0x2720 [ 1435.387623] ? lock_acquire+0x170/0x3f0 [ 1435.391601] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1435.396447] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1435.401906] ? __mutex_unlock_slowpath+0x75/0x770 [ 1435.406787] alloc_pages_current+0x155/0x260 [ 1435.411719] ion_page_pool_alloc+0x118/0x1b0 [ 1435.416208] ion_system_heap_allocate+0x133/0x8c0 [ 1435.421045] ? ion_alloc+0x187/0x810 [ 1435.424768] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1435.430217] ? ion_system_contig_heap_create+0x130/0x130 [ 1435.435664] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1435.440678] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1435.445522] ion_alloc+0x204/0x810 [ 1435.449071] ? ion_dma_buf_release+0x40/0x40 [ 1435.453480] ? __might_fault+0x177/0x1b0 [ 1435.457542] ion_ioctl+0xea/0x1f0 [ 1435.460988] ? ion_query_heaps+0x360/0x360 [ 1435.465217] ? ion_query_heaps+0x360/0x360 [ 1435.469447] do_vfs_ioctl+0x75a/0xff0 [ 1435.473255] ? ioctl_preallocate+0x1a0/0x1a0 [ 1435.477764] ? lock_downgrade+0x740/0x740 [ 1435.481933] ? __fget+0x225/0x360 [ 1435.485386] ? do_vfs_ioctl+0xff0/0xff0 [ 1435.489369] ? security_file_ioctl+0x83/0xb0 [ 1435.493778] SyS_ioctl+0x7f/0xb0 [ 1435.497140] ? do_vfs_ioctl+0xff0/0xff0 [ 1435.501113] do_syscall_64+0x1d5/0x640 [ 1435.505011] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1435.510244] RIP: 0033:0x4665d9 [ 1435.513443] RSP: 002b:00007f696b00b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1435.521161] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1435.528432] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1435.535700] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1435.542987] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1435.550606] R13: 00007ffd618ef30f R14: 00007f696b00b300 R15: 0000000000022000 [ 1435.627160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.669453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.721540] device bridge_slave_1 entered promiscuous mode [ 1435.738537] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1435.818874] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1435.838477] CPU: 1 PID: 10942 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1435.846389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1435.855740] Call Trace: [ 1435.858337] dump_stack+0x1b2/0x281 [ 1435.861967] warn_alloc.cold+0x96/0x1cc [ 1435.865937] ? zone_watermark_ok_safe+0x220/0x220 [ 1435.870787] __alloc_pages_nodemask+0x2127/0x2720 [ 1435.876364] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1435.881391] ? lock_acquire+0x170/0x3f0 [ 1435.885365] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1435.890214] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1435.895860] ? __mutex_unlock_slowpath+0x75/0x770 [ 1435.900713] alloc_pages_current+0x155/0x260 [ 1435.905190] ion_page_pool_alloc+0x118/0x1b0 [ 1435.909593] ion_system_heap_allocate+0x133/0x8c0 [ 1435.914442] ? ion_alloc+0x187/0x810 [ 1435.918617] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1435.924068] ? ion_system_contig_heap_create+0x130/0x130 [ 1435.929787] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1435.934798] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1435.940163] ion_alloc+0x204/0x810 [ 1435.943698] ? ion_dma_buf_release+0x40/0x40 [ 1435.948106] ? __might_fault+0x177/0x1b0 [ 1435.952174] ion_ioctl+0xea/0x1f0 [ 1435.955632] ? ion_query_heaps+0x360/0x360 [ 1435.959871] ? ion_query_heaps+0x360/0x360 [ 1435.964120] do_vfs_ioctl+0x75a/0xff0 [ 1435.967918] ? ioctl_preallocate+0x1a0/0x1a0 [ 1435.972437] ? lock_downgrade+0x740/0x740 [ 1435.976582] ? __fget+0x225/0x360 [ 1435.980029] ? do_vfs_ioctl+0xff0/0xff0 [ 1435.983995] ? security_file_ioctl+0x83/0xb0 [ 1435.988414] SyS_ioctl+0x7f/0xb0 [ 1435.991870] ? do_vfs_ioctl+0xff0/0xff0 [ 1435.995842] do_syscall_64+0x1d5/0x640 [ 1435.999733] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1436.005355] RIP: 0033:0x4665d9 [ 1436.008535] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1436.016236] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1436.023507] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1436.030770] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1436.038140] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1436.045402] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1436.061058] Bluetooth: hci0 command 0x0409 tx timeout [ 1436.177780] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1436.223689] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1436.363500] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1436.394929] Mem-Info: [ 1436.397422] active_anon:12828 inactive_anon:20953 isolated_anon:0 [ 1436.397422] active_file:401 inactive_file:793 isolated_file:5 [ 1436.397422] unevictable:0 dirty:10 writeback:0 unstable:0 [ 1436.397422] slab_reclaimable:13290 slab_unreclaimable:119997 [ 1436.397422] mapped:53387 shmem:21269 pagetables:816 bounce:0 [ 1436.397422] free:30568 free_pcp:279 free_cma:0 [ 1436.401984] team0: Port device team_slave_0 added [ 1436.524916] Node 0 active_anon:49820kB inactive_anon:55748kB active_file:2068kB inactive_file:1908kB unevictable:0kB isolated(anon):0kB isolated(file):20kB mapped:161516kB dirty:40kB writeback:0kB shmem:56884kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1436.594557] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1436.644977] Node 1 active_anon:1492kB inactive_anon:28064kB active_file:252kB inactive_file:740kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:53032kB dirty:0kB writeback:0kB shmem:28192kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1436.673446] team0: Port device team_slave_1 added [ 1436.709735] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1436.740785] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1436.746111] Node 0 DMA32 free:18040kB min:36200kB low:45248kB high:54296kB active_anon:49720kB inactive_anon:55748kB active_file:824kB inactive_file:700kB unevictable:0kB writepending:40kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2540kB bounce:0kB free_pcp:360kB local_pcp:0kB free_cma:0kB [ 1436.920527] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1436.941212] lowmem_reserve[]: 0 0 0 0 0 [ 1436.959032] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1436.995246] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1437.007811] CPU: 0 PID: 10989 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1437.015736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1437.025354] Call Trace: [ 1437.029172] dump_stack+0x1b2/0x281 [ 1437.032808] warn_alloc.cold+0x96/0x1cc [ 1437.036801] ? zone_watermark_ok_safe+0x220/0x220 [ 1437.041664] __alloc_pages_nodemask+0x2127/0x2720 [ 1437.046529] ? __schedule+0x893/0x1de0 [ 1437.050437] ? lock_acquire+0x170/0x3f0 [ 1437.057114] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1437.061969] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1437.067430] ? __mutex_unlock_slowpath+0x75/0x770 [ 1437.072300] alloc_pages_current+0x155/0x260 [ 1437.076724] ion_page_pool_alloc+0x118/0x1b0 [ 1437.081139] ion_system_heap_allocate+0x133/0x8c0 [ 1437.086254] ? ion_alloc+0x187/0x810 [ 1437.089977] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1437.095435] ? ion_system_contig_heap_create+0x130/0x130 [ 1437.100896] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1437.105923] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1437.110775] ion_alloc+0x204/0x810 [ 1437.114344] ? ion_dma_buf_release+0x40/0x40 [ 1437.118756] ? __might_fault+0x177/0x1b0 [ 1437.122855] ion_ioctl+0xea/0x1f0 [ 1437.126322] ? ion_query_heaps+0x360/0x360 [ 1437.130574] ? ion_query_heaps+0x360/0x360 [ 1437.135011] do_vfs_ioctl+0x75a/0xff0 [ 1437.138816] ? ioctl_preallocate+0x1a0/0x1a0 [ 1437.143225] ? lock_downgrade+0x740/0x740 [ 1437.147380] ? __fget+0x225/0x360 [ 1437.150853] ? do_vfs_ioctl+0xff0/0xff0 [ 1437.154831] ? security_file_ioctl+0x83/0xb0 [ 1437.159333] SyS_ioctl+0x7f/0xb0 [ 1437.162695] ? do_vfs_ioctl+0xff0/0xff0 [ 1437.166668] do_syscall_64+0x1d5/0x640 [ 1437.170571] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1437.175756] RIP: 0033:0x4665d9 [ 1437.178937] RSP: 002b:00007f2e9a53f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1437.186729] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1437.194345] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1437.202134] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1437.209414] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1437.216765] R13: 00007ffe42256d6f R14: 00007f2e9a53f300 R15: 0000000000022000 [ 1437.329351] lowmem_reserve[]: 0 0 0 0 0 [ 1437.347265] Node 1 Normal free:146792kB min:53696kB low:67120kB high:80544kB active_anon:1560kB inactive_anon:28064kB active_file:1364kB inactive_file:3668kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:736kB bounce:0kB free_pcp:896kB local_pcp:180kB free_cma:0kB [ 1437.400982] lowmem_reserve[]: 0 0 0 0 0 [ 1437.406555] Node 0 DMA: 39*4kB (UE) 1*8kB (U) 1*16kB (E) 2*32kB (UE) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11060kB [ 1437.470832] Node 0 DMA32: 74*4kB (UME) 201*8kB (MEH) 993*16kB (UMEH) 573*32kB (UMEH) 4*64kB (H) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36384kB [ 1437.508664] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1437.536265] Node 1 Normal: 71*4kB (UM) 80*8kB (UME) 85*16kB (UME) 566*32kB (UME) 13*64kB (ME) 8*128kB (M) 4*256kB (UME) 1*512kB (M) 30*1024kB (UME) 0*2048kB 0*4096kB = 54508kB [ 1437.606116] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1437.645384] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1437.688736] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1437.714551] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1437.732982] 22089 total pagecache pages [ 1437.738094] 0 pages in swap cache [ 1437.757733] Swap cache stats: add 0, delete 0, find 0/0 [ 1437.772771] Free swap = 0kB [ 1437.776606] Total swap = 0kB [ 1437.785868] 2097051 pages RAM [ 1437.800535] 0 pages HighMem/MovableOnly [ 1437.806066] 363849 pages reserved [ 1437.846773] 0 pages cma reserved [ 1437.961582] warn_alloc_show_mem: 1 callbacks suppressed [ 1437.961586] Mem-Info: [ 1437.969640] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1437.981851] active_anon:12978 inactive_anon:20953 isolated_anon:0 [ 1437.981851] active_file:236 inactive_file:251 isolated_file:21 [ 1437.981851] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1437.981851] slab_reclaimable:13306 slab_unreclaimable:119988 [ 1437.981851] mapped:53116 shmem:21269 pagetables:828 bounce:0 [ 1437.981851] free:26168 free_pcp:117 free_cma:0 [ 1438.007526] syz-executor.5 cpuset= [ 1438.021509] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1438.036678] / [ 1438.057030] systemd-journal cpuset=/ mems_allowed=0-1 [ 1438.074087] CPU: 1 PID: 10854 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1438.082080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1438.083096] mems_allowed=0-1 [ 1438.091434] Call Trace: [ 1438.091457] dump_stack+0x1b2/0x281 [ 1438.091469] dump_header+0x178/0x82f [ 1438.091479] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1438.091487] ? ___ratelimit+0x2cd/0x530 [ 1438.091498] oom_kill_process.cold+0x10/0xa40 [ 1438.118055] out_of_memory+0xe3e/0x1190 [ 1438.122032] ? oom_killer_disable+0x1c0/0x1c0 [ 1438.126526] ? mutex_trylock+0x152/0x1a0 [ 1438.130591] __alloc_pages_nodemask+0x23e1/0x2720 [ 1438.135467] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1438.140321] alloc_pages_current+0x155/0x260 [ 1438.144728] filemap_fault+0x11a1/0x1ad0 [ 1438.148799] ext4_filemap_fault+0x84/0xb0 [ 1438.152940] __do_fault+0xfa/0x380 [ 1438.156490] __handle_mm_fault+0x2497/0x4620 [ 1438.160899] ? vm_insert_page+0x7c0/0x7c0 [ 1438.165042] ? __fsnotify_inode_delete+0x20/0x20 [ 1438.169811] ? __fsnotify_update_child_dentry_flags.part.0+0x2e0/0x2e0 [ 1438.176491] ? mark_held_locks+0xa6/0xf0 [ 1438.180561] handle_mm_fault+0x455/0x9c0 [ 1438.184646] __do_page_fault+0x549/0xad0 [ 1438.188725] ? spurious_fault+0x640/0x640 [ 1438.192887] ? do_page_fault+0x60/0x500 [ 1438.196870] ? page_fault+0x2f/0x50 [ 1438.200500] page_fault+0x45/0x50 [ 1438.203944] RIP: 00f9:0x7ffc75575323 [ 1438.207668] RSP: 7557522b:00007ffc75574924 EFLAGS: 00000001 [ 1438.215005] Bluetooth: hci0 command 0x041b tx timeout [ 1438.223686] Node 0 active_anon:50232kB inactive_anon:55744kB active_file:816kB inactive_file:816kB unevictable:0kB isolated(anon):0kB isolated(file):108kB mapped:159712kB dirty:20kB writeback:0kB shmem:56880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1438.254889] CPU: 0 PID: 10985 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1438.262780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1438.272147] Call Trace: [ 1438.274740] dump_stack+0x1b2/0x281 [ 1438.278370] warn_alloc.cold+0x96/0x1cc [ 1438.282344] ? zone_watermark_ok_safe+0x220/0x220 [ 1438.287198] __alloc_pages_nodemask+0x2127/0x2720 [ 1438.292044] ? lock_acquire+0x170/0x3f0 [ 1438.296047] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1438.298775] Node 1 active_anon:1856kB inactive_anon:28068kB active_file:36kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52340kB dirty:0kB writeback:0kB shmem:28196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1438.300890] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1438.333408] ? __mutex_unlock_slowpath+0x75/0x770 [ 1438.338258] ? alloc_pages_current+0x123/0x260 [ 1438.342836] alloc_pages_current+0x155/0x260 [ 1438.347247] ion_page_pool_alloc+0x118/0x1b0 [ 1438.351651] ion_system_heap_allocate+0x133/0x8c0 [ 1438.356495] ? ion_alloc+0x187/0x810 [ 1438.360206] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1438.365739] ? ion_system_contig_heap_create+0x130/0x130 [ 1438.371182] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1438.374894] Node 0 [ 1438.376194] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1438.376212] DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1438.376217] lowmem_reserve[]: [ 1438.378442] ion_alloc+0x204/0x810 [ 1438.383270] 0 [ 1438.408812] ? ion_dma_buf_release+0x40/0x40 [ 1438.408825] ? __might_fault+0x177/0x1b0 [ 1438.408835] ion_ioctl+0xea/0x1f0 [ 1438.408844] ? ion_query_heaps+0x360/0x360 [ 1438.408854] ? ion_query_heaps+0x360/0x360 [ 1438.408864] do_vfs_ioctl+0x75a/0xff0 [ 1438.408874] ? ioctl_preallocate+0x1a0/0x1a0 [ 1438.408884] ? lock_downgrade+0x740/0x740 [ 1438.408897] ? __fget+0x225/0x360 [ 1438.408906] ? do_vfs_ioctl+0xff0/0xff0 [ 1438.408917] ? security_file_ioctl+0x83/0xb0 [ 1438.408927] SyS_ioctl+0x7f/0xb0 [ 1438.408933] ? do_vfs_ioctl+0xff0/0xff0 [ 1438.408944] do_syscall_64+0x1d5/0x640 [ 1438.408957] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1438.408965] RIP: 0033:0x4665d9 [ 1438.408970] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1438.468076] 2717 [ 1438.469080] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1438.472953] 2718 [ 1438.478123] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1438.478128] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1438.478133] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1438.478138] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1438.604949] Mem-Info: [ 1438.607403] active_anon:13022 inactive_anon:20953 isolated_anon:0 [ 1438.607403] active_file:172 inactive_file:142 isolated_file:0 [ 1438.607403] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1438.607403] slab_reclaimable:13320 slab_unreclaimable:120027 [ 1438.607403] mapped:52963 shmem:21269 pagetables:834 bounce:0 [ 1438.607403] free:44040 free_pcp:297 free_cma:0 [ 1438.694896] 2718 2718 [ 1438.697449] Node 0 DMA32 free:44756kB min:36200kB low:45248kB high:54296kB active_anon:50232kB inactive_anon:55744kB active_file:952kB inactive_file:416kB unevictable:0kB writepending:20kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2572kB bounce:0kB free_pcp:1064kB local_pcp:680kB free_cma:0kB [ 1438.754910] Node 0 active_anon:50232kB inactive_anon:55744kB active_file:652kB inactive_file:624kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159512kB dirty:20kB writeback:0kB shmem:56880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1438.822505] lowmem_reserve[]: 0 0 0 0 0 [ 1438.835243] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1438.875054] Node 1 active_anon:1856kB inactive_anon:28068kB active_file:36kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52340kB dirty:0kB writeback:0kB shmem:28196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1438.916539] lowmem_reserve[]: 0 0 0 0 0 [ 1438.933457] Node 1 Normal free:45680kB min:53696kB low:67120kB high:80544kB active_anon:1856kB inactive_anon:28068kB active_file:36kB inactive_file:44kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:760kB bounce:0kB free_pcp:92kB local_pcp:0kB free_cma:0kB [ 1438.958485] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1438.971407] lowmem_reserve[]: 0 0 0 0 0 [ 1439.003413] Node 0 DMA: 6*4kB (UE) 2*8kB (U) 2*16kB (UE) 2*32kB (UE) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10952kB [ 1439.025322] Node 0 DMA32: 221*4kB (MEH) 272*8kB (UMEH) 187*16kB (MEH) 28*32kB (MEH) 126*64kB (UMH) 14*128kB (U) 1*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18084kB [ 1439.054519] Mem-Info: [ 1439.057070] active_anon:13024 inactive_anon:20953 isolated_anon:0 [ 1439.057070] active_file:12 inactive_file:12 isolated_file:0 [ 1439.057070] unevictable:0 dirty:0 writeback:17 unstable:0 [ 1439.057070] slab_reclaimable:13320 slab_unreclaimable:119937 [ 1439.057070] mapped:52686 shmem:21269 pagetables:834 bounce:0 [ 1439.057070] free:13869 free_pcp:74 free_cma:0 [ 1439.058416] lowmem_reserve[]: [ 1439.092984] Node 0 active_anon:50252kB inactive_anon:55744kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158368kB dirty:0kB writeback:0kB shmem:56880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1439.097669] Node 0 [ 1439.123681] Node 1 active_anon:1856kB inactive_anon:28068kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:52332kB dirty:0kB writeback:0kB shmem:28196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1439.123689] Node 0 [ 1439.126562] Normal: [ 1439.155926] 0 2717 2718 2718 2718 [ 1439.161864] Node 0 DMA32 free:17700kB min:36200kB low:45248kB high:54296kB active_anon:50252kB inactive_anon:55744kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2572kB bounce:0kB free_pcp:176kB local_pcp:56kB free_cma:0kB [ 1439.164666] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1439.194923] 0*4kB [ 1439.216506] lowmem_reserve[]: 0 0 0 0 0 [ 1439.222717] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1439.238486] lowmem_reserve[]: [ 1439.248656] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1439.248708] Node 1 Normal: 11*4kB (M) 13*8kB (ME) 10*16kB (ME) 9*32kB (ME) 10*64kB (UME) 6*128kB (UM) 1*256kB (E) 1*512kB (M) 23*1024kB (UME) 0*2048kB 0*4096kB = 26324kB [ 1439.248788] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1439.248794] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1439.248804] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1439.257441] 0 [ 1439.261490] lowmem_reserve[]: [ 1439.280669] 2717 [ 1439.285719] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1439.285725] 21288 total pagecache pages [ 1439.285733] 0 pages in swap cache [ 1439.285738] Swap cache stats: add 0, delete 0, find 0/0 [ 1439.285741] Free swap = 0kB [ 1439.285744] Total swap = 0kB [ 1439.285750] 2097051 pages RAM [ 1439.285753] 0 pages HighMem/MovableOnly [ 1439.285756] 363849 pages reserved [ 1439.285759] 0 pages cma reserved [ 1439.287280] 0 [ 1439.299504] 2718 [ 1439.304426] 0 [ 1439.306253] 2718 2718 [ 1439.306264] Node 0 DMA32 free:17700kB min:36200kB low:45248kB high:54296kB active_anon:50252kB inactive_anon:55744kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2572kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1439.306286] lowmem_reserve[]: 0 0 0 0 [ 1439.309889] 0 [ 1439.311448] 0 [ 1439.320343] 0 [ 1439.329344] Node 0 [ 1439.332894] 0 [ 1439.346331] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1439.353544] lowmem_reserve[]: [ 1439.355408] Node 1 Normal free:26424kB min:53696kB low:67120kB high:80544kB active_anon:1856kB inactive_anon:28068kB active_file:36kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:760kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1439.355428] lowmem_reserve[]: 0 [ 1439.357505] 0 [ 1439.359292] 0 [ 1439.361769] 0 [ 1439.390819] 0 [ 1439.415022] 0 [ 1439.433241] 0 0 [ 1439.480758] Node 0 DMA: 6*4kB (UE) 2*8kB (U) 2*16kB (UE) 2*32kB (UE) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10952kB [ 1439.489972] 0 0 [ 1439.498006] Node 1 Normal free:26424kB min:53696kB low:67120kB high:80544kB active_anon:1856kB inactive_anon:28068kB active_file:36kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:760kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1439.499876] Node 0 [ 1439.527070] lowmem_reserve[]: 0 0 0 0 0 [ 1439.531205] DMA32: [ 1439.533303] Node 0 [ 1439.533307] 235*4kB (UMEH) [ 1439.535886] DMA: [ 1439.538116] 277*8kB [ 1439.541032] 6*4kB [ 1439.543079] (UMEH) [ 1439.545446] (UE) 2*8kB (U) 2*16kB (UE) 2*32kB (UE) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10952kB [ 1439.545516] Node 0 DMA32: 235*4kB [ 1439.551964] 187*16kB [ 1439.563560] (UMEH) 277*8kB (UMEH) 187*16kB (MEH) 28*32kB (MEH) 128*64kB (UMH) 14*128kB (U) 1*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18308kB [ 1439.571144] (MEH) 28*32kB (MEH) 128*64kB (UMH) 14*128kB (U) 1*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18308kB [ 1439.598016] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1439.598923] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1439.622750] Node 1 Normal: 11*4kB (M) 14*8kB (UME) 11*16kB (UME) 10*32kB (UME) 9*64kB (ME) 5*128kB (M) 2*256kB (UE) 1*512kB (M) 23*1024kB (UME) 0*2048kB 0*4096kB = 26444kB [ 1439.625393] Node 1 [ 1439.639236] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1439.643689] Normal: 11*4kB (M) 14*8kB (UME) 11*16kB (UME) 10*32kB (UME) 9*64kB (ME) 5*128kB (M) 2*256kB (UE) 1*512kB (M) 23*1024kB (UME) 0*2048kB 0*4096kB = 26444kB [ 1439.652081] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1439.670833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1439.674895] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1439.683659] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1439.693813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1439.707693] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1439.719498] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1439.731634] 21288 total pagecache pages [ 1439.734879] 21288 total pagecache pages [ 1439.737891] 0 pages in swap cache [ 1439.739596] 0 pages in swap cache [ 1439.743029] Swap cache stats: add 0, delete 0, find 0/0 [ 1439.754883] Swap cache stats: add 0, delete 0, find 0/0 [ 1439.756389] Free swap = 0kB [ 1439.760250] Free swap = 0kB [ 1439.763256] Total swap = 0kB [ 1439.772898] 2097051 pages RAM [ 1439.773765] Total swap = 0kB [ 1439.776059] 0 pages HighMem/MovableOnly [ 1439.779082] 2097051 pages RAM [ 1439.783131] 363849 pages reserved [ 1439.786280] 0 pages HighMem/MovableOnly [ 1439.786284] 363849 pages reserved [ 1439.786287] 0 pages cma reserved [ 1439.801613] 0 pages cma reserved [ 1439.805076] Out of memory (oom_kill_allocating_task): Kill process 10854 (systemd-journal) score 0 or sacrifice child [ 1439.816382] Killed process 10854 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1800kB [ 1439.838600] oom_reaper: reaped process 10987 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1439.849360] oom_reaper: reaped process 10854 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1800kB [ 1439.864990] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1439.892132] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1439.896145] oom_reaper: reaped process 10989 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1439.897355] CPU: 0 PID: 10811 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1439.915236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1439.924604] Call Trace: [ 1439.927200] dump_stack+0x1b2/0x281 [ 1439.930843] warn_alloc.cold+0x96/0x1cc [ 1439.934823] ? zone_watermark_ok_safe+0x220/0x220 [ 1439.940112] ? usleep_range+0x130/0x130 [ 1439.944081] ? queue_work_on+0x10d/0x1d0 [ 1439.948138] ? _find_next_bit+0xdb/0x100 [ 1439.952194] ? run_timer_softirq+0x5a0/0x5a0 [ 1439.956608] __alloc_pages_nodemask+0x2127/0x2720 [ 1439.961456] ? lock_acquire+0x170/0x3f0 [ 1439.965533] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1439.970392] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1439.974918] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1439.980381] alloc_pages_current+0x155/0x260 [ 1439.985936] ion_page_pool_alloc+0x118/0x1b0 [ 1439.990343] ion_system_heap_allocate+0x133/0x8c0 [ 1439.995201] ? _raw_spin_unlock+0x29/0x40 [ 1439.999372] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1440.004301] ? ion_system_contig_heap_create+0x130/0x130 [ 1440.009849] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1440.014866] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1440.019707] ion_alloc+0x27a/0x810 [ 1440.023260] ? ion_dma_buf_release+0x40/0x40 [ 1440.027684] ? __might_fault+0x177/0x1b0 [ 1440.031744] ion_ioctl+0xea/0x1f0 [ 1440.035194] ? ion_query_heaps+0x360/0x360 [ 1440.039794] ? ion_query_heaps+0x360/0x360 [ 1440.044031] do_vfs_ioctl+0x75a/0xff0 [ 1440.047833] ? ioctl_preallocate+0x1a0/0x1a0 [ 1440.052237] ? lock_downgrade+0x740/0x740 [ 1440.056404] ? __fget+0x225/0x360 [ 1440.059855] ? do_vfs_ioctl+0xff0/0xff0 [ 1440.063825] ? security_file_ioctl+0x83/0xb0 [ 1440.068237] SyS_ioctl+0x7f/0xb0 [ 1440.071610] ? do_vfs_ioctl+0xff0/0xff0 [ 1440.075579] do_syscall_64+0x1d5/0x640 [ 1440.079463] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1440.084658] RIP: 0033:0x4665d9 [ 1440.087837] RSP: 002b:00007f7ec8572188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1440.095573] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1440.102930] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1440.110284] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1440.117550] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1440.124815] R13: 00007fff53496b8f R14: 00007f7ec8572300 R15: 0000000000022000 [ 1440.133357] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1440.157098] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1440.164905] Mem-Info: [ 1440.171380] active_anon:12860 inactive_anon:20953 isolated_anon:0 [ 1440.171380] active_file:9 inactive_file:10 isolated_file:0 [ 1440.171380] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1440.171380] slab_reclaimable:13316 slab_unreclaimable:119934 [ 1440.171380] mapped:52675 shmem:21269 pagetables:834 bounce:0 [ 1440.171380] free:13837 free_pcp:31 free_cma:0 [ 1440.177151] syz-executor.3 cpuset= [ 1440.204631] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1440.217514] / mems_allowed=0-1 [ 1440.220189] syz-executor.1 cpuset=/ [ 1440.223324] CPU: 1 PID: 10989 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1440.223332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1440.227021] mems_allowed=0-1 [ 1440.234833] Call Trace: [ 1440.234855] dump_stack+0x1b2/0x281 [ 1440.234869] warn_alloc.cold+0x96/0x1cc [ 1440.234883] ? zone_watermark_ok_safe+0x220/0x220 [ 1440.254909] Node 0 active_anon:50176kB inactive_anon:55744kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158368kB dirty:0kB writeback:0kB shmem:56880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1440.257579] ? usleep_range+0x130/0x130 [ 1440.262439] Node 1 active_anon:1264kB inactive_anon:28068kB active_file:32kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52332kB dirty:0kB writeback:0kB shmem:28196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1440.290111] ? try_to_free_pages+0x23f/0x6e0 [ 1440.290123] ? _find_next_bit+0xdb/0x100 [ 1440.290133] ? run_timer_softirq+0x5a0/0x5a0 [ 1440.290148] __alloc_pages_nodemask+0x2127/0x2720 [ 1440.290166] ? lock_acquire+0x170/0x3f0 [ 1440.290181] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1440.290194] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1440.324893] Node 0 [ 1440.326744] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1440.330792] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1440.335270] alloc_pages_current+0x155/0x260 [ 1440.335284] ion_page_pool_alloc+0x118/0x1b0 [ 1440.335294] ion_system_heap_allocate+0x133/0x8c0 [ 1440.335304] ? ion_alloc+0x187/0x810 [ 1440.354888] lowmem_reserve[]: [ 1440.355644] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1440.361091] 0 [ 1440.386687] ? ion_system_contig_heap_create+0x130/0x130 [ 1440.386698] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1440.386716] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1440.386728] ion_alloc+0x204/0x810 [ 1440.433164] ? ion_dma_buf_release+0x40/0x40 [ 1440.434892] 2717 2718 [ 1440.437582] ? __might_fault+0x177/0x1b0 [ 1440.437594] ion_ioctl+0xea/0x1f0 [ 1440.440077] 2718 [ 1440.444143] ? ion_query_heaps+0x360/0x360 [ 1440.453851] ? ion_query_heaps+0x360/0x360 [ 1440.454892] 2718 [ 1440.458106] do_vfs_ioctl+0x75a/0xff0 [ 1440.458118] ? ioctl_preallocate+0x1a0/0x1a0 [ 1440.460167] Node 0 [ 1440.463960] ? lock_downgrade+0x740/0x740 [ 1440.474723] ? __fget+0x225/0x360 [ 1440.478187] ? do_vfs_ioctl+0xff0/0xff0 [ 1440.482158] ? security_file_ioctl+0x83/0xb0 [ 1440.484900] DMA32 free:17980kB min:36200kB low:45248kB high:54296kB active_anon:50176kB inactive_anon:55744kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2572kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 1440.486838] SyS_ioctl+0x7f/0xb0 [ 1440.518430] ? do_vfs_ioctl+0xff0/0xff0 [ 1440.522843] do_syscall_64+0x1d5/0x640 [ 1440.526740] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1440.531932] RIP: 0033:0x4665d9 [ 1440.535578] RSP: 002b:00007f2e9a53f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1440.543319] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1440.544913] lowmem_reserve[]: [ 1440.550713] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1440.550724] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1440.553860] 0 [ 1440.561117] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1440.561123] R13: 00007ffe42256d6f R14: 00007f2e9a53f300 R15: 0000000000022000 [ 1440.577466] in:imklog cpuset= [ 1440.577792] Bluetooth: hci0 command 0x040f tx timeout [ 1440.599809] CPU: 0 PID: 10987 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1440.600090] / [ 1440.607721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1440.607730] Call Trace: [ 1440.611717] mems_allowed=0-1 [ 1440.618810] dump_stack+0x1b2/0x281 [ 1440.618824] warn_alloc.cold+0x96/0x1cc [ 1440.618836] ? zone_watermark_ok_safe+0x220/0x220 [ 1440.618845] ? usleep_range+0x130/0x130 [ 1440.618854] ? try_to_free_pages+0x23f/0x6e0 [ 1440.618863] ? _find_next_bit+0xdb/0x100 [ 1440.618874] ? run_timer_softirq+0x5a0/0x5a0 [ 1440.618889] __alloc_pages_nodemask+0x2127/0x2720 [ 1440.618905] ? lock_acquire+0x170/0x3f0 [ 1440.618920] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1440.667605] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1440.672111] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1440.677566] ? retint_kernel+0x2d/0x2d [ 1440.681453] alloc_pages_current+0x155/0x260 [ 1440.685863] ion_page_pool_alloc+0x118/0x1b0 [ 1440.690292] ion_system_heap_allocate+0x133/0x8c0 [ 1440.695140] ? ion_alloc+0x187/0x810 [ 1440.698858] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1440.704305] ? ion_system_contig_heap_create+0x130/0x130 [ 1440.709753] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1440.714797] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1440.719645] ion_alloc+0x204/0x810 [ 1440.723182] ? ion_dma_buf_release+0x40/0x40 [ 1440.727706] ? __might_fault+0x177/0x1b0 [ 1440.731772] ion_ioctl+0xea/0x1f0 [ 1440.735230] ? ion_query_heaps+0x360/0x360 [ 1440.739463] ? ion_query_heaps+0x360/0x360 [ 1440.743711] do_vfs_ioctl+0x75a/0xff0 [ 1440.747514] ? ioctl_preallocate+0x1a0/0x1a0 [ 1440.752022] ? lock_downgrade+0x740/0x740 [ 1440.756173] ? __fget+0x225/0x360 [ 1440.759645] ? do_vfs_ioctl+0xff0/0xff0 [ 1440.763613] ? security_file_ioctl+0x83/0xb0 [ 1440.768020] SyS_ioctl+0x7f/0xb0 [ 1440.771404] ? do_vfs_ioctl+0xff0/0xff0 [ 1440.775383] do_syscall_64+0x1d5/0x640 [ 1440.779290] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1440.784488] RIP: 0033:0x4665d9 [ 1440.787669] RSP: 002b:00007f696b00b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1440.795377] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1440.802752] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1440.810033] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1440.817302] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1440.824584] R13: 00007ffd618ef30f R14: 00007f696b00b300 R15: 0000000000022000 [ 1440.833784] CPU: 1 PID: 11025 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 1440.840273] 0 [ 1440.841243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1440.841245] 0 0 [ 1440.843049] Call Trace: [ 1440.852466] 0 [ 1440.854398] dump_stack+0x1b2/0x281 [ 1440.858758] dump_header+0x178/0x82f [ 1440.862355] Node 0 [ 1440.866054] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1440.866063] ? ___ratelimit+0x2cd/0x530 [ 1440.866074] oom_kill_process.cold+0x10/0xa40 [ 1440.866092] out_of_memory+0xe3e/0x1190 [ 1440.868319] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1440.873401] ? oom_killer_disable+0x1c0/0x1c0 [ 1440.877400] lowmem_reserve[]: [ 1440.881845] ? mutex_trylock+0x152/0x1a0 [ 1440.885834] 0 [ 1440.910692] __alloc_pages_nodemask+0x23e1/0x2720 [ 1440.910713] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1440.910735] alloc_pages_current+0x155/0x260 [ 1440.915259] 0 [ 1440.918359] filemap_fault+0x11a1/0x1ad0 [ 1440.922386] 0 [ 1440.924200] ext4_filemap_fault+0x84/0xb0 [ 1440.929161] 0 [ 1440.934069] __do_fault+0xfa/0x380 [ 1440.938603] 0 [ 1440.940357] __handle_mm_fault+0x2497/0x4620 [ 1440.946313] ? vm_insert_page+0x7c0/0x7c0 [ 1440.946324] ? lock_downgrade+0x740/0x740 [ 1440.946336] ? mark_held_locks+0xa6/0xf0 [ 1440.946347] handle_mm_fault+0x455/0x9c0 [ 1440.946359] __do_page_fault+0x549/0xad0 [ 1440.950600] Node 1 [ 1440.952406] ? spurious_fault+0x640/0x640 [ 1440.955996] Normal free:26416kB min:53696kB low:67120kB high:80544kB active_anon:1264kB inactive_anon:28068kB active_file:32kB inactive_file:36kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:760kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1440.957725] ? do_page_fault+0x60/0x500 [ 1440.962105] lowmem_reserve[]: [ 1440.966240] ? page_fault+0x2f/0x50 [ 1440.966247] page_fault+0x45/0x50 [ 1440.966255] RIP: d844ada3:0x1f9f [ 1440.966259] RSP: d844a4b8:0000000000000004 EFLAGS: 7f19d844ada0 [ 1440.977538] Mem-Info: [ 1440.985059] 0 [ 1441.000149] active_anon:12860 inactive_anon:20953 isolated_anon:0 [ 1441.000149] active_file:7 inactive_file:13 isolated_file:0 [ 1441.000149] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1441.000149] slab_reclaimable:13316 slab_unreclaimable:119934 [ 1441.000149] mapped:52675 shmem:21269 pagetables:834 bounce:0 [ 1441.000149] free:13872 free_pcp:38 free_cma:0 [ 1441.024928] 0 [ 1441.036304] Node 0 active_anon:50176kB inactive_anon:55744kB active_file:0kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158368kB dirty:0kB writeback:0kB shmem:56880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1441.042679] 0 [ 1441.053152] Node 1 active_anon:1264kB inactive_anon:28068kB active_file:28kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52332kB dirty:0kB writeback:0kB shmem:28196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1441.104904] 0 [ 1441.186358] warn_alloc_show_mem: 1 callbacks suppressed [ 1441.186362] Mem-Info: [ 1441.190662] 0 [ 1441.208896] active_anon:12860 inactive_anon:20953 isolated_anon:0 [ 1441.208896] active_file:11 inactive_file:1083 isolated_file:0 [ 1441.208896] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1441.208896] slab_reclaimable:13316 slab_unreclaimable:119986 [ 1441.208896] mapped:53450 shmem:21269 pagetables:834 bounce:0 [ 1441.208896] free:59184 free_pcp:527 free_cma:0 [ 1441.210059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1441.210767] Node 0 active_anon:50176kB inactive_anon:55744kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158368kB dirty:0kB writeback:0kB shmem:56880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1441.304976] Node 0 DMA: 6*4kB (UE) 2*8kB (U) 2*16kB (UE) 2*32kB (UE) 1*64kB [ 1441.305033] Node 0 [ 1441.305035] (E) 2*128kB [ 1441.312257] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1441.314478] (UE) [ 1441.343572] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1441.363205] Node 0 DMA32 free:24864kB min:36200kB low:45248kB high:54296kB active_anon:50176kB inactive_anon:55744kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2572kB bounce:0kB free_pcp:1400kB local_pcp:740kB free_cma:0kB [ 1441.365399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.447252] 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10952kB [ 1441.456350] Node 0 DMA32: 324*4kB (UMEH) 316*8kB (UMEH) 233*16kB (UMEH) 67*32kB (UMEH) 52*64kB (UMH) 41*128kB (U) 1*256kB (U) 2*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 19552kB [ 1441.463778] lowmem_reserve[]: [ 1441.482622] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1441.496684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.503367] 0 [ 1441.506679] Node 1 Normal: 134*4kB (UM) 35*8kB (UME) 28*16kB (UM) 23*32kB (UME) [ 1441.508512] 0 [ 1441.508520] 15*64kB (M) 6*128kB (UM) 33*256kB (UM) 31*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 28048kB [ 1441.532359] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1441.544149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1441.544173] Node 1 active_anon:1264kB inactive_anon:28068kB active_file:56kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:52432kB dirty:0kB writeback:0kB shmem:28196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1441.552829] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1441.589080] 0 0 0 [ 1441.591356] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1441.592526] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1441.621084] lowmem_reserve[]: 0 0 0 0 0 [ 1441.628578] syz-executor.1: page allocation failure: order:4 [ 1441.629846] Node 1 Normal free:26648kB min:53696kB low:67120kB high:80544kB active_anon:1264kB inactive_anon:28068kB active_file:204kB inactive_file:224kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:760kB bounce:0kB free_pcp:884kB local_pcp:672kB free_cma:0kB [ 1441.654920] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1441.670811] 21323 total pagecache pages [ 1441.678973] Node 0 DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1441.684986] (null) [ 1441.716135] 0 pages in swap cache [ 1441.719645] Swap cache stats: add 0, delete 0, find 0/0 [ 1441.723216] lowmem_reserve[]: [ 1441.727484] Free swap = 0kB [ 1441.729543] 0 [ 1441.730604] Total swap = 0kB [ 1441.733616] 2717 [ 1441.737887] 2097051 pages RAM [ 1441.742692] 2718 [ 1441.744034] 0 pages HighMem/MovableOnly [ 1441.744041] 2718 [ 1441.748456] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1441.754395] lowmem_reserve[]: [ 1441.759858] 363849 pages reserved [ 1441.761639] 2718 [ 1441.762973] 0 pages cma reserved [ 1441.770692] 0 0 0 0 0 [ 1441.773299] CPU: 0 PID: 10987 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1441.774434] Node 0 [ 1441.782273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1441.782278] Call Trace: [ 1441.782301] dump_stack+0x1b2/0x281 [ 1441.782314] warn_alloc.cold+0x96/0x1cc [ 1441.782326] ? zone_watermark_ok_safe+0x220/0x220 [ 1441.782347] __alloc_pages_nodemask+0x2127/0x2720 [ 1441.782357] ? lock_acquire+0x170/0x3f0 [ 1441.782370] ? lock_acquire+0x170/0x3f0 [ 1441.782385] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1441.782407] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1441.793991] ? __mutex_unlock_slowpath+0x75/0x770 [ 1441.797174] Node 0 [ 1441.800179] alloc_pages_current+0x155/0x260 [ 1441.804134] DMA32 free:18124kB min:36200kB low:45248kB high:54296kB active_anon:50176kB inactive_anon:55744kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2572kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1441.808960] ion_page_pool_alloc+0x118/0x1b0 [ 1441.808970] ion_system_heap_allocate+0x133/0x8c0 [ 1441.808982] ? _raw_spin_unlock+0x29/0x40 [ 1441.808990] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1441.808999] ? ion_system_contig_heap_create+0x130/0x130 [ 1441.809009] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1441.809020] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1441.809029] ion_alloc+0x27a/0x810 [ 1441.809043] ? ion_dma_buf_release+0x40/0x40 [ 1441.809055] ? __might_fault+0x177/0x1b0 [ 1441.809067] ion_ioctl+0xea/0x1f0 [ 1441.809076] ? ion_query_heaps+0x360/0x360 [ 1441.809086] ? ion_query_heaps+0x360/0x360 [ 1441.809097] do_vfs_ioctl+0x75a/0xff0 [ 1441.809107] ? ioctl_preallocate+0x1a0/0x1a0 [ 1441.821242] DMA: [ 1441.821876] ? lock_downgrade+0x740/0x740 [ 1441.827727] 6*4kB [ 1441.832188] ? __fget+0x225/0x360 [ 1441.843033] lowmem_reserve[]: [ 1441.843758] ? do_vfs_ioctl+0xff0/0xff0 [ 1441.879889] (UE) [ 1441.880904] ? security_file_ioctl+0x83/0xb0 [ 1441.887860] 2*8kB [ 1441.889954] SyS_ioctl+0x7f/0xb0 [ 1441.900721] (U) [ 1441.905279] ? do_vfs_ioctl+0xff0/0xff0 [ 1441.905292] do_syscall_64+0x1d5/0x640 [ 1441.905306] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1441.905314] RIP: 0033:0x4665d9 [ 1441.905319] RSP: 002b:00007f696b00b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1441.905328] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1441.905332] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1441.905337] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1441.905343] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1441.905348] R13: 00007ffd618ef30f R14: 00007f696b00b300 R15: 0000000000022000 [ 1442.041712] 0 0 0 0 0 [ 1442.045793] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1442.077493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1442.083752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1442.114017] lowmem_reserve[]: 0 0 0 0 0 [ 1442.118449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1442.133143] Node 1 Normal free:304724kB min:53696kB low:67120kB high:80544kB active_anon:1264kB inactive_anon:28068kB active_file:36kB inactive_file:2376kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:544kB pagetables:760kB bounce:0kB free_pcp:364kB local_pcp:200kB free_cma:0kB [ 1442.171440] lowmem_reserve[]: 0 0 0 0 0 [ 1442.176132] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1442.183728] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1442.191230] Node 0 DMA: 6*4kB (UE) 2*8kB (U) 2*16kB (UE) 2*32kB (UE) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10952kB [ 1442.226616] Node 0 DMA32: 293*4kB (UMEH) 384*8kB (UMEH) 254*16kB (UMEH) 70*32kB (UMEH) 45*64kB (UMH) 46*128kB (U) 42*256kB (U) 10*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 35188kB [ 1442.261158] device hsr_slave_0 entered promiscuous mode [ 1442.270795] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1442.289048] device hsr_slave_1 entered promiscuous mode [ 1442.299689] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1442.308175] Node 1 Normal: 1*4kB (U) 3*8kB (UME) 2*16kB (UM) 5*32kB (UE) 2148*64kB (UM) 819*128kB (U) 297*256kB (UM) 65*512kB (UM) 98*1024kB (UM) 8*2048kB (U) 0*4096kB = 468572kB [ 1442.314928] Mem-Info: [ 1442.329925] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1442.346233] active_anon:12760 inactive_anon:20953 isolated_anon:0 [ 1442.346233] active_file:60 inactive_file:1570 isolated_file:0 [ 1442.346233] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1442.346233] slab_reclaimable:13318 slab_unreclaimable:119784 [ 1442.346233] mapped:53591 shmem:21269 pagetables:834 bounce:0 [ 1442.346233] free:137378 free_pcp:250 free_cma:0 [ 1442.350039] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1442.389381] 2*16kB (UE) 2*32kB (UE) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10952kB [ 1442.402148] Node 0 DMA32: 107*4kB (UMEH) 384*8kB (UMEH) 261*16kB (UMEH) 69*32kB (UMEH) 47*64kB (UMH) 186*128kB (U) 42*256kB (U) 10*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 52572kB [ 1442.418854] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1442.430331] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1442.439296] Node 1 Normal: 41*4kB (U) 38*8kB (UME) 37*16kB (UM) 335*32kB (UME) 2157*64kB (UM) 915*128kB (U) 317*256kB (UM) 65*512kB (UM) 98*1024kB (UM) 8*2048kB (U) 0*4096kB = 498116kB [ 1442.456353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1442.465279] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1442.484912] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1442.495059] 23214 total pagecache pages [ 1442.499044] 0 pages in swap cache [ 1442.503363] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1442.521350] Swap cache stats: add 0, delete 0, find 0/0 [ 1442.529129] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1442.535359] Node 0 active_anon:49776kB inactive_anon:55744kB active_file:504kB inactive_file:1104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158568kB dirty:0kB writeback:0kB shmem:56880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1442.555533] Free swap = 0kB [ 1442.570437] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1442.572452] Node 1 active_anon:1264kB inactive_anon:28068kB active_file:1736kB inactive_file:4816kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56296kB dirty:0kB writeback:0kB shmem:28196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1442.604922] Total swap = 0kB [ 1442.609660] 2097051 pages RAM [ 1442.612760] 0 pages HighMem/MovableOnly [ 1442.616854] 23325 total pagecache pages [ 1442.620871] 0 pages in swap cache [ 1442.626413] Node 0 DMA free:11016kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1442.626610] Swap cache stats: add 0, delete 0, find 0/0 [ 1442.658187] 363849 pages reserved [ 1442.661644] 0 pages cma reserved [ 1442.685594] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1442.690678] Node 0 DMA32 free:45164kB min:36200kB low:45248kB high:54296kB active_anon:49776kB inactive_anon:55744kB active_file:704kB inactive_file:1204kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2572kB bounce:0kB free_pcp:864kB local_pcp:524kB free_cma:0kB [ 1442.709124] Free swap = 0kB [ 1442.757155] Total swap = 0kB [ 1442.760207] 2097051 pages RAM [ 1442.774983] 0 pages HighMem/MovableOnly [ 1442.779009] 363849 pages reserved [ 1442.782474] 0 pages cma reserved [ 1442.799663] Out of memory (oom_kill_allocating_task): Kill process 11025 (in:imklog) score 0 or sacrifice child [ 1442.828062] lowmem_reserve[]: 0 0 0 0 0 [ 1442.832101] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1442.845044] Killed process 10998 (rsyslogd) total-vm:254332kB, anon-rss:860kB, file-rss:0kB, shmem-rss:0kB [ 1442.858115] Bluetooth: hci0 command 0x0419 tx timeout [ 1442.911985] oom_reaper: reaped process 10998 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1442.941675] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1442.970385] lowmem_reserve[]: 0 0 0 0 0 [ 1442.982103] Node 1 Normal free:153068kB min:53696kB low:67120kB high:80544kB active_anon:964kB inactive_anon:28068kB active_file:2836kB inactive_file:5716kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:612kB bounce:0kB free_pcp:420kB local_pcp:100kB free_cma:0kB [ 1443.005685] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1443.101141] systemd[1]: rsyslog.service: Unit entered failed state. [ 1443.155903] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1443.168939] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1443.185964] oom_reaper: reaped process 10985 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1443.191433] lowmem_reserve[]: 0 0 0 0 0 [ 1443.231533] syz-executor.3: [ 1443.234740] Node 0 [ 1443.234745] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1443.247863] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1443.267099] DMA: [ 1443.274937] (null) [ 1443.295076] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1443.300278] CPU: 1 PID: 10989 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1443.301155] 2*4kB [ 1443.308159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1443.308164] Call Trace: [ 1443.308184] dump_stack+0x1b2/0x281 [ 1443.308198] warn_alloc.cold+0x96/0x1cc [ 1443.308210] ? zone_watermark_ok_safe+0x220/0x220 [ 1443.308231] __alloc_pages_nodemask+0x2127/0x2720 [ 1443.320030] (UE) [ 1443.322419] ? _raw_spin_unlock_irq+0x24/0x80 [ 1443.334896] 1*8kB [ 1443.339668] ? lock_acquire+0x170/0x3f0 [ 1443.341711] (U) [ 1443.346207] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1443.346224] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1443.346236] ? __mutex_unlock_slowpath+0x75/0x770 [ 1443.346250] alloc_pages_current+0x155/0x260 [ 1443.353777] 2*16kB [ 1443.354348] ion_page_pool_alloc+0x118/0x1b0 [ 1443.359199] (UE) [ 1443.364619] ion_system_heap_allocate+0x133/0x8c0 [ 1443.369479] 1*32kB [ 1443.373847] ? _raw_spin_unlock+0x29/0x40 [ 1443.376081] (E) [ 1443.380541] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1443.382575] 2*64kB [ 1443.387407] ? ion_system_contig_heap_create+0x130/0x130 [ 1443.387417] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1443.387428] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1443.387439] ion_alloc+0x27a/0x810 [ 1443.389670] (UE) [ 1443.393821] ? ion_dma_buf_release+0x40/0x40 [ 1443.395824] 2*128kB [ 1443.400707] ? __might_fault+0x177/0x1b0 [ 1443.402935] (UE) [ 1443.408408] ion_ioctl+0xea/0x1f0 [ 1443.408418] ? ion_query_heaps+0x360/0x360 [ 1443.408429] ? ion_query_heaps+0x360/0x360 [ 1443.408443] do_vfs_ioctl+0x75a/0xff0 [ 1443.413482] 1*256kB [ 1443.418323] ? ioctl_preallocate+0x1a0/0x1a0 [ 1443.418333] ? lock_downgrade+0x740/0x740 [ 1443.418346] ? __fget+0x225/0x360 [ 1443.418357] ? do_vfs_ioctl+0xff0/0xff0 [ 1443.421891] (E) [ 1443.423949] ? security_file_ioctl+0x83/0xb0 [ 1443.428377] 2*512kB [ 1443.430643] SyS_ioctl+0x7f/0xb0 [ 1443.434677] (UE) [ 1443.436729] ? do_vfs_ioctl+0xff0/0xff0 [ 1443.436742] do_syscall_64+0x1d5/0x640 [ 1443.436756] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1443.436766] RIP: 0033:0x4665d9 [ 1443.440203] 1*1024kB [ 1443.444511] RSP: 002b:00007f2e9a53f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1443.448782] (E) [ 1443.452529] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1443.454900] 2*2048kB [ 1443.459254] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1443.459262] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1443.463416] (ME) [ 1443.466855] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1443.466860] R13: 00007ffe42256d6f R14: 00007f2e9a53f300 R15: 0000000000022000 [ 1443.475512] (null) [ 1443.533419] 1*4096kB [ 1443.547096] , order=0, oom_score_adj=0 [ 1443.573084] systemd cpuset=/ mems_allowed=0-1 [ 1443.577658] CPU: 1 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 1443.584598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1443.593953] Call Trace: [ 1443.596549] dump_stack+0x1b2/0x281 [ 1443.597145] (U) = 10960kB [ 1443.600175] dump_header+0x178/0x82f [ 1443.600187] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1443.602940] Node 0 [ 1443.606642] ? ___ratelimit+0x2cd/0x530 [ 1443.606654] oom_kill_process.cold+0x10/0xa40 [ 1443.606665] ? lock_downgrade+0x740/0x740 [ 1443.606680] out_of_memory+0x2dc/0x1190 [ 1443.606692] ? oom_killer_disable+0x1c0/0x1c0 [ 1443.625700] DMA32: [ 1443.626685] ? mutex_trylock+0x152/0x1a0 [ 1443.630905] 163*4kB [ 1443.635503] __alloc_pages_nodemask+0x23e1/0x2720 [ 1443.635524] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1443.635547] alloc_pages_current+0x155/0x260 [ 1443.638168] (UME) [ 1443.641835] filemap_fault+0x11a1/0x1ad0 [ 1443.644575] 288*8kB [ 1443.649433] ext4_filemap_fault+0x84/0xb0 [ 1443.649444] __do_fault+0xfa/0x380 [ 1443.649453] __handle_mm_fault+0x2497/0x4620 [ 1443.649468] ? vm_insert_page+0x7c0/0x7c0 [ 1443.654309] (UME) [ 1443.658753] ? _raw_spin_unlock_irq+0x50/0x80 [ 1443.658775] ? mark_held_locks+0xa6/0xf0 [ 1443.660910] 180*16kB [ 1443.664981] handle_mm_fault+0x455/0x9c0 [ 1443.664995] __do_page_fault+0x549/0xad0 [ 1443.665007] ? spurious_fault+0x640/0x640 [ 1443.665015] ? do_page_fault+0x60/0x500 [ 1443.665027] ? page_fault+0x2f/0x50 [ 1443.667425] (UME) [ 1443.671593] page_fault+0x45/0x50 [ 1443.675678] 29*32kB [ 1443.680159] RIP: 0001:0x4 [ 1443.684289] (UME) [ 1443.686443] RSP: 7fbd2f50:00007ffeadc5f590 EFLAGS: 7ffeadc5f2e0 [ 1443.694084] Mem-Info: [ 1443.697771] syz-executor.5: [ 1443.701572] active_anon:12537 inactive_anon:20952 isolated_anon:0 [ 1443.701572] active_file:33 inactive_file:4 isolated_file:0 [ 1443.701572] unevictable:0 dirty:10 writeback:0 unstable:0 [ 1443.701572] slab_reclaimable:13402 slab_unreclaimable:120306 [ 1443.701572] mapped:52244 shmem:21269 pagetables:755 bounce:0 [ 1443.701572] free:13804 free_pcp:30 free_cma:0 [ 1443.718172] 12*64kB [ 1443.733823] Node 0 active_anon:49204kB inactive_anon:55744kB active_file:44kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157768kB dirty:0kB writeback:0kB shmem:56880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1443.747198] page allocation failure: order:0 [ 1443.785772] Node 1 active_anon:944kB inactive_anon:28064kB active_file:88kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51208kB dirty:40kB writeback:0kB shmem:28196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1443.816036] (UM) 1*128kB (M) 21*256kB (U) 10*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 18156kB [ 1443.860556] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1443.862194] Node 0 [ 1443.897842] Mem-Info: [ 1443.902504] active_anon:12537 inactive_anon:20952 isolated_anon:0 [ 1443.902504] active_file:33 inactive_file:4 isolated_file:0 [ 1443.902504] unevictable:0 dirty:10 writeback:0 unstable:0 [ 1443.902504] slab_reclaimable:13402 slab_unreclaimable:120306 [ 1443.902504] mapped:52244 shmem:21269 pagetables:755 bounce:0 [ 1443.902504] free:13804 free_pcp:30 free_cma:0 [ 1443.903128] lowmem_reserve[]: [ 1443.938039] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1443.948875] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1443.954022] CPU: 0 PID: 10985 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1443.961915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1443.971280] Call Trace: [ 1443.973382] 0 2717 2718 [ 1443.973879] dump_stack+0x1b2/0x281 [ 1443.973893] warn_alloc.cold+0x96/0x1cc [ 1443.984164] ? zone_watermark_ok_safe+0x220/0x220 [ 1443.989014] ? usleep_range+0x130/0x130 [ 1443.992990] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1443.998098] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1444.003205] ? run_timer_softirq+0x5a0/0x5a0 [ 1444.007623] __alloc_pages_nodemask+0x2127/0x2720 [ 1444.012484] ? lock_acquire+0x170/0x3f0 [ 1444.016471] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1444.021234] 2718 [ 1444.021311] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1444.021313] 2718 [ 1444.023373] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1444.035372] alloc_pages_current+0x155/0x260 [ 1444.039791] ion_page_pool_alloc+0x118/0x1b0 [ 1444.044485] ion_system_heap_allocate+0x133/0x8c0 [ 1444.049332] ? ion_alloc+0x187/0x810 [ 1444.052055] Node 0 [ 1444.053133] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1444.053149] DMA32 free:17744kB min:36200kB low:45248kB high:54296kB active_anon:49280kB inactive_anon:55744kB active_file:8kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7040kB pagetables:2356kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1444.053158] lowmem_reserve[]: [ 1444.055401] ? ion_system_contig_heap_create+0x130/0x130 [ 1444.055411] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1444.055423] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1444.055432] ion_alloc+0x204/0x810 [ 1444.055445] ? ion_dma_buf_release+0x40/0x40 [ 1444.055457] ? __might_fault+0x177/0x1b0 [ 1444.055468] ion_ioctl+0xea/0x1f0 [ 1444.055477] ? ion_query_heaps+0x360/0x360 [ 1444.055490] ? ion_query_heaps+0x360/0x360 [ 1444.055500] do_vfs_ioctl+0x75a/0xff0 [ 1444.055512] ? ioctl_preallocate+0x1a0/0x1a0 [ 1444.055522] ? lock_downgrade+0x740/0x740 [ 1444.055535] ? __fget+0x225/0x360 [ 1444.055543] ? do_vfs_ioctl+0xff0/0xff0 [ 1444.055555] ? security_file_ioctl+0x83/0xb0 [ 1444.055565] SyS_ioctl+0x7f/0xb0 [ 1444.082058] 0 [ 1444.088852] ? do_vfs_ioctl+0xff0/0xff0 [ 1444.088866] do_syscall_64+0x1d5/0x640 [ 1444.088881] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1444.088889] RIP: 0033:0x4665d9 [ 1444.088893] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1444.088903] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1444.088908] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1444.088913] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1444.088919] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1444.088924] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1444.095535] Normal: [ 1444.134499] 0 [ 1444.139141] Node 0 active_anon:49192kB inactive_anon:55744kB active_file:12kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157700kB dirty:0kB writeback:0kB shmem:56880kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1444.210049] 0 [ 1444.217975] 0*4kB [ 1444.244048] 0 [ 1444.257342] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1444.270017] Node 1 Normal: 29*4kB (UM) 18*8kB (UME) 11*16kB (M) 12*32kB (UME) 9*64kB (M) 5*128kB (UM) 5*256kB (UM) 40*512kB (UM) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 26868kB [ 1444.284622] 0 [ 1444.288102] Node 1 active_anon:888kB inactive_anon:28064kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51200kB dirty:0kB writeback:0kB shmem:28196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1444.319307] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1444.328311] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1444.339123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1444.343355] Node 0 [ 1444.348070] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1444.348093] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1444.348115] Node 0 DMA32 free:18156kB min:36200kB low:45248kB high:54296kB active_anon:49192kB inactive_anon:55744kB active_file:12kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7040kB pagetables:2260kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1444.348140] lowmem_reserve[]: [ 1444.394428] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1444.412413] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 00:41:22 executing program 2: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 1444.458438] 21488 total pagecache pages [ 1444.464014] 0 pages in swap cache [ 1444.470641] Swap cache stats: add 0, delete 0, find 0/0 [ 1444.481485] Free swap = 0kB [ 1444.485641] lowmem_reserve[]: 0 0 0 0 [ 1444.487115] Total swap = 0kB [ 1444.487828] 0 [ 1444.492325] 0 [ 1444.497176] 2097051 pages RAM [ 1444.506976] 0 0 0 0 [ 1444.539904] Node 1 Normal free:108660kB min:53696kB low:67120kB high:80544kB active_anon:888kB inactive_anon:28064kB active_file:256kB inactive_file:6488kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:660kB bounce:0kB free_pcp:440kB local_pcp:192kB free_cma:0kB [ 1444.541902] 0 pages HighMem/MovableOnly [ 1444.578844] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1444.642134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1444.653943] lowmem_reserve[]: 0 0 0 0 0 [ 1444.665580] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10960kB [ 1444.672690] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1444.705606] lowmem_reserve[]: 0 0 0 0 0 [ 1444.709637] Node 1 Normal free:216896kB min:53696kB low:67120kB high:80544kB active_anon:788kB inactive_anon:28064kB active_file:1856kB inactive_file:5788kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:660kB bounce:0kB free_pcp:784kB local_pcp:516kB free_cma:0kB [ 1444.724996] Node 0 [ 1444.745768] 363849 pages reserved [ 1444.751920] 0 pages cma reserved [ 1444.774931] DMA32: 1458*4kB (UME) 4516*8kB (UE) 195*16kB (UME) 24*32kB (UE) 1*64kB (U) 0*128kB 3*256kB (U) 10*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 51800kB [ 1444.779484] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1444.805044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1444.812177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1444.820128] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1444.823078] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1444.838513] lowmem_reserve[]: 0 0 0 0 0 [ 1444.842522] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10960kB [ 1444.865931] 8021q: adding VLAN 0 to HW filter on device team0 [ 1444.870270] Node 1 [ 1444.878751] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1444.878879] Normal: [ 1444.881080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1444.913615] 5993*4kB (UM) 136*8kB (UM) 111*16kB (UM) 433*32kB (UM) 737*64kB (UM) 208*128kB (U) 107*256kB (UM) 88*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 191028kB [ 1444.914912] Node 0 [ 1444.945498] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1444.958029] DMA32: 1325*4kB (U) 4495*8kB (UE) 195*16kB (UE) 24*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45148kB [ 1444.966903] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1444.981588] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.987997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1445.003436] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1445.042727] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1445.044716] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1445.066349] Node 1 Normal: 63*4kB (UME) 41*8kB (UME) 36*16kB (UME) 242*32kB (UM) 15*64kB (UM) 3*128kB (M) 1*256kB (U) 70*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 50436kB [ 1445.088439] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1445.105311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1445.112562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1445.120148] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1445.120154] 22401 total pagecache pages [ 1445.120163] 0 pages in swap cache [ 1445.120419] Swap cache stats: add 0, delete 0, find 0/0 [ 1445.145245] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1445.154308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1445.164061] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1445.185583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1445.191029] Free swap = 0kB [ 1445.193292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.202380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1445.207321] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1445.214205] Total swap = 0kB [ 1445.224915] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1445.233784] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1445.241342] 2097051 pages RAM [ 1445.248897] CPU: 1 PID: 10985 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1445.256790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1445.266143] Call Trace: [ 1445.266577] 21326 total pagecache pages [ 1445.268733] dump_stack+0x1b2/0x281 [ 1445.272718] 0 pages in swap cache [ 1445.276313] warn_alloc.cold+0x96/0x1cc [ 1445.276324] ? zone_watermark_ok_safe+0x220/0x220 [ 1445.276347] __alloc_pages_nodemask+0x2127/0x2720 [ 1445.286177] Swap cache stats: add 0, delete 0, find 0/0 [ 1445.288577] ? lock_acquire+0x170/0x3f0 [ 1445.293395] Free swap = 0kB [ 1445.298773] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1445.298790] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1445.298802] ? __mutex_unlock_slowpath+0x75/0x770 [ 1445.298816] alloc_pages_current+0x155/0x260 [ 1445.320211] Total swap = 0kB [ 1445.320910] ion_page_pool_alloc+0x118/0x1b0 [ 1445.325350] 2097051 pages RAM [ 1445.328322] ion_system_heap_allocate+0x133/0x8c0 [ 1445.332705] 0 pages HighMem/MovableOnly [ 1445.335801] ? _raw_spin_unlock+0x29/0x40 [ 1445.335811] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1445.335819] ? ion_system_contig_heap_create+0x130/0x130 [ 1445.335830] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1445.335844] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1445.356850] 363849 pages reserved [ 1445.359328] ion_alloc+0x27a/0x810 [ 1445.364336] 0 pages cma reserved [ 1445.369182] ? ion_dma_buf_release+0x40/0x40 [ 1445.369196] ? __might_fault+0x177/0x1b0 [ 1445.369207] ion_ioctl+0xea/0x1f0 [ 1445.369217] ? ion_query_heaps+0x360/0x360 [ 1445.395980] ? ion_query_heaps+0x360/0x360 [ 1445.400214] do_vfs_ioctl+0x75a/0xff0 [ 1445.404018] ? ioctl_preallocate+0x1a0/0x1a0 [ 1445.408431] ? lock_downgrade+0x740/0x740 [ 1445.412595] ? __fget+0x225/0x360 [ 1445.416052] ? do_vfs_ioctl+0xff0/0xff0 [ 1445.420032] ? security_file_ioctl+0x83/0xb0 [ 1445.424443] SyS_ioctl+0x7f/0xb0 [ 1445.427811] ? do_vfs_ioctl+0xff0/0xff0 [ 1445.431806] do_syscall_64+0x1d5/0x640 [ 1445.435726] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1445.440929] RIP: 0033:0x4665d9 [ 1445.444183] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1445.451897] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1445.459263] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1445.466529] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1445.474054] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1445.481344] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1445.494884] 0 pages HighMem/MovableOnly [ 1445.498879] 363849 pages reserved [ 1445.502331] 0 pages cma reserved [ 1445.505872] Out of memory: Kill process 10934 (syz-executor.0) score 1004 or sacrifice child [ 1445.506071] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1445.514488] Killed process 10942 (syz-executor.0) total-vm:93384kB, anon-rss:156kB, file-rss:34820kB, shmem-rss:0kB [ 1445.518675] warn_alloc_show_mem: 1 callbacks suppressed [ 1445.518679] Mem-Info: [ 1445.525842] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1445.525865] syz-executor.1 cpuset=/ [ 1445.558440] oom_reaper: reaped process 10942 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1445.576708] active_anon:12462 inactive_anon:20950 isolated_anon:0 [ 1445.576708] active_file:61 inactive_file:14 isolated_file:0 [ 1445.576708] unevictable:0 dirty:10 writeback:0 unstable:0 [ 1445.576708] slab_reclaimable:13442 slab_unreclaimable:119541 [ 1445.576708] mapped:43529 shmem:21265 pagetables:687 bounce:0 [ 1445.576708] free:13792 free_pcp:258 free_cma:0 [ 1445.593545] (null) [ 1445.619718] Node 0 active_anon:49072kB inactive_anon:55736kB active_file:80kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122848kB dirty:28kB writeback:0kB shmem:56864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1445.621460] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1445.653436] syz-executor.3 cpuset= [ 1445.656431] Node 1 active_anon:776kB inactive_anon:28064kB active_file:164kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:51268kB dirty:12kB writeback:0kB shmem:28196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1445.663748] (null) [ 1445.692049] mems_allowed=0-1 [ 1445.698608] / mems_allowed=0-1 [ 1445.702510] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1445.703099] CPU: 0 PID: 10989 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1445.703107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1445.746625] Call Trace: [ 1445.749222] dump_stack+0x1b2/0x281 [ 1445.752855] warn_alloc.cold+0x96/0x1cc [ 1445.756857] ? zone_watermark_ok_safe+0x220/0x220 [ 1445.761716] ? usleep_range+0x130/0x130 [ 1445.764970] syz-executor.0: [ 1445.765701] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1445.765709] page allocation failure: order:0 [ 1445.768715] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1445.773802] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1445.778197] ? run_timer_softirq+0x5a0/0x5a0 [ 1445.778214] __alloc_pages_nodemask+0x2127/0x2720 [ 1445.778230] ? lock_acquire+0x170/0x3f0 [ 1445.778244] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1445.778253] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1445.778268] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1445.778289] alloc_pages_current+0x155/0x260 [ 1445.778300] ion_page_pool_alloc+0x118/0x1b0 [ 1445.809035] (null) [ 1445.813209] ion_system_heap_allocate+0x133/0x8c0 [ 1445.830751] lowmem_reserve[]: 0 [ 1445.834416] ? _raw_spin_unlock+0x29/0x40 [ 1445.834428] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1445.846767] ? ion_system_contig_heap_create+0x130/0x130 [ 1445.852225] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1445.852991] syz-executor.0 cpuset= [ 1445.857244] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1445.857256] ion_alloc+0x27a/0x810 [ 1445.857270] ? ion_dma_buf_release+0x40/0x40 [ 1445.857281] ? __might_fault+0x177/0x1b0 [ 1445.857292] ion_ioctl+0xea/0x1f0 [ 1445.857300] ? ion_query_heaps+0x360/0x360 [ 1445.857312] ? ion_query_heaps+0x360/0x360 [ 1445.857321] do_vfs_ioctl+0x75a/0xff0 [ 1445.857332] ? ioctl_preallocate+0x1a0/0x1a0 [ 1445.857344] ? lock_downgrade+0x740/0x740 [ 1445.871081] 2717 [ 1445.873637] ? __fget+0x225/0x360 [ 1445.891017] / [ 1445.893650] ? do_vfs_ioctl+0xff0/0xff0 [ 1445.911061] 2718 2718 [ 1445.913339] ? security_file_ioctl+0x83/0xb0 [ 1445.913351] SyS_ioctl+0x7f/0xb0 [ 1445.923583] ? do_vfs_ioctl+0xff0/0xff0 [ 1445.927572] do_syscall_64+0x1d5/0x640 [ 1445.931485] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1445.934911] mems_allowed=0-1 [ 1445.936690] RIP: 0033:0x4665d9 [ 1445.942961] RSP: 002b:00007f2e9a53f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1445.950691] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1445.954953] 2718 [ 1445.958046] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1445.958055] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1445.967363] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1445.967370] R13: 00007ffe42256d6f R14: 00007f2e9a53f300 R15: 0000000000022000 [ 1445.979405] , order=0, oom_score_adj=0 [ 1445.982212] CPU: 1 PID: 10987 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1445.999172] syz-executor.4 cpuset= [ 1446.001577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1446.001586] / [ 1446.005106] Call Trace: [ 1446.014602] mems_allowed=0-1 [ 1446.016286] dump_stack+0x1b2/0x281 [ 1446.016301] warn_alloc.cold+0x96/0x1cc [ 1446.029756] ? zone_watermark_ok_safe+0x220/0x220 [ 1446.034614] ? usleep_range+0x130/0x130 [ 1446.038584] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1446.043703] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1446.048716] ? run_timer_softirq+0x5a0/0x5a0 [ 1446.053169] __alloc_pages_nodemask+0x2127/0x2720 [ 1446.058015] ? lock_acquire+0x170/0x3f0 [ 1446.061994] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1446.066834] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1446.071340] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1446.076806] alloc_pages_current+0x155/0x260 [ 1446.081232] ion_page_pool_alloc+0x118/0x1b0 [ 1446.085648] ion_system_heap_allocate+0x133/0x8c0 [ 1446.090498] ? _raw_spin_unlock+0x29/0x40 [ 1446.094639] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1446.099580] ? ion_system_contig_heap_create+0x130/0x130 [ 1446.105034] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1446.110076] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1446.114920] ion_alloc+0x27a/0x810 [ 1446.118464] ? ion_dma_buf_release+0x40/0x40 [ 1446.122891] ? __might_fault+0x177/0x1b0 [ 1446.126957] ion_ioctl+0xea/0x1f0 [ 1446.130423] ? ion_query_heaps+0x360/0x360 [ 1446.134658] ? ion_query_heaps+0x360/0x360 [ 1446.138961] do_vfs_ioctl+0x75a/0xff0 [ 1446.142774] ? ioctl_preallocate+0x1a0/0x1a0 [ 1446.147181] ? lock_downgrade+0x740/0x740 [ 1446.151339] ? __fget+0x225/0x360 [ 1446.154827] ? do_vfs_ioctl+0xff0/0xff0 [ 1446.158824] ? security_file_ioctl+0x83/0xb0 [ 1446.163236] SyS_ioctl+0x7f/0xb0 [ 1446.166601] ? do_vfs_ioctl+0xff0/0xff0 [ 1446.170749] do_syscall_64+0x1d5/0x640 [ 1446.174654] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1446.179870] RIP: 0033:0x4665d9 [ 1446.183052] RSP: 002b:00007f696b00b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1446.190778] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1446.198047] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1446.205313] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1446.212597] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1446.219864] R13: 00007ffd618ef30f R14: 00007f696b00b300 R15: 0000000000022000 [ 1446.227515] CPU: 0 PID: 10865 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1446.235423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1446.244775] Call Trace: [ 1446.247487] dump_stack+0x1b2/0x281 [ 1446.251118] dump_header+0x178/0x82f [ 1446.254874] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1446.254914] Node 0 [ 1446.260149] ? ___ratelimit+0x2cd/0x530 [ 1446.260169] DMA32 free:17960kB min:36200kB low:45248kB high:54296kB active_anon:48976kB inactive_anon:55736kB active_file:44kB inactive_file:28kB unevictable:0kB writepending:20kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:6976kB pagetables:2144kB bounce:0kB free_pcp:252kB local_pcp:252kB free_cma:0kB [ 1446.260174] lowmem_reserve[]: [ 1446.262410] oom_kill_process.cold+0x10/0xa40 [ 1446.274904] 0 [ 1446.294759] out_of_memory+0xe3e/0x1190 [ 1446.294772] ? oom_killer_disable+0x1c0/0x1c0 [ 1446.294780] ? mutex_trylock+0x152/0x1a0 [ 1446.294790] __alloc_pages_nodemask+0x23e1/0x2720 [ 1446.294809] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1446.294837] alloc_pages_current+0x155/0x260 [ 1446.324914] 0 [ 1446.326463] filemap_fault+0x11a1/0x1ad0 [ 1446.330844] 0 [ 1446.332652] ext4_filemap_fault+0x84/0xb0 [ 1446.342629] __do_fault+0xfa/0x380 [ 1446.344913] 0 0 [ 1446.346168] __handle_mm_fault+0x2497/0x4620 [ 1446.348152] ? vm_insert_page+0x7c0/0x7c0 [ 1446.352545] Node 0 [ 1446.356709] ? mark_held_locks+0xa6/0xf0 [ 1446.356720] handle_mm_fault+0x455/0x9c0 [ 1446.356732] __do_page_fault+0x549/0xad0 [ 1446.356743] ? spurious_fault+0x640/0x640 [ 1446.356750] ? do_page_fault+0x60/0x500 [ 1446.356759] ? page_fault+0x2f/0x50 [ 1446.356764] page_fault+0x45/0x50 [ 1446.356772] RIP: 4bf928:0x7ffc21d13850 [ 1446.356776] RSP: 53e680:00007ffc21d13700 EFLAGS: 7ffc21d13710 [ 1446.383019] Mem-Info: [ 1446.383825] CPU: 1 PID: 10942 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1446.407042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1446.414912] active_anon:12437 inactive_anon:20950 isolated_anon:0 [ 1446.414912] active_file:16 inactive_file:42 isolated_file:0 [ 1446.414912] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1446.414912] slab_reclaimable:13442 slab_unreclaimable:119511 [ 1446.414912] mapped:43521 shmem:21265 pagetables:687 bounce:0 [ 1446.414912] free:41234 free_pcp:317 free_cma:0 [ 1446.416409] Call Trace: [ 1446.454795] dump_stack+0x1b2/0x281 [ 1446.458449] warn_alloc.cold+0x96/0x1cc [ 1446.462458] ? zone_watermark_ok_safe+0x220/0x220 [ 1446.467416] ? usleep_range+0x130/0x130 [ 1446.471397] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1446.476538] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1446.481607] ? run_timer_softirq+0x5a0/0x5a0 [ 1446.486415] __alloc_pages_nodemask+0x2127/0x2720 [ 1446.491395] ? lock_acquire+0x170/0x3f0 [ 1446.493821] Node 0 active_anon:48976kB inactive_anon:55736kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122884kB dirty:0kB writeback:0kB shmem:56864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1446.495393] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1446.495403] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1446.495419] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1446.495438] alloc_pages_current+0x155/0x260 [ 1446.495450] ion_page_pool_alloc+0x118/0x1b0 [ 1446.495459] ion_system_heap_allocate+0x133/0x8c0 [ 1446.495469] ? ion_alloc+0x187/0x810 [ 1446.495480] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1446.495494] ? ion_system_contig_heap_create+0x130/0x130 [ 1446.566337] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1446.566411] Node 1 active_anon:772kB inactive_anon:28064kB active_file:16kB inactive_file:7216kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56000kB dirty:0kB writeback:0kB shmem:28196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1446.571379] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1446.571392] ion_alloc+0x204/0x810 [ 1446.571406] ? ion_dma_buf_release+0x40/0x40 [ 1446.571418] ? __might_fault+0x177/0x1b0 [ 1446.571429] ion_ioctl+0xea/0x1f0 [ 1446.571438] ? ion_query_heaps+0x360/0x360 [ 1446.571450] ? ion_query_heaps+0x360/0x360 [ 1446.628241] do_vfs_ioctl+0x75a/0xff0 [ 1446.632060] ? ioctl_preallocate+0x1a0/0x1a0 [ 1446.636476] ? lock_downgrade+0x740/0x740 [ 1446.640649] ? __fget+0x225/0x360 [ 1446.644120] ? do_vfs_ioctl+0xff0/0xff0 [ 1446.648103] ? security_file_ioctl+0x83/0xb0 [ 1446.652527] SyS_ioctl+0x7f/0xb0 [ 1446.654909] Node 0 [ 1446.655920] ? do_vfs_ioctl+0xff0/0xff0 [ 1446.655936] DMA free:11932kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:60kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1446.655942] lowmem_reserve[]: [ 1446.658181] do_syscall_64+0x1d5/0x640 [ 1446.662147] 0 [ 1446.687919] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1446.687929] RIP: 0033:0x4665d9 [ 1446.687934] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1446.687943] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1446.687948] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1446.687957] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1446.724903] 2717 [ 1446.727291] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1446.744224] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1446.744893] 2718 2718 2718 [ 1446.752361] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1446.773598] Node 0 [ 1446.782570] lowmem_reserve[]: 0 0 0 0 0 [ 1446.792849] Node 1 Normal free:588156kB min:53696kB low:67120kB high:80544kB active_anon:772kB inactive_anon:28064kB active_file:16kB inactive_file:7216kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:604kB bounce:0kB free_pcp:844kB local_pcp:660kB free_cma:0kB [ 1446.794292] DMA32 free:98812kB min:36200kB low:45248kB high:54296kB active_anon:48976kB inactive_anon:55736kB active_file:48kB inactive_file:4152kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:6976kB pagetables:2144kB bounce:0kB free_pcp:464kB local_pcp:208kB free_cma:0kB [ 1446.827034] lowmem_reserve[]: 0 0 0 0 0 [ 1446.860935] Node 0 DMA: 3*4kB (UME) 2*8kB (U) 2*16kB (UE) 1*32kB (E) 7*64kB (UME) 9*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11932kB [ 1446.877221] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1446.881215] Node 0 DMA32: 1*4kB (M) 1445*8kB (UME) 221*16kB (UME) 29*32kB (UE) 791*64kB (U) 263*128kB (U) 16*256kB (UM) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 104412kB [ 1446.895207] lowmem_reserve[]: [ 1446.904659] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1446.904916] Node 0 [ 1446.910695] 0 [ 1446.920213] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1446.920266] Node 1 Normal: 3*4kB (UME) 2*8kB (ME) 2*16kB (ME) 120*32kB (U) 3560*64kB (UM) 951*128kB [ 1446.928444] 0 [ 1446.934469] warn_alloc_show_mem: 1 callbacks suppressed [ 1446.934472] Mem-Info: [ 1446.953823] (U) 273*256kB (UM) 64*512kB (U) 141*1024kB (UM) 8*2048kB (U) 0*4096kB = 616892kB [ 1446.954676] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1446.963444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1446.976683] 0 [ 1446.978827] active_anon:12412 inactive_anon:20950 isolated_anon:0 [ 1446.978827] active_file:91 inactive_file:3213 isolated_file:0 [ 1446.978827] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1446.978827] slab_reclaimable:13442 slab_unreclaimable:119224 [ 1446.978827] mapped:45971 shmem:21265 pagetables:724 bounce:0 [ 1446.978827] free:183491 free_pcp:344 free_cma:0 [ 1446.986142] 0 [ 1447.030334] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1447.040933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1447.049994] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1447.051197] systemd[1]: Stopped Journal Service. [ 1447.058623] 24603 total pagecache pages [ 1447.058634] 0 pages in swap cache [ 1447.058639] Swap cache stats: add 0, delete 0, find 0/0 [ 1447.058642] Free swap = 0kB [ 1447.058645] Total swap = 0kB [ 1447.058652] 2097051 pages RAM [ 1447.058655] 0 pages HighMem/MovableOnly [ 1447.058659] 363849 pages reserved [ 1447.058662] 0 pages cma reserved [ 1447.075002] Node 0 active_anon:48976kB inactive_anon:55736kB active_file:148kB inactive_file:6136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127684kB dirty:0kB writeback:0kB shmem:56864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1447.083375] 0 [ 1447.090507] Node 1 active_anon:772kB inactive_anon:28064kB active_file:316kB inactive_file:6816kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:56200kB dirty:0kB writeback:0kB shmem:28196kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1447.104983] Node 0 [ 1447.141182] systemd[1]: Starting Journal Service... [ 1447.165531] systemd[1]: Stopped System Logging Service. [ 1447.179480] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1447.217497] lowmem_reserve[]: 0 0 0 0 0 [ 1447.222383] Node 1 Normal free:614472kB min:53696kB low:67120kB high:80544kB active_anon:672kB inactive_anon:28064kB active_file:316kB inactive_file:6816kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:604kB bounce:0kB free_pcp:852kB local_pcp:228kB free_cma:0kB [ 1447.244943] DMA free:11112kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:44kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1447.260744] lowmem_reserve[]: 0 0 0 0 0 [ 1447.288301] Node 0 DMA: 1*4kB (E) 1*8kB (M) 2*16kB (UE) 2*32kB (UE) 2*64kB (ME) 5*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11116kB [ 1447.305718] Node 0 DMA32: 3*4kB (UME) 125*8kB (ME) 152*16kB (E) 16*32kB (ME) 77*64kB (UM) 262*128kB (U) 9*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44724kB [ 1447.328689] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1447.368901] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1447.369560] Node 1 [ 1447.373984] Node 0 DMA32 free:44876kB min:36200kB low:45248kB high:54296kB active_anon:48976kB inactive_anon:55736kB active_file:2648kB inactive_file:4980kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7072kB pagetables:2144kB bounce:0kB free_pcp:880kB local_pcp:244kB free_cma:0kB [ 1447.374007] lowmem_reserve[]: 0 0 0 0 0 [ 1447.374027] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1447.374046] lowmem_reserve[]: 0 0 0 [ 1447.390001] Normal: [ 1447.442718] 0 0 [ 1447.456524] Node 1 Normal free:530092kB min:53696kB low:67120kB high:80544kB active_anon:1272kB inactive_anon:28064kB active_file:716kB inactive_file:9316kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:752kB bounce:0kB free_pcp:260kB local_pcp:148kB free_cma:0kB [ 1447.458742] 3*4kB [ 1447.491276] lowmem_reserve[]: 0 0 0 0 0 [ 1447.493769] (UME) [ 1447.508890] Node 0 DMA: 1*4kB (E) 1*8kB (M) 2*16kB (UE) 2*32kB (UE) 2*64kB (ME) 5*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11116kB [ 1447.517557] 2*8kB [ 1447.528693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1447.540627] systemd-journald[11091]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1447.554971] Node 0 DMA32: 30*4kB (UM) 200*8kB (UME) 160*16kB (UME) 19*32kB (UME) 63*64kB (UM) 262*128kB (U) 9*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44760kB [ 1447.565002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1447.585116] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1447.585961] (ME) [ 1447.604953] Node 1 Normal: 1*4kB (E) 2*8kB (ME) 2*16kB (ME) 1*32kB (M) 1763*64kB (UM) 952*128kB (UM) 273*256kB (UM) 64*512kB (U) 140*1024kB (U) 7*2048kB (U) 0*4096kB = 495124kB [ 1447.624220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1447.629325] 1*16kB (E) 2*32kB (UM) 2303*64kB (UM) 951*128kB (U) 273*256kB (UM) 65*512kB (UM) 140*1024kB (U) 7*2048kB (U) 0*4096kB = 530092kB [ 1447.634938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1447.656815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1447.668650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1447.674926] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1447.680254] device bridge_slave_1 left promiscuous mode [ 1447.692004] systemd-journald[11091]: /dev/kmsg buffer overrun, some messages lost. [ 1447.699828] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1447.701879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.714166] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1447.719215] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1447.745232] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1447.755845] device bridge_slave_0 left promiscuous mode [ 1447.761413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.764539] 27960 total pagecache pages [ 1447.772157] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1447.795022] 0 pages in swap cache [ 1447.796221] 27960 total pagecache pages [ 1447.798502] Swap cache stats: add 0, delete 0, find 0/0 [ 1447.802482] 0 pages in swap cache [ 1447.819283] device veth1_macvtap left promiscuous mode [ 1447.824606] device veth0_macvtap left promiscuous mode [ 1447.845819] Free swap = 0kB [ 1447.848784] Swap cache stats: add 0, delete 0, find 0/0 [ 1447.849714] Total swap = 0kB [ 1447.854229] Free swap = 0kB [ 1447.860609] device veth1_vlan left promiscuous mode [ 1447.870375] Total swap = 0kB [ 1447.873405] 2097051 pages RAM [ 1447.874948] 2097051 pages RAM [ 1447.876738] device veth0_vlan left promiscuous mode [ 1447.879604] 0 pages HighMem/MovableOnly [ 1447.884780] 0 pages HighMem/MovableOnly [ 1447.923448] 363849 pages reserved [ 1447.937195] 0 pages cma reserved [ 1447.940512] 363849 pages reserved [ 1447.941208] Out of memory (oom_kill_allocating_task): Kill process 10865 (syz-executor.4) score 0 or sacrifice child [ 1447.944023] 0 pages cma reserved [ 1447.962016] systemd[1]: Started System Logging Service. [ 1448.007048] Killed process 10865 (syz-executor.4) total-vm:93120kB, anon-rss:80kB, file-rss:33456kB, shmem-rss:0kB 00:41:27 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) socket$can_bcm(0x1d, 0x2, 0x2) [ 1448.071287] oom_reaper: reaped process 10865 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 00:41:27 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) [ 1448.432343] device hsr_slave_1 left promiscuous mode [ 1448.472095] device hsr_slave_0 left promiscuous mode [ 1448.568553] team0 (unregistering): Port device team_slave_1 removed [ 1448.623366] team0 (unregistering): Port device team_slave_0 removed [ 1448.676870] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1448.729408] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1448.834423] bond0 (unregistering): Released all slaves [ 1448.890096] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1448.923717] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1448.947559] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1448.953276] CPU: 1 PID: 11098 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1448.961179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1448.970539] Call Trace: [ 1448.973134] dump_stack+0x1b2/0x281 [ 1448.976774] warn_alloc.cold+0x96/0x1cc [ 1448.980779] ? zone_watermark_ok_safe+0x220/0x220 [ 1448.981510] syz-executor.1 cpuset= [ 1448.985635] __alloc_pages_nodemask+0x2127/0x2720 [ 1448.985653] ? lock_acquire+0x170/0x3f0 [ 1448.985667] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1449.000291] / [ 1449.002849] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1449.008427] mems_allowed=0-1 [ 1449.010026] ? __mutex_unlock_slowpath+0x75/0x770 [ 1449.010044] alloc_pages_current+0x155/0x260 [ 1449.022438] ion_page_pool_alloc+0x118/0x1b0 [ 1449.026860] ion_system_heap_allocate+0x133/0x8c0 [ 1449.031727] ? ion_alloc+0x187/0x810 [ 1449.036327] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1449.041829] ? ion_system_contig_heap_create+0x130/0x130 [ 1449.047287] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1449.052307] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1449.057176] ion_alloc+0x204/0x810 [ 1449.060724] ? ion_dma_buf_release+0x40/0x40 [ 1449.065137] ? __might_fault+0x177/0x1b0 [ 1449.069201] ion_ioctl+0xea/0x1f0 [ 1449.072755] ? ion_query_heaps+0x360/0x360 [ 1449.076991] ? ion_query_heaps+0x360/0x360 [ 1449.081230] do_vfs_ioctl+0x75a/0xff0 [ 1449.085131] ? ioctl_preallocate+0x1a0/0x1a0 [ 1449.089538] ? lock_downgrade+0x740/0x740 [ 1449.093695] ? __fget+0x225/0x360 [ 1449.097148] ? do_vfs_ioctl+0xff0/0xff0 [ 1449.101135] ? security_file_ioctl+0x83/0xb0 [ 1449.105547] SyS_ioctl+0x7f/0xb0 [ 1449.108913] ? do_vfs_ioctl+0xff0/0xff0 [ 1449.112900] do_syscall_64+0x1d5/0x640 [ 1449.116786] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1449.121987] RIP: 0033:0x4665d9 [ 1449.125178] RSP: 002b:00007f2e9a53f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1449.132889] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1449.140162] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1449.147432] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1449.154711] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1449.161994] R13: 00007ffe42256d6f R14: 00007f2e9a53f300 R15: 0000000000022000 [ 1449.169296] CPU: 0 PID: 11101 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1449.177504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1449.186945] Call Trace: [ 1449.189535] dump_stack+0x1b2/0x281 [ 1449.193159] warn_alloc.cold+0x96/0x1cc [ 1449.197647] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1449.202676] ? zone_watermark_ok_safe+0x220/0x220 [ 1449.207709] __alloc_pages_nodemask+0x2127/0x2720 [ 1449.212559] ? __schedule+0x893/0x1de0 [ 1449.216537] ? lock_acquire+0x170/0x3f0 [ 1449.220530] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1449.225379] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1449.230840] ? __mutex_unlock_slowpath+0x75/0x770 [ 1449.235673] ? retint_kernel+0x2d/0x2d [ 1449.239572] alloc_pages_current+0x155/0x260 [ 1449.244083] ion_page_pool_alloc+0x118/0x1b0 [ 1449.248487] ion_system_heap_allocate+0x133/0x8c0 [ 1449.253322] ? ion_alloc+0x187/0x810 [ 1449.257054] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1449.262503] ? ion_system_contig_heap_create+0x130/0x130 [ 1449.267949] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1449.273001] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1449.277861] ion_alloc+0x204/0x810 [ 1449.281411] ? ion_dma_buf_release+0x40/0x40 [ 1449.285823] ? __might_fault+0x177/0x1b0 [ 1449.289968] ion_ioctl+0xea/0x1f0 [ 1449.293415] ? ion_query_heaps+0x360/0x360 [ 1449.297674] ? ion_query_heaps+0x360/0x360 [ 1449.304658] do_vfs_ioctl+0x75a/0xff0 [ 1449.308550] ? ioctl_preallocate+0x1a0/0x1a0 [ 1449.313475] ? lock_downgrade+0x740/0x740 [ 1449.317823] ? __fget+0x225/0x360 [ 1449.321297] ? do_vfs_ioctl+0xff0/0xff0 [ 1449.325269] ? security_file_ioctl+0x83/0xb0 [ 1449.329851] SyS_ioctl+0x7f/0xb0 [ 1449.333209] ? do_vfs_ioctl+0xff0/0xff0 [ 1449.337195] do_syscall_64+0x1d5/0x640 [ 1449.341084] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1449.346261] RIP: 0033:0x4665d9 [ 1449.349969] RSP: 002b:00007f696b00b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1449.357689] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1449.366300] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1449.373561] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1449.380824] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1449.388098] R13: 00007ffd618ef30f R14: 00007f696b00b300 R15: 0000000000022000 [ 1449.404912] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1449.415748] warn_alloc_show_mem: 1 callbacks suppressed [ 1449.415752] Mem-Info: [ 1449.431741] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1449.451001] CPU: 0 PID: 10942 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1449.451045] active_anon:12898 inactive_anon:22982 isolated_anon:0 [ 1449.451045] active_file:1147 inactive_file:1112 isolated_file:0 [ 1449.451045] unevictable:0 dirty:14 writeback:0 unstable:0 [ 1449.451045] slab_reclaimable:13526 slab_unreclaimable:120609 [ 1449.451045] mapped:54536 shmem:23312 pagetables:787 bounce:0 [ 1449.451045] free:35053 free_pcp:398 free_cma:0 [ 1449.458920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1449.458925] Call Trace: [ 1449.458947] dump_stack+0x1b2/0x281 [ 1449.458960] warn_alloc.cold+0x96/0x1cc [ 1449.458972] ? zone_watermark_ok_safe+0x220/0x220 [ 1449.458993] __alloc_pages_nodemask+0x2127/0x2720 [ 1449.459011] ? lock_acquire+0x170/0x3f0 [ 1449.459025] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1449.459042] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1449.459055] ? __mutex_unlock_slowpath+0x75/0x770 [ 1449.459070] alloc_pages_current+0x155/0x260 [ 1449.459083] ion_page_pool_alloc+0x118/0x1b0 [ 1449.459092] ion_system_heap_allocate+0x133/0x8c0 [ 1449.459103] ? _raw_spin_unlock+0x29/0x40 [ 1449.459112] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1449.459121] ? ion_system_contig_heap_create+0x130/0x130 [ 1449.459133] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1449.459144] ion_alloc+0x27a/0x810 [ 1449.459157] ? ion_dma_buf_release+0x40/0x40 [ 1449.459186] ? __might_fault+0x177/0x1b0 [ 1449.589502] ion_ioctl+0xea/0x1f0 [ 1449.592964] ? ion_query_heaps+0x360/0x360 [ 1449.596909] Node 0 active_anon:49088kB inactive_anon:55736kB active_file:4532kB inactive_file:4392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137732kB dirty:44kB writeback:0kB shmem:56864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1449.597225] ? ion_query_heaps+0x360/0x360 [ 1449.629602] do_vfs_ioctl+0x75a/0xff0 [ 1449.633417] ? ioctl_preallocate+0x1a0/0x1a0 [ 1449.637835] ? lock_downgrade+0x740/0x740 [ 1449.641994] ? __fget+0x225/0x360 [ 1449.645483] ? do_vfs_ioctl+0xff0/0xff0 [ 1449.649470] ? security_file_ioctl+0x83/0xb0 [ 1449.653903] SyS_ioctl+0x7f/0xb0 [ 1449.657293] ? do_vfs_ioctl+0xff0/0xff0 [ 1449.661279] do_syscall_64+0x1d5/0x640 [ 1449.665214] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1449.670526] RIP: 0033:0x4665d9 [ 1449.673714] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1449.681515] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1449.688789] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1449.696060] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1449.703334] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1449.710625] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1449.748235] Node 1 active_anon:2504kB inactive_anon:36192kB active_file:56kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:80412kB dirty:12kB writeback:0kB shmem:36384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1449.855336] Node 0 DMA free:11096kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 00:41:29 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) [ 1449.944486] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1449.958527] Node 0 DMA32 free:118040kB min:36200kB low:45248kB high:54296kB active_anon:49188kB inactive_anon:55736kB active_file:5036kB inactive_file:5732kB unevictable:0kB writepending:44kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2296kB bounce:0kB free_pcp:1332kB local_pcp:680kB free_cma:0kB 00:41:29 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) [ 1450.072409] lowmem_reserve[]: 0 0 0 0 0 [ 1450.080956] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1450.232207] lowmem_reserve[]: 0 0 0 0 0 [ 1450.258456] Node 1 Normal free:78020kB min:53696kB low:67120kB high:80544kB active_anon:2496kB inactive_anon:36192kB active_file:48kB inactive_file:3832kB unevictable:0kB writepending:32kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:748kB bounce:0kB free_pcp:156kB local_pcp:128kB free_cma:0kB [ 1450.278365] systemd[1]: Started Journal Service. [ 1450.386157] lowmem_reserve[]: 0 0 0 0 0 [ 1450.402378] Node 0 DMA: 15*4kB (UE) 2*8kB (U) 1*16kB (E) 1*32kB (E) 1*64kB (E) 3*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11068kB [ 1450.464573] Node 0 DMA32: 0*4kB 1*8kB (U) 1*16kB (M) 346*32kB (UE) 318*64kB (UME) 13*128kB (U) 1*256kB (U) 1*512kB (M) 1*1024kB (U) 0*2048kB 0*4096kB = 34904kB [ 1450.522551] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1450.557592] Node 1 Normal: 21*4kB (UME) 12*8kB (UME) 4*16kB (UME) 134*32kB (UM) 60*64kB (UM) 3*128kB (UME) 46*256kB (UME) 28*512kB (UME) 19*1024kB (UE) 0*2048kB 0*4096kB = 54324kB [ 1450.620341] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1450.651030] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1450.687331] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1450.724955] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1450.758108] 27599 total pagecache pages [ 1450.771346] 0 pages in swap cache [ 1450.793894] Swap cache stats: add 0, delete 0, find 0/0 [ 1450.818086] Free swap = 0kB [ 1450.829064] Total swap = 0kB [ 1450.842527] 2097051 pages RAM [ 1450.852377] 0 pages HighMem/MovableOnly [ 1450.867871] 363849 pages reserved [ 1450.886020] 0 pages cma reserved [ 1451.319307] oom_reaper: reaped process 11101 (syz-executor.1), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 1451.958877] oom_reaper: reaped process 11098 (syz-executor.3), now anon-rss:0kB, file-rss:4kB, shmem-rss:0kB [ 1452.047658] systemd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1452.084902] systemd cpuset=/ mems_allowed=0-1 [ 1452.089920] CPU: 0 PID: 1 Comm: systemd Not tainted 4.14.232-syzkaller #0 [ 1452.096847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1452.106203] Call Trace: [ 1452.109322] dump_stack+0x1b2/0x281 [ 1452.113122] dump_header+0x178/0x82f [ 1452.116831] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1452.122280] ? ___ratelimit+0x2cd/0x530 [ 1452.126354] oom_kill_process.cold+0x10/0xa40 [ 1452.130873] ? lock_downgrade+0x740/0x740 [ 1452.135025] out_of_memory+0x2dc/0x1190 [ 1452.139142] ? oom_killer_disable+0x1c0/0x1c0 [ 1452.143727] ? mutex_trylock+0x152/0x1a0 [ 1452.147808] __alloc_pages_nodemask+0x23e1/0x2720 [ 1452.152842] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1452.157797] alloc_pages_current+0x155/0x260 [ 1452.162475] filemap_fault+0x11a1/0x1ad0 [ 1452.168113] ext4_filemap_fault+0x84/0xb0 [ 1452.172263] __do_fault+0xfa/0x380 [ 1452.175902] __handle_mm_fault+0x2497/0x4620 [ 1452.180319] ? vm_insert_page+0x7c0/0x7c0 [ 1452.184477] ? lock_downgrade+0x740/0x740 [ 1452.188629] ? mark_held_locks+0xa6/0xf0 [ 1452.192686] handle_mm_fault+0x455/0x9c0 [ 1452.196760] __do_page_fault+0x549/0xad0 [ 1452.200814] ? spurious_fault+0x640/0x640 [ 1452.204971] ? do_page_fault+0x60/0x500 [ 1452.209031] ? page_fault+0x2f/0x50 [ 1452.212646] page_fault+0x45/0x50 [ 1452.216090] RIP: 7fbe06c0:0x55cc7e4caa20 [ 1452.220139] RSP: 7e4b7988:000055cc7fbe06c0 EFLAGS: 7ffeadc5f388 [ 1452.269509] Mem-Info: [ 1452.278140] active_anon:12903 inactive_anon:22981 isolated_anon:0 [ 1452.278140] active_file:32 inactive_file:15 isolated_file:2 [ 1452.278140] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1452.278140] slab_reclaimable:13255 slab_unreclaimable:122959 [ 1452.278140] mapped:44085 shmem:23310 pagetables:785 bounce:0 [ 1452.278140] free:17663 free_pcp:270 free_cma:0 [ 1452.312528] Node 0 active_anon:49556kB inactive_anon:55732kB active_file:108kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:130444kB dirty:0kB writeback:0kB shmem:56856kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1452.341017] Node 1 active_anon:2056kB inactive_anon:36192kB active_file:20kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:45896kB dirty:0kB writeback:0kB shmem:36384kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1452.370142] Node 0 DMA free:11088kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1452.501428] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1452.524290] Node 0 DMA32 free:44276kB min:36200kB low:45248kB high:54296kB active_anon:49556kB inactive_anon:55732kB active_file:92kB inactive_file:192kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2480kB bounce:0kB free_pcp:824kB local_pcp:180kB free_cma:0kB [ 1452.589151] lowmem_reserve[]: 0 0 0 0 0 [ 1452.594438] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1452.651719] lowmem_reserve[]: 0 0 0 0 0 [ 1452.672641] Node 1 Normal free:82780kB min:53696kB low:67120kB high:80544kB active_anon:2056kB inactive_anon:36192kB active_file:0kB inactive_file:60kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:660kB bounce:0kB free_pcp:164kB local_pcp:164kB free_cma:0kB [ 1452.768250] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1452.786572] lowmem_reserve[]: 0 0 0 0 0 [ 1452.800609] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1452.800641] Node 0 [ 1452.805802] CPU: 0 PID: 11112 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1452.805808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1452.805811] Call Trace: [ 1452.805833] dump_stack+0x1b2/0x281 [ 1452.805847] warn_alloc.cold+0x96/0x1cc [ 1452.805858] ? zone_watermark_ok_safe+0x220/0x220 [ 1452.805882] __alloc_pages_nodemask+0x2127/0x2720 [ 1452.805894] ? _raw_spin_unlock_irq+0x24/0x80 [ 1452.805909] ? lock_acquire+0x170/0x3f0 [ 1452.805925] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1452.805942] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1452.805955] ? __mutex_unlock_slowpath+0x75/0x770 [ 1452.805966] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1452.805979] alloc_pages_current+0x155/0x260 [ 1452.805989] ion_page_pool_alloc+0x118/0x1b0 [ 1452.806000] ion_system_heap_allocate+0x133/0x8c0 [ 1452.889556] ? ion_alloc+0x187/0x810 [ 1452.893265] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1452.898710] ? ion_system_contig_heap_create+0x130/0x130 [ 1452.904161] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1452.909174] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1452.914114] ion_alloc+0x204/0x810 [ 1452.917650] ? ion_dma_buf_release+0x40/0x40 [ 1452.922228] ? __might_fault+0x177/0x1b0 [ 1452.926288] ion_ioctl+0xea/0x1f0 [ 1452.929754] ? ion_query_heaps+0x360/0x360 [ 1452.933982] ? ion_query_heaps+0x360/0x360 [ 1452.938313] do_vfs_ioctl+0x75a/0xff0 [ 1452.942108] ? ioctl_preallocate+0x1a0/0x1a0 [ 1452.946507] ? lock_downgrade+0x740/0x740 [ 1452.950650] ? __fget+0x225/0x360 [ 1452.954095] ? do_vfs_ioctl+0xff0/0xff0 [ 1452.958067] ? security_file_ioctl+0x83/0xb0 [ 1452.962470] SyS_ioctl+0x7f/0xb0 [ 1452.965847] ? do_vfs_ioctl+0xff0/0xff0 [ 1452.969814] do_syscall_64+0x1d5/0x640 [ 1452.973702] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1452.978888] RIP: 0033:0x4665d9 [ 1452.982066] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1452.989767] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1452.997055] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1453.004352] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1453.011717] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1453.018984] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1453.031172] Bluetooth: hci0 command 0x0409 tx timeout [ 1453.054905] DMA: 1*4kB (E) 0*8kB 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10964kB [ 1453.094839] Node 0 DMA32: 241*4kB (UME) 149*8kB (UME) 159*16kB (UME) 232*32kB (UME) 85*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17564kB [ 1453.099260] warn_alloc_show_mem: 2 callbacks suppressed [ 1453.099265] Mem-Info: [ 1453.112566] syz-executor.3: [ 1453.124942] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1453.128214] page allocation failure: order:0 [ 1453.141574] active_anon:12865 inactive_anon:22983 isolated_anon:0 [ 1453.141574] active_file:38 inactive_file:27 isolated_file:0 [ 1453.141574] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1453.141574] slab_reclaimable:13255 slab_unreclaimable:123133 [ 1453.141574] mapped:44033 shmem:23313 pagetables:765 bounce:0 [ 1453.141574] free:16104 free_pcp:186 free_cma:0 [ 1453.158115] Node 0 [ 1453.183339] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1453.193254] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1453.194927] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1453.203497] CPU: 1 PID: 10942 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1453.211385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1453.220826] Call Trace: [ 1453.223416] dump_stack+0x1b2/0x281 [ 1453.224897] Normal: 0*4kB [ 1453.227044] warn_alloc.cold+0x96/0x1cc [ 1453.227057] ? zone_watermark_ok_safe+0x220/0x220 [ 1453.229904] 0*8kB [ 1453.233904] ? usleep_range+0x130/0x130 [ 1453.244855] ? try_to_free_pages+0x23f/0x6e0 [ 1453.249260] ? _find_next_bit+0xdb/0x100 [ 1453.253331] ? run_timer_softirq+0x5a0/0x5a0 [ 1453.257767] __alloc_pages_nodemask+0x2127/0x2720 [ 1453.262620] ? lock_acquire+0x170/0x3f0 [ 1453.266185] 0*16kB 0*32kB 0*64kB [ 1453.266604] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1453.266616] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1453.279393] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1453.284863] ? retint_kernel+0x2d/0x2d [ 1453.288761] alloc_pages_current+0x155/0x260 [ 1453.293198] ion_page_pool_alloc+0x118/0x1b0 [ 1453.297610] ion_system_heap_allocate+0x133/0x8c0 [ 1453.298078] 0*128kB [ 1453.302454] ? _raw_spin_unlock+0x29/0x40 [ 1453.302464] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1453.302474] ? ion_system_contig_heap_create+0x130/0x130 [ 1453.302487] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1453.302497] ion_alloc+0x27a/0x810 [ 1453.302511] ? ion_dma_buf_release+0x40/0x40 [ 1453.302523] ? __might_fault+0x177/0x1b0 [ 1453.302535] ion_ioctl+0xea/0x1f0 [ 1453.302544] ? ion_query_heaps+0x360/0x360 [ 1453.302557] ? ion_query_heaps+0x360/0x360 [ 1453.302568] do_vfs_ioctl+0x75a/0xff0 [ 1453.302583] ? ioctl_preallocate+0x1a0/0x1a0 [ 1453.323640] 0*256kB [ 1453.324266] ? lock_downgrade+0x740/0x740 [ 1453.335204] 0*512kB [ 1453.336240] ? __fget+0x225/0x360 [ 1453.336252] ? do_vfs_ioctl+0xff0/0xff0 [ 1453.336265] ? security_file_ioctl+0x83/0xb0 [ 1453.336275] SyS_ioctl+0x7f/0xb0 [ 1453.336283] ? do_vfs_ioctl+0xff0/0xff0 [ 1453.336295] do_syscall_64+0x1d5/0x640 [ 1453.336310] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1453.336321] RIP: 0033:0x4665d9 [ 1453.346211] 0*1024kB [ 1453.348203] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1453.348214] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1453.348220] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1453.348228] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1453.354238] 0*2048kB [ 1453.356425] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1453.356431] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1453.450496] CPU: 1 PID: 11098 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1453.458397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1453.467842] Call Trace: [ 1453.470445] dump_stack+0x1b2/0x281 [ 1453.474270] warn_alloc.cold+0x96/0x1cc [ 1453.478278] ? zone_watermark_ok_safe+0x220/0x220 [ 1453.483680] ? usleep_range+0x130/0x130 [ 1453.487659] ? try_to_free_pages+0x23f/0x6e0 [ 1453.492198] ? _find_next_bit+0xdb/0x100 [ 1453.496271] ? run_timer_softirq+0x5a0/0x5a0 [ 1453.500796] __alloc_pages_nodemask+0x2127/0x2720 [ 1453.505654] ? lock_acquire+0x170/0x3f0 [ 1453.509732] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1453.514583] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1453.519224] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1453.524701] alloc_pages_current+0x155/0x260 [ 1453.529136] ion_page_pool_alloc+0x118/0x1b0 [ 1453.533559] ion_system_heap_allocate+0x133/0x8c0 [ 1453.538415] ? ion_alloc+0x187/0x810 [ 1453.542164] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1453.547630] ? ion_system_contig_heap_create+0x130/0x130 [ 1453.553085] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1453.558109] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1453.562956] ion_alloc+0x204/0x810 [ 1453.566502] ? ion_dma_buf_release+0x40/0x40 [ 1453.570911] ? __might_fault+0x177/0x1b0 [ 1453.574980] ion_ioctl+0xea/0x1f0 [ 1453.578437] ? ion_query_heaps+0x360/0x360 [ 1453.582681] ? ion_query_heaps+0x360/0x360 [ 1453.586923] do_vfs_ioctl+0x75a/0xff0 [ 1453.590753] ? ioctl_preallocate+0x1a0/0x1a0 [ 1453.595168] ? lock_downgrade+0x740/0x740 [ 1453.599330] ? __fget+0x225/0x360 [ 1453.602785] ? do_vfs_ioctl+0xff0/0xff0 [ 1453.606872] ? security_file_ioctl+0x83/0xb0 [ 1453.611305] SyS_ioctl+0x7f/0xb0 [ 1453.614682] ? do_vfs_ioctl+0xff0/0xff0 [ 1453.618662] do_syscall_64+0x1d5/0x640 [ 1453.622571] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1453.623888] 0*4096kB [ 1453.627774] RIP: 0033:0x4665d9 [ 1453.627779] RSP: 002b:00007f2e9a53f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1453.627788] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1453.627793] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1453.627798] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1453.627802] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1453.627807] R13: 00007ffe42256d6f R14: 00007f2e9a53f300 R15: 0000000000022000 [ 1453.659001] Node 0 active_anon:49408kB inactive_anon:55736kB active_file:796kB inactive_file:1392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131812kB dirty:0kB writeback:0kB shmem:56864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1453.721647] Node 1 active_anon:2052kB inactive_anon:36196kB active_file:340kB inactive_file:2032kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47520kB dirty:0kB writeback:0kB shmem:36388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1453.760770] = 0kB [ 1453.762977] Node 1 Normal: 14*4kB (UM) 10*8kB (U) 194*16kB (UE) 957*32kB (UM) 518*64kB (U) 36*128kB (U) 11*256kB (UM) 5*512kB (UM) 2*1024kB (U) 0*2048kB 0*4096kB = 79048kB [ 1453.790687] Node 0 DMA free:11056kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1453.822604] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1453.825090] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1453.828956] Node 0 DMA32 free:47144kB min:36200kB low:45248kB high:54296kB active_anon:49408kB inactive_anon:55736kB active_file:616kB inactive_file:1432kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2400kB bounce:0kB free_pcp:1360kB local_pcp:660kB free_cma:0kB [ 1453.884912] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1453.928382] lowmem_reserve[]: 0 0 0 0 0 [ 1453.932421] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1453.933878] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1453.988303] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1454.012736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1454.044998] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1454.045003] 25426 total pagecache pages [ 1454.045012] 0 pages in swap cache [ 1454.045017] Swap cache stats: add 0, delete 0, find 0/0 [ 1454.045020] Free swap = 0kB [ 1454.045023] Total swap = 0kB [ 1454.045031] 2097051 pages RAM [ 1454.045034] 0 pages HighMem/MovableOnly [ 1454.045037] 363849 pages reserved [ 1454.045040] 0 pages cma reserved [ 1454.045047] Out of memory: Kill process 11111 (syz-executor.5) score 1004 or sacrifice child [ 1454.045072] Killed process 11112 (syz-executor.5) total-vm:93252kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 1454.072034] oom_reaper: reaped process 11112 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 00:41:33 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) socket$can_bcm(0x1d, 0x2, 0x2) [ 1454.118595] lowmem_reserve[]: 0 0 0 0 0 [ 1454.118621] Node 1 Normal free:479816kB min:53696kB low:67120kB high:80544kB active_anon:2080kB inactive_anon:36196kB active_file:520kB inactive_file:5548kB unevictable:0kB writepending:48kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:660kB bounce:0kB free_pcp:816kB local_pcp:172kB free_cma:0kB [ 1454.118645] lowmem_reserve[]: 0 0 0 0 0 [ 1454.118665] Node 0 DMA: 15*4kB (UE) 0*8kB 1*16kB (E) 2*32kB (UE) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11084kB [ 1454.118743] Node 0 DMA32: 120*4kB (E) 83*8kB (ME) 348*16kB (UE) 708*32kB (UME) 243*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44920kB [ 1454.118805] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1454.118853] Node 1 Normal: 4*4kB (UM) 3*8kB (UM) 522*16kB (UE) 1106*32kB (U) 611*64kB (UM) 37*128kB (UM) 10*256kB (UM) 5*512kB (U) 263*1024kB (UM) 54*2048kB (UM) 2*4096kB (U) = 480840kB [ 1454.118930] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1454.118936] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1454.118943] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1454.118949] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1454.118953] 25722 total pagecache pages [ 1454.118963] 0 pages in swap cache [ 1454.118969] Swap cache stats: add 0, delete 0, find 0/0 [ 1454.118972] Free swap = 0kB [ 1454.118976] Total swap = 0kB [ 1454.118982] 2097051 pages RAM [ 1454.118985] 0 pages HighMem/MovableOnly [ 1454.118989] 363849 pages reserved [ 1454.118992] 0 pages cma reserved [ 1454.783013] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1454.783030] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1454.783052] CPU: 1 PID: 8037 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1454.783057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1454.783061] Call Trace: [ 1454.783079] dump_stack+0x1b2/0x281 [ 1454.783092] dump_header+0x178/0x82f [ 1454.783103] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1454.783113] ? ___ratelimit+0x2cd/0x530 [ 1454.783124] oom_kill_process.cold+0x10/0xa40 [ 1454.783144] out_of_memory+0xe3e/0x1190 [ 1454.783159] ? oom_killer_disable+0x1c0/0x1c0 [ 1454.783167] ? mutex_trylock+0x152/0x1a0 [ 1454.783179] __alloc_pages_nodemask+0x23e1/0x2720 [ 1454.783202] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1454.783230] alloc_pages_current+0x155/0x260 [ 1454.783241] filemap_fault+0x11a1/0x1ad0 [ 1454.783269] ext4_filemap_fault+0x84/0xb0 [ 1454.783280] __do_fault+0xfa/0x380 [ 1454.783291] __handle_mm_fault+0x2497/0x4620 [ 1454.783302] ? vm_insert_page+0x7c0/0x7c0 [ 1454.783310] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1454.783319] ? nanosleep_copyout+0x100/0x100 [ 1454.783336] ? mark_held_locks+0xa6/0xf0 [ 1454.783348] handle_mm_fault+0x455/0x9c0 [ 1454.783361] __do_page_fault+0x549/0xad0 [ 1454.783374] ? spurious_fault+0x640/0x640 [ 1454.783383] ? do_page_fault+0x60/0x500 [ 1454.783392] ? page_fault+0x2f/0x50 [ 1454.783400] page_fault+0x45/0x50 [ 1454.783407] RIP: 163154:0x4 [ 1454.783412] RSP: 0028:00007ffdbfddd46c EFLAGS: 00000032 [ 1454.783426] Mem-Info: [ 1454.783446] active_anon:12923 inactive_anon:22983 isolated_anon:0 [ 1454.783446] active_file:171 inactive_file:151 isolated_file:0 [ 1454.783446] unevictable:0 dirty:20 writeback:0 unstable:0 [ 1454.783446] slab_reclaimable:13253 slab_unreclaimable:122915 [ 1454.783446] mapped:52946 shmem:23313 pagetables:809 bounce:0 [ 1454.783446] free:14146 free_pcp:579 free_cma:0 [ 1454.783462] Node 0 active_anon:49612kB inactive_anon:55736kB active_file:92kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150008kB dirty:32kB writeback:0kB shmem:56864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1454.783477] Node 1 active_anon:2080kB inactive_anon:36196kB active_file:592kB inactive_file:588kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:61776kB dirty:48kB writeback:0kB shmem:36388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1454.783481] Node 0 DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1454.783500] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1454.783521] Node 0 DMA32 free:18352kB min:36200kB low:45248kB high:54296kB active_anon:49612kB inactive_anon:55736kB active_file:292kB inactive_file:384kB unevictable:0kB writepending:32kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2428kB bounce:0kB free_pcp:860kB local_pcp:204kB free_cma:0kB [ 1454.783541] lowmem_reserve[]: 0 0 0 0 0 [ 1454.783562] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1454.783580] lowmem_reserve[]: 0 0 0 0 0 [ 1454.783601] Node 1 Normal free:27264kB min:53696kB low:67120kB high:80544kB active_anon:2080kB inactive_anon:36196kB active_file:1112kB inactive_file:1036kB unevictable:0kB writepending:48kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:808kB bounce:0kB free_pcp:1456kB local_pcp:724kB free_cma:0kB [ 1454.783620] lowmem_reserve[]: 0 0 0 0 0 [ 1454.783641] Node 0 DMA: 2*4kB (UE) 0*8kB 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10968kB [ 1454.783722] Node 0 DMA32: 279*4kB (UME) 197*8kB (UME) 172*16kB (UME) 27*32kB (UME) 2*64kB (M) 46*128kB (UM) 22*256kB (U) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 18468kB [ 1454.783797] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1454.783847] Node 1 Normal: 101*4kB (UM) 69*8kB (UM) 53*16kB (UME) 41*32kB (UM) 18*64kB (UM) 9*128kB (UM) 3*256kB (UM) 42*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 27692kB [ 1454.783924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1454.783931] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1454.783937] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1454.783943] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1454.783947] 23627 total pagecache pages [ 1454.783957] 0 pages in swap cache [ 1454.783962] Swap cache stats: add 0, delete 0, find 0/0 [ 1454.783966] Free swap = 0kB [ 1454.783969] Total swap = 0kB [ 1454.783975] 2097051 pages RAM [ 1454.783979] 0 pages HighMem/MovableOnly [ 1454.783982] 363849 pages reserved [ 1454.783986] 0 pages cma reserved [ 1454.783993] Out of memory (oom_kill_allocating_task): Kill process 8037 (syz-executor.0) score 0 or sacrifice child [ 1454.784026] Killed process 11123 (syz-executor.0) total-vm:93384kB, anon-rss:108kB, file-rss:33752kB, shmem-rss:0kB [ 1454.793381] oom_reaper: reaped process 11123 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1454.815204] syz-executor.0: [ 1454.857204] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1454.893344] page allocation failure: order:4 [ 1454.916431] (null) [ 1454.930520] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1454.931462] , order=0, oom_score_adj=0 [ 1454.938317] (null) [ 1454.938970] systemd-journal cpuset= [ 1454.941905] syz-executor.0 cpuset= [ 1454.947375] / [ 1455.369645] / [ 1455.369880] mems_allowed=0-1 [ 1455.377537] Bluetooth: hci0 command 0x041b tx timeout [ 1455.382460] mems_allowed=0-1 [ 1455.383672] syz-executor.3: [ 1455.387385] CPU: 1 PID: 11124 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1455.394886] page allocation failure: order:4 [ 1455.398268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1455.398280] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1455.402667] Call Trace: [ 1455.422062] dump_stack+0x1b2/0x281 [ 1455.425701] warn_alloc.cold+0x96/0x1cc [ 1455.429682] ? zone_watermark_ok_safe+0x220/0x220 [ 1455.434542] __alloc_pages_nodemask+0x2127/0x2720 [ 1455.439506] ? lock_acquire+0x170/0x3f0 [ 1455.443500] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1455.448720] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1455.454175] ? __mutex_unlock_slowpath+0x75/0x770 [ 1455.459021] ? alloc_pages_current+0x21c/0x260 [ 1455.459271] (null) [ 1455.463606] alloc_pages_current+0x155/0x260 [ 1455.470366] ion_page_pool_alloc+0x118/0x1b0 [ 1455.475652] ion_system_heap_allocate+0x133/0x8c0 [ 1455.476655] syz-executor.3 cpuset= [ 1455.482510] ? ion_alloc+0x187/0x810 [ 1455.482512] / mems_allowed=0-1 [ 1455.486175] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1455.486187] ? ion_system_contig_heap_create+0x130/0x130 [ 1455.486197] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1455.486209] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1455.486221] ion_alloc+0x204/0x810 [ 1455.517739] ? ion_dma_buf_release+0x40/0x40 [ 1455.522152] ? __might_fault+0x177/0x1b0 [ 1455.526211] ion_ioctl+0xea/0x1f0 [ 1455.529668] ? ion_query_heaps+0x360/0x360 [ 1455.533947] ? ion_query_heaps+0x360/0x360 [ 1455.538201] do_vfs_ioctl+0x75a/0xff0 [ 1455.542002] ? ioctl_preallocate+0x1a0/0x1a0 [ 1455.546409] ? lock_downgrade+0x740/0x740 [ 1455.550561] ? __fget+0x225/0x360 [ 1455.554024] ? do_vfs_ioctl+0xff0/0xff0 [ 1455.557995] ? security_file_ioctl+0x83/0xb0 [ 1455.562400] SyS_ioctl+0x7f/0xb0 [ 1455.565758] ? do_vfs_ioctl+0xff0/0xff0 [ 1455.569728] do_syscall_64+0x1d5/0x640 [ 1455.573616] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1455.578884] RIP: 0033:0x4665d9 [ 1455.582074] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1455.589779] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1455.597046] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1455.604334] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1455.611695] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1455.619051] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1455.626335] CPU: 0 PID: 11098 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1455.633830] warn_alloc_show_mem: 2 callbacks suppressed [ 1455.633834] Mem-Info: [ 1455.634246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1455.639912] active_anon:12911 inactive_anon:22983 isolated_anon:0 [ 1455.639912] active_file:14 inactive_file:14 isolated_file:0 [ 1455.639912] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1455.639912] slab_reclaimable:13253 slab_unreclaimable:122909 [ 1455.639912] mapped:52719 shmem:23313 pagetables:809 bounce:0 [ 1455.639912] free:13846 free_pcp:60 free_cma:0 [ 1455.642121] Call Trace: [ 1455.657120] Node 0 active_anon:49544kB inactive_anon:55736kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150060kB dirty:4kB writeback:0kB shmem:56864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1455.684734] dump_stack+0x1b2/0x281 [ 1455.684749] warn_alloc.cold+0x96/0x1cc [ 1455.684760] ? zone_watermark_ok_safe+0x220/0x220 [ 1455.684781] __alloc_pages_nodemask+0x2127/0x2720 [ 1455.684790] ? __schedule+0x893/0x1de0 [ 1455.684804] ? lock_acquire+0x170/0x3f0 [ 1455.684824] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1455.684840] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1455.684852] ? __mutex_unlock_slowpath+0x75/0x770 [ 1455.684867] alloc_pages_current+0x155/0x260 [ 1455.684880] ion_page_pool_alloc+0x118/0x1b0 [ 1455.684889] ion_system_heap_allocate+0x133/0x8c0 [ 1455.684901] ? _raw_spin_unlock+0x29/0x40 [ 1455.684909] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1455.684918] ? ion_system_contig_heap_create+0x130/0x130 [ 1455.684933] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1455.693753] Node 1 active_anon:2100kB inactive_anon:36196kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60816kB dirty:8kB writeback:0kB shmem:36388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1455.715412] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1455.715425] ion_alloc+0x27a/0x810 [ 1455.715439] ? ion_dma_buf_release+0x40/0x40 [ 1455.715450] ? __might_fault+0x177/0x1b0 [ 1455.715460] ion_ioctl+0xea/0x1f0 [ 1455.715468] ? ion_query_heaps+0x360/0x360 [ 1455.715479] ? ion_query_heaps+0x360/0x360 [ 1455.715488] do_vfs_ioctl+0x75a/0xff0 [ 1455.715498] ? ioctl_preallocate+0x1a0/0x1a0 [ 1455.715508] ? lock_downgrade+0x740/0x740 [ 1455.715520] ? __fget+0x225/0x360 [ 1455.715529] ? do_vfs_ioctl+0xff0/0xff0 [ 1455.715541] ? security_file_ioctl+0x83/0xb0 [ 1455.715550] SyS_ioctl+0x7f/0xb0 [ 1455.715557] ? do_vfs_ioctl+0xff0/0xff0 [ 1455.715574] do_syscall_64+0x1d5/0x640 [ 1455.725311] Node 0 [ 1455.728018] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1455.732857] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1455.736717] RIP: 0033:0x4665d9 [ 1455.736722] RSP: 002b:00007f2e9a53f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1455.736731] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1455.736736] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1455.736740] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1455.736744] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1455.736749] R13: 00007ffe42256d6f R14: 00007f2e9a53f300 R15: 0000000000022000 [ 1455.737018] syz-executor.5: [ 1455.746305] lowmem_reserve[]: [ 1455.765113] CPU: 0 PID: 11091 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1455.784702] page allocation failure: order:0 [ 1455.784924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1455.784928] Call Trace: [ 1455.784946] dump_stack+0x1b2/0x281 [ 1455.784958] dump_header+0x178/0x82f [ 1455.784968] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1455.784977] ? ___ratelimit+0x2cd/0x530 [ 1455.784987] oom_kill_process.cold+0x10/0xa40 [ 1455.785006] out_of_memory+0xe3e/0x1190 [ 1455.785019] ? oom_killer_disable+0x1c0/0x1c0 [ 1455.785030] ? mutex_trylock+0x152/0x1a0 [ 1455.796271] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1455.817284] __alloc_pages_nodemask+0x23e1/0x2720 [ 1455.817305] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1455.817327] alloc_pages_current+0x155/0x260 [ 1455.817339] filemap_fault+0x11a1/0x1ad0 [ 1455.817357] ext4_filemap_fault+0x84/0xb0 [ 1455.817367] __do_fault+0xfa/0x380 [ 1455.817376] __handle_mm_fault+0x2497/0x4620 [ 1455.817386] ? vm_insert_page+0x7c0/0x7c0 [ 1455.817402] ? mark_held_locks+0xa6/0xf0 [ 1455.817412] handle_mm_fault+0x455/0x9c0 [ 1455.817423] __do_page_fault+0x549/0xad0 [ 1455.817436] ? spurious_fault+0x640/0x640 [ 1455.817447] ? do_page_fault+0x60/0x500 [ 1455.824952] 0 [ 1455.825824] ? page_fault+0x2f/0x50 [ 1455.830208] 2717 [ 1455.834257] page_fault+0x45/0x50 [ 1455.862720] 2718 [ 1455.865970] RIP: 0001:0xffffffffffffffff [ 1455.865975] RSP: 37d681e0:00007fff29463b00 EFLAGS: 7fff29463910 [ 1455.878394] Mem-Info: [ 1455.894422] (null) [ 1455.956034] active_anon:12911 inactive_anon:22983 isolated_anon:0 [ 1455.956034] active_file:14 inactive_file:14 isolated_file:0 [ 1455.956034] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1455.956034] slab_reclaimable:13253 slab_unreclaimable:122909 [ 1455.956034] mapped:52719 shmem:23313 pagetables:809 bounce:0 [ 1455.956034] free:13870 free_pcp:30 free_cma:0 [ 1456.001586] 2718 [ 1456.010655] Node 0 active_anon:49544kB inactive_anon:55736kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150060kB dirty:4kB writeback:0kB shmem:56864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1456.026266] syz-executor.1: [ 1456.027248] syz-executor.3: [ 1456.034289] page allocation failure: order:0 [ 1456.044153] Node 1 active_anon:2100kB inactive_anon:36196kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60816kB dirty:8kB writeback:0kB shmem:36388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1456.061892] 2718 [ 1456.068917] page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1456.068936] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1456.068957] CPU: 0 PID: 11098 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1456.068963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1456.068967] Call Trace: [ 1456.068987] dump_stack+0x1b2/0x281 [ 1456.069002] warn_alloc.cold+0x96/0x1cc [ 1456.085459] ? zone_watermark_ok_safe+0x220/0x220 [ 1456.085470] ? usleep_range+0x130/0x130 [ 1456.085479] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1456.085491] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1456.085502] ? run_timer_softirq+0x5a0/0x5a0 [ 1456.089468] Node 0 [ 1456.091267] __alloc_pages_nodemask+0x2127/0x2720 [ 1456.109083] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1456.112608] ? lock_acquire+0x170/0x3f0 [ 1456.124347] DMA32 free:18116kB min:36200kB low:45248kB high:54296kB active_anon:49544kB inactive_anon:55736kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2448kB bounce:0kB free_pcp:328kB local_pcp:0kB free_cma:0kB [ 1456.150566] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1456.150576] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1456.150592] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1456.150609] alloc_pages_current+0x155/0x260 [ 1456.150621] ion_page_pool_alloc+0x118/0x1b0 [ 1456.150631] ion_system_heap_allocate+0x133/0x8c0 [ 1456.150643] ? _raw_spin_unlock+0x29/0x40 [ 1456.150652] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1456.150661] ? ion_system_contig_heap_create+0x130/0x130 [ 1456.150671] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1456.150681] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1456.150692] ion_alloc+0x27a/0x810 [ 1456.150705] ? ion_dma_buf_release+0x40/0x40 [ 1456.150717] ? __might_fault+0x177/0x1b0 [ 1456.150728] ion_ioctl+0xea/0x1f0 [ 1456.150737] ? ion_query_heaps+0x360/0x360 [ 1456.150748] ? ion_query_heaps+0x360/0x360 [ 1456.166468] (null) [ 1456.180761] do_vfs_ioctl+0x75a/0xff0 [ 1456.180776] ? ioctl_preallocate+0x1a0/0x1a0 [ 1456.180784] ? lock_downgrade+0x740/0x740 [ 1456.180797] ? __fget+0x225/0x360 [ 1456.180805] ? do_vfs_ioctl+0xff0/0xff0 [ 1456.180816] ? security_file_ioctl+0x83/0xb0 [ 1456.180824] SyS_ioctl+0x7f/0xb0 [ 1456.180832] ? do_vfs_ioctl+0xff0/0xff0 [ 1456.180843] do_syscall_64+0x1d5/0x640 [ 1456.180859] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1456.180868] RIP: 0033:0x4665d9 [ 1456.180872] RSP: 002b:00007f2e9a53f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1456.180882] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1456.180887] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1456.180896] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1456.198223] syz-executor.1 cpuset= [ 1456.219384] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1456.219390] R13: 00007ffe42256d6f R14: 00007f2e9a53f300 R15: 0000000000022000 [ 1456.231352] Node 0 [ 1456.263168] lowmem_reserve[]: [ 1456.273944] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1456.284578] syz-executor.5 cpuset= [ 1456.293860] lowmem_reserve[]: [ 1456.305307] 0 [ 1456.324902] 0 [ 1456.346232] / [ 1456.360147] 2717 [ 1456.367625] / [ 1456.381048] 2718 [ 1456.394719] mems_allowed=0-1 [ 1456.406342] 2718 [ 1456.419790] CPU: 1 PID: 11112 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1456.426800] 2718 [ 1456.429043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1456.436530] Call Trace: [ 1456.436554] dump_stack+0x1b2/0x281 [ 1456.436567] warn_alloc.cold+0x96/0x1cc [ 1456.436580] ? zone_watermark_ok_safe+0x220/0x220 [ 1456.436592] ? usleep_range+0x130/0x130 [ 1456.440989] Node 0 [ 1456.444342] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1456.444357] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1456.448377] DMA32 free:18516kB min:36200kB low:45248kB high:54296kB active_anon:49544kB inactive_anon:55736kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2448kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1456.452188] ? run_timer_softirq+0x5a0/0x5a0 [ 1456.457404] lowmem_reserve[]: [ 1456.460557] __alloc_pages_nodemask+0x2127/0x2720 [ 1456.470603] 0 [ 1456.475617] ? lock_acquire+0x170/0x3f0 [ 1456.475641] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1456.475653] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1456.482938] 0 [ 1456.490219] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1456.490230] ? check_preemption_disabled+0x35/0x240 [ 1456.490248] alloc_pages_current+0x155/0x260 [ 1456.490261] ion_page_pool_alloc+0x118/0x1b0 [ 1456.493784] 0 [ 1456.501073] ion_system_heap_allocate+0x133/0x8c0 [ 1456.501083] ? ion_alloc+0x187/0x810 [ 1456.501094] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1456.501104] ? ion_system_contig_heap_create+0x130/0x130 [ 1456.508489] 0 [ 1456.510723] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1456.510738] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1456.513823] 0 [ 1456.540141] ion_alloc+0x204/0x810 [ 1456.540156] ? ion_dma_buf_release+0x40/0x40 [ 1456.540174] ? __might_fault+0x177/0x1b0 [ 1456.540188] ion_ioctl+0xea/0x1f0 [ 1456.546842] ? ion_query_heaps+0x360/0x360 [ 1456.546855] ? ion_query_heaps+0x360/0x360 [ 1456.546866] do_vfs_ioctl+0x75a/0xff0 [ 1456.546877] ? ioctl_preallocate+0x1a0/0x1a0 [ 1456.548660] Node 0 [ 1456.550474] ? lock_downgrade+0x740/0x740 [ 1456.552277] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1456.554319] ? __fget+0x225/0x360 [ 1456.556056] lowmem_reserve[]: [ 1456.558090] ? do_vfs_ioctl+0xff0/0xff0 [ 1456.561170] 0 0 [ 1456.563234] ? security_file_ioctl+0x83/0xb0 [ 1456.571216] 0 [ 1456.573297] SyS_ioctl+0x7f/0xb0 [ 1456.582658] 0 [ 1456.585229] ? do_vfs_ioctl+0xff0/0xff0 [ 1456.585243] do_syscall_64+0x1d5/0x640 [ 1456.585259] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1456.588868] 0 [ 1456.592847] RIP: 0033:0x4665d9 [ 1456.601635] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1456.603859] Node 1 [ 1456.608953] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1456.608958] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1456.608963] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1456.608967] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1456.608972] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1456.631768] 0 [ 1456.643961] device bridge_slave_1 left promiscuous mode [ 1456.647630] mems_allowed=0-1 [ 1456.655141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.664964] CPU: 1 PID: 11101 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1456.681573] Normal free:86104kB min:53696kB low:67120kB high:80544kB active_anon:2100kB inactive_anon:36196kB active_file:20kB inactive_file:3520kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:788kB bounce:0kB free_pcp:0kB local_pcp:120kB free_cma:0kB [ 1456.682466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1456.682470] Call Trace: [ 1456.682489] dump_stack+0x1b2/0x281 [ 1456.682503] warn_alloc.cold+0x96/0x1cc [ 1456.682516] ? zone_watermark_ok_safe+0x220/0x220 [ 1456.682525] ? usleep_range+0x130/0x130 [ 1456.682535] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1456.682547] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1456.682560] ? run_timer_softirq+0x5a0/0x5a0 [ 1456.689317] lowmem_reserve[]: [ 1456.691909] __alloc_pages_nodemask+0x2127/0x2720 [ 1456.691927] ? lock_acquire+0x170/0x3f0 [ 1456.691942] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1456.691952] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1456.691968] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1456.691983] ? alloc_pages_current+0x84/0x260 [ 1456.691993] alloc_pages_current+0x155/0x260 [ 1456.692003] ion_page_pool_alloc+0x118/0x1b0 [ 1456.692014] ion_system_heap_allocate+0x133/0x8c0 [ 1456.694337] 0 [ 1456.698752] ? ion_alloc+0x187/0x810 [ 1456.698763] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1456.698771] ? ion_system_contig_heap_create+0x130/0x130 [ 1456.698780] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1456.698792] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1456.698801] ion_alloc+0x204/0x810 [ 1456.698813] ? ion_dma_buf_release+0x40/0x40 [ 1456.698824] ? __might_fault+0x177/0x1b0 [ 1456.698835] ion_ioctl+0xea/0x1f0 [ 1456.698847] ? ion_query_heaps+0x360/0x360 [ 1456.698858] ? ion_query_heaps+0x360/0x360 [ 1456.698868] do_vfs_ioctl+0x75a/0xff0 [ 1456.698878] ? ioctl_preallocate+0x1a0/0x1a0 [ 1456.698888] ? lock_downgrade+0x740/0x740 [ 1456.698899] ? __fget+0x225/0x360 [ 1456.698907] ? do_vfs_ioctl+0xff0/0xff0 [ 1456.698919] ? security_file_ioctl+0x83/0xb0 [ 1456.698930] SyS_ioctl+0x7f/0xb0 [ 1456.703535] 0 [ 1456.708801] ? do_vfs_ioctl+0xff0/0xff0 [ 1456.708815] do_syscall_64+0x1d5/0x640 [ 1456.708830] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1456.708838] RIP: 0033:0x4665d9 [ 1456.708843] RSP: 002b:00007f696b00b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1456.708854] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1456.708859] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1456.708864] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1456.708869] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1456.708874] R13: 00007ffd618ef30f R14: 00007f696b00b300 R15: 0000000000022000 [ 1456.722405] 0 [ 1456.733982] 0 [ 1456.774959] 0 [ 1456.797867] device bridge_slave_0 left promiscuous mode [ 1456.838744] 0 [ 1456.850678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1456.854956] warn_alloc_show_mem: 2 callbacks suppressed [ 1456.854960] Mem-Info: [ 1456.866550] 0 [ 1456.884661] 0 [ 1456.898135] Node 0 [ 1456.908992] active_anon:12936 inactive_anon:22983 isolated_anon:0 [ 1456.908992] active_file:64 inactive_file:1389 isolated_file:0 [ 1456.908992] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1456.908992] slab_reclaimable:13253 slab_unreclaimable:122488 [ 1456.908992] mapped:53719 shmem:23313 pagetables:809 bounce:0 [ 1456.908992] free:92131 free_pcp:82 free_cma:0 [ 1456.909011] Node 0 active_anon:49544kB inactive_anon:55736kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150060kB dirty:4kB writeback:0kB shmem:56864kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1456.939851] Node 0 [ 1456.968115] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1456.972559] DMA: [ 1456.988156] lowmem_reserve[]: [ 1456.991087] 2*4kB [ 1456.993559] 0 0 0 0 0 [ 1456.993576] Node 1 Normal free:408264kB min:53696kB low:67120kB high:80544kB active_anon:2200kB inactive_anon:36196kB active_file:220kB inactive_file:5620kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:788kB bounce:0kB free_pcp:348kB local_pcp:220kB free_cma:0kB [ 1456.993598] lowmem_reserve[]: 0 0 0 0 0 [ 1456.993616] Node 0 DMA: 2*4kB (UE) 0*8kB 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB [ 1457.000210] (UE) [ 1457.015494] (UE) [ 1457.100119] 0*8kB [ 1457.141325] Node 1 active_anon:2764kB inactive_anon:36200kB active_file:1968kB inactive_file:4940kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:65772kB dirty:44kB writeback:0kB shmem:36396kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1457.172978] 1*16kB (E) [ 1457.177324] Node 0 [ 1457.198975] 2*32kB [ 1457.200705] DMA free:11032kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1457.200709] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1457.200728] Node 0 DMA32 free:50428kB min:36200kB low:45248kB high:54296kB active_anon:49448kB inactive_anon:55740kB active_file:136kB inactive_file:488kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2448kB bounce:0kB free_pcp:152kB local_pcp:76kB free_cma:0kB [ 1457.200750] lowmem_reserve[]: 0 0 0 0 0 [ 1457.200780] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1457.200802] lowmem_reserve[]: 0 0 0 0 0 [ 1457.200823] Node 1 Normal free:481256kB min:53696kB low:67120kB high:80544kB active_anon:2264kB inactive_anon:36200kB active_file:2868kB inactive_file:3788kB unevictable:0kB writepending:44kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:880kB bounce:0kB free_pcp:856kB local_pcp:220kB free_cma:0kB [ 1457.200844] lowmem_reserve[]: 0 0 0 0 0 [ 1457.200865] Node 0 DMA: 2*4kB (UE) 0*8kB 1*16kB (E) 2*32kB (UE) 3*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11032kB [ 1457.200946] Node 0 DMA32: 123*4kB (ME) 261*8kB (UME) 301*16kB (UME) 42*32kB (UME) 115*64kB (UM) [ 1457.203924] (UE) [ 1457.237383] 1*1024kB [ 1457.270638] 168*128kB [ 1457.358323] (E) [ 1457.391146] 2*64kB [ 1457.478127] 2*2048kB [ 1457.478842] Bluetooth: hci0 command 0x040f tx timeout [ 1457.487033] (ME) [ 1457.522520] (U) [ 1457.563967] (UE) [ 1457.564003] device hsr_slave_1 left promiscuous mode [ 1457.574840] 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10968kB [ 1457.584253] Node 0 DMA32: 122*4kB (E) 340*8kB (UME) 358*16kB (UME) 44*32kB (UME) 106*64kB (UM) 168*128kB (U) 24*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 45288kB [ 1457.593028] 1*4096kB [ 1457.605972] device hsr_slave_0 left promiscuous mode [ 1457.614708] (U) = 10968kB [ 1457.621367] Node 0 DMA32: 122*4kB (E) 340*8kB (UME) 358*16kB (UME) 44*32kB (UME) 106*64kB (UM) 168*128kB (U) 24*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 45288kB [ 1457.621706] 24*256kB [ 1457.643087] team0 (unregistering): Port device team_slave_1 removed [ 1457.666462] team0 (unregistering): Port device team_slave_0 removed [ 1457.675428] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1457.696814] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1457.704016] (UM) 1*512kB (M) 6*1024kB (U) 0*2048kB 0*4096kB = 50404kB [ 1457.715214] Node 1 Normal: 2274*4kB (UM) 735*8kB (UM) 384*16kB (UME) 249*32kB (UM) 4*64kB (M) 2*128kB (UM) 23*256kB (UM) 50*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 61088kB [ 1457.718645] Node 0 [ 1457.738558] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1457.751784] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1457.756905] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1457.774942] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1457.796333] Node 1 Normal: 2281*4kB (UM) 741*8kB (UM) 431*16kB (UME) 734*32kB (UM) 628*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 85756kB [ 1457.806227] Node 1 Normal: 2400*4kB (UM) 745*8kB (UM) 438*16kB (UME) 736*32kB (UM) 751*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 94312kB [ 1457.844943] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1457.853547] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1457.859833] bond0 (unregistering): Released all slaves [ 1457.862481] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1457.871453] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1457.894917] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1457.895545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1457.903603] 25159 total pagecache pages [ 1457.916265] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1457.918689] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1457.936693] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1457.954969] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1457.971026] 24709 total pagecache pages [ 1457.975082] 0 pages in swap cache [ 1457.978626] Swap cache stats: add 0, delete 0, find 0/0 [ 1457.984009] Free swap = 0kB [ 1457.984945] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1458.003434] Total swap = 0kB [ 1458.004219] 0 pages in swap cache [ 1458.006556] 2097051 pages RAM [ 1458.006560] 0 pages HighMem/MovableOnly [ 1458.006563] 363849 pages reserved [ 1458.006567] 0 pages cma reserved [ 1458.028620] 23759 total pagecache pages [ 1458.032622] 0 pages in swap cache [ 1458.054980] Swap cache stats: add 0, delete 0, find 0/0 [ 1458.060379] Free swap = 0kB [ 1458.063410] Total swap = 0kB [ 1458.088958] Swap cache stats: add 0, delete 0, find 0/0 [ 1458.094794] Free swap = 0kB [ 1458.098452] Total swap = 0kB [ 1458.101943] 2097051 pages RAM [ 1458.114956] 2097051 pages RAM [ 1458.118083] 0 pages HighMem/MovableOnly [ 1458.122056] 363849 pages reserved [ 1458.128659] 0 pages HighMem/MovableOnly [ 1458.133450] 363849 pages reserved [ 1458.137473] 0 pages cma reserved [ 1458.140850] Out of memory (oom_kill_allocating_task): Kill process 11091 (systemd-journal) score 0 or sacrifice child [ 1458.154895] 0 pages cma reserved [ 1458.158317] Killed process 11091 (systemd-journal) total-vm:46096kB, anon-rss:472kB, file-rss:0kB, shmem-rss:1888kB [ 1458.179742] oom_reaper: reaped process 11091 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1888kB 00:41:37 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) socket$can_bcm(0x1d, 0x2, 0x2) [ 1458.366260] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1458.374792] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1458.388547] systemd[1]: Stopped Journal Service. [ 1458.454233] systemd[1]: Starting Journal Service... [ 1458.674951] Bluetooth: hci5 command 0x0409 tx timeout [ 1458.714663] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1458.729676] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1458.769081] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1458.783891] CPU: 1 PID: 11112 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1458.791783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1458.796301] systemd-journald[11137]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1458.801142] Call Trace: [ 1458.818559] dump_stack+0x1b2/0x281 [ 1458.822190] warn_alloc.cold+0x96/0x1cc [ 1458.826167] ? zone_watermark_ok_safe+0x220/0x220 [ 1458.831022] __alloc_pages_nodemask+0x2127/0x2720 [ 1458.835866] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1458.840364] ? finish_task_switch+0x178/0x610 [ 1458.845817] ? finish_task_switch+0x14d/0x610 [ 1458.850319] ? lock_acquire+0x170/0x3f0 [ 1458.854392] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1458.859249] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1458.864711] ? __mutex_unlock_slowpath+0x75/0x770 [ 1458.869570] alloc_pages_current+0x155/0x260 [ 1458.873994] ion_page_pool_alloc+0x118/0x1b0 [ 1458.878559] ion_system_heap_allocate+0x133/0x8c0 [ 1458.883405] ? _raw_spin_unlock+0x29/0x40 [ 1458.887553] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1458.892484] ? ion_system_contig_heap_create+0x130/0x130 [ 1458.893623] systemd-journald[11137]: /dev/kmsg buffer overrun, some messages lost. [ 1458.897932] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1458.897946] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1458.897957] ion_alloc+0x27a/0x810 [ 1458.897970] ? ion_dma_buf_release+0x40/0x40 [ 1458.897983] ? __might_fault+0x177/0x1b0 [ 1458.927602] ion_ioctl+0xea/0x1f0 [ 1458.931056] ? ion_query_heaps+0x360/0x360 [ 1458.935298] ? ion_query_heaps+0x360/0x360 [ 1458.939538] do_vfs_ioctl+0x75a/0xff0 [ 1458.943344] ? ioctl_preallocate+0x1a0/0x1a0 [ 1458.947749] ? lock_downgrade+0x740/0x740 [ 1458.951899] ? __fget+0x225/0x360 [ 1458.955356] ? do_vfs_ioctl+0xff0/0xff0 [ 1458.959337] ? security_file_ioctl+0x83/0xb0 [ 1458.963754] SyS_ioctl+0x7f/0xb0 [ 1458.967120] ? do_vfs_ioctl+0xff0/0xff0 [ 1458.971098] do_syscall_64+0x1d5/0x640 [ 1458.975006] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1458.980197] RIP: 0033:0x4665d9 [ 1458.983379] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1458.991093] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1458.998457] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1459.005822] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1459.013089] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1459.020379] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1459.084903] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1459.090057] CPU: 1 PID: 11136 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1459.097935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1459.107307] Call Trace: [ 1459.109903] dump_stack+0x1b2/0x281 [ 1459.113538] warn_alloc.cold+0x96/0x1cc [ 1459.117520] ? zone_watermark_ok_safe+0x220/0x220 [ 1459.122399] __alloc_pages_nodemask+0x2127/0x2720 [ 1459.127254] ? lock_acquire+0x170/0x3f0 [ 1459.131236] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1459.136217] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1459.141677] ? __mutex_unlock_slowpath+0x75/0x770 [ 1459.146543] alloc_pages_current+0x155/0x260 [ 1459.151057] ion_page_pool_alloc+0x118/0x1b0 [ 1459.155479] ion_system_heap_allocate+0x133/0x8c0 [ 1459.160327] ? ion_alloc+0x187/0x810 [ 1459.164068] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1459.169525] ? ion_system_contig_heap_create+0x130/0x130 [ 1459.175079] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1459.180394] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1459.185267] ion_alloc+0x204/0x810 [ 1459.188826] ? ion_dma_buf_release+0x40/0x40 [ 1459.193259] ? __might_fault+0x177/0x1b0 [ 1459.197322] ion_ioctl+0xea/0x1f0 [ 1459.200776] ? ion_query_heaps+0x360/0x360 [ 1459.205053] ? ion_query_heaps+0x360/0x360 [ 1459.209295] do_vfs_ioctl+0x75a/0xff0 [ 1459.213643] ? ioctl_preallocate+0x1a0/0x1a0 [ 1459.218077] ? lock_downgrade+0x740/0x740 [ 1459.222251] ? __fget+0x225/0x360 [ 1459.225703] ? do_vfs_ioctl+0xff0/0xff0 [ 1459.229681] ? security_file_ioctl+0x83/0xb0 [ 1459.234102] SyS_ioctl+0x7f/0xb0 [ 1459.237471] ? do_vfs_ioctl+0xff0/0xff0 [ 1459.241448] do_syscall_64+0x1d5/0x640 [ 1459.245346] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1459.250552] RIP: 0033:0x4665d9 [ 1459.253741] RSP: 002b:00007f2e9a53f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1459.262106] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1459.269382] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1459.276685] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1459.283963] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1459.291383] R13: 00007ffe42256d6f R14: 00007f2e9a53f300 R15: 0000000000022000 [ 1459.331001] warn_alloc_show_mem: 1 callbacks suppressed [ 1459.331005] Mem-Info: [ 1459.342007] active_anon:12959 inactive_anon:25012 isolated_anon:0 [ 1459.342007] active_file:1086 inactive_file:2402 isolated_file:0 [ 1459.342007] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1459.342007] slab_reclaimable:13251 slab_unreclaimable:120709 [ 1459.342007] mapped:54971 shmem:25365 pagetables:807 bounce:0 [ 1459.342007] free:81475 free_pcp:698 free_cma:0 [ 1459.385228] Node 0 active_anon:50004kB inactive_anon:63912kB active_file:3176kB inactive_file:9116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:159432kB dirty:12kB writeback:0kB shmem:65064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1459.451289] Node 1 active_anon:1832kB inactive_anon:36136kB active_file:1168kB inactive_file:492kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60452kB dirty:4kB writeback:0kB shmem:36396kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1459.544920] Node 0 DMA free:11892kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1459.571235] Bluetooth: hci0 command 0x0419 tx timeout [ 1459.635219] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1459.640396] Node 0 DMA32 free:152148kB min:36200kB low:45248kB high:54296kB active_anon:50004kB inactive_anon:63912kB active_file:3076kB inactive_file:9376kB unevictable:0kB writepending:12kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2544kB bounce:0kB free_pcp:792kB local_pcp:144kB free_cma:0kB [ 1459.674965] lowmem_reserve[]: 0 0 0 0 0 [ 1459.685238] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1459.734720] lowmem_reserve[]: 0 0 0 0 0 [ 1459.738815] Node 1 Normal free:179884kB min:53696kB low:67120kB high:80544kB active_anon:1832kB inactive_anon:36136kB active_file:1168kB inactive_file:492kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:684kB bounce:0kB free_pcp:1404kB local_pcp:740kB free_cma:0kB [ 1459.783028] lowmem_reserve[]: 0 0 0 0 0 [ 1459.787160] Node 0 DMA: 21*4kB (UE) 15*8kB (U) 7*16kB (UE) 3*32kB (UE) 6*64kB (UE) 5*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11932kB [ 1459.824184] Node 0 DMA32: 45*4kB (UE) 20*8kB (E) 2061*16kB (UME) 1707*32kB (UME) 220*64kB (UM) 4*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 102532kB [ 1459.858729] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1459.869780] Node 1 Normal: 16097*4kB (UM) 4157*8kB (UM) 1722*16kB (UE) 1699*32kB (U) 8*64kB (U) 0*128kB 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 180588kB [ 1459.905115] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1459.916444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1459.951195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1459.964301] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1459.975015] 28893 total pagecache pages [ 1459.987529] 0 pages in swap cache [ 1460.008484] Swap cache stats: add 0, delete 0, find 0/0 [ 1460.013871] Free swap = 0kB [ 1460.029185] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1460.041719] systemd[1]: Started Journal Service. [ 1460.069440] Total swap = 0kB [ 1460.072496] 2097051 pages RAM [ 1460.078707] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1460.099093] 0 pages HighMem/MovableOnly [ 1460.103120] 363849 pages reserved [ 1460.107029] CPU: 1 PID: 11101 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1460.115018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1460.124373] Call Trace: [ 1460.126993] dump_stack+0x1b2/0x281 [ 1460.130651] warn_alloc.cold+0x96/0x1cc [ 1460.134716] ? zone_watermark_ok_safe+0x220/0x220 [ 1460.139713] __alloc_pages_nodemask+0x2127/0x2720 [ 1460.144564] ? lock_acquire+0x170/0x3f0 [ 1460.148551] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1460.153413] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1460.158870] ? __mutex_unlock_slowpath+0x75/0x770 [ 1460.166083] alloc_pages_current+0x155/0x260 [ 1460.170519] ion_page_pool_alloc+0x118/0x1b0 [ 1460.175030] ion_system_heap_allocate+0x133/0x8c0 [ 1460.179878] ? _raw_spin_unlock+0x29/0x40 [ 1460.184042] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1460.189071] ? ion_system_contig_heap_create+0x130/0x130 [ 1460.194525] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1460.199545] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1460.204419] ion_alloc+0x27a/0x810 [ 1460.207967] ? ion_dma_buf_release+0x40/0x40 [ 1460.212377] ? __might_fault+0x177/0x1b0 [ 1460.216447] ion_ioctl+0xea/0x1f0 [ 1460.219899] ? ion_query_heaps+0x360/0x360 [ 1460.224157] ? ion_query_heaps+0x360/0x360 [ 1460.228397] do_vfs_ioctl+0x75a/0xff0 [ 1460.232199] ? ioctl_preallocate+0x1a0/0x1a0 [ 1460.237564] ? lock_downgrade+0x740/0x740 [ 1460.241718] ? __fget+0x225/0x360 [ 1460.245258] ? do_vfs_ioctl+0xff0/0xff0 [ 1460.249684] ? security_file_ioctl+0x83/0xb0 [ 1460.254108] SyS_ioctl+0x7f/0xb0 [ 1460.257560] ? do_vfs_ioctl+0xff0/0xff0 [ 1460.261571] do_syscall_64+0x1d5/0x640 [ 1460.265492] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1460.270680] RIP: 0033:0x4665d9 [ 1460.273865] RSP: 002b:00007f696b00b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1460.281577] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1460.288848] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1460.296120] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1460.303395] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1460.310671] R13: 00007ffd618ef30f R14: 00007f696b00b300 R15: 0000000000022000 [ 1460.331046] 0 pages cma reserved 00:41:39 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) [ 1460.434974] warn_alloc_show_mem: 1 callbacks suppressed [ 1460.434978] Mem-Info: [ 1460.456820] active_anon:12963 inactive_anon:25017 isolated_anon:0 [ 1460.456820] active_file:487 inactive_file:800 isolated_file:0 [ 1460.456820] unevictable:0 dirty:17 writeback:0 unstable:0 [ 1460.456820] slab_reclaimable:13104 slab_unreclaimable:122256 [ 1460.456820] mapped:53486 shmem:25365 pagetables:807 bounce:0 [ 1460.456820] free:95295 free_pcp:150 free_cma:0 [ 1460.540157] IPVS: ftp: loaded support on port[0] = 21 [ 1460.564930] Node 0 active_anon:50016kB inactive_anon:63932kB active_file:1176kB inactive_file:1084kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:153852kB dirty:60kB writeback:0kB shmem:65064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1460.648286] Node 1 active_anon:1836kB inactive_anon:36136kB active_file:1564kB inactive_file:2856kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:62192kB dirty:8kB writeback:0kB shmem:36396kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1460.747900] IPVS: ftp: loaded support on port[0] = 21 [ 1460.754940] Bluetooth: hci5 command 0x041b tx timeout [ 1460.778385] Node 0 DMA free:11036kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1460.907275] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1460.950783] Node 0 DMA32 free:78692kB min:36200kB low:45248kB high:54296kB active_anon:50016kB inactive_anon:63932kB active_file:148kB inactive_file:632kB unevictable:0kB writepending:60kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7552kB pagetables:2544kB bounce:0kB free_pcp:676kB local_pcp:84kB free_cma:0kB [ 1461.121692] lowmem_reserve[]: 0 0 0 0 0 [ 1461.148858] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1461.180897] chnl_net:caif_netlink_parms(): no params data found [ 1461.254098] lowmem_reserve[]: 0 0 0 0 0 [ 1461.261408] Node 1 Normal free:138532kB min:53696kB low:67120kB high:80544kB active_anon:1912kB inactive_anon:36136kB active_file:2012kB inactive_file:4640kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:576kB pagetables:788kB bounce:0kB free_pcp:200kB local_pcp:48kB free_cma:0kB [ 1461.391171] lowmem_reserve[]: 0 0 0 0 0 [ 1461.412419] Node 0 DMA: 21*4kB (UE) 15*8kB (U) 7*16kB (UE) 3*32kB (UE) 3*64kB (UE) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11100kB [ 1461.467401] chnl_net:caif_netlink_parms(): no params data found [ 1461.483544] Node 0 DMA32: 230*4kB (ME) 212*8kB (UMEH) 170*16kB (MEH) 24*32kB (ME) 19*64kB (MEH) 60*128kB (UMH) 56*256kB (UM) 30*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 44696kB [ 1461.546809] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1461.604113] Node 1 Normal: 2*4kB (M) 4*8kB (UM) 2*16kB (ME) 1*32kB (M) 663*64kB (UM) 6*128kB (UM) 4*256kB (UM) 48*512kB (UM) 29*1024kB (U) 1*2048kB (U) 0*4096kB = 100648kB [ 1461.680621] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1461.720254] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1461.761860] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1461.800167] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1461.853089] 26931 total pagecache pages [ 1461.881423] 0 pages in swap cache [ 1461.885672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1461.892859] Swap cache stats: add 0, delete 0, find 0/0 [ 1461.904551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.922046] Free swap = 0kB [ 1461.933552] Total swap = 0kB [ 1461.949331] 2097051 pages RAM [ 1461.952511] 0 pages HighMem/MovableOnly [ 1461.964354] device bridge_slave_0 entered promiscuous mode [ 1461.988089] 363849 pages reserved [ 1461.991583] 0 pages cma reserved [ 1462.112080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.122952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.166772] device bridge_slave_1 entered promiscuous mode [ 1462.202152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.277800] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.303631] device bridge_slave_0 entered promiscuous mode [ 1462.338966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.362571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.410809] device bridge_slave_1 entered promiscuous mode [ 1462.460062] syz-executor.2: page allocation failure: order:1, mode:0x14044c0(GFP_KERNEL|__GFP_RETRY_MAYFAIL|__GFP_COMP), nodemask=(null) [ 1462.482817] systemd-journal invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1462.513040] systemd-journal cpuset=/ mems_allowed=0-1 [ 1462.517173] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1462.525303] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1462.537311] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1462.542450] CPU: 1 PID: 11140 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1462.550331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1462.559873] Call Trace: [ 1462.562483] dump_stack+0x1b2/0x281 [ 1462.566114] warn_alloc.cold+0x96/0x1cc [ 1462.570098] ? zone_watermark_ok_safe+0x220/0x220 [ 1462.575038] __alloc_pages_nodemask+0x2127/0x2720 [ 1462.579890] ? lock_acquire+0x170/0x3f0 [ 1462.583869] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1462.589238] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1462.594698] ? __mutex_unlock_slowpath+0x75/0x770 [ 1462.599536] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 1462.604405] alloc_pages_current+0x155/0x260 [ 1462.608820] ion_page_pool_alloc+0x118/0x1b0 [ 1462.613257] ion_system_heap_allocate+0x133/0x8c0 [ 1462.618097] ? ion_alloc+0x187/0x810 [ 1462.621805] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1462.627263] ? ion_system_contig_heap_create+0x130/0x130 [ 1462.632761] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1462.637780] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1462.642620] ion_alloc+0x204/0x810 [ 1462.646162] ? ion_dma_buf_release+0x40/0x40 [ 1462.650741] ? __might_fault+0x177/0x1b0 [ 1462.654936] ion_ioctl+0xea/0x1f0 [ 1462.659358] ? ion_query_heaps+0x360/0x360 [ 1462.663598] ? ion_query_heaps+0x360/0x360 [ 1462.667851] do_vfs_ioctl+0x75a/0xff0 [ 1462.671675] ? ioctl_preallocate+0x1a0/0x1a0 [ 1462.676086] ? lock_downgrade+0x740/0x740 [ 1462.680262] ? __fget+0x225/0x360 [ 1462.683901] ? do_vfs_ioctl+0xff0/0xff0 [ 1462.687966] ? security_file_ioctl+0x83/0xb0 [ 1462.692472] SyS_ioctl+0x7f/0xb0 [ 1462.695879] ? do_vfs_ioctl+0xff0/0xff0 [ 1462.699860] do_syscall_64+0x1d5/0x640 [ 1462.703765] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1462.708955] RIP: 0033:0x4665d9 [ 1462.712169] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1462.719883] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1462.727169] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1462.734456] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1462.741729] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1462.749017] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1462.756415] CPU: 0 PID: 11102 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1462.764320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1462.773188] Mem-Info: [ 1462.773858] Call Trace: [ 1462.778849] dump_stack+0x1b2/0x281 [ 1462.782482] warn_alloc.cold+0x96/0x1cc [ 1462.784967] active_anon:12868 inactive_anon:25017 isolated_anon:0 [ 1462.784967] active_file:46 inactive_file:36 isolated_file:0 [ 1462.784967] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1462.784967] slab_reclaimable:13089 slab_unreclaimable:120770 [ 1462.784967] mapped:52689 shmem:25365 pagetables:807 bounce:0 [ 1462.784967] free:13816 free_pcp:0 free_cma:0 [ 1462.786993] ? zone_watermark_ok_safe+0x220/0x220 [ 1462.824895] ? wait_for_completion_io+0x10/0x10 [ 1462.829571] __alloc_pages_nodemask+0x2127/0x2720 [ 1462.834432] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1462.835219] Bluetooth: hci5 command 0x040f tx timeout [ 1462.839278] ? mark_held_locks+0xa6/0xf0 [ 1462.848499] ? cache_grow_begin+0x3f/0x700 [ 1462.852739] cache_grow_begin+0x91/0x700 [ 1462.856797] fallback_alloc+0x207/0x2c0 [ 1462.860770] kmem_cache_alloc_node_trace+0xed/0x400 [ 1462.865786] __kmalloc_node+0x38/0x70 [ 1462.867125] Node 0 active_anon:49860kB inactive_anon:63932kB active_file:132kB inactive_file:140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:151736kB dirty:0kB writeback:0kB shmem:65064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1462.869601] kvmalloc_node+0x46/0xd0 [ 1462.901295] alloc_netdev_mqs+0x76/0xb70 [ 1462.905361] ? veth_newlink+0x890/0x890 [ 1462.909334] rtnl_create_link+0x1ab/0x890 [ 1462.913478] rtnl_newlink+0xea9/0x1860 [ 1462.917367] ? mark_held_locks+0xa6/0xf0 [ 1462.921462] ? rtnl_dellink+0x6a0/0x6a0 [ 1462.925432] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1462.930449] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1462.934976] ? rtnl_dellink+0x6a0/0x6a0 [ 1462.937154] Node 1 active_anon:1612kB inactive_anon:36136kB active_file:52kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:59020kB dirty:24kB writeback:0kB shmem:36396kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1462.938948] rtnetlink_rcv_msg+0x3be/0xb10 [ 1462.970342] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1462.974858] ? __netlink_lookup+0x345/0x5d0 [ 1462.979202] netlink_rcv_skb+0x125/0x390 [ 1462.983266] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1462.987766] ? netlink_ack+0x9a0/0x9a0 [ 1462.991659] netlink_unicast+0x437/0x610 [ 1462.995726] ? netlink_sendskb+0xd0/0xd0 [ 1462.999787] ? __check_object_size+0x179/0x230 [ 1463.004385] netlink_sendmsg+0x62e/0xb80 [ 1463.007266] Node 0 DMA free:10944kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1463.008469] ? nlmsg_notify+0x170/0x170 [ 1463.008485] ? security_socket_sendmsg+0x83/0xb0 [ 1463.043338] ? nlmsg_notify+0x170/0x170 [ 1463.047328] sock_sendmsg+0xb5/0x100 [ 1463.051041] SyS_sendto+0x1c7/0x2c0 [ 1463.054660] ? SyS_getpeername+0x220/0x220 [ 1463.058903] ? vm_insert_page+0x7c0/0x7c0 [ 1463.063054] ? switch_mm_irqs_off+0x601/0xeb0 [ 1463.064946] lowmem_reserve[]: 0 2717 2718 [ 1463.067556] ? up_read+0x17/0x30 [ 1463.067562] 2718 [ 1463.071698] ? __do_page_fault+0x159/0xad0 [ 1463.071709] ? do_syscall_64+0x4c/0x640 [ 1463.084950] 2718 [ 1463.085294] ? SyS_getpeername+0x220/0x220 [ 1463.085306] do_syscall_64+0x1d5/0x640 [ 1463.087353] Node 0 [ 1463.091584] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1463.102949] RIP: 0033:0x41956c [ 1463.106128] RSP: 002b:00007ffe53b57120 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1463.113831] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041956c [ 1463.117112] DMA32 free:17808kB min:36200kB low:45248kB high:54296kB active_anon:50048kB inactive_anon:63932kB active_file:16kB inactive_file:84kB unevictable:0kB writepending:8kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2472kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1463.121118] RDX: 0000000000000068 RSI: 00000000014a4370 RDI: 0000000000000003 [ 1463.156435] RBP: 0000000000000000 R08: 00007ffe53b57174 R09: 000000000000000c [ 1463.163723] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1463.170991] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1463.178274] CPU: 1 PID: 11137 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1463.186249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1463.193472] syz-executor.1: [ 1463.195631] Call Trace: [ 1463.195652] dump_stack+0x1b2/0x281 [ 1463.195664] dump_header+0x178/0x82f [ 1463.195684] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1463.207531] page allocation failure: order:0 [ 1463.208556] ? ___ratelimit+0x2cd/0x530 [ 1463.213648] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1463.218048] oom_kill_process.cold+0x10/0xa40 [ 1463.218067] out_of_memory+0xe3e/0x1190 [ 1463.218080] ? oom_killer_disable+0x1c0/0x1c0 [ 1463.218091] ? mutex_trylock+0x152/0x1a0 [ 1463.236830] (null) [ 1463.237600] __alloc_pages_nodemask+0x23e1/0x2720 [ 1463.242077] syz-executor.1 cpuset= [ 1463.246145] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1463.246169] alloc_pages_current+0x155/0x260 [ 1463.246182] filemap_fault+0x11a1/0x1ad0 [ 1463.261476] / [ 1463.261553] ext4_filemap_fault+0x84/0xb0 [ 1463.270483] mems_allowed=0-1 [ 1463.271796] __do_fault+0xfa/0x380 [ 1463.282639] __handle_mm_fault+0x2497/0x4620 [ 1463.287071] ? vm_insert_page+0x7c0/0x7c0 [ 1463.291244] ? mark_held_locks+0xa6/0xf0 [ 1463.295411] handle_mm_fault+0x455/0x9c0 [ 1463.299467] __do_page_fault+0x549/0xad0 [ 1463.303536] ? spurious_fault+0x640/0x640 [ 1463.307694] ? do_page_fault+0x60/0x500 [ 1463.311659] ? page_fault+0x2f/0x50 [ 1463.315293] page_fault+0x45/0x50 [ 1463.318764] RIP: 0001:0xffffffffffffffff [ 1463.322833] RSP: ec3e21e0:00007ffd5ce282e0 EFLAGS: 7ffd5ce280f0 [ 1463.322859] CPU: 0 PID: 11101 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1463.336847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1463.337588] lowmem_reserve[]: [ 1463.346378] Call Trace: [ 1463.346401] dump_stack+0x1b2/0x281 [ 1463.346414] warn_alloc.cold+0x96/0x1cc [ 1463.346426] ? zone_watermark_ok_safe+0x220/0x220 [ 1463.346435] ? usleep_range+0x130/0x130 [ 1463.346448] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1463.352163] 0 [ 1463.355733] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1463.355743] ? run_timer_softirq+0x5a0/0x5a0 [ 1463.355760] __alloc_pages_nodemask+0x2127/0x2720 [ 1463.355782] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1463.355790] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1463.355810] ? __sanitizer_cov_trace_pc+0x9/0x50 [ 1463.355824] alloc_pages_current+0x155/0x260 [ 1463.361973] 0 [ 1463.364806] ion_page_pool_alloc+0x118/0x1b0 [ 1463.369176] 0 [ 1463.373886] ion_system_heap_allocate+0x133/0x8c0 [ 1463.375733] 0 [ 1463.380702] ? _raw_spin_unlock+0x29/0x40 [ 1463.387372] 0 [ 1463.390026] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1463.399627] ? ion_system_contig_heap_create+0x130/0x130 [ 1463.399638] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1463.399649] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1463.399659] ion_alloc+0x27a/0x810 [ 1463.399672] ? ion_dma_buf_release+0x40/0x40 [ 1463.399683] ? __might_fault+0x177/0x1b0 [ 1463.399694] ion_ioctl+0xea/0x1f0 [ 1463.399702] ? ion_query_heaps+0x360/0x360 [ 1463.399714] ? ion_query_heaps+0x360/0x360 [ 1463.404473] Node 0 [ 1463.408879] do_vfs_ioctl+0x75a/0xff0 [ 1463.408892] ? ioctl_preallocate+0x1a0/0x1a0 [ 1463.408900] ? lock_downgrade+0x740/0x740 [ 1463.408912] ? __fget+0x225/0x360 [ 1463.408920] ? do_vfs_ioctl+0xff0/0xff0 [ 1463.408931] ? security_file_ioctl+0x83/0xb0 [ 1463.408939] SyS_ioctl+0x7f/0xb0 [ 1463.408946] ? do_vfs_ioctl+0xff0/0xff0 [ 1463.408957] do_syscall_64+0x1d5/0x640 [ 1463.413038] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1463.415143] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1463.415151] RIP: 0033:0x4665d9 [ 1463.415155] RSP: 002b:00007f696b00b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1463.415165] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1463.415170] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1463.415174] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1463.415184] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1463.415190] R13: 00007ffd618ef30f R14: 00007f696b00b300 R15: 0000000000022000 [ 1463.420207] syz-executor.0: [ 1463.421815] lowmem_reserve[]: [ 1463.423964] page allocation failure: order:0 [ 1463.430543] 0 [ 1463.593516] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1463.596946] 0 0 0 0 [ 1463.612063] Node 1 Normal free:39400kB min:53696kB low:67120kB high:80544kB active_anon:1584kB inactive_anon:36136kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:736kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1463.617475] (null) [ 1463.640561] lowmem_reserve[]: 0 0 0 0 0 [ 1463.640585] Node 0 DMA: 3*4kB (UME) 1*8kB (U) 2*16kB (UE) 2*32kB (UE) 1*64kB (E) 5*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11060kB [ 1463.640669] Node 0 DMA32: 243*4kB (UME) 137*8kB (ME) 168*16kB (ME) 89*32kB (UME) 245*64kB (UME) 30*128kB (UM) 2*256kB (M) 18*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36852kB [ 1463.678158] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1463.688988] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1463.694119] CPU: 1 PID: 11124 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1463.702021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1463.711379] Call Trace: [ 1463.713979] dump_stack+0x1b2/0x281 [ 1463.717611] warn_alloc.cold+0x96/0x1cc [ 1463.721592] ? zone_watermark_ok_safe+0x220/0x220 [ 1463.726440] ? usleep_range+0x130/0x130 [ 1463.730418] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1463.736157] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1463.741187] ? run_timer_softirq+0x5a0/0x5a0 [ 1463.745608] __alloc_pages_nodemask+0x2127/0x2720 [ 1463.750461] ? lock_acquire+0x170/0x3f0 [ 1463.754450] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1463.759293] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1463.763794] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1463.769274] alloc_pages_current+0x155/0x260 [ 1463.773688] ion_page_pool_alloc+0x118/0x1b0 [ 1463.774893] Mem-Info: [ 1463.778095] ion_system_heap_allocate+0x133/0x8c0 [ 1463.780606] active_anon:12880 inactive_anon:25017 isolated_anon:0 [ 1463.780606] active_file:19 inactive_file:25 isolated_file:0 [ 1463.780606] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1463.780606] slab_reclaimable:13089 slab_unreclaimable:120442 [ 1463.780606] mapped:52621 shmem:25364 pagetables:783 bounce:0 [ 1463.780606] free:22409 free_pcp:167 free_cma:0 [ 1463.785427] ? ion_alloc+0x187/0x810 [ 1463.785439] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1463.785448] ? ion_system_contig_heap_create+0x130/0x130 [ 1463.785457] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1463.785468] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1463.785478] ion_alloc+0x204/0x810 [ 1463.785501] ? ion_dma_buf_release+0x40/0x40 [ 1463.852302] ? __might_fault+0x177/0x1b0 [ 1463.856372] ion_ioctl+0xea/0x1f0 [ 1463.859892] ? ion_query_heaps+0x360/0x360 [ 1463.864148] ? ion_query_heaps+0x360/0x360 [ 1463.868397] do_vfs_ioctl+0x75a/0xff0 [ 1463.872200] ? ioctl_preallocate+0x1a0/0x1a0 [ 1463.876625] ? lock_downgrade+0x740/0x740 [ 1463.880788] ? __fget+0x225/0x360 [ 1463.884239] ? do_vfs_ioctl+0xff0/0xff0 [ 1463.888297] ? security_file_ioctl+0x83/0xb0 [ 1463.892705] SyS_ioctl+0x7f/0xb0 [ 1463.896069] ? do_vfs_ioctl+0xff0/0xff0 [ 1463.900040] do_syscall_64+0x1d5/0x640 [ 1463.903947] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1463.909412] RIP: 0033:0x4665d9 [ 1463.912593] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1463.914904] Node 0 active_anon:49936kB inactive_anon:63932kB active_file:16kB inactive_file:84kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:151640kB dirty:0kB writeback:0kB shmem:65060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1463.920296] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1463.920305] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1463.962696] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1463.969969] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1463.977236] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1463.984818] Node 1 active_anon:1584kB inactive_anon:36136kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58844kB dirty:0kB writeback:0kB shmem:36396kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1463.985584] Node 1 Normal: 1364*4kB (UM) 79*8kB (UM) 72*16kB (UME) 53*32kB (UM) 76*64kB (UM) 8*128kB (UM) 8*256kB (UM) 4*512kB (UM) 16*1024kB (UM) 2*2048kB (UM) 0*4096kB = 39400kB [ 1464.028569] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1464.038231] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1464.048151] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1464.057056] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1464.065711] 25422 total pagecache pages [ 1464.069685] 0 pages in swap cache [ 1464.073127] Swap cache stats: add 0, delete 0, find 0/0 [ 1464.078562] Free swap = 0kB [ 1464.081575] Total swap = 0kB [ 1464.084587] 2097051 pages RAM [ 1464.087754] 0 pages HighMem/MovableOnly [ 1464.091729] 363849 pages reserved [ 1464.095241] 0 pages cma reserved [ 1464.100295] warn_alloc_show_mem: 2 callbacks suppressed [ 1464.100298] Mem-Info: [ 1464.105639] Node 0 [ 1464.105741] active_anon:12884 inactive_anon:25017 isolated_anon:0 [ 1464.105741] active_file:21 inactive_file:23 isolated_file:9 [ 1464.105741] unevictable:0 dirty:1 writeback:7 unstable:0 [ 1464.105741] slab_reclaimable:13090 slab_unreclaimable:120493 [ 1464.105741] mapped:52640 shmem:25364 pagetables:783 bounce:0 [ 1464.105741] free:21616 free_pcp:206 free_cma:0 [ 1464.108078] DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:20kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1464.110322] Node 0 active_anon:49952kB inactive_anon:63932kB active_file:40kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):32kB mapped:151716kB dirty:0kB writeback:20kB shmem:65060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1464.194893] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1464.198921] Node 1 active_anon:1584kB inactive_anon:36136kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):4kB mapped:58844kB dirty:4kB writeback:8kB shmem:36396kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1464.222492] Node 0 [ 1464.233085] Node 0 DMA free:11060kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:20kB unevictable:0kB writepending:4kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1464.244920] DMA32 free:35980kB min:36200kB low:45248kB high:54296kB active_anon:49952kB inactive_anon:63932kB active_file:36kB inactive_file:44kB unevictable:0kB writepending:16kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2396kB bounce:0kB free_pcp:140kB local_pcp:0kB free_cma:0kB [ 1464.274757] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1464.296533] Node 0 DMA32 free:35980kB min:36200kB low:45248kB high:54296kB active_anon:49952kB inactive_anon:63932kB active_file:36kB inactive_file:44kB unevictable:0kB writepending:16kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2396kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1464.334915] lowmem_reserve[]: 0 0 0 0 0 [ 1464.338934] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1464.376843] lowmem_reserve[]: 0 0 0 0 0 [ 1464.380865] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1464.421255] lowmem_reserve[]: 0 0 0 0 0 [ 1464.425345] Node 1 Normal free:39400kB min:53696kB low:67120kB high:80544kB active_anon:1584kB inactive_anon:36136kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:736kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1464.454442] lowmem_reserve[]: 0 0 0 0 0 [ 1464.459097] Node 1 Normal free:39400kB min:53696kB low:67120kB high:80544kB active_anon:1584kB inactive_anon:36136kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:736kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1464.462913] lowmem_reserve[]: 0 0 0 0 0 [ 1464.504944] lowmem_reserve[]: 0 0 0 0 0 [ 1464.508951] Node 0 [ 1464.508970] Node 0 [ 1464.508973] DMA: 2*4kB [ 1464.511194] DMA: [ 1464.513426] (UE) [ 1464.521801] 2*4kB (UE) 0*8kB 1*16kB (E) 1*32kB (E) 2*64kB (UE) 3*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11064kB [ 1464.530283] 0*8kB [ 1464.537754] Node 0 DMA32: 338*4kB (ME) 229*8kB (UME) 170*16kB (ME) 28*32kB (UME) 249*64kB (UME) 30*128kB (UM) 2*256kB (M) 18*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36304kB [ 1464.554917] 1*16kB (E) 1*32kB (E) 2*64kB (UE) 3*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11064kB [ 1464.556314] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1464.582499] Node 1 Normal: 1364*4kB (UM) 79*8kB (UM) 72*16kB (UME) 53*32kB (UM) 76*64kB (UM) 8*128kB (UM) 8*256kB (UM) 4*512kB (UM) 16*1024kB (UM) 2*2048kB (UM) 0*4096kB = 39400kB [ 1464.584912] Node 0 [ 1464.600017] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1464.627130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1464.635895] DMA32: 338*4kB (ME) 229*8kB (UME) 170*16kB (ME) 28*32kB (UME) 249*64kB (UME) 30*128kB (UM) 2*256kB (M) 18*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36304kB [ 1464.664921] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1464.673831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1464.674918] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1464.683723] 25397 total pagecache pages [ 1464.698705] 0 pages in swap cache [ 1464.702244] Swap cache stats: add 0, delete 0, find 0/0 [ 1464.707669] Node 1 Normal: 1364*4kB (UM) 79*8kB (UM) 72*16kB (UME) 53*32kB (UM) 76*64kB (UM) 8*128kB (UM) 8*256kB (UM) 4*512kB (UM) 16*1024kB (UM) 2*2048kB (UM) 0*4096kB = 39400kB [ 1464.724379] Free swap = 0kB [ 1464.744722] Total swap = 0kB [ 1464.749963] 2097051 pages RAM [ 1464.753098] 0 pages HighMem/MovableOnly [ 1464.757770] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1464.764939] 363849 pages reserved [ 1464.770298] 0 pages cma reserved [ 1464.773924] Out of memory (oom_kill_allocating_task): Kill process 11137 (systemd-journal) score 0 or sacrifice child [ 1464.778115] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1464.791317] Killed process 11137 (systemd-journal) total-vm:46096kB, anon-rss:464kB, file-rss:0kB, shmem-rss:1572kB [ 1464.805628] oom_reaper: reaped process 11137 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1572kB [ 1464.816335] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1464.828931] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1464.839297] 25397 total pagecache pages [ 1464.843315] 0 pages in swap cache [ 1464.851375] Swap cache stats: add 0, delete 0, find 0/0 [ 1464.857337] Free swap = 0kB [ 1464.860365] Total swap = 0kB [ 1464.863387] 2097051 pages RAM [ 1464.870952] 0 pages HighMem/MovableOnly [ 1464.874994] 363849 pages reserved [ 1464.878450] 0 pages cma reserved [ 1464.914947] Bluetooth: hci5 command 0x0419 tx timeout [ 1465.233751] bond0: Enslaving bond_slave_0 as an active interface with an up link 00:41:44 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) [ 1465.286021] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1465.296983] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1465.304613] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1465.333210] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1465.342013] team0: Port device team_slave_0 added [ 1465.348077] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1465.355669] team0: Port device team_slave_1 added [ 1465.362837] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1465.386357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1465.392624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1465.418718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1465.452789] systemd[1]: Stopped Journal Service. [ 1465.505593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1465.511883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1465.515140] systemd[1]: Starting Journal Service... [ 1465.542405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1465.570341] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1465.600796] team0: Port device team_slave_0 added [ 1465.612710] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1465.625571] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1465.644496] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1465.653692] team0: Port device team_slave_1 added [ 1465.726682] systemd-journald[11427]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1465.777913] device hsr_slave_0 entered promiscuous mode [ 1465.808943] device hsr_slave_1 entered promiscuous mode [ 1465.838528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1465.844802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1465.872652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1465.924225] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1465.928007] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1465.947459] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1465.963500] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1465.989174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1465.990465] CPU: 0 PID: 11418 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1466.003437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1466.004951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1466.013407] Call Trace: [ 1466.041445] dump_stack+0x1b2/0x281 [ 1466.045096] warn_alloc.cold+0x96/0x1cc [ 1466.049075] ? zone_watermark_ok_safe+0x220/0x220 [ 1466.053940] __alloc_pages_nodemask+0x2127/0x2720 [ 1466.059063] ? lock_acquire+0x170/0x3f0 [ 1466.063057] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1466.067915] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1466.073375] ? __mutex_unlock_slowpath+0x75/0x770 [ 1466.078248] ? audit_kill_trees+0x230/0x230 [ 1466.082589] alloc_pages_current+0x155/0x260 [ 1466.087008] ion_page_pool_alloc+0x118/0x1b0 [ 1466.091624] ion_system_heap_allocate+0x133/0x8c0 [ 1466.096530] ? ion_alloc+0x187/0x810 [ 1466.100254] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1466.105715] ? ion_system_contig_heap_create+0x130/0x130 [ 1466.111170] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1466.116231] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1466.121091] ion_alloc+0x204/0x810 [ 1466.124673] ? ion_dma_buf_release+0x40/0x40 [ 1466.124928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1466.129436] ? __might_fault+0x177/0x1b0 [ 1466.143290] ion_ioctl+0xea/0x1f0 [ 1466.146801] ? ion_query_heaps+0x360/0x360 [ 1466.151159] ? ion_query_heaps+0x360/0x360 [ 1466.155404] do_vfs_ioctl+0x75a/0xff0 [ 1466.159246] ? ioctl_preallocate+0x1a0/0x1a0 [ 1466.163846] ? lock_downgrade+0x740/0x740 [ 1466.168019] ? __fget+0x225/0x360 [ 1466.171487] ? do_vfs_ioctl+0xff0/0xff0 [ 1466.175469] ? security_file_ioctl+0x83/0xb0 [ 1466.179885] SyS_ioctl+0x7f/0xb0 [ 1466.183257] ? do_vfs_ioctl+0xff0/0xff0 [ 1466.187234] do_syscall_64+0x1d5/0x640 [ 1466.191218] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1466.196409] RIP: 0033:0x4665d9 [ 1466.199325] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1466.199593] RSP: 002b:00007f696b00b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1466.215744] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1466.223365] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1466.226414] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1466.230897] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1466.245231] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1466.252516] R13: 00007ffd618ef30f R14: 00007f696b00b300 R15: 0000000000022000 [ 1466.306138] Mem-Info: [ 1466.308653] active_anon:12923 inactive_anon:27049 isolated_anon:0 [ 1466.308653] active_file:1339 inactive_file:1295 isolated_file:0 [ 1466.308653] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1466.308653] slab_reclaimable:13124 slab_unreclaimable:119893 [ 1466.308653] mapped:54914 shmem:27412 pagetables:786 bounce:0 [ 1466.308653] free:42871 free_pcp:521 free_cma:0 [ 1466.394601] device hsr_slave_0 entered promiscuous mode [ 1466.426150] Node 0 active_anon:50228kB inactive_anon:63868kB active_file:3796kB inactive_file:3892kB unevictable:0kB isolated(anon):0kB isolated(file):128kB mapped:157088kB dirty:12kB writeback:0kB shmem:65060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1466.455401] device hsr_slave_1 entered promiscuous mode [ 1466.462136] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1466.481902] Node 1 active_anon:1564kB inactive_anon:44328kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60068kB dirty:4kB writeback:0kB shmem:44588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1466.496298] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1466.528223] Node 0 DMA free:11096kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1466.565612] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1466.571438] Node 0 DMA32 free:51220kB min:36200kB low:45248kB high:54296kB active_anon:50128kB inactive_anon:63868kB active_file:3640kB inactive_file:4020kB unevictable:0kB writepending:12kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2504kB bounce:0kB free_pcp:936kB local_pcp:304kB free_cma:0kB [ 1466.605068] lowmem_reserve[]: 0 0 0 0 0 [ 1466.609139] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1466.669218] lowmem_reserve[]: 0 0 0 0 0 [ 1466.677709] Node 1 Normal free:96896kB min:53696kB low:67120kB high:80544kB active_anon:1564kB inactive_anon:44328kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:640kB bounce:0kB free_pcp:148kB local_pcp:68kB free_cma:0kB [ 1466.780496] lowmem_reserve[]: 0 0 0 0 0 [ 1466.802272] Node 0 DMA: 10*4kB (UE) 0*8kB 1*16kB (E) 1*32kB (E) 2*64kB (UE) 3*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11096kB [ 1466.868843] Node 0 DMA32: 64*4kB (E) 202*8kB (UME) 195*16kB (ME) 902*32kB (UME) 128*64kB (UM) 23*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 45504kB [ 1466.900675] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1466.926156] Node 1 Normal: 930*4kB (UM) 1677*8kB (U) 2071*16kB (UME) 936*32kB (U) 105*64kB (U) 8*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 87968kB [ 1466.989624] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1467.032730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1467.051488] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1467.057868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1467.057877] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1467.057882] 28127 total pagecache pages [ 1467.057892] 0 pages in swap cache [ 1467.057898] Swap cache stats: add 0, delete 0, find 0/0 [ 1467.057902] Free swap = 0kB [ 1467.057905] Total swap = 0kB [ 1467.057913] 2097051 pages RAM [ 1467.057916] 0 pages HighMem/MovableOnly [ 1467.057919] 363849 pages reserved [ 1467.057923] 0 pages cma reserved [ 1467.126776] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1467.277548] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1467.354909] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1467.360067] CPU: 0 PID: 11124 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1467.367953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1467.377321] Call Trace: [ 1467.379921] dump_stack+0x1b2/0x281 [ 1467.383560] warn_alloc.cold+0x96/0x1cc [ 1467.387535] ? zone_watermark_ok_safe+0x220/0x220 [ 1467.392424] __alloc_pages_nodemask+0x2127/0x2720 [ 1467.397290] ? lock_acquire+0x170/0x3f0 [ 1467.401273] ? lock_acquire+0x170/0x3f0 [ 1467.405258] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1467.410114] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1467.415661] ? __mutex_unlock_slowpath+0x75/0x770 [ 1467.420531] alloc_pages_current+0x155/0x260 [ 1467.424964] ion_page_pool_alloc+0x118/0x1b0 [ 1467.429398] ion_system_heap_allocate+0x133/0x8c0 [ 1467.434376] ? _raw_spin_unlock+0x29/0x40 [ 1467.438534] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1467.443476] ? ion_system_contig_heap_create+0x130/0x130 [ 1467.448950] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1467.453978] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1467.458830] ion_alloc+0x27a/0x810 [ 1467.462372] ? ion_dma_buf_release+0x40/0x40 [ 1467.466787] ? __might_fault+0x177/0x1b0 [ 1467.470853] ion_ioctl+0xea/0x1f0 [ 1467.474304] ? ion_query_heaps+0x360/0x360 [ 1467.475345] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) [ 1467.478545] ? ion_query_heaps+0x360/0x360 [ 1467.478555] , order=1, oom_score_adj=0 [ 1467.488348] do_vfs_ioctl+0x75a/0xff0 [ 1467.488372] ? ioctl_preallocate+0x1a0/0x1a0 [ 1467.488382] ? lock_downgrade+0x740/0x740 [ 1467.488393] ? __fget+0x225/0x360 [ 1467.488402] ? do_vfs_ioctl+0xff0/0xff0 [ 1467.488413] ? security_file_ioctl+0x83/0xb0 [ 1467.488422] SyS_ioctl+0x7f/0xb0 [ 1467.488428] ? do_vfs_ioctl+0xff0/0xff0 [ 1467.488439] do_syscall_64+0x1d5/0x640 [ 1467.488453] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1467.488464] RIP: 0033:0x4665d9 [ 1467.540970] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1467.548953] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1467.556248] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1467.558761] systemd-journal cpuset= [ 1467.563711] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1467.563720] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1467.581991] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1467.614923] / mems_allowed=0-1 [ 1467.618172] CPU: 1 PID: 11427 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1467.626132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1467.636108] Call Trace: [ 1467.638709] dump_stack+0x1b2/0x281 [ 1467.642342] dump_header+0x178/0x82f [ 1467.646079] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1467.651194] ? ___ratelimit+0x2cd/0x530 [ 1467.655200] oom_kill_process.cold+0x10/0xa40 [ 1467.659729] out_of_memory+0xe3e/0x1190 [ 1467.663830] ? oom_killer_disable+0x1c0/0x1c0 [ 1467.668685] ? mutex_trylock+0x152/0x1a0 [ 1467.672751] __alloc_pages_nodemask+0x23e1/0x2720 [ 1467.677605] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1467.682456] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1467.687841] ? cache_grow_begin+0x3f/0x700 [ 1467.692080] cache_grow_begin+0x91/0x700 [ 1467.696146] fallback_alloc+0x207/0x2c0 [ 1467.700139] kmem_cache_alloc+0x1e5/0x3c0 [ 1467.704287] getname_flags+0xc8/0x550 [ 1467.708087] user_path_at_empty+0x2a/0x50 [ 1467.712258] SyS_faccessat+0x21b/0x680 [ 1467.716149] ? SyS_fallocate+0x80/0x80 [ 1467.720033] ? do_syscall_64+0x4c/0x640 [ 1467.721846] Mem-Info: [ 1467.724013] ? SyS_faccessat+0x680/0x680 [ 1467.726465] active_anon:12930 inactive_anon:27049 isolated_anon:0 [ 1467.726465] active_file:31 inactive_file:31 isolated_file:0 [ 1467.726465] unevictable:0 dirty:0 writeback:16 unstable:0 [ 1467.726465] slab_reclaimable:13146 slab_unreclaimable:119553 [ 1467.726465] mapped:52559 shmem:27412 pagetables:787 bounce:0 [ 1467.726465] free:25087 free_pcp:1 free_cma:0 [ 1467.730477] do_syscall_64+0x1d5/0x640 [ 1467.763670] Node 0 active_anon:50156kB inactive_anon:63868kB active_file:112kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150048kB dirty:0kB writeback:36kB shmem:65060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1467.767500] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1467.767509] RIP: 0033:0x7f55110b79c7 [ 1467.767517] RSP: 002b:00007ffc607104d8 EFLAGS: 00000246 [ 1467.795760] Node 1 active_anon:1564kB inactive_anon:44328kB active_file:12kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:60188kB dirty:0kB writeback:28kB shmem:44588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1467.800877] ORIG_RAX: 0000000000000015 [ 1467.804570] Node 0 [ 1467.809931] RAX: ffffffffffffffda RBX: 00007ffc607133f0 RCX: 00007f55110b79c7 [ 1467.809936] RDX: 00007f5511b28a00 RSI: 0000000000000000 RDI: 0000559da947a9a3 [ 1467.809940] RBP: 00007ffc60710510 R08: 0000000000000000 R09: 0000000000000000 [ 1467.809943] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 1467.809947] R13: 0000000000000000 R14: 00007ffc607133f0 R15: 00007ffc60710a00 [ 1467.870478] Mem-Info: [ 1467.882734] active_anon:12930 inactive_anon:27049 isolated_anon:0 [ 1467.882734] active_file:31 inactive_file:31 isolated_file:0 [ 1467.882734] unevictable:0 dirty:0 writeback:16 unstable:0 [ 1467.882734] slab_reclaimable:13146 slab_unreclaimable:119553 [ 1467.882734] mapped:52559 shmem:27412 pagetables:787 bounce:0 [ 1467.882734] free:25087 free_pcp:1 free_cma:0 [ 1467.945536] Node 0 active_anon:50156kB inactive_anon:63868kB active_file:104kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150048kB dirty:0kB writeback:36kB shmem:65060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1468.055141] Node 1 active_anon:1552kB inactive_anon:44328kB active_file:104kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):124kB mapped:60296kB dirty:0kB writeback:0kB shmem:44588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1468.103964] Node 0 DMA free:11032kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1468.107031] DMA free:11032kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1468.130985] lowmem_reserve[]: [ 1468.156158] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1468.205453] 0 2717 2718 2718 2718 [ 1468.209054] Node 0 DMA32 free:36108kB min:36200kB low:45248kB high:54296kB active_anon:50164kB inactive_anon:63868kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2504kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1468.228725] Node 0 DMA32 free:36108kB min:36200kB low:45248kB high:54296kB active_anon:50164kB inactive_anon:63868kB active_file:108kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2504kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1468.427237] lowmem_reserve[]: 0 0 0 0 0 [ 1468.431280] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1468.447907] lowmem_reserve[]: 0 0 0 0 0 [ 1468.508982] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1468.644270] lowmem_reserve[]: 0 0 0 0 0 [ 1468.667229] Node 1 Normal free:53096kB min:53696kB low:67120kB high:80544kB active_anon:1552kB inactive_anon:44328kB active_file:4kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:640kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1468.678260] lowmem_reserve[]: 0 0 0 0 0 [ 1468.708472] Node 1 Normal free:53096kB min:53696kB low:67120kB high:80544kB active_anon:1552kB inactive_anon:44328kB active_file:4kB inactive_file:12kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:640kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1468.793803] lowmem_reserve[]: 0 0 0 0 0 [ 1468.821239] lowmem_reserve[]: 0 0 0 0 0 [ 1468.822382] Node 0 DMA: 10*4kB (UE) 0*8kB 1*16kB (E) 1*32kB (E) 1*64kB (E) 3*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11032kB [ 1468.860236] Node 0 [ 1468.954290] Node 0 [ 1468.957715] DMA: 10*4kB (UE) 0*8kB 1*16kB (E) 1*32kB (E) 1*64kB (E) 3*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11032kB [ 1468.967687] DMA32: 256*4kB (UME) 303*8kB (UME) 221*16kB (UME) 923*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36520kB [ 1469.087120] Node 0 DMA32: 233*4kB (ME) 252*8kB (UME) 221*16kB (UME) 923*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36020kB [ 1469.088263] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1469.193930] Node 0 [ 1469.250578] Node 1 Normal: 21*4kB (M) 8*8kB (UM) 1475*16kB (U) 936*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53700kB [ 1469.267485] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1469.321976] Node 1 Normal: 21*4kB (M) 8*8kB (UM) 1475*16kB (U) 936*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 53700kB [ 1469.389411] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1469.400229] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1469.422749] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1469.462320] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1469.473706] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1469.511579] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1469.550715] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1469.572439] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1469.603522] 27440 total pagecache pages [ 1469.607336] 27440 total pagecache pages [ 1469.611535] 0 pages in swap cache [ 1469.643670] 0 pages in swap cache [ 1469.663227] Swap cache stats: add 0, delete 0, find 0/0 [ 1469.672526] Swap cache stats: add 0, delete 0, find 0/0 [ 1469.699394] Free swap = 0kB [ 1469.702462] Total swap = 0kB [ 1469.705384] Free swap = 0kB [ 1469.708505] Total swap = 0kB [ 1469.711537] 2097051 pages RAM [ 1469.714650] 0 pages HighMem/MovableOnly [ 1469.741918] 2097051 pages RAM [ 1469.759934] 0 pages HighMem/MovableOnly [ 1469.763935] 363849 pages reserved [ 1469.784902] 363849 pages reserved [ 1469.788398] 0 pages cma reserved [ 1469.791759] Out of memory (oom_kill_allocating_task): Kill process 11427 (systemd-journal) score 0 or sacrifice child [ 1469.824312] 0 pages cma reserved [ 1469.909251] Killed process 11427 (systemd-journal) total-vm:46096kB, anon-rss:468kB, file-rss:4kB, shmem-rss:1288kB [ 1469.978669] oom_reaper: reaped process 11427 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:1288kB [ 1469.997187] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1470.024731] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1470.034315] CPU: 1 PID: 10159 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1470.042209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1470.051567] Call Trace: [ 1470.054165] dump_stack+0x1b2/0x281 [ 1470.057902] dump_header+0x178/0x82f [ 1470.061620] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1470.066731] ? ___ratelimit+0x2cd/0x530 [ 1470.070744] oom_kill_process.cold+0x10/0xa40 [ 1470.075255] out_of_memory+0xe3e/0x1190 [ 1470.079330] ? oom_killer_disable+0x1c0/0x1c0 [ 1470.083840] ? mutex_trylock+0x152/0x1a0 [ 1470.087927] __alloc_pages_nodemask+0x23e1/0x2720 [ 1470.092779] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1470.097638] alloc_pages_current+0x155/0x260 [ 1470.102052] filemap_fault+0x11a1/0x1ad0 [ 1470.106128] ext4_filemap_fault+0x84/0xb0 [ 1470.110290] __do_fault+0xfa/0x380 [ 1470.114020] __handle_mm_fault+0x2497/0x4620 [ 1470.118440] ? vm_insert_page+0x7c0/0x7c0 [ 1470.122595] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1470.127006] ? nanosleep_copyout+0x100/0x100 [ 1470.131425] ? mark_held_locks+0xa6/0xf0 [ 1470.135524] handle_mm_fault+0x455/0x9c0 [ 1470.139592] __do_page_fault+0x549/0xad0 [ 1470.143650] ? spurious_fault+0x640/0x640 [ 1470.147813] ? do_page_fault+0x60/0x500 [ 1470.151785] ? page_fault+0x2f/0x50 [ 1470.155423] page_fault+0x45/0x50 [ 1470.158955] RIP: 165fc9:0x3 [ 1470.161874] RSP: 0010:00007ffd618ef5cc EFLAGS: 00000032 [ 1470.167816] Mem-Info: [ 1470.177617] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1470.177846] active_anon:12813 inactive_anon:27048 isolated_anon:0 [ 1470.177846] active_file:3 inactive_file:17 isolated_file:0 [ 1470.177846] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1470.177846] slab_reclaimable:13160 slab_unreclaimable:119336 [ 1470.177846] mapped:52225 shmem:27412 pagetables:761 bounce:0 [ 1470.177846] free:13903 free_pcp:125 free_cma:0 [ 1470.210755] syz-executor.0 cpuset= [ 1470.227730] Node 0 active_anon:49704kB inactive_anon:63868kB active_file:0kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150056kB dirty:0kB writeback:0kB shmem:65060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1470.246089] / [ 1470.263410] Node 1 active_anon:1548kB inactive_anon:44324kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58844kB dirty:0kB writeback:0kB shmem:44588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1470.281515] mems_allowed=0-1 [ 1470.303372] Node 0 DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1470.312331] CPU: 0 PID: 11124 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1470.337425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1470.339810] lowmem_reserve[]: [ 1470.346779] Call Trace: [ 1470.346805] dump_stack+0x1b2/0x281 [ 1470.346818] warn_alloc.cold+0x96/0x1cc [ 1470.346830] ? zone_watermark_ok_safe+0x220/0x220 [ 1470.346839] ? usleep_range+0x130/0x130 [ 1470.346847] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1470.346859] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1470.346869] ? run_timer_softirq+0x5a0/0x5a0 [ 1470.346885] __alloc_pages_nodemask+0x2127/0x2720 [ 1470.346899] ? lock_acquire+0x170/0x3f0 [ 1470.346914] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1470.346924] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1470.346939] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1470.354713] 0 [ 1470.356251] alloc_pages_current+0x155/0x260 [ 1470.356266] ion_page_pool_alloc+0x118/0x1b0 [ 1470.356275] ion_system_heap_allocate+0x133/0x8c0 [ 1470.356287] ? _raw_spin_unlock+0x29/0x40 [ 1470.356295] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1470.356304] ? ion_system_contig_heap_create+0x130/0x130 [ 1470.356315] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1470.356326] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1470.356335] ion_alloc+0x27a/0x810 [ 1470.356348] ? ion_dma_buf_release+0x40/0x40 [ 1470.370755] 2717 [ 1470.374314] ? __might_fault+0x177/0x1b0 [ 1470.382492] 2718 [ 1470.384079] ion_ioctl+0xea/0x1f0 [ 1470.399307] 2718 [ 1470.402209] ? ion_query_heaps+0x360/0x360 [ 1470.413118] 2718 [ 1470.413879] ? ion_query_heaps+0x360/0x360 [ 1470.423307] do_vfs_ioctl+0x75a/0xff0 [ 1470.433391] Node 0 [ 1470.437799] ? ioctl_preallocate+0x1a0/0x1a0 [ 1470.437810] ? lock_downgrade+0x740/0x740 [ 1470.437822] ? __fget+0x225/0x360 [ 1470.437831] ? do_vfs_ioctl+0xff0/0xff0 [ 1470.437842] ? security_file_ioctl+0x83/0xb0 [ 1470.437852] SyS_ioctl+0x7f/0xb0 [ 1470.437859] ? do_vfs_ioctl+0xff0/0xff0 [ 1470.437870] do_syscall_64+0x1d5/0x640 [ 1470.437886] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1470.437894] RIP: 0033:0x4665d9 [ 1470.437899] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1470.437909] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1470.437917] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1470.451191] DMA32 free:18028kB min:36200kB low:45248kB high:54296kB active_anon:49704kB inactive_anon:63868kB active_file:100kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2412kB bounce:0kB free_pcp:372kB local_pcp:252kB free_cma:0kB [ 1470.451299] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1470.455754] lowmem_reserve[]: [ 1470.457751] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1470.457759] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1470.461814] 0 [ 1470.487111] Mem-Info: [ 1470.500847] 0 [ 1470.518900] active_anon:12813 inactive_anon:27048 isolated_anon:0 [ 1470.518900] active_file:27 inactive_file:0 isolated_file:0 [ 1470.518900] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1470.518900] slab_reclaimable:13159 slab_unreclaimable:119336 [ 1470.518900] mapped:52225 shmem:27412 pagetables:761 bounce:0 [ 1470.518900] free:13903 free_pcp:125 free_cma:0 [ 1470.532990] 0 [ 1470.554171] Node 0 active_anon:49704kB inactive_anon:63868kB active_file:100kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150056kB dirty:0kB writeback:0kB shmem:65060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1470.589771] 0 [ 1470.606864] Node 1 active_anon:1548kB inactive_anon:44324kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58844kB dirty:0kB writeback:0kB shmem:44588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1470.606872] Node 0 [ 1470.619653] 0 [ 1470.661357] DMA free:10972kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1470.725128] lowmem_reserve[]: [ 1470.751938] Node 0 [ 1470.753712] 0 2717 2718 2718 2718 [ 1470.762224] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1470.777960] Node 0 [ 1470.806667] lowmem_reserve[]: [ 1470.808581] DMA32 free:18028kB min:36200kB low:45248kB high:54296kB active_anon:49704kB inactive_anon:63868kB active_file:72kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2412kB bounce:0kB free_pcp:372kB local_pcp:120kB free_cma:0kB [ 1470.808916] 0 [ 1470.812009] lowmem_reserve[]: 0 [ 1470.858332] 0 [ 1470.860761] 0 [ 1470.861645] 0 [ 1470.863465] 0 0 [ 1470.871829] 0 0 [ 1470.878718] Node 1 Normal free:26612kB min:53696kB low:67120kB high:80544kB active_anon:1548kB inactive_anon:44324kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:632kB bounce:0kB free_pcp:128kB local_pcp:8kB free_cma:0kB [ 1470.879865] 0 [ 1470.927906] lowmem_reserve[]: 0 0 0 0 0 [ 1470.937901] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1470.939672] Node 0 DMA: 1*4kB (E) 1*8kB (U) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10972kB [ 1470.980630] lowmem_reserve[]: [ 1471.009992] Node 0 [ 1471.012246] 0 [ 1471.013131] DMA32: [ 1471.021805] 0 0 0 0 [ 1471.030674] 243*4kB (ME) 184*8kB (UME) 165*16kB (ME) 400*32kB (UME) 1*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18076kB [ 1471.035073] Node 1 Normal free:26612kB min:53696kB low:67120kB high:80544kB active_anon:1548kB inactive_anon:44324kB active_file:0kB inactive_file:80kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:632kB bounce:0kB free_pcp:128kB local_pcp:120kB free_cma:0kB [ 1471.056584] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1471.090815] lowmem_reserve[]: [ 1471.110412] Node 1 [ 1471.114513] 0 [ 1471.119956] Normal: 1*4kB (U) 6*8kB (UM) 0*16kB 830*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26612kB [ 1471.122816] 0 [ 1471.145450] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1471.150911] 0 [ 1471.167621] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1471.173778] 0 0 [ 1471.184791] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1471.197124] Node 0 DMA: 1*4kB (E) 1*8kB (U) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10972kB [ 1471.206268] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1471.231960] 27440 total pagecache pages [ 1471.235304] Node 0 DMA32: 243*4kB (ME) 187*8kB (UME) 165*16kB (ME) 400*32kB (UME) 1*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18100kB [ 1471.238622] 0 pages in swap cache [ 1471.265751] Swap cache stats: add 0, delete 0, find 0/0 [ 1471.271140] Free swap = 0kB [ 1471.271686] Node 0 [ 1471.274149] Total swap = 0kB [ 1471.274162] 2097051 pages RAM [ 1471.293936] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1471.294160] 0 pages HighMem/MovableOnly [ 1471.310700] Node 1 Normal: 1*4kB (U) 6*8kB (UM) 0*16kB 830*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26612kB [ 1471.316897] 363849 pages reserved [ 1471.333502] 0 pages cma reserved [ 1471.341421] Out of memory (oom_kill_allocating_task): Kill process 10159 (syz-executor.1) score 0 or sacrifice child [ 1471.341476] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1471.362793] Killed process 11418 (syz-executor.1) total-vm:93252kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 1471.383658] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1471.392346] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1471.404458] oom_reaper: reaped process 11418 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1471.411665] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1471.434053] 27440 total pagecache pages [ 1471.438090] 0 pages in swap cache [ 1471.441538] Swap cache stats: add 0, delete 0, find 0/0 [ 1471.462179] Free swap = 0kB [ 1471.477136] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1471.488950] Total swap = 0kB [ 1471.493089] 2097051 pages RAM [ 1471.511563] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1471.513547] 0 pages HighMem/MovableOnly [ 1471.523490] CPU: 1 PID: 10159 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1471.531887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1471.531959] 363849 pages reserved [ 1471.541258] Call Trace: [ 1471.541281] dump_stack+0x1b2/0x281 [ 1471.541293] dump_header+0x178/0x82f [ 1471.541303] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1471.541312] ? ___ratelimit+0x2cd/0x530 [ 1471.541325] oom_kill_process.cold+0x10/0xa40 [ 1471.556650] 0 pages cma reserved [ 1471.559778] out_of_memory+0xe3e/0x1190 [ 1471.575576] ? oom_killer_disable+0x1c0/0x1c0 [ 1471.580079] ? mutex_trylock+0x152/0x1a0 [ 1471.584148] __alloc_pages_nodemask+0x23e1/0x2720 [ 1471.589113] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1471.594763] alloc_pages_current+0x155/0x260 [ 1471.600499] filemap_fault+0x11a1/0x1ad0 [ 1471.604576] ext4_filemap_fault+0x84/0xb0 [ 1471.608733] __do_fault+0xfa/0x380 [ 1471.612277] __handle_mm_fault+0x2497/0x4620 [ 1471.616698] ? vm_insert_page+0x7c0/0x7c0 [ 1471.620862] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1471.625400] ? nanosleep_copyout+0x100/0x100 [ 1471.631390] ? mark_held_locks+0xa6/0xf0 [ 1471.635481] handle_mm_fault+0x455/0x9c0 [ 1471.639558] __do_page_fault+0x549/0xad0 [ 1471.643640] ? spurious_fault+0x640/0x640 [ 1471.647794] ? do_page_fault+0x60/0x500 [ 1471.651783] ? page_fault+0x2f/0x50 [ 1471.655435] page_fault+0x45/0x50 [ 1471.658887] RIP: 165fc9:0x3 [ 1471.661835] RSP: 0010:00007ffd618ef5cc EFLAGS: 00000032 [ 1471.667524] Mem-Info: [ 1471.675755] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1471.677580] active_anon:12813 inactive_anon:27048 isolated_anon:0 [ 1471.677580] active_file:24 inactive_file:13 isolated_file:0 [ 1471.677580] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1471.677580] slab_reclaimable:13158 slab_unreclaimable:119322 [ 1471.677580] mapped:52225 shmem:27412 pagetables:761 bounce:0 [ 1471.677580] free:13943 free_pcp:148 free_cma:0 [ 1471.705035] syz-executor.5 cpuset= [ 1471.726718] syz-executor.1: [ 1471.728816] Node 0 active_anon:49704kB inactive_anon:63868kB active_file:116kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150056kB dirty:0kB writeback:0kB shmem:65060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1471.730278] page allocation failure: order:0 [ 1471.733294] Node 1 active_anon:1548kB inactive_anon:44324kB active_file:0kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58844kB dirty:0kB writeback:0kB shmem:44588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1471.794675] / [ 1471.817992] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1471.821425] mems_allowed=0-1 [ 1471.864119] CPU: 0 PID: 11140 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1471.870901] lowmem_reserve[]: [ 1471.872241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1471.872251] 0 [ 1471.875339] Call Trace: [ 1471.875361] dump_stack+0x1b2/0x281 [ 1471.875374] warn_alloc.cold+0x96/0x1cc [ 1471.875386] ? zone_watermark_ok_safe+0x220/0x220 [ 1471.875395] ? usleep_range+0x130/0x130 [ 1471.875404] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1471.875416] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1471.875426] ? run_timer_softirq+0x5a0/0x5a0 [ 1471.875442] __alloc_pages_nodemask+0x2127/0x2720 [ 1471.875455] ? lock_acquire+0x170/0x3f0 [ 1471.875470] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1471.875483] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1471.893427] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1471.896970] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1471.896990] alloc_pages_current+0x155/0x260 [ 1471.897008] ion_page_pool_alloc+0x118/0x1b0 [ 1471.901835] (null) [ 1471.905803] ion_system_heap_allocate+0x133/0x8c0 [ 1471.905813] ? ion_alloc+0x187/0x810 [ 1471.905823] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1471.905832] ? ion_system_contig_heap_create+0x130/0x130 [ 1471.905841] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1471.905852] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1471.905862] ion_alloc+0x204/0x810 [ 1471.905875] ? ion_dma_buf_release+0x40/0x40 [ 1471.905887] ? __might_fault+0x177/0x1b0 [ 1471.905898] ion_ioctl+0xea/0x1f0 [ 1471.905907] ? ion_query_heaps+0x360/0x360 [ 1471.905918] ? ion_query_heaps+0x360/0x360 [ 1471.905928] do_vfs_ioctl+0x75a/0xff0 [ 1471.905940] ? ioctl_preallocate+0x1a0/0x1a0 [ 1471.918429] 2717 [ 1471.920545] ? lock_downgrade+0x740/0x740 [ 1471.928500] syz-executor.1 cpuset= [ 1471.929354] ? __fget+0x225/0x360 [ 1471.934309] / [ 1471.938801] ? do_vfs_ioctl+0xff0/0xff0 [ 1471.954759] 2718 [ 1471.956024] ? security_file_ioctl+0x83/0xb0 [ 1471.956036] SyS_ioctl+0x7f/0xb0 [ 1471.956044] ? do_vfs_ioctl+0xff0/0xff0 [ 1471.956056] do_syscall_64+0x1d5/0x640 [ 1471.956072] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1471.956080] RIP: 0033:0x4665d9 [ 1471.956085] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1471.956098] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1471.960551] 2718 [ 1471.962633] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1471.962646] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1471.975706] 2718 [ 1471.979050] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1471.989743] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1472.012269] Mem-Info: [ 1472.014788] mems_allowed=0-1 [ 1472.041436] active_anon:12813 inactive_anon:27048 isolated_anon:0 [ 1472.041436] active_file:15 inactive_file:11 isolated_file:0 [ 1472.041436] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1472.041436] slab_reclaimable:13158 slab_unreclaimable:119322 [ 1472.041436] mapped:52225 shmem:27412 pagetables:761 bounce:0 [ 1472.041436] free:13943 free_pcp:148 free_cma:0 [ 1472.043666] Node 0 [ 1472.072432] Node 0 active_anon:49628kB inactive_anon:63868kB active_file:48kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150056kB dirty:0kB writeback:0kB shmem:65060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1472.074224] CPU: 1 PID: 11418 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1472.087494] Node 1 active_anon:1532kB inactive_anon:44324kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58844kB dirty:0kB writeback:0kB shmem:44588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1472.089283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1472.091420] Node 0 [ 1472.098693] Call Trace: [ 1472.098716] dump_stack+0x1b2/0x281 [ 1472.098730] warn_alloc.cold+0x96/0x1cc [ 1472.098743] ? zone_watermark_ok_safe+0x220/0x220 [ 1472.106328] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1472.108345] ? usleep_range+0x130/0x130 [ 1472.115972] lowmem_reserve[]: [ 1472.123214] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1472.125635] 0 [ 1472.128716] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1472.128729] ? run_timer_softirq+0x5a0/0x5a0 [ 1472.128745] __alloc_pages_nodemask+0x2127/0x2720 [ 1472.128776] ? lock_acquire+0x170/0x3f0 [ 1472.162339] 2717 [ 1472.164434] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1472.209084] 2718 [ 1472.216950] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1472.216967] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1472.216983] ? audit_kill_trees+0x230/0x230 [ 1472.244169] 2718 [ 1472.253512] alloc_pages_current+0x155/0x260 [ 1472.253528] ion_page_pool_alloc+0x118/0x1b0 [ 1472.253538] ion_system_heap_allocate+0x133/0x8c0 [ 1472.255799] 2718 [ 1472.258718] ? ion_alloc+0x187/0x810 [ 1472.266301] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1472.266312] ? ion_system_contig_heap_create+0x130/0x130 [ 1472.266322] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1472.266333] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1472.266342] ion_alloc+0x204/0x810 [ 1472.266356] ? ion_dma_buf_release+0x40/0x40 [ 1472.266370] ? __might_fault+0x177/0x1b0 [ 1472.271546] Node 0 [ 1472.297029] ion_ioctl+0xea/0x1f0 [ 1472.297040] ? ion_query_heaps+0x360/0x360 [ 1472.297051] ? ion_query_heaps+0x360/0x360 [ 1472.297064] do_vfs_ioctl+0x75a/0xff0 [ 1472.301053] DMA32 free:18108kB min:36200kB low:45248kB high:54296kB active_anon:49628kB inactive_anon:63868kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2412kB bounce:0kB free_pcp:580kB local_pcp:120kB free_cma:0kB [ 1472.304133] ? ioctl_preallocate+0x1a0/0x1a0 [ 1472.309249] lowmem_reserve[]: [ 1472.311023] ? lock_downgrade+0x740/0x740 [ 1472.316042] 0 [ 1472.320413] ? __fget+0x225/0x360 [ 1472.325251] 0 [ 1472.329203] ? do_vfs_ioctl+0xff0/0xff0 [ 1472.331239] 0 [ 1472.336070] ? security_file_ioctl+0x83/0xb0 [ 1472.336081] SyS_ioctl+0x7f/0xb0 [ 1472.336090] ? do_vfs_ioctl+0xff0/0xff0 [ 1472.336102] do_syscall_64+0x1d5/0x640 [ 1472.338147] 0 [ 1472.342721] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1472.348271] 0 [ 1472.352752] RIP: 0033:0x4665d9 [ 1472.359264] RSP: 002b:00007f696b00b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1472.363656] Node 0 [ 1472.368475] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1472.368481] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1472.368485] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1472.368490] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1472.368495] R13: 00007ffd618ef30f R14: 00007f696b00b300 R15: 0000000000022000 [ 1472.369597] DMA32 free:18108kB min:36200kB low:45248kB high:54296kB active_anon:49628kB inactive_anon:63868kB active_file:48kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2412kB bounce:0kB free_pcp:580kB local_pcp:460kB free_cma:0kB [ 1472.370564] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1472.374250] lowmem_reserve[]: [ 1472.404732] lowmem_reserve[]: [ 1472.407151] 0 0 0 0 0 [ 1472.407170] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1472.407189] lowmem_reserve[]: 0 0 0 0 0 [ 1472.407208] Node 1 Normal free:26792kB min:53696kB low:67120kB high:80544kB active_anon:1532kB inactive_anon:44324kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:632kB bounce:0kB free_pcp:144kB local_pcp:24kB free_cma:0kB [ 1472.407227] lowmem_reserve[]: 0 0 0 [ 1472.421505] 0 [ 1472.425241] 0 0 [ 1472.425252] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB [ 1472.479299] 0 [ 1472.487153] (UE) [ 1472.498106] 0 [ 1472.512328] 1*256kB [ 1472.523118] 0 [ 1472.533143] (E) [ 1472.553197] 0 [ 1472.563864] 2*512kB [ 1472.622093] (UE) [ 1472.650496] Node 1 [ 1472.690918] 1*1024kB [ 1472.700838] Normal free:26792kB min:53696kB low:67120kB high:80544kB active_anon:1532kB inactive_anon:44324kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:632kB bounce:0kB free_pcp:144kB local_pcp:120kB free_cma:0kB [ 1472.710826] (E) [ 1472.719002] lowmem_reserve[]: [ 1472.752092] 2*2048kB (ME) 1*4096kB (U) = 10976kB [ 1472.756684] 0 [ 1472.760039] Node 0 [ 1472.760047] 0 [ 1472.761920] DMA32: [ 1472.764146] 0 0 0 [ 1472.779434] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10976kB [ 1472.781035] 243*4kB [ 1472.803328] Node 0 DMA32: 243*4kB (ME) 197*8kB (UME) 172*16kB (UME) 20*32kB (ME) 133*64kB (UM) 25*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18164kB [ 1472.809645] (ME) [ 1472.850719] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1472.855490] 197*8kB (UME) 172*16kB (UME) 20*32kB (ME) 133*64kB (UM) 25*128kB (U) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18164kB [ 1472.894216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1472.907824] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1472.913144] Node 1 [ 1472.924814] Node 1 Normal: 4*4kB (U) 7*8kB (UM) 1*16kB (U) 597*32kB (UE) 480*64kB (U) 10*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 51192kB [ 1472.938782] Normal: 4*4kB (U) 7*8kB (UM) 1*16kB (U) 597*32kB (UE) 465*64kB (U) 10*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 50232kB [ 1472.946645] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1472.963854] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1472.973197] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1472.984224] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1472.987663] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1472.997094] 27459 total pagecache pages [ 1473.010882] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1473.023549] 0 pages in swap cache [ 1473.033711] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1473.041134] Swap cache stats: add 0, delete 0, find 0/0 [ 1473.047892] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1473.047902] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1473.074427] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1473.080227] 27459 total pagecache pages [ 1473.084309] 0 pages in swap cache [ 1473.087965] CPU: 1 PID: 11418 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1473.087971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1473.087975] Call Trace: [ 1473.087995] dump_stack+0x1b2/0x281 [ 1473.088009] warn_alloc.cold+0x96/0x1cc [ 1473.111708] Swap cache stats: add 0, delete 0, find 0/0 [ 1473.112261] ? zone_watermark_ok_safe+0x220/0x220 [ 1473.116262] Free swap = 0kB [ 1473.121604] __alloc_pages_nodemask+0x2127/0x2720 [ 1473.126601] Total swap = 0kB [ 1473.129441] ? lock_acquire+0x170/0x3f0 [ 1473.134364] 2097051 pages RAM [ 1473.137389] ? lock_acquire+0x170/0x3f0 [ 1473.137405] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1473.137424] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1473.141393] 0 pages HighMem/MovableOnly [ 1473.144488] ? __mutex_unlock_slowpath+0x75/0x770 [ 1473.148479] 363849 pages reserved [ 1473.153282] ? __list_del_entry_valid+0xad/0xf0 [ 1473.158734] 0 pages cma reserved [ 1473.162948] alloc_pages_current+0x155/0x260 [ 1473.184174] ion_page_pool_alloc+0x118/0x1b0 [ 1473.188604] ion_system_heap_allocate+0x133/0x8c0 [ 1473.193478] ? _raw_spin_unlock+0x29/0x40 [ 1473.197627] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1473.202560] ? ion_system_contig_heap_create+0x130/0x130 [ 1473.208019] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1473.213039] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1473.217882] ion_alloc+0x27a/0x810 [ 1473.221428] ? ion_dma_buf_release+0x40/0x40 [ 1473.225839] ? __might_fault+0x177/0x1b0 [ 1473.229901] ion_ioctl+0xea/0x1f0 [ 1473.233625] ? ion_query_heaps+0x360/0x360 [ 1473.237876] ? ion_query_heaps+0x360/0x360 [ 1473.242109] do_vfs_ioctl+0x75a/0xff0 [ 1473.245931] ? ioctl_preallocate+0x1a0/0x1a0 [ 1473.250356] ? lock_downgrade+0x740/0x740 [ 1473.254505] ? __fget+0x225/0x360 [ 1473.257959] ? do_vfs_ioctl+0xff0/0xff0 [ 1473.261931] ? security_file_ioctl+0x83/0xb0 [ 1473.266337] SyS_ioctl+0x7f/0xb0 [ 1473.269701] ? do_vfs_ioctl+0xff0/0xff0 [ 1473.273673] do_syscall_64+0x1d5/0x640 [ 1473.277582] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1473.282858] RIP: 0033:0x4665d9 [ 1473.286063] RSP: 002b:00007f696b00b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1473.293770] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1473.301037] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1473.311429] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1473.318719] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1473.326107] R13: 00007ffd618ef30f R14: 00007f696b00b300 R15: 0000000000022000 [ 1473.345563] Free swap = 0kB [ 1473.348596] Total swap = 0kB [ 1473.351608] 2097051 pages RAM [ 1473.354701] 0 pages HighMem/MovableOnly [ 1473.375085] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1473.424683] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1473.434748] 363849 pages reserved [ 1473.448549] 0 pages cma reserved [ 1473.452361] Out of memory (oom_kill_allocating_task): Kill process 10159 (syz-executor.1) score 0 or sacrifice child [ 1473.481172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1473.508835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1473.521450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1473.531494] Killed process 10159 (syz-executor.1) total-vm:93120kB, anon-rss:108kB, file-rss:34584kB, shmem-rss:0kB [ 1473.555967] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1473.562236] 8021q: adding VLAN 0 to HW filter on device team0 [ 1473.596342] oom_reaper: reaped process 11140 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1473.617659] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1473.638743] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1473.662381] oom_reaper: reaped process 10159 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1473.680426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1473.699220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1473.719718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.726157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1473.750502] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1473.778755] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1473.798516] 8021q: adding VLAN 0 to HW filter on device team0 [ 1473.808065] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1473.821742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1473.834282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1473.863849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1473.872666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1473.886849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1473.898763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.905192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1473.917029] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1473.935808] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1473.944981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1473.952846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1473.953201] systemd[1]: systemd-journald.service: Main process exited, code=killed, status=9/KILL [ 1473.965823] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.976269] bridge0: port 1(bridge_slave_0) entered forwarding state 00:41:53 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) socket$can_bcm(0x1d, 0x2, 0x2) [ 1473.988174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1473.999260] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1474.000732] systemd[1]: Failed to start Journal Service. [ 1474.014453] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1474.025170] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1474.025931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1474.046035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1474.052654] syz-executor.5 cpuset= [ 1474.055926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1474.056873] / [ 1474.059942] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1474.071610] systemd[1]: systemd-journald.service: Unit entered failed state. [ 1474.082056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.090440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1474.098288] mems_allowed=0-1 [ 1474.101468] warn_alloc_show_mem: 1 callbacks suppressed [ 1474.101471] Mem-Info: [ 1474.105281] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 1474.107288] active_anon:12837 inactive_anon:27048 isolated_anon:0 [ 1474.107288] active_file:713 inactive_file:2394 isolated_file:0 [ 1474.107288] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1474.107288] slab_reclaimable:13180 slab_unreclaimable:118782 [ 1474.107288] mapped:54270 shmem:27412 pagetables:715 bounce:0 [ 1474.107288] free:64076 free_pcp:139 free_cma:0 [ 1474.110549] CPU: 0 PID: 11140 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1474.127270] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1474.150227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1474.150232] Call Trace: [ 1474.150255] dump_stack+0x1b2/0x281 [ 1474.150268] warn_alloc.cold+0x96/0x1cc [ 1474.150279] ? zone_watermark_ok_safe+0x220/0x220 [ 1474.150300] __alloc_pages_nodemask+0x2127/0x2720 [ 1474.150309] ? io_schedule_timeout+0x140/0x140 [ 1474.150325] ? lock_acquire+0x170/0x3f0 [ 1474.150340] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1474.150355] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1474.150367] ? __mutex_unlock_slowpath+0x75/0x770 [ 1474.150383] alloc_pages_current+0x155/0x260 [ 1474.163355] Node 0 active_anon:49844kB inactive_anon:63868kB active_file:2940kB inactive_file:9672kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158392kB dirty:20kB writeback:12kB shmem:65060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1474.165039] ion_page_pool_alloc+0x118/0x1b0 [ 1474.165049] ion_system_heap_allocate+0x133/0x8c0 [ 1474.165061] ? _raw_spin_unlock+0x29/0x40 [ 1474.165070] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1474.165078] ? ion_system_contig_heap_create+0x130/0x130 [ 1474.165089] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1474.165100] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1474.165110] ion_alloc+0x27a/0x810 [ 1474.174509] Node 1 active_anon:1468kB inactive_anon:44316kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58844kB dirty:4kB writeback:8kB shmem:44588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1474.177065] ? ion_dma_buf_release+0x40/0x40 [ 1474.177078] ? __might_fault+0x177/0x1b0 [ 1474.177089] ion_ioctl+0xea/0x1f0 [ 1474.177097] ? ion_query_heaps+0x360/0x360 [ 1474.177108] ? ion_query_heaps+0x360/0x360 [ 1474.177118] do_vfs_ioctl+0x75a/0xff0 [ 1474.177130] ? ioctl_preallocate+0x1a0/0x1a0 [ 1474.177139] ? lock_downgrade+0x740/0x740 [ 1474.177153] ? __fget+0x225/0x360 [ 1474.184527] Node 0 [ 1474.185595] ? do_vfs_ioctl+0xff0/0xff0 [ 1474.185607] ? security_file_ioctl+0x83/0xb0 [ 1474.185616] SyS_ioctl+0x7f/0xb0 [ 1474.185624] ? do_vfs_ioctl+0xff0/0xff0 [ 1474.185635] do_syscall_64+0x1d5/0x640 [ 1474.185650] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1474.185657] RIP: 0033:0x4665d9 [ 1474.185661] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1474.185670] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1474.185675] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1474.185680] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1474.185686] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1474.185691] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1474.193570] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 1474.197222] syz-executor.0: [ 1474.212405] systemd[1]: Stopped Journal Service. [ 1474.219022] DMA free:11020kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1474.242619] systemd[1]: Starting Journal Service... [ 1474.253219] page allocation failure: order:4 [ 1474.484525] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1474.500442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1474.509410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1474.524702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1474.546197] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1474.554593] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1474.571041] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1474.591302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1474.605949] Node 0 DMA32 free:39032kB min:36200kB low:45248kB high:54296kB active_anon:49944kB inactive_anon:63868kB active_file:4432kB inactive_file:6804kB unevictable:0kB writepending:32kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2400kB bounce:0kB free_pcp:544kB local_pcp:240kB free_cma:0kB [ 1474.650797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1474.733392] lowmem_reserve[]: 0 0 0 0 0 [ 1474.750366] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1474.810155] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1474.823443] lowmem_reserve[]: 0 0 0 0 0 [ 1474.827511] Node 1 Normal free:48204kB min:53696kB low:67120kB high:80544kB active_anon:1568kB inactive_anon:44316kB active_file:76kB inactive_file:0kB unevictable:0kB writepending:12kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:536kB bounce:0kB free_pcp:44kB local_pcp:0kB free_cma:0kB [ 1474.858872] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1474.864160] CPU: 1 PID: 8037 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1474.871963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1474.881361] Call Trace: [ 1474.884053] dump_stack+0x1b2/0x281 [ 1474.887714] dump_header+0x178/0x82f [ 1474.891714] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1474.897083] ? ___ratelimit+0x2cd/0x530 [ 1474.901154] oom_kill_process.cold+0x10/0xa40 [ 1474.905668] out_of_memory+0xe3e/0x1190 [ 1474.910086] ? oom_killer_disable+0x1c0/0x1c0 [ 1474.914583] ? mutex_trylock+0x152/0x1a0 [ 1474.918748] __alloc_pages_nodemask+0x23e1/0x2720 [ 1474.923612] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1474.928502] alloc_pages_current+0x155/0x260 [ 1474.933540] filemap_fault+0x11a1/0x1ad0 [ 1474.937613] ext4_filemap_fault+0x84/0xb0 [ 1474.941765] __do_fault+0xfa/0x380 [ 1474.945306] __handle_mm_fault+0x2497/0x4620 [ 1474.947008] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1474.949710] ? vm_insert_page+0x7c0/0x7c0 [ 1474.949723] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1474.957413] syz-executor.0 cpuset= [ 1474.961522] ? nanosleep_copyout+0x100/0x100 [ 1474.965997] / [ 1474.969488] ? mark_held_locks+0xa6/0xf0 [ 1474.973885] mems_allowed=0-1 [ 1474.975594] handle_mm_fault+0x455/0x9c0 [ 1474.975608] __do_page_fault+0x549/0xad0 [ 1474.975620] ? spurious_fault+0x640/0x640 [ 1474.975632] ? do_page_fault+0x60/0x500 [ 1474.998968] ? page_fault+0x2f/0x50 [ 1475.002951] page_fault+0x45/0x50 [ 1475.006403] RIP: 168014:0x5 [ 1475.009359] RSP: 002b:00007ffdbfddd46c EFLAGS: 00000032 [ 1475.009387] CPU: 0 PID: 11526 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1475.012784] lowmem_reserve[]: [ 1475.014857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1475.023266] 0 [ 1475.025921] Call Trace: [ 1475.025941] dump_stack+0x1b2/0x281 [ 1475.025955] warn_alloc.cold+0x96/0x1cc [ 1475.025966] ? zone_watermark_ok_safe+0x220/0x220 [ 1475.025988] __alloc_pages_nodemask+0x2127/0x2720 [ 1475.026008] ? lock_acquire+0x170/0x3f0 [ 1475.037689] 0 [ 1475.039764] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1475.043355] 0 [ 1475.047325] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1475.047337] ? __mutex_unlock_slowpath+0x75/0x770 [ 1475.047352] alloc_pages_current+0x155/0x260 [ 1475.047366] ion_page_pool_alloc+0x118/0x1b0 [ 1475.047375] ion_system_heap_allocate+0x133/0x8c0 [ 1475.047388] ? ion_alloc+0x187/0x810 [ 1475.052218] 0 [ 1475.057051] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1475.057062] ? ion_system_contig_heap_create+0x130/0x130 [ 1475.057071] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1475.057083] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1475.057092] ion_alloc+0x204/0x810 [ 1475.057106] ? ion_dma_buf_release+0x40/0x40 [ 1475.057118] ? __might_fault+0x177/0x1b0 [ 1475.063317] 0 [ 1475.067725] ion_ioctl+0xea/0x1f0 [ 1475.067736] ? ion_query_heaps+0x360/0x360 [ 1475.067746] ? ion_query_heaps+0x360/0x360 [ 1475.067756] do_vfs_ioctl+0x75a/0xff0 [ 1475.067766] ? ioctl_preallocate+0x1a0/0x1a0 [ 1475.067776] ? lock_downgrade+0x740/0x740 [ 1475.067790] ? __fget+0x225/0x360 [ 1475.069583] Node 0 [ 1475.075039] ? do_vfs_ioctl+0xff0/0xff0 [ 1475.075051] ? security_file_ioctl+0x83/0xb0 [ 1475.075060] SyS_ioctl+0x7f/0xb0 [ 1475.075068] ? do_vfs_ioctl+0xff0/0xff0 [ 1475.075079] do_syscall_64+0x1d5/0x640 [ 1475.075094] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1475.075102] RIP: 0033:0x4665d9 [ 1475.075106] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1475.075116] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1475.075122] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1475.075130] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1475.082266] DMA: [ 1475.084413] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1475.088915] 41*4kB [ 1475.093648] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1475.099647] (UE) [ 1475.112107] syz-executor.5: [ 1475.117357] 20*8kB [ 1475.138709] page allocation failure: order:0 [ 1475.144344] (U) [ 1475.162351] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1475.164964] Mem-Info: [ 1475.182301] (null) [ 1475.185302] 7*16kB [ 1475.199422] syz-executor.5 cpuset= [ 1475.200077] active_anon:12893 inactive_anon:27048 isolated_anon:0 [ 1475.200077] active_file:15 inactive_file:18 isolated_file:0 [ 1475.200077] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1475.200077] slab_reclaimable:13223 slab_unreclaimable:118788 [ 1475.200077] mapped:52225 shmem:27412 pagetables:760 bounce:0 [ 1475.200077] free:14155 free_pcp:30 free_cma:0 [ 1475.225686] / [ 1475.233550] (UE) [ 1475.260343] mems_allowed=0-1 [ 1475.263859] 3*32kB [ 1475.264124] CPU: 0 PID: 11140 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1475.266887] Node 0 active_anon:49924kB inactive_anon:63868kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150056kB dirty:0kB writeback:0kB shmem:65060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1475.268563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1475.272111] Node 1 active_anon:1648kB inactive_anon:44324kB active_file:20kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58844kB dirty:0kB writeback:0kB shmem:44588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1475.305314] Call Trace: [ 1475.305339] dump_stack+0x1b2/0x281 [ 1475.305352] warn_alloc.cold+0x96/0x1cc [ 1475.305363] ? zone_watermark_ok_safe+0x220/0x220 [ 1475.305373] ? usleep_range+0x130/0x130 [ 1475.305382] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1475.305393] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1475.305402] ? run_timer_softirq+0x5a0/0x5a0 [ 1475.305418] __alloc_pages_nodemask+0x2127/0x2720 [ 1475.305432] ? lock_acquire+0x170/0x3f0 [ 1475.305447] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1475.309395] (UE) [ 1475.312312] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1475.314554] 1*64kB [ 1475.322443] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1475.322462] alloc_pages_current+0x155/0x260 [ 1475.322474] ion_page_pool_alloc+0x118/0x1b0 [ 1475.322484] ion_system_heap_allocate+0x133/0x8c0 [ 1475.322495] ? _raw_spin_unlock+0x29/0x40 [ 1475.322508] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1475.352674] Node 0 [ 1475.359707] ? ion_system_contig_heap_create+0x130/0x130 [ 1475.359720] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1475.359732] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1475.359744] ion_alloc+0x27a/0x810 [ 1475.389465] (E) [ 1475.389575] ? ion_dma_buf_release+0x40/0x40 [ 1475.393188] 1*128kB [ 1475.397162] ? __might_fault+0x177/0x1b0 [ 1475.397175] ion_ioctl+0xea/0x1f0 [ 1475.397184] ? ion_query_heaps+0x360/0x360 [ 1475.397195] ? ion_query_heaps+0x360/0x360 [ 1475.397204] do_vfs_ioctl+0x75a/0xff0 [ 1475.397215] ? ioctl_preallocate+0x1a0/0x1a0 [ 1475.397224] ? lock_downgrade+0x740/0x740 [ 1475.397237] ? __fget+0x225/0x360 [ 1475.397245] ? do_vfs_ioctl+0xff0/0xff0 [ 1475.397258] ? security_file_ioctl+0x83/0xb0 [ 1475.402656] (E) [ 1475.406056] SyS_ioctl+0x7f/0xb0 [ 1475.406065] ? do_vfs_ioctl+0xff0/0xff0 [ 1475.406077] do_syscall_64+0x1d5/0x640 [ 1475.406091] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1475.406099] RIP: 0033:0x4665d9 [ 1475.406104] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1475.406113] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1475.406117] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1475.406122] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1475.406127] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1475.406132] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1475.424974] warn_alloc_show_mem: 1 callbacks suppressed [ 1475.424977] Mem-Info: [ 1475.427716] 2*256kB [ 1475.429502] active_anon:12893 inactive_anon:27048 isolated_anon:0 [ 1475.429502] active_file:15 inactive_file:18 isolated_file:0 [ 1475.429502] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1475.429502] slab_reclaimable:13223 slab_unreclaimable:118788 [ 1475.429502] mapped:52225 shmem:27412 pagetables:760 bounce:0 [ 1475.429502] free:14155 free_pcp:30 free_cma:0 [ 1475.434315] (UE) 1*512kB [ 1475.454917] Node 0 active_anon:49924kB inactive_anon:63868kB active_file:40kB inactive_file:40kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150056kB dirty:0kB writeback:0kB shmem:65060kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1475.459712] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1475.462332] Node 1 active_anon:1648kB inactive_anon:44324kB active_file:20kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58844kB dirty:0kB writeback:0kB shmem:44588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1475.466519] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1475.466543] Node 0 DMA32 free:18680kB min:36200kB low:45248kB high:54296kB active_anon:49924kB inactive_anon:63868kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2432kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1475.466562] lowmem_reserve[]: 0 0 0 0 0 [ 1475.466580] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1475.466597] lowmem_reserve[]: 0 0 0 0 0 [ 1475.466617] Node 1 Normal free:26976kB min:53696kB low:67120kB high:80544kB active_anon:1648kB inactive_anon:44324kB active_file:20kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:608kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1475.466640] lowmem_reserve[]: [ 1475.499176] Node 0 [ 1475.501364] (E) [ 1475.501530] DMA free:10964kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1475.505616] 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10964kB [ 1475.505641] Node 0 DMA32: 218*4kB (UME) 194*8kB (ME) 144*16kB (UME) 430*32kB (UME) 3*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18680kB [ 1475.505704] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB [ 1475.526436] lowmem_reserve[]: [ 1475.532995] 0 [ 1475.533759] 0 [ 1475.541499] 0 [ 1475.554549] 2717 [ 1475.557719] 0*64kB [ 1475.571190] 2718 [ 1475.571805] 0 [ 1475.596184] 2718 [ 1475.603139] 0*128kB [ 1475.626906] 2718 [ 1475.654343] 0 [ 1475.685285] 0 [ 1475.831912] Node 0 [ 1475.843693] 0*256kB [ 1475.950859] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1475.955116] DMA32 free:30592kB min:36200kB low:45248kB high:54296kB active_anon:49924kB inactive_anon:63868kB active_file:40kB inactive_file:40kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7232kB pagetables:2432kB bounce:0kB free_pcp:88kB local_pcp:72kB free_cma:0kB [ 1475.978920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1476.015646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1476.025744] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1476.033891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1476.064950] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1476.070106] Node 1 Normal: 0*4kB 2*8kB (ME) 1*16kB (M) 155*32kB (UE) 1689*64kB (UME) 15*128kB (U) 2*256kB (ME) 2*512kB (ME) 322*1024kB (UM) 20*2048kB (U) 0*4096kB = 487232kB [ 1476.100799] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1476.104970] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1476.119627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1476.125079] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1476.134623] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1476.136649] lowmem_reserve[]: [ 1476.161476] systemd-journald[11528]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 1476.185123] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1476.191138] 0 0 0 0 0 [ 1476.193780] 30137 total pagecache pages [ 1476.203933] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1476.204256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1476.259134] 0 pages in swap cache [ 1476.262651] Swap cache stats: add 0, delete 0, find 0/0 [ 1476.295155] lowmem_reserve[]: 0 0 0 0 0 [ 1476.298776] Free swap = 0kB [ 1476.299287] Node 1 [ 1476.302300] Total swap = 0kB [ 1476.302324] Normal free:837128kB min:53696kB low:67120kB high:80544kB active_anon:1980kB inactive_anon:49224kB active_file:1972kB inactive_file:5868kB unevictable:0kB writepending:76kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:616kB bounce:0kB free_pcp:548kB local_pcp:248kB free_cma:0kB [ 1476.304525] 2097051 pages RAM [ 1476.318375] systemd-journald[11528]: /dev/kmsg buffer overrun, some messages lost. [ 1476.347778] lowmem_reserve[]: 0 0 0 0 0 [ 1476.352509] Node 0 DMA: 41*4kB (UE) 20*8kB (U) 7*16kB (UE) 3*32kB (UE) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10964kB [ 1476.368882] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1476.389259] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1476.405046] Node 0 DMA: 41*4kB (UE) 20*8kB (U) 7*16kB (UE) 3*32kB (UE) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10964kB [ 1476.417934] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1476.425064] 0 pages HighMem/MovableOnly [ 1476.430512] 363849 pages reserved [ 1476.433962] 0 pages cma reserved [ 1476.444967] Node 0 DMA32: 8*4kB (ME) 122*8kB (UME) 120*16kB (E) 17*32kB (UME) 314*64kB (UM) 135*128kB (UM) 1*256kB (M) 1*512kB (M) 3*1024kB (U) 0*2048kB 0*4096kB = 44688kB [ 1476.449353] Node 0 [ 1476.468755] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1476.495115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1476.509072] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1476.514992] DMA32: 9*4kB (UME) 89*8kB (UME) 121*16kB (UE) 16*32kB (ME) 660*64kB (UME) 198*128kB (UM) 1*256kB (M) 1*512kB (M) 3*1024kB (U) 0*2048kB 0*4096kB = 74620kB [ 1476.553197] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1476.560878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1476.576055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1476.588114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1476.595469] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1476.598081] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1476.615061] Node 1 Normal: 1*4kB (M) 3*8kB (UME) 0*16kB 2*32kB (UE) 6204*64kB (UME) 1413*128kB (UM) 453*256kB (UME) 106*512kB (UME) 326*1024kB (UM) 18*2048kB (U) 0*4096kB = 1118940kB [ 1476.654924] Node 1 Normal: 1*4kB (M) 3*8kB (UME) 0*16kB 2*32kB (UE) 6204*64kB (UME) 1413*128kB (UM) 453*256kB (UME) 106*512kB (UME) 326*1024kB (UM) 18*2048kB (U) 0*4096kB = 1118940kB [ 1476.660874] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1476.704924] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1476.708523] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1476.713957] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 00:41:55 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) [ 1476.755208] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1476.764567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1476.775900] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1476.785005] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1476.785011] 32470 total pagecache pages [ 1476.785021] 0 pages in swap cache [ 1476.785026] Swap cache stats: add 0, delete 0, find 0/0 [ 1476.785030] Free swap = 0kB [ 1476.785033] Total swap = 0kB [ 1476.785040] 2097051 pages RAM [ 1476.785043] 0 pages HighMem/MovableOnly [ 1476.785050] 363849 pages reserved [ 1476.795768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1476.820039] 0 pages cma reserved [ 1476.836470] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1476.855845] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1476.866065] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1476.885287] 32803 total pagecache pages [ 1476.890177] 0 pages in swap cache [ 1476.893640] Swap cache stats: add 0, delete 0, find 0/0 [ 1476.903277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1476.926961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1476.942092] Free swap = 0kB [ 1476.947732] Total swap = 0kB [ 1476.959473] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1476.972948] 2097051 pages RAM [ 1476.981851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1476.999336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1477.007010] 0 pages HighMem/MovableOnly [ 1477.020461] 363849 pages reserved [ 1477.027571] 0 pages cma reserved [ 1477.034852] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1477.048023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1477.060129] Out of memory (oom_kill_allocating_task): Kill process 8037 (syz-executor.0) score 0 or sacrifice child [ 1477.112466] Killed process 11526 (syz-executor.0) total-vm:93384kB, anon-rss:156kB, file-rss:35056kB, shmem-rss:0kB [ 1477.139480] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready 00:41:56 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) [ 1477.161676] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1477.178885] oom_reaper: reaped process 11526 (syz-executor.0), now anon-rss:0kB, file-rss:8kB, shmem-rss:0kB [ 1477.195462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1477.202806] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1477.227653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1477.445537] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1477.488752] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1477.521505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1477.533140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1478.129228] syz-executor.0 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1478.129701] syz-executor.5: [ 1478.167877] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1478.193962] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1478.234976] syz-executor.0 cpuset= [ 1478.234980] syz-executor.3 cpuset=/ [ 1478.238559] / [ 1478.238565] mems_allowed=0-1 [ 1478.238577] CPU: 0 PID: 11538 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1478.242183] mems_allowed=0-1 [ 1478.243908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1478.267373] Call Trace: [ 1478.269973] dump_stack+0x1b2/0x281 [ 1478.273620] warn_alloc.cold+0x96/0x1cc [ 1478.278130] ? zone_watermark_ok_safe+0x220/0x220 [ 1478.283121] __alloc_pages_nodemask+0x2127/0x2720 [ 1478.287969] ? _raw_spin_unlock_irq+0x24/0x80 [ 1478.292467] ? lock_acquire+0x170/0x3f0 [ 1478.294949] syz-executor.5 cpuset=/ [ 1478.296452] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1478.296463] mems_allowed=0-1 [ 1478.300092] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1478.313449] ? __mutex_unlock_slowpath+0x75/0x770 [ 1478.318292] alloc_pages_current+0x155/0x260 [ 1478.322709] ion_page_pool_alloc+0x118/0x1b0 [ 1478.327650] ion_system_heap_allocate+0x133/0x8c0 [ 1478.332486] ? ion_alloc+0x187/0x810 [ 1478.336196] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1478.341652] ? ion_system_contig_heap_create+0x130/0x130 [ 1478.347099] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1478.352122] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1478.356994] ion_alloc+0x204/0x810 [ 1478.360541] ? ion_dma_buf_release+0x40/0x40 [ 1478.364967] ? __might_fault+0x177/0x1b0 [ 1478.369044] ion_ioctl+0xea/0x1f0 [ 1478.372577] ? ion_query_heaps+0x360/0x360 [ 1478.376896] ? ion_query_heaps+0x360/0x360 [ 1478.381143] do_vfs_ioctl+0x75a/0xff0 [ 1478.384958] ? ioctl_preallocate+0x1a0/0x1a0 [ 1478.389385] ? lock_downgrade+0x740/0x740 [ 1478.393543] ? __fget+0x225/0x360 [ 1478.397013] ? do_vfs_ioctl+0xff0/0xff0 [ 1478.401003] ? security_file_ioctl+0x83/0xb0 [ 1478.406200] SyS_ioctl+0x7f/0xb0 [ 1478.409566] ? do_vfs_ioctl+0xff0/0xff0 [ 1478.413570] do_syscall_64+0x1d5/0x640 [ 1478.417469] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1478.422664] RIP: 0033:0x4665d9 [ 1478.425853] RSP: 002b:00007f2e9a53f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1478.433578] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1478.440958] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1478.448407] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1478.455692] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1478.463219] R13: 00007ffe42256d6f R14: 00007f2e9a53f300 R15: 0000000000022000 [ 1478.470506] CPU: 1 PID: 8037 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1478.478342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1478.488381] Call Trace: [ 1478.490982] dump_stack+0x1b2/0x281 [ 1478.494621] dump_header+0x178/0x82f [ 1478.498354] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1478.503466] ? ___ratelimit+0x2cd/0x530 [ 1478.507446] oom_kill_process.cold+0x10/0xa40 [ 1478.511980] out_of_memory+0xe3e/0x1190 [ 1478.515965] ? oom_killer_disable+0x1c0/0x1c0 [ 1478.520488] ? mutex_trylock+0x152/0x1a0 [ 1478.524588] __alloc_pages_nodemask+0x23e1/0x2720 [ 1478.529453] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1478.534323] alloc_pages_current+0x155/0x260 [ 1478.538832] filemap_fault+0x11a1/0x1ad0 [ 1478.542908] ext4_filemap_fault+0x84/0xb0 [ 1478.547068] __do_fault+0xfa/0x380 [ 1478.550634] __handle_mm_fault+0x2497/0x4620 [ 1478.555164] ? vm_insert_page+0x7c0/0x7c0 [ 1478.559321] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1478.563737] ? nanosleep_copyout+0x100/0x100 [ 1478.568200] ? mark_held_locks+0xa6/0xf0 [ 1478.572285] handle_mm_fault+0x455/0x9c0 [ 1478.576354] __do_page_fault+0x549/0xad0 [ 1478.580439] ? spurious_fault+0x640/0x640 [ 1478.584589] ? do_page_fault+0x60/0x500 [ 1478.588567] ? page_fault+0x2f/0x50 [ 1478.592212] page_fault+0x45/0x50 [ 1478.595664] RIP: 168a5c:0x6 [ 1478.598591] RSP: 002b:00007ffdbfddd46c EFLAGS: 00000032 [ 1478.642775] CPU: 1 PID: 11549 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1478.656113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1478.665476] Call Trace: [ 1478.668078] dump_stack+0x1b2/0x281 [ 1478.671720] warn_alloc.cold+0x96/0x1cc [ 1478.675706] ? zone_watermark_ok_safe+0x220/0x220 [ 1478.680592] __alloc_pages_nodemask+0x2127/0x2720 [ 1478.685600] ? _raw_spin_unlock_irq+0x5a/0x80 [ 1478.690103] ? finish_task_switch+0x178/0x610 [ 1478.694602] ? finish_task_switch+0x14d/0x610 [ 1478.699108] ? lock_acquire+0x170/0x3f0 [ 1478.703125] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1478.708007] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1478.713819] ? __mutex_unlock_slowpath+0x75/0x770 [ 1478.718688] ? alloc_pages_current+0x21c/0x260 [ 1478.723275] alloc_pages_current+0x155/0x260 [ 1478.727697] ion_page_pool_alloc+0x118/0x1b0 [ 1478.732114] ion_system_heap_allocate+0x133/0x8c0 [ 1478.736966] ? ion_alloc+0x187/0x810 [ 1478.740711] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1478.746174] ? ion_system_contig_heap_create+0x130/0x130 [ 1478.751628] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1478.756652] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1478.761493] ion_alloc+0x204/0x810 [ 1478.765035] ? ion_dma_buf_release+0x40/0x40 [ 1478.769447] ? __might_fault+0x177/0x1b0 [ 1478.773508] ion_ioctl+0xea/0x1f0 [ 1478.777670] ? ion_query_heaps+0x360/0x360 [ 1478.782269] ? ion_query_heaps+0x360/0x360 [ 1478.786502] do_vfs_ioctl+0x75a/0xff0 [ 1478.790304] ? ioctl_preallocate+0x1a0/0x1a0 [ 1478.794730] ? lock_downgrade+0x740/0x740 [ 1478.798897] ? __fget+0x225/0x360 [ 1478.802346] ? do_vfs_ioctl+0xff0/0xff0 [ 1478.806323] ? security_file_ioctl+0x83/0xb0 [ 1478.810732] SyS_ioctl+0x7f/0xb0 [ 1478.814093] ? do_vfs_ioctl+0xff0/0xff0 [ 1478.818079] do_syscall_64+0x1d5/0x640 [ 1478.821966] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1478.827156] RIP: 0033:0x4665d9 [ 1478.830359] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1478.838063] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1478.845326] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1478.852600] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1478.859897] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1478.867350] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1478.900767] warn_alloc_show_mem: 1 callbacks suppressed [ 1478.900771] Mem-Info: [ 1478.909088] active_anon:12993 inactive_anon:29081 isolated_anon:0 [ 1478.909088] active_file:62 inactive_file:60 isolated_file:0 [ 1478.909088] unevictable:0 dirty:2 writeback:0 unstable:0 [ 1478.909088] slab_reclaimable:13187 slab_unreclaimable:120748 [ 1478.909088] mapped:52644 shmem:29460 pagetables:779 bounce:0 [ 1478.909088] free:16534 free_pcp:27 free_cma:0 [ 1478.943174] Node 0 active_anon:49820kB inactive_anon:67048kB active_file:68kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:151688kB dirty:8kB writeback:0kB shmem:68240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1478.973161] Node 1 active_anon:2152kB inactive_anon:49276kB active_file:180kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58888kB dirty:0kB writeback:0kB shmem:49600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1479.111451] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1479.124953] Node 0 DMA free:11020kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1479.135859] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1479.215075] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1479.224921] Node 0 DMA32 free:44860kB min:36200kB low:45248kB high:54296kB active_anon:49780kB inactive_anon:67048kB active_file:2220kB inactive_file:3916kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2332kB bounce:0kB free_pcp:876kB local_pcp:136kB free_cma:0kB [ 1479.227473] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1479.279205] Mem-Info: [ 1479.291733] active_anon:13004 inactive_anon:29081 isolated_anon:0 [ 1479.291733] active_file:541 inactive_file:1049 isolated_file:0 [ 1479.291733] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1479.291733] slab_reclaimable:13185 slab_unreclaimable:120541 [ 1479.291733] mapped:53622 shmem:29460 pagetables:764 bounce:0 [ 1479.291733] free:29378 free_pcp:471 free_cma:0 [ 1479.338589] lowmem_reserve[]: 0 0 0 0 0 [ 1479.342622] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1479.441203] lowmem_reserve[]: 0 0 0 0 0 [ 1479.454936] Node 1 Normal free:49804kB min:53696kB low:67120kB high:80544kB active_anon:2136kB inactive_anon:49276kB active_file:136kB inactive_file:336kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:724kB bounce:0kB free_pcp:620kB local_pcp:0kB free_cma:0kB [ 1479.467911] Node 0 active_anon:49880kB inactive_anon:67048kB active_file:1368kB inactive_file:1352kB unevictable:0kB isolated(anon):0kB isolated(file):72kB mapped:154344kB dirty:0kB writeback:0kB shmem:68240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1479.551714] lowmem_reserve[]: 0 0 0 0 0 [ 1479.574949] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10976kB [ 1479.616327] Node 0 DMA32: 864*4kB (UME) 415*8kB (UME) 246*16kB (UME) 94*32kB (UME) 72*64kB (UME) 36*128kB (UM) 25*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 29336kB [ 1479.622645] Node 1 active_anon:2136kB inactive_anon:49276kB active_file:96kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58844kB dirty:0kB writeback:0kB shmem:49600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1479.637392] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1479.689885] Node 1 Normal: 921*4kB (UME) 633*8kB (UME) 340*16kB (UME) 149*32kB (UME) 166*64kB (UME) 29*128kB (UME) 10*256kB (UME) 31*512kB (UME) 2*1024kB (UM) 0*2048kB 0*4096kB = 53772kB [ 1479.715391] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1479.724951] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1479.733578] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1479.764628] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1479.764920] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1479.801319] 29722 total pagecache pages [ 1479.805366] 0 pages in swap cache [ 1479.825698] Swap cache stats: add 0, delete 0, find 0/0 [ 1479.831091] Free swap = 0kB [ 1479.834108] Total swap = 0kB [ 1479.844933] 2097051 pages RAM [ 1479.848088] 0 pages HighMem/MovableOnly [ 1479.854803] 363849 pages reserved [ 1479.864132] lowmem_reserve[]: [ 1479.864136] 0 pages cma reserved [ 1479.874193] 0 2717 2718 2718 2718 [ 1479.879037] Node 0 DMA32 free:30244kB min:36200kB low:45248kB high:54296kB active_anon:49780kB inactive_anon:67048kB active_file:1136kB inactive_file:692kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2332kB bounce:0kB free_pcp:740kB local_pcp:720kB free_cma:0kB [ 1479.914028] lowmem_reserve[]: 0 0 0 0 0 [ 1479.918529] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1479.949649] lowmem_reserve[]: 0 0 0 0 0 [ 1479.959339] Node 1 Normal free:59536kB min:53696kB low:67120kB high:80544kB active_anon:2136kB inactive_anon:49276kB active_file:236kB inactive_file:156kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:724kB bounce:0kB free_pcp:936kB local_pcp:252kB free_cma:0kB [ 1480.040167] lowmem_reserve[]: 0 0 0 0 0 [ 1480.050689] Node 0 DMA: 1*4kB (E) 0*8kB 2*16kB (UE) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10980kB [ 1480.110627] Node 0 DMA32: 277*4kB (ME) 214*8kB (UME) 168*16kB (UME) 35*32kB (UME) 64*64kB (UME) 47*128kB (UM) 28*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 24420kB [ 1480.179686] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1480.227945] Node 1 Normal: 85*4kB (ME) 58*8kB (ME) 42*16kB (UME) 27*32kB (ME) 40*64kB (ME) 94*128kB (UME) 33*256kB (UME) 31*512kB (UME) 2*1024kB (UM) 0*2048kB 0*4096kB = 43300kB [ 1480.273288] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1480.323841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1480.359167] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1480.399906] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1480.443110] 29496 total pagecache pages [ 1480.471155] 0 pages in swap cache [ 1480.474647] Swap cache stats: add 0, delete 0, find 0/0 [ 1480.501633] Free swap = 0kB [ 1480.504698] Total swap = 0kB [ 1480.526286] 2097051 pages RAM [ 1480.529423] 0 pages HighMem/MovableOnly [ 1480.533528] 363849 pages reserved [ 1480.561045] 0 pages cma reserved [ 1480.564443] Out of memory (oom_kill_allocating_task): Kill process 8037 (syz-executor.0) score 0 or sacrifice child [ 1480.603611] Killed process 8037 (syz-executor.0) total-vm:93120kB, anon-rss:108kB, file-rss:32960kB, shmem-rss:0kB [ 1480.663253] oom_reaper: reaped process 8037 (syz-executor.0), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1481.039200] oom_reaper: reaped process 11538 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1481.084978] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1481.103379] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1481.104970] syz-executor.3: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1481.108646] CPU: 1 PID: 11526 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1481.128204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1481.138552] Call Trace: [ 1481.141154] dump_stack+0x1b2/0x281 [ 1481.144833] warn_alloc.cold+0x96/0x1cc [ 1481.144919] syz-executor.3 cpuset=/ [ 1481.148973] ? zone_watermark_ok_safe+0x220/0x220 [ 1481.148986] ? usleep_range+0x130/0x130 [ 1481.152618] mems_allowed=0-1 [ 1481.157455] ? try_to_free_pages+0x23f/0x6e0 [ 1481.157466] ? _find_next_bit+0xdb/0x100 [ 1481.157476] ? run_timer_softirq+0x5a0/0x5a0 [ 1481.157492] __alloc_pages_nodemask+0x2127/0x2720 [ 1481.157510] ? lock_acquire+0x170/0x3f0 [ 1481.186392] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1481.191236] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1481.195994] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1481.201446] alloc_pages_current+0x155/0x260 [ 1481.206115] ion_page_pool_alloc+0x118/0x1b0 [ 1481.210522] ion_system_heap_allocate+0x133/0x8c0 [ 1481.215370] ? ion_alloc+0x187/0x810 [ 1481.219097] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1481.224737] ? ion_system_contig_heap_create+0x130/0x130 [ 1481.230199] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1481.235214] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1481.240058] ion_alloc+0x204/0x810 [ 1481.243600] ? ion_dma_buf_release+0x40/0x40 [ 1481.248015] ? __might_fault+0x177/0x1b0 [ 1481.252076] ion_ioctl+0xea/0x1f0 [ 1481.255525] ? ion_query_heaps+0x360/0x360 [ 1481.259777] ? ion_query_heaps+0x360/0x360 [ 1481.264004] do_vfs_ioctl+0x75a/0xff0 [ 1481.268061] ? ioctl_preallocate+0x1a0/0x1a0 [ 1481.272517] ? lock_downgrade+0x740/0x740 [ 1481.276675] ? __fget+0x225/0x360 [ 1481.280133] ? do_vfs_ioctl+0xff0/0xff0 [ 1481.284108] ? security_file_ioctl+0x83/0xb0 [ 1481.288516] SyS_ioctl+0x7f/0xb0 [ 1481.291873] ? do_vfs_ioctl+0xff0/0xff0 [ 1481.295844] do_syscall_64+0x1d5/0x640 [ 1481.299732] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1481.304929] RIP: 0033:0x4665d9 [ 1481.309343] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1481.317051] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1481.324314] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1481.331594] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1481.338979] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1481.346251] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1481.353632] CPU: 0 PID: 11538 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1481.361543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1481.370908] Call Trace: [ 1481.373522] dump_stack+0x1b2/0x281 [ 1481.377153] warn_alloc.cold+0x96/0x1cc [ 1481.381139] ? zone_watermark_ok_safe+0x220/0x220 [ 1481.385989] ? usleep_range+0x130/0x130 [ 1481.389988] ? try_to_free_pages+0x23f/0x6e0 [ 1481.394488] ? _find_next_bit+0xdb/0x100 [ 1481.398556] ? run_timer_softirq+0x5a0/0x5a0 [ 1481.402971] __alloc_pages_nodemask+0x2127/0x2720 [ 1481.407817] ? lock_acquire+0x170/0x3f0 [ 1481.411796] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1481.416651] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1481.421151] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1481.426602] ? retint_kernel+0x2d/0x2d [ 1481.430491] alloc_pages_current+0x155/0x260 [ 1481.434904] ion_page_pool_alloc+0x118/0x1b0 [ 1481.439318] ion_system_heap_allocate+0x133/0x8c0 [ 1481.444186] ? ion_alloc+0x187/0x810 [ 1481.447902] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1481.453376] ? ion_system_contig_heap_create+0x130/0x130 [ 1481.458937] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1481.463958] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1481.468814] ion_alloc+0x204/0x810 [ 1481.472392] ? ion_dma_buf_release+0x40/0x40 [ 1481.476805] ? __might_fault+0x177/0x1b0 [ 1481.480867] ion_ioctl+0xea/0x1f0 [ 1481.484314] ? ion_query_heaps+0x360/0x360 [ 1481.488560] ? ion_query_heaps+0x360/0x360 [ 1481.492789] do_vfs_ioctl+0x75a/0xff0 [ 1481.496594] ? ioctl_preallocate+0x1a0/0x1a0 [ 1481.501001] ? lock_downgrade+0x740/0x740 [ 1481.505148] ? __fget+0x225/0x360 [ 1481.508608] ? do_vfs_ioctl+0xff0/0xff0 [ 1481.512590] ? security_file_ioctl+0x83/0xb0 [ 1481.517149] SyS_ioctl+0x7f/0xb0 [ 1481.520706] ? do_vfs_ioctl+0xff0/0xff0 [ 1481.524682] do_syscall_64+0x1d5/0x640 [ 1481.528589] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1481.533779] RIP: 0033:0x4665d9 [ 1481.536970] RSP: 002b:00007f2e9a53f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1481.544679] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1481.551964] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1481.559314] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1481.566591] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1481.573859] R13: 00007ffe42256d6f R14: 00007f2e9a53f300 R15: 0000000000022000 [ 1481.839884] warn_alloc_show_mem: 1 callbacks suppressed [ 1481.839887] Mem-Info: [ 1481.861155] active_anon:12960 inactive_anon:29081 isolated_anon:0 [ 1481.861155] active_file:14 inactive_file:14 isolated_file:0 [ 1481.861155] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1481.861155] slab_reclaimable:13175 slab_unreclaimable:120378 [ 1481.861155] mapped:52613 shmem:29460 pagetables:741 bounce:0 [ 1481.861155] free:23058 free_pcp:98 free_cma:0 [ 1481.950591] rs:main Q:Reg invoked oom-killer: gfp_mask=0x1c200ca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), nodemask=(null), order=0, oom_score_adj=0 [ 1481.954786] Node 0 active_anon:49700kB inactive_anon:67048kB active_file:28kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:151608kB dirty:0kB writeback:0kB shmem:68240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1481.989173] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 1482.009311] CPU: 1 PID: 11095 Comm: rs:main Q:Reg Not tainted 4.14.232-syzkaller #0 [ 1482.017221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1482.024943] Node 1 active_anon:2140kB inactive_anon:49276kB active_file:20kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58844kB dirty:0kB writeback:0kB shmem:49600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1482.026578] Call Trace: [ 1482.058008] dump_stack+0x1b2/0x281 [ 1482.061634] dump_header+0x178/0x82f [ 1482.065457] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1482.070729] ? ___ratelimit+0x2cd/0x530 [ 1482.074699] oom_kill_process.cold+0x10/0xa40 [ 1482.079220] out_of_memory+0xe3e/0x1190 [ 1482.083198] ? oom_killer_disable+0x1c0/0x1c0 [ 1482.084918] Node 0 [ 1482.087685] ? mutex_trylock+0x152/0x1a0 [ 1482.087703] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1482.087707] lowmem_reserve[]: [ 1482.089932] __alloc_pages_nodemask+0x23e1/0x2720 [ 1482.093981] 0 [ 1482.119532] ? trace_hardirqs_on+0x10/0x10 [ 1482.119547] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1482.119557] ? __radix_tree_lookup+0x1b5/0x2e0 [ 1482.119577] alloc_pages_current+0x155/0x260 [ 1482.147462] pagecache_get_page+0x3f5/0xab0 [ 1482.151798] grab_cache_page_write_begin+0x63/0x90 [ 1482.154923] 2717 2718 [ 1482.156741] ext4_da_write_begin+0x249/0xe70 [ 1482.156753] ? __ext4_journal_stop+0xe7/0x1b0 [ 1482.159238] 2718 [ 1482.163638] ? ext4_write_begin+0x1260/0x1260 [ 1482.174674] ? balance_dirty_pages_ratelimited+0x8a5/0x1800 [ 1482.180393] generic_perform_write+0x1c9/0x420 [ 1482.184922] 2718 [ 1482.184972] ? __mnt_drop_write_file+0x5f/0x90 [ 1482.187034] Node 0 [ 1482.191617] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 1482.191641] DMA32 free:17616kB min:36200kB low:45248kB high:54296kB active_anon:49700kB inactive_anon:67048kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2240kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 1482.193955] ? current_time+0xb0/0xb0 [ 1482.214925] lowmem_reserve[]: [ 1482.226994] ? ext4_file_write_iter+0x1cc/0xd20 [ 1482.227007] __generic_file_write_iter+0x227/0x590 [ 1482.227018] ext4_file_write_iter+0x276/0xd20 [ 1482.227031] ? aa_file_perm+0x304/0xab0 [ 1482.244916] 0 [ 1482.248247] ? ext4_file_read_iter+0x330/0x330 [ 1482.252198] 0 [ 1482.253998] ? trace_hardirqs_on+0x10/0x10 [ 1482.264572] ? iov_iter_init+0xa6/0x1c0 [ 1482.264915] 0 0 [ 1482.268544] __vfs_write+0x44c/0x630 [ 1482.268554] ? kernel_read+0x110/0x110 [ 1482.270516] 0 [ 1482.274249] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1482.284930] vfs_write+0x17f/0x4d0 [ 1482.288470] SyS_write+0xf2/0x210 [ 1482.291916] ? SyS_read+0x210/0x210 [ 1482.295531] ? __do_page_fault+0x159/0xad0 [ 1482.295538] Node 0 [ 1482.299758] ? do_syscall_64+0x4c/0x640 [ 1482.299775] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1482.299779] lowmem_reserve[]: [ 1482.302025] ? SyS_read+0x210/0x210 [ 1482.314922] 0 [ 1482.330894] do_syscall_64+0x1d5/0x640 [ 1482.330909] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1482.330916] RIP: 0033:0x7f549a9e51cd [ 1482.330925] RSP: 002b:00007f5497fa0590 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1482.354929] 0 [ 1482.361167] RAX: ffffffffffffffda RBX: 00007f548c027ba0 RCX: 00007f549a9e51cd [ 1482.361175] 0 [ 1482.362958] RDX: 00000000000001b7 RSI: 00007f548c027ba0 RDI: 0000000000000007 [ 1482.362966] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1482.384922] 0 [ 1482.386682] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f548c027920 [ 1482.386689] 0 [ 1482.388472] R13: 00007f5497fa05b0 R14: 0000560bb5e99480 R15: 00000000000001b7 [ 1482.391935] Mem-Info: [ 1482.417006] active_anon:12938 inactive_anon:29081 isolated_anon:0 [ 1482.417006] active_file:14 inactive_file:489 isolated_file:0 [ 1482.417006] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1482.417006] slab_reclaimable:13175 slab_unreclaimable:120374 [ 1482.417006] mapped:52838 shmem:29460 pagetables:741 bounce:0 [ 1482.417006] free:24355 free_pcp:272 free_cma:0 [ 1482.452229] Node 0 active_anon:49684kB inactive_anon:67048kB active_file:36kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:151608kB dirty:0kB writeback:0kB shmem:68240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1482.481379] Node 1 Normal free:69576kB min:53696kB low:67120kB high:80544kB active_anon:2068kB inactive_anon:49276kB active_file:20kB inactive_file:5020kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:724kB bounce:0kB free_pcp:832kB local_pcp:736kB free_cma:0kB [ 1482.516007] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1482.526497] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1482.533799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1482.545710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1482.567474] device veth0_vlan entered promiscuous mode [ 1482.577594] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1482.588916] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1482.596731] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1482.605222] lowmem_reserve[]: 0 0 0 0 0 [ 1482.615867] Node 0 DMA: 3*4kB (UE) 0*8kB 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10972kB [ 1482.628854] Node 1 active_anon:2068kB inactive_anon:49276kB active_file:320kB inactive_file:5320kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:62944kB dirty:0kB writeback:0kB shmem:49600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1482.665322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1482.669911] Node 0 DMA32: 2853*4kB (UME) 1278*8kB (UME) 189*16kB (UME) 42*32kB (UME) 22*64kB (UME) 6*128kB (UM) 12*256kB (UM) 10*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36372kB [ 1482.673615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1482.714094] device veth1_vlan entered promiscuous mode [ 1482.724951] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1482.740143] Node 0 DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1482.767809] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1482.773358] Node 0 DMA32 free:43268kB min:36200kB low:45248kB high:54296kB active_anon:49684kB inactive_anon:67048kB active_file:36kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2240kB bounce:0kB free_pcp:800kB local_pcp:116kB free_cma:0kB [ 1482.795356] Node 1 Normal: 5109*4kB (UME) 888*8kB (UE) 237*16kB (UME) 48*32kB (UE) 712*64kB (UME) 12*128kB (UME) 10*256kB (ME) 22*512kB (UME) 2*1024kB (UM) 0*2048kB 0*4096kB = 95844kB [ 1482.829191] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1482.858978] lowmem_reserve[]: 0 0 0 0 0 [ 1482.863016] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1482.873444] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1482.899120] lowmem_reserve[]: 0 0 0 0 0 [ 1482.903140] Node 1 Normal free:102284kB min:53696kB low:67120kB high:80544kB active_anon:2068kB inactive_anon:49276kB active_file:2420kB inactive_file:4320kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:512kB pagetables:724kB bounce:0kB free_pcp:1076kB local_pcp:344kB free_cma:0kB [ 1482.924927] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1482.975161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1482.982993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1483.005213] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1483.013898] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1483.017504] lowmem_reserve[]: 0 0 0 0 0 [ 1483.038267] device veth0_macvtap entered promiscuous mode [ 1483.044720] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1483.075427] Node 0 DMA: 5*4kB (UE) 1*8kB (U) 2*16kB (UE) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11004kB [ 1483.077385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1483.107116] device veth1_macvtap entered promiscuous mode [ 1483.113401] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1483.145579] Node 0 DMA32: 693*4kB (UME) 249*8kB (UME) 177*16kB (UME) 317*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17740kB [ 1483.185902] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1483.196773] 30185 total pagecache pages [ 1483.196785] 0 pages in swap cache [ 1483.196790] Swap cache stats: add 0, delete 0, find 0/0 [ 1483.196793] Free swap = 0kB [ 1483.196796] Total swap = 0kB [ 1483.196803] 2097051 pages RAM [ 1483.196806] 0 pages HighMem/MovableOnly [ 1483.196814] 363849 pages reserved [ 1483.222071] Node 1 Normal: 101*4kB (UME) 695*8kB (UME) 318*16kB (UME) 70*32kB (UME) 25*64kB (UME) 5*128kB (ME) 10*256kB (ME) 14*512kB (UME) 2*1024kB (UM) 0*2048kB 0*4096kB = 27308kB [ 1483.255949] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1483.264843] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1483.273555] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1483.282419] 0 pages cma reserved [ 1483.286627] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1483.304983] 29635 total pagecache pages [ 1483.308988] 0 pages in swap cache [ 1483.312464] Swap cache stats: add 0, delete 0, find 0/0 [ 1483.348809] Free swap = 0kB [ 1483.351876] Total swap = 0kB [ 1483.361810] 2097051 pages RAM [ 1483.415390] 0 pages HighMem/MovableOnly [ 1483.419524] 363849 pages reserved [ 1483.422987] 0 pages cma reserved [ 1483.430491] Out of memory (oom_kill_allocating_task): Kill process 11095 (rs:main Q:Reg) score 0 or sacrifice child [ 1483.463805] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1483.485394] Killed process 11092 (rsyslogd) total-vm:254332kB, anon-rss:1196kB, file-rss:0kB, shmem-rss:0kB [ 1483.505759] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1483.512636] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1483.547013] oom_reaper: reaped process 11092 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1483.559857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1483.589237] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1483.599601] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1483.613347] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 1483.662098] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1483.675606] systemd[1]: rsyslog.service: Unit entered failed state. [ 1483.683439] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1483.723699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1483.756885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1483.763954] oom_reaper: reaped process 11549 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1483.782322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1483.819160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1483.829938] syz-executor.4 invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 1483.855110] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1483.860267] CPU: 1 PID: 11122 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1483.868625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1483.877982] Call Trace: [ 1483.880598] dump_stack+0x1b2/0x281 [ 1483.884247] dump_header+0x178/0x82f [ 1483.888093] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1483.893369] ? ___ratelimit+0x2cd/0x530 [ 1483.897341] oom_kill_process.cold+0x10/0xa40 [ 1483.902038] out_of_memory+0xe3e/0x1190 [ 1483.906015] ? oom_killer_disable+0x1c0/0x1c0 [ 1483.910520] ? mutex_trylock+0x152/0x1a0 [ 1483.914594] __alloc_pages_nodemask+0x23e1/0x2720 [ 1483.919792] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1483.924635] ? sock_alloc+0x3c/0x270 [ 1483.928357] ? cache_grow_begin+0x3f/0x700 [ 1483.932605] cache_grow_begin+0x91/0x700 [ 1483.936684] fallback_alloc+0x207/0x2c0 [ 1483.940671] kmem_cache_alloc+0x1e5/0x3c0 [ 1483.944927] sk_prot_alloc+0x5f/0x290 [ 1483.948729] sk_alloc+0x36/0xcd0 [ 1483.952102] unix_create1+0x78/0x4f0 [ 1483.955835] unix_create+0xdd/0x1c0 [ 1483.959470] __sock_create+0x303/0x620 [ 1483.963365] SyS_socket+0xd1/0x1b0 [ 1483.967261] ? move_addr_to_kernel+0x60/0x60 [ 1483.971693] ? do_syscall_64+0x4c/0x640 [ 1483.975679] ? move_addr_to_kernel+0x60/0x60 [ 1483.980086] do_syscall_64+0x1d5/0x640 [ 1483.983976] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1483.989335] RIP: 0033:0x467c47 [ 1483.992568] RSP: 002b:00007ffd68850d78 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1484.000301] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000467c47 [ 1484.007592] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 1484.014942] RBP: 00000000004bf88b R08: 0000000000000001 R09: 00305f6576616c73 [ 1484.022229] R10: 00007ffd6885112c R11: 0000000000000246 R12: 00007ffd68850de0 [ 1484.029785] R13: 0000000000000003 R14: 00007ffd68850e6c R15: 000000000000003d [ 1484.051545] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1484.078296] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1484.109931] Mem-Info: [ 1484.112467] active_anon:12605 inactive_anon:29081 isolated_anon:0 [ 1484.112467] active_file:6 inactive_file:13 isolated_file:0 [ 1484.112467] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1484.112467] slab_reclaimable:13162 slab_unreclaimable:119991 [ 1484.112467] mapped:52669 shmem:29460 pagetables:718 bounce:0 [ 1484.112467] free:13945 free_pcp:30 free_cma:0 [ 1484.129815] syz-executor.3 cpuset= [ 1484.146733] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1484.162175] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 1484.162660] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 1484.180743] CPU: 1 PID: 11418 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 1484.191175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1484.200525] Call Trace: [ 1484.203114] dump_stack+0x1b2/0x281 [ 1484.206739] warn_alloc.cold+0x96/0x1cc [ 1484.209239] / mems_allowed=0-1 [ 1484.210713] ? zone_watermark_ok_safe+0x220/0x220 [ 1484.210725] ? usleep_range+0x130/0x130 [ 1484.222723] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1484.227841] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1484.232860] ? run_timer_softirq+0x5a0/0x5a0 [ 1484.237273] __alloc_pages_nodemask+0x2127/0x2720 [ 1484.242115] ? lock_acquire+0x170/0x3f0 [ 1484.246103] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1484.251467] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1484.256317] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1484.261767] alloc_pages_current+0x155/0x260 [ 1484.266171] ion_page_pool_alloc+0x118/0x1b0 [ 1484.270603] ion_system_heap_allocate+0x133/0x8c0 [ 1484.275458] ? _raw_spin_unlock+0x29/0x40 [ 1484.279689] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1484.284622] ? ion_system_contig_heap_create+0x130/0x130 [ 1484.290071] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1484.295192] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1484.300030] ion_alloc+0x27a/0x810 [ 1484.303569] ? ion_dma_buf_release+0x40/0x40 [ 1484.307984] ? __might_fault+0x177/0x1b0 [ 1484.312060] ion_ioctl+0xea/0x1f0 [ 1484.315508] ? ion_query_heaps+0x360/0x360 [ 1484.319829] ? ion_query_heaps+0x360/0x360 [ 1484.324059] do_vfs_ioctl+0x75a/0xff0 [ 1484.327854] ? ioctl_preallocate+0x1a0/0x1a0 [ 1484.332252] ? lock_downgrade+0x740/0x740 [ 1484.336433] ? __fget+0x225/0x360 [ 1484.339888] ? do_vfs_ioctl+0xff0/0xff0 [ 1484.343856] ? security_file_ioctl+0x83/0xb0 [ 1484.348607] SyS_ioctl+0x7f/0xb0 [ 1484.351963] ? do_vfs_ioctl+0xff0/0xff0 [ 1484.356045] do_syscall_64+0x1d5/0x640 [ 1484.359931] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1484.365113] RIP: 0033:0x4665d9 [ 1484.368292] RSP: 002b:00007f696b00b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1484.375994] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1484.383279] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1484.390552] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1484.397912] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1484.405175] R13: 00007ffd618ef30f R14: 00007f696b00b300 R15: 0000000000022000 [ 1484.412456] CPU: 0 PID: 11538 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1484.420525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1484.429967] Call Trace: [ 1484.430124] Node 0 active_anon:49320kB inactive_anon:67048kB active_file:24kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:151832kB dirty:0kB writeback:0kB shmem:68240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1484.432569] dump_stack+0x1b2/0x281 [ 1484.463876] warn_alloc.cold+0x96/0x1cc [ 1484.467867] ? zone_watermark_ok_safe+0x220/0x220 [ 1484.472292] Node 1 active_anon:1100kB inactive_anon:49276kB active_file:0kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58844kB dirty:0kB writeback:0kB shmem:49600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1484.472720] __alloc_pages_nodemask+0x2127/0x2720 [ 1484.505050] ? lock_acquire+0x170/0x3f0 [ 1484.509146] ? lock_acquire+0x170/0x3f0 [ 1484.512103] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1484.513201] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1484.513219] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1484.550435] ? __mutex_unlock_slowpath+0x75/0x770 [ 1484.553432] lowmem_reserve[]: [ 1484.555296] alloc_pages_current+0x155/0x260 [ 1484.555310] ion_page_pool_alloc+0x118/0x1b0 [ 1484.555320] ion_system_heap_allocate+0x133/0x8c0 [ 1484.555332] ? _raw_spin_unlock+0x29/0x40 [ 1484.555340] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1484.555348] ? ion_system_contig_heap_create+0x130/0x130 [ 1484.555359] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1484.555370] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1484.555380] ion_alloc+0x27a/0x810 [ 1484.555393] ? ion_dma_buf_release+0x40/0x40 [ 1484.555405] ? __might_fault+0x177/0x1b0 [ 1484.562338] 0 [ 1484.562920] ion_ioctl+0xea/0x1f0 [ 1484.579329] 2717 [ 1484.581207] ? ion_query_heaps+0x360/0x360 [ 1484.592870] 2718 [ 1484.596494] ? ion_query_heaps+0x360/0x360 [ 1484.596505] do_vfs_ioctl+0x75a/0xff0 [ 1484.596518] ? ioctl_preallocate+0x1a0/0x1a0 [ 1484.596527] ? lock_downgrade+0x740/0x740 [ 1484.596546] ? __fget+0x225/0x360 [ 1484.596553] ? do_vfs_ioctl+0xff0/0xff0 [ 1484.596564] ? security_file_ioctl+0x83/0xb0 [ 1484.596574] SyS_ioctl+0x7f/0xb0 [ 1484.596581] ? do_vfs_ioctl+0xff0/0xff0 [ 1484.596592] do_syscall_64+0x1d5/0x640 [ 1484.596612] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1484.596621] RIP: 0033:0x4665d9 [ 1484.596625] RSP: 002b:00007f2e9a53f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1484.596633] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1484.596639] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1484.596644] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1484.596650] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1484.596655] R13: 00007ffe42256d6f R14: 00007f2e9a53f300 R15: 0000000000022000 [ 1484.602919] syz-executor.5: [ 1484.611930] 2718 [ 1484.631288] CPU: 0 PID: 11526 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1484.637594] 2718 [ 1484.640687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1484.640692] Call Trace: [ 1484.640720] dump_stack+0x1b2/0x281 [ 1484.640738] warn_alloc.cold+0x96/0x1cc [ 1484.648160] ? zone_watermark_ok_safe+0x220/0x220 [ 1484.648188] __alloc_pages_nodemask+0x2127/0x2720 [ 1484.648198] ? io_schedule_timeout+0x140/0x140 [ 1484.648213] ? lock_acquire+0x170/0x3f0 [ 1484.648227] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1484.648242] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1484.648254] ? __mutex_unlock_slowpath+0x75/0x770 [ 1484.648266] alloc_pages_current+0x155/0x260 [ 1484.648278] ion_page_pool_alloc+0x118/0x1b0 [ 1484.648288] ion_system_heap_allocate+0x133/0x8c0 [ 1484.648300] ? _raw_spin_unlock+0x29/0x40 [ 1484.648309] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1484.648319] ? ion_system_contig_heap_create+0x130/0x130 [ 1484.648329] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1484.648339] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1484.648349] ion_alloc+0x27a/0x810 [ 1484.648362] ? ion_dma_buf_release+0x40/0x40 [ 1484.648388] ? __might_fault+0x177/0x1b0 [ 1484.648400] ion_ioctl+0xea/0x1f0 [ 1484.648409] ? ion_query_heaps+0x360/0x360 [ 1484.648420] ? ion_query_heaps+0x360/0x360 [ 1484.648429] do_vfs_ioctl+0x75a/0xff0 [ 1484.648439] ? ioctl_preallocate+0x1a0/0x1a0 [ 1484.648446] ? lock_downgrade+0x740/0x740 [ 1484.648458] ? __fget+0x225/0x360 [ 1484.648467] ? do_vfs_ioctl+0xff0/0xff0 [ 1484.648478] ? security_file_ioctl+0x83/0xb0 [ 1484.648489] SyS_ioctl+0x7f/0xb0 [ 1484.659453] Node 0 [ 1484.660439] ? do_vfs_ioctl+0xff0/0xff0 [ 1484.664760] DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:49320kB inactive_anon:67048kB active_file:24kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2248kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 1484.669962] do_syscall_64+0x1d5/0x640 [ 1484.669979] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1484.669987] RIP: 0033:0x4665d9 [ 1484.669992] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1484.670001] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1484.670006] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1484.670010] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1484.670015] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1484.670020] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1484.680479] page allocation failure: order:0 [ 1484.689188] lowmem_reserve[]: [ 1484.700269] warn_alloc_show_mem: 1 callbacks suppressed [ 1484.700273] Mem-Info: [ 1484.710667] 0 [ 1484.717780] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1484.719100] 0 [ 1484.722020] (null) [ 1484.724124] 0 [ 1484.742202] active_anon:12605 inactive_anon:29081 isolated_anon:0 [ 1484.742202] active_file:6 inactive_file:13 isolated_file:0 [ 1484.742202] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1484.742202] slab_reclaimable:13162 slab_unreclaimable:119991 [ 1484.742202] mapped:52669 shmem:29460 pagetables:718 bounce:0 [ 1484.742202] free:13945 free_pcp:30 free_cma:0 [ 1484.756346] 0 [ 1484.764941] syz-executor.5 cpuset= [ 1484.780724] 0 [ 1484.784937] Node 0 active_anon:49320kB inactive_anon:67048kB active_file:24kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:151832kB dirty:0kB writeback:0kB shmem:68240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1484.800485] / [ 1484.815488] Node 0 [ 1484.823133] Node 1 active_anon:1100kB inactive_anon:49276kB active_file:0kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:58844kB dirty:0kB writeback:0kB shmem:49600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1484.824282] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1484.830016] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1484.830039] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1484.830060] Node 0 DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:49320kB inactive_anon:67048kB active_file:24kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7104kB pagetables:2248kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1484.830080] lowmem_reserve[]: 0 0 0 0 0 [ 1484.830098] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1484.830122] lowmem_reserve[]: [ 1484.891498] device veth0_vlan entered promiscuous mode [ 1484.929076] mems_allowed=0-1 [ 1484.942443] lowmem_reserve[]: [ 1484.950878] CPU: 0 PID: 11549 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1485.005396] 0 [ 1485.005792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1485.134986] 0 [ 1485.156703] Call Trace: [ 1485.156726] dump_stack+0x1b2/0x281 [ 1485.156739] warn_alloc.cold+0x96/0x1cc [ 1485.156750] ? zone_watermark_ok_safe+0x220/0x220 [ 1485.156759] ? usleep_range+0x130/0x130 [ 1485.156768] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1485.156780] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1485.156789] ? run_timer_softirq+0x5a0/0x5a0 [ 1485.156804] __alloc_pages_nodemask+0x2127/0x2720 [ 1485.156819] ? lock_acquire+0x170/0x3f0 [ 1485.156834] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1485.156844] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1485.156859] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1485.233405] 0 [ 1485.235262] alloc_pages_current+0x155/0x260 [ 1485.235278] ion_page_pool_alloc+0x118/0x1b0 [ 1485.235287] ion_system_heap_allocate+0x133/0x8c0 [ 1485.235296] ? ion_alloc+0x187/0x810 [ 1485.235312] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1485.235321] ? ion_system_contig_heap_create+0x130/0x130 [ 1485.235331] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1485.235341] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1485.235352] ion_alloc+0x204/0x810 [ 1485.235365] ? ion_dma_buf_release+0x40/0x40 [ 1485.235377] ? __might_fault+0x177/0x1b0 [ 1485.235389] ion_ioctl+0xea/0x1f0 [ 1485.235397] ? ion_query_heaps+0x360/0x360 [ 1485.235409] ? ion_query_heaps+0x360/0x360 [ 1485.235419] do_vfs_ioctl+0x75a/0xff0 [ 1485.235429] ? ioctl_preallocate+0x1a0/0x1a0 [ 1485.235438] ? lock_downgrade+0x740/0x740 [ 1485.235449] ? __fget+0x225/0x360 [ 1485.235456] ? do_vfs_ioctl+0xff0/0xff0 [ 1485.235467] ? security_file_ioctl+0x83/0xb0 [ 1485.235476] SyS_ioctl+0x7f/0xb0 [ 1485.235483] ? do_vfs_ioctl+0xff0/0xff0 [ 1485.235495] do_syscall_64+0x1d5/0x640 [ 1485.235510] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1485.235518] RIP: 0033:0x4665d9 [ 1485.235523] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1485.235532] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1485.235538] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1485.235542] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1485.235548] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1485.235553] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1485.246342] 0 [ 1485.270300] device veth1_vlan entered promiscuous mode [ 1485.277533] 0 [ 1485.318332] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 1485.375035] 0 [ 1485.377908] 0 [ 1485.380890] 0 [ 1485.384685] 0 [ 1485.420014] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1485.495289] 0 [ 1485.501695] Node 1 Normal free:466360kB min:53696kB low:67120kB high:80544kB active_anon:1100kB inactive_anon:49276kB active_file:76kB inactive_file:2964kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:624kB bounce:0kB free_pcp:764kB local_pcp:108kB free_cma:0kB [ 1485.564993] lowmem_reserve[]: 0 0 0 0 0 [ 1485.569022] Node 0 DMA: 44*4kB (UE) 18*8kB (U) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11280kB [ 1485.599008] Node 1 Normal free:506160kB min:53696kB low:67120kB high:80544kB active_anon:1100kB inactive_anon:49276kB active_file:76kB inactive_file:2964kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:624kB bounce:0kB free_pcp:1260kB local_pcp:640kB free_cma:0kB [ 1485.624931] Node 0 DMA32: 2503*4kB (UME) 550*8kB (UME) 304*16kB (UME) 261*32kB (UME) 1515*64kB (U) 45*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 130348kB [ 1485.670342] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1485.685058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1485.693272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1485.718618] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1485.733029] device veth0_macvtap entered promiscuous mode [ 1485.745286] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1485.751922] Node 1 Normal: 4809*4kB (UME) 1417*8kB (UME) 1061*16kB (UME) 737*32kB (UME) 2754*64kB (UME) 421*128kB (UME) 61*256kB (UME) 48*512kB (UME) 135*1024kB (UM) 30*2048kB (U) 0*4096kB = 541148kB [ 1485.765551] lowmem_reserve[]: 0 0 0 0 0 [ 1485.774259] Node 0 DMA: 63*4kB (UE) 19*8kB (U) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11364kB [ 1485.788147] device veth1_macvtap entered promiscuous mode [ 1485.789887] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 1485.815120] systemd[1]: Stopped System Logging Service. [ 1485.823553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1485.830790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1485.861986] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1485.871130] systemd[1]: Starting System Logging Service... [ 1485.885620] Node 0 DMA32: 7084*4kB (UME) 1728*8kB (UE) 910*16kB (UME) 369*32kB (UE) 1669*64kB (UM) 69*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 184176kB [ 1485.890203] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1485.934946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1485.944117] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1485.954968] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1485.966255] Node 1 Normal: 9482*4kB (UME) 2986*8kB (UME) 1218*16kB (UME) 812*32kB (UME) 2820*64kB (UME) 424*128kB (UME) 65*256kB (UME) 48*512kB (UME) 135*1024kB (UM) 30*2048kB (U) 0*4096kB = 582936kB [ 1485.978581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1486.014921] 31289 total pagecache pages [ 1486.018935] 0 pages in swap cache [ 1486.022379] Swap cache stats: add 0, delete 0, find 0/0 [ 1486.035111] warn_alloc_show_mem: 2 callbacks suppressed [ 1486.035115] Mem-Info: [ 1486.043570] active_anon:12656 inactive_anon:29081 isolated_anon:0 [ 1486.043570] active_file:72 inactive_file:1786 isolated_file:0 [ 1486.043570] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1486.043570] slab_reclaimable:13145 slab_unreclaimable:120520 [ 1486.043570] mapped:53962 shmem:29460 pagetables:751 bounce:0 [ 1486.043570] free:206720 free_pcp:631 free_cma:0 [ 1486.075027] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1486.094916] Free swap = 0kB [ 1486.097967] Total swap = 0kB [ 1486.100980] 2097051 pages RAM [ 1486.104185] 0 pages HighMem/MovableOnly [ 1486.104761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.135953] 363849 pages reserved [ 1486.139417] 0 pages cma reserved [ 1486.144966] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1486.153558] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1486.165449] Node 0 active_anon:49424kB inactive_anon:67048kB active_file:312kB inactive_file:4208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:154664kB dirty:0kB writeback:0kB shmem:68240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1486.175017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1486.234968] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1486.243689] 31439 total pagecache pages [ 1486.248181] 0 pages in swap cache [ 1486.251864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.275710] Swap cache stats: add 0, delete 0, find 0/0 [ 1486.285527] Free swap = 0kB [ 1486.288557] Total swap = 0kB [ 1486.291578] 2097051 pages RAM [ 1486.294678] 0 pages HighMem/MovableOnly [ 1486.314999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1486.334975] 363849 pages reserved [ 1486.338448] 0 pages cma reserved [ 1486.341809] Out of memory (oom_kill_allocating_task): Kill process 11122 (syz-executor.4) score 0 or sacrifice child [ 1486.345145] Node 1 active_anon:1100kB inactive_anon:49276kB active_file:476kB inactive_file:2576kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:61284kB dirty:0kB writeback:0kB shmem:49600kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1486.352582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.404961] Killed process 11122 (syz-executor.4) total-vm:93120kB, anon-rss:80kB, file-rss:33012kB, shmem-rss:0kB [ 1486.454573] oom_reaper: reaped process 11122 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1486.502208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1486.516177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.529324] Node 0 DMA free:11364kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1486.541561] systemd[1]: Starting Load/Save RF Kill Switch Status... [ 1486.566360] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1486.575337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1486.592441] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1486.600423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1486.622501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1486.660402] systemd[1]: Started System Logging Service. [ 1486.672766] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1486.690574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1486.703832] Node 0 DMA32 free:172892kB min:36200kB low:45248kB high:54296kB active_anon:50724kB inactive_anon:67048kB active_file:2812kB inactive_file:6576kB unevictable:0kB writepending:148kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7264kB pagetables:2528kB bounce:0kB free_pcp:908kB local_pcp:608kB free_cma:0kB [ 1486.748852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.760371] systemd[1]: Started Journal Service. [ 1486.804939] lowmem_reserve[]: 0 0 0 0 0 [ 1486.804985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1486.809747] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1486.862234] lowmem_reserve[]: 0 0 0 0 0 [ 1486.866903] Node 1 Normal free:648564kB min:53696kB low:67120kB high:80544kB active_anon:900kB inactive_anon:49276kB active_file:1476kB inactive_file:1576kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:384kB pagetables:624kB bounce:0kB free_pcp:1292kB local_pcp:624kB free_cma:0kB [ 1486.867446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.898752] lowmem_reserve[]: 0 0 0 0 0 [ 1486.911161] Node 0 DMA: 63*4kB (UE) 21*8kB (U) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11380kB [ 1486.931554] Node 0 DMA32: 117*4kB (E) 89*8kB (ME) 1607*16kB (UME) 746*32kB (UE) 1650*64kB (UM) 48*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 162508kB [ 1486.949300] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1486.961901] Node 1 Normal: 12294*4kB (UME) 6391*8kB (UME) 1901*16kB (UME) 1038*32kB (UME) 2948*64kB (UME) 429*128kB (UME) 66*256kB (UME) 48*512kB (UME) 135*1024kB (UM) 30*2048kB (U) 0*4096kB = 648672kB [ 1486.983396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1487.009477] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1487.018191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1487.027531] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1487.027539] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1487.028446] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1487.065558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1487.074427] 33714 total pagecache pages [ 1487.080071] 0 pages in swap cache [ 1487.085748] Swap cache stats: add 0, delete 0, find 0/0 [ 1487.091127] Free swap = 0kB [ 1487.100715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1487.110506] Total swap = 0kB [ 1487.121706] 2097051 pages RAM [ 1487.129188] 0 pages HighMem/MovableOnly [ 1487.133245] 363849 pages reserved [ 1487.139656] 0 pages cma reserved [ 1487.154242] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1487.179544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1487.187190] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1487.219044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1487.787746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1487.805748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1487.827129] device bridge_slave_1 left promiscuous mode [ 1487.832731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.862111] device bridge_slave_0 left promiscuous mode [ 1487.882240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.915528] device veth1_macvtap left promiscuous mode [ 1487.927577] device veth0_macvtap left promiscuous mode [ 1487.945353] device veth1_vlan left promiscuous mode [ 1487.966496] device veth0_vlan left promiscuous mode [ 1488.364296] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1488.431484] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 1488.469117] CPU: 0 PID: 7978 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 1488.476687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1488.484996] device hsr_slave_1 left promiscuous mode [ 1488.486197] Call Trace: [ 1488.493923] dump_stack+0x1b2/0x281 [ 1488.497562] dump_header+0x178/0x82f [ 1488.501281] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1488.506393] ? ___ratelimit+0x2cd/0x530 [ 1488.510477] oom_kill_process.cold+0x10/0xa40 [ 1488.514991] out_of_memory+0xe3e/0x1190 [ 1488.519059] ? oom_killer_disable+0x1c0/0x1c0 [ 1488.523568] ? mutex_trylock+0x152/0x1a0 [ 1488.527666] __alloc_pages_nodemask+0x23e1/0x2720 [ 1488.532531] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1488.537393] alloc_pages_current+0x155/0x260 [ 1488.541804] filemap_fault+0x11a1/0x1ad0 [ 1488.545884] ext4_filemap_fault+0x84/0xb0 [ 1488.550037] __do_fault+0xfa/0x380 [ 1488.553576] __handle_mm_fault+0x2497/0x4620 [ 1488.557986] ? vm_insert_page+0x7c0/0x7c0 [ 1488.562230] ? free_object+0xe4/0x240 [ 1488.566031] ? mark_held_locks+0xa6/0xf0 [ 1488.570112] handle_mm_fault+0x455/0x9c0 [ 1488.574168] __do_page_fault+0x549/0xad0 [ 1488.578226] ? spurious_fault+0x640/0x640 [ 1488.582366] ? do_page_fault+0x60/0x500 [ 1488.586334] ? page_fault+0x2f/0x50 [ 1488.589968] page_fault+0x45/0x50 [ 1488.593409] RIP: 0000:0x947a5c [ 1488.596674] RSP: 4e20:000000c00003df28 EFLAGS: 0043b6a0 [ 1488.600718] device hsr_slave_0 left promiscuous mode [ 1488.655586] team0 (unregistering): Port device team_slave_1 removed [ 1488.686776] team0 (unregistering): Port device team_slave_0 removed [ 1488.717205] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1488.749031] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1488.760981] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1488.796360] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1488.801601] CPU: 0 PID: 11620 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1488.809491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1488.819025] Call Trace: [ 1488.821626] dump_stack+0x1b2/0x281 [ 1488.825299] warn_alloc.cold+0x96/0x1cc [ 1488.829841] ? zone_watermark_ok_safe+0x220/0x220 [ 1488.834714] __alloc_pages_nodemask+0x2127/0x2720 [ 1488.836329] bond0 (unregistering): Released all slaves [ 1488.839570] ? lock_acquire+0x170/0x3f0 [ 1488.848833] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1488.853872] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1488.859341] ? __mutex_unlock_slowpath+0x75/0x770 [ 1488.864226] alloc_pages_current+0x155/0x260 [ 1488.868647] ion_page_pool_alloc+0x118/0x1b0 [ 1488.873153] ion_system_heap_allocate+0x133/0x8c0 [ 1488.878008] ? ion_alloc+0x187/0x810 [ 1488.881778] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1488.887237] ? ion_system_contig_heap_create+0x130/0x130 [ 1488.892686] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1488.897728] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1488.902593] ion_alloc+0x204/0x810 [ 1488.906142] ? ion_dma_buf_release+0x40/0x40 [ 1488.910557] ? __might_fault+0x177/0x1b0 [ 1488.914624] ion_ioctl+0xea/0x1f0 [ 1488.918076] ? ion_query_heaps+0x360/0x360 [ 1488.922402] ? ion_query_heaps+0x360/0x360 [ 1488.926636] do_vfs_ioctl+0x75a/0xff0 [ 1488.930441] ? ioctl_preallocate+0x1a0/0x1a0 [ 1488.934857] ? lock_downgrade+0x740/0x740 [ 1488.939005] ? __fget+0x225/0x360 [ 1488.942474] ? do_vfs_ioctl+0xff0/0xff0 [ 1488.946455] ? security_file_ioctl+0x83/0xb0 [ 1488.951220] SyS_ioctl+0x7f/0xb0 [ 1488.954689] ? do_vfs_ioctl+0xff0/0xff0 [ 1488.958667] do_syscall_64+0x1d5/0x640 [ 1488.962576] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1488.967764] RIP: 0033:0x4665d9 [ 1488.970950] RSP: 002b:00007f59476ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1488.978665] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1488.986055] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1488.993330] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1489.000616] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1489.007898] R13: 00007ffe53b5751f R14: 00007f59476ef300 R15: 0000000000022000 [ 1489.017080] Mem-Info: [ 1489.020330] active_anon:12860 inactive_anon:29076 isolated_anon:0 [ 1489.020330] active_file:135 inactive_file:300 isolated_file:4 [ 1489.020330] unevictable:0 dirty:7 writeback:0 unstable:0 [ 1489.020330] slab_reclaimable:12969 slab_unreclaimable:120740 [ 1489.020330] mapped:35734 shmem:29453 pagetables:674 bounce:0 [ 1489.020330] free:37404 free_pcp:189 free_cma:0 [ 1489.054659] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1489.055947] Node 0 active_anon:50348kB inactive_anon:67036kB active_file:576kB inactive_file:808kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98516kB dirty:4kB writeback:0kB shmem:68224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1489.096045] Node 1 active_anon:1116kB inactive_anon:49268kB active_file:40kB inactive_file:684kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44572kB dirty:4kB writeback:0kB shmem:49588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1489.124586] Node 0 DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1489.127402] syz-executor.5 cpuset= [ 1489.151809] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1489.161789] Node 0 DMA32 free:49732kB min:36200kB low:45248kB high:54296kB active_anon:50348kB inactive_anon:67036kB active_file:556kB inactive_file:1640kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2116kB bounce:0kB free_pcp:112kB local_pcp:104kB free_cma:0kB [ 1489.191886] lowmem_reserve[]: 0 0 0 0 0 [ 1489.198144] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1489.214949] / mems_allowed=0-1 [ 1489.224409] Mem-Info: [ 1489.230349] active_anon:12866 inactive_anon:29076 isolated_anon:0 [ 1489.230349] active_file:149 inactive_file:655 isolated_file:0 [ 1489.230349] unevictable:0 dirty:2 writeback:0 unstable:0 [ 1489.230349] slab_reclaimable:12965 slab_unreclaimable:120415 [ 1489.230349] mapped:35945 shmem:29453 pagetables:674 bounce:0 [ 1489.230349] free:44520 free_pcp:414 free_cma:0 [ 1489.248779] CPU: 1 PID: 11549 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1489.265500] lowmem_reserve[]: [ 1489.271929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1489.271940] 0 [ 1489.275026] Call Trace: [ 1489.275049] dump_stack+0x1b2/0x281 [ 1489.275063] warn_alloc.cold+0x96/0x1cc [ 1489.275077] ? zone_watermark_ok_safe+0x220/0x220 [ 1489.301764] __alloc_pages_nodemask+0x2127/0x2720 [ 1489.304929] 0 0 [ 1489.306614] ? __schedule+0x893/0x1de0 [ 1489.306632] ? lock_acquire+0x170/0x3f0 [ 1489.308590] 0 [ 1489.312473] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1489.323069] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1489.328529] ? __mutex_unlock_slowpath+0x75/0x770 [ 1489.333389] alloc_pages_current+0x155/0x260 [ 1489.334921] 0 [ 1489.337820] ion_page_pool_alloc+0x118/0x1b0 [ 1489.339616] Node 1 Normal free:106540kB min:53696kB low:67120kB high:80544kB active_anon:1116kB inactive_anon:49268kB active_file:40kB inactive_file:684kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:480kB pagetables:580kB bounce:0kB free_pcp:812kB local_pcp:72kB free_cma:0kB [ 1489.344027] ion_system_heap_allocate+0x133/0x8c0 [ 1489.344040] ? _raw_spin_unlock+0x29/0x40 [ 1489.372917] Node 0 active_anon:50348kB inactive_anon:67036kB active_file:556kB inactive_file:2036kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99208kB dirty:4kB writeback:0kB shmem:68224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1489.377673] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1489.377683] ? ion_system_contig_heap_create+0x130/0x130 [ 1489.377697] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1489.394945] Node 1 active_anon:1116kB inactive_anon:49268kB active_file:40kB inactive_file:684kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44572kB dirty:4kB writeback:0kB shmem:49588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1489.409595] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1489.409608] ion_alloc+0x27a/0x810 [ 1489.409625] ? ion_dma_buf_release+0x40/0x40 [ 1489.424934] Node 0 [ 1489.424995] ? __might_fault+0x177/0x1b0 [ 1489.464944] lowmem_reserve[]: [ 1489.465517] ion_ioctl+0xea/0x1f0 [ 1489.467736] 0 [ 1489.472006] ? ion_query_heaps+0x360/0x360 [ 1489.472019] ? ion_query_heaps+0x360/0x360 [ 1489.472030] do_vfs_ioctl+0x75a/0xff0 [ 1489.472042] ? ioctl_preallocate+0x1a0/0x1a0 [ 1489.472055] ? lock_downgrade+0x740/0x740 [ 1489.484942] 0 [ 1489.489011] ? __fget+0x225/0x360 [ 1489.492786] 0 [ 1489.497206] ? do_vfs_ioctl+0xff0/0xff0 [ 1489.497218] ? security_file_ioctl+0x83/0xb0 [ 1489.497228] SyS_ioctl+0x7f/0xb0 [ 1489.497237] ? do_vfs_ioctl+0xff0/0xff0 [ 1489.497251] do_syscall_64+0x1d5/0x640 [ 1489.514948] DMA free:11044kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1489.517508] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1489.520845] lowmem_reserve[]: [ 1489.524978] RIP: 0033:0x4665d9 [ 1489.524983] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1489.524992] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1489.524997] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1489.525001] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1489.525006] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1489.525010] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1489.614403] 0 0 [ 1489.616457] Node 0 DMA: 37*4kB (UE) 24*8kB (U) 15*16kB (UE) 7*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11044kB [ 1489.664983] Node 0 DMA32: 549*4kB (UE) 2794*8kB (UME) 643*16kB (UME) 665*32kB (UME) 609*64kB (U) 60*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 102772kB [ 1489.708162] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1489.734919] Node 1 Normal: 5391*4kB (U) 1507*8kB (U) 1399*16kB (UM) 1208*32kB (UME) 541*64kB (U) 16*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 131332kB [ 1489.734990] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1489.734996] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1489.735002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1489.735007] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1489.735011] 30874 total pagecache pages [ 1489.735021] 0 pages in swap cache [ 1489.735026] Swap cache stats: add 0, delete 0, find 0/0 [ 1489.735029] Free swap = 0kB [ 1489.735032] Total swap = 0kB [ 1489.735038] 2097051 pages RAM [ 1489.735042] 0 pages HighMem/MovableOnly [ 1489.735044] 363849 pages reserved [ 1489.735048] 0 pages cma reserved [ 1489.735054] Out of memory (oom_kill_allocating_task): Kill process 7978 (syz-fuzzer) score 0 or sacrifice child [ 1489.735104] Killed process 11623 (syz-executor.4) total-vm:72636kB, anon-rss:64kB, file-rss:904kB, shmem-rss:0kB [ 1489.875344] Bluetooth: hci3 command 0x0406 tx timeout [ 1489.904981] 0 2717 2718 2718 2718 [ 1489.908578] Node 0 DMA32 free:53816kB min:36200kB low:45248kB high:54296kB active_anon:50348kB inactive_anon:67036kB active_file:556kB inactive_file:3152kB unevictable:0kB writepending:4kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2116kB bounce:0kB free_pcp:680kB local_pcp:620kB free_cma:0kB [ 1489.974929] lowmem_reserve[]: 0 0 0 0 0 [ 1489.978961] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1490.035027] lowmem_reserve[]: 0 0 0 0 0 [ 1490.039051] Node 1 Normal free:175352kB min:53696kB low:67120kB high:80544kB active_anon:1116kB inactive_anon:49268kB active_file:40kB inactive_file:1124kB unevictable:0kB writepending:8kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:580kB bounce:0kB free_pcp:760kB local_pcp:716kB free_cma:0kB [ 1490.074827] oom_reaper: reaped process 11623 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1490.104949] lowmem_reserve[]: 0 0 0 0 0 [ 1490.109063] Node 0 DMA: 37*4kB (UE) 24*8kB (U) 15*16kB (UE) 7*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11044kB [ 1490.138483] Node 0 DMA32: 2562*4kB (UME) 955*8kB (UME) 159*16kB (UME) 21*32kB (UME) 608*64kB (U) 98*128kB (UM) 2*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 73072kB [ 1490.174980] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1490.191354] Node 1 Normal: 16364*4kB (U) 4313*8kB (U) 1520*16kB (UM) 1230*32kB (UME) 875*64kB (U) 166*128kB (UM) 23*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 246776kB [ 1490.229298] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1490.244714] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1490.263183] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1490.318481] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1490.348549] 33473 total pagecache pages [ 1490.353630] 0 pages in swap cache [ 1490.384134] Swap cache stats: add 0, delete 0, find 0/0 [ 1490.399884] Free swap = 0kB [ 1490.402922] Total swap = 0kB [ 1490.419126] 2097051 pages RAM [ 1490.422285] 0 pages HighMem/MovableOnly [ 1490.429663] 363849 pages reserved [ 1490.433137] 0 pages cma reserved [ 1491.268975] syz-executor.2 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 1491.304969] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1491.310124] CPU: 0 PID: 11620 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1491.318004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1491.327358] Call Trace: [ 1491.329950] dump_stack+0x1b2/0x281 [ 1491.333585] dump_header+0x178/0x82f [ 1491.337383] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1491.342662] ? ___ratelimit+0x2cd/0x530 [ 1491.346639] oom_kill_process.cold+0x10/0xa40 [ 1491.351244] out_of_memory+0xe3e/0x1190 [ 1491.355215] ? oom_killer_disable+0x1c0/0x1c0 [ 1491.359725] ? mutex_trylock+0x152/0x1a0 [ 1491.363872] __alloc_pages_nodemask+0x23e1/0x2720 [ 1491.368719] ? lock_acquire+0x170/0x3f0 [ 1491.372698] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1491.377534] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1491.382029] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1491.387591] ? __sanitizer_cov_trace_pc+0x34/0x50 [ 1491.392790] alloc_pages_current+0x155/0x260 [ 1491.397201] ion_page_pool_alloc+0x118/0x1b0 [ 1491.401627] ion_system_heap_allocate+0x133/0x8c0 [ 1491.407018] ? ion_alloc+0x187/0x810 [ 1491.411167] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1491.417108] ? ion_system_contig_heap_create+0x130/0x130 [ 1491.422555] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1491.428719] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1491.433564] ion_alloc+0x204/0x810 [ 1491.437135] ? ion_dma_buf_release+0x40/0x40 [ 1491.441549] ? __might_fault+0x177/0x1b0 [ 1491.445632] ion_ioctl+0xea/0x1f0 [ 1491.449096] ? ion_query_heaps+0x360/0x360 [ 1491.453337] ? ion_query_heaps+0x360/0x360 [ 1491.457579] do_vfs_ioctl+0x75a/0xff0 [ 1491.461406] ? ioctl_preallocate+0x1a0/0x1a0 [ 1491.466401] ? lock_downgrade+0x740/0x740 [ 1491.470577] ? __fget+0x225/0x360 [ 1491.474129] ? do_vfs_ioctl+0xff0/0xff0 [ 1491.478110] ? security_file_ioctl+0x83/0xb0 [ 1491.482546] SyS_ioctl+0x7f/0xb0 [ 1491.485926] ? do_vfs_ioctl+0xff0/0xff0 [ 1491.489904] do_syscall_64+0x1d5/0x640 [ 1491.493795] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1491.499071] RIP: 0033:0x4665d9 [ 1491.502254] RSP: 002b:00007f59476ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1491.509982] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1491.517254] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1491.524654] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1491.531937] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1491.539307] R13: 00007ffe53b5751f R14: 00007f59476ef300 R15: 0000000000022000 [ 1491.668423] Mem-Info: [ 1491.670889] active_anon:12868 inactive_anon:29076 isolated_anon:0 [ 1491.670889] active_file:10 inactive_file:16 isolated_file:0 [ 1491.670889] unevictable:0 dirty:12 writeback:0 unstable:0 [ 1491.670889] slab_reclaimable:12943 slab_unreclaimable:120414 [ 1491.670889] mapped:35408 shmem:29453 pagetables:674 bounce:0 [ 1491.670889] free:13917 free_pcp:37 free_cma:0 [ 1491.717980] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1491.730550] syz-executor.0: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1491.732913] Node 0 active_anon:50380kB inactive_anon:67036kB active_file:36kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97536kB dirty:40kB writeback:0kB shmem:68224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1491.749861] syz-executor.0 cpuset= [ 1491.780582] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1491.790883] CPU: 0 PID: 11549 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1491.798864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1491.808231] Call Trace: [ 1491.810929] dump_stack+0x1b2/0x281 [ 1491.814576] warn_alloc.cold+0x96/0x1cc [ 1491.818584] ? zone_watermark_ok_safe+0x220/0x220 [ 1491.823693] ? usleep_range+0x130/0x130 [ 1491.827672] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1491.832789] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1491.837821] ? run_timer_softirq+0x5a0/0x5a0 [ 1491.842260] __alloc_pages_nodemask+0x2127/0x2720 [ 1491.847119] ? lock_acquire+0x170/0x3f0 [ 1491.851102] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1491.856248] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1491.861269] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1491.866744] alloc_pages_current+0x155/0x260 [ 1491.871253] ion_page_pool_alloc+0x118/0x1b0 [ 1491.875699] ion_system_heap_allocate+0x133/0x8c0 [ 1491.880548] ? _raw_spin_unlock+0x29/0x40 [ 1491.884705] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1491.889662] ? ion_system_contig_heap_create+0x130/0x130 [ 1491.895397] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1491.900414] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1491.905268] ion_alloc+0x27a/0x810 [ 1491.908810] ? ion_dma_buf_release+0x40/0x40 [ 1491.913217] ? __might_fault+0x177/0x1b0 [ 1491.917277] ion_ioctl+0xea/0x1f0 [ 1491.920726] ? ion_query_heaps+0x360/0x360 [ 1491.924970] ? ion_query_heaps+0x360/0x360 [ 1491.929206] do_vfs_ioctl+0x75a/0xff0 [ 1491.933439] ? ioctl_preallocate+0x1a0/0x1a0 [ 1491.937930] ? lock_downgrade+0x740/0x740 [ 1491.942080] ? __fget+0x225/0x360 [ 1491.945530] ? do_vfs_ioctl+0xff0/0xff0 [ 1491.949503] ? security_file_ioctl+0x83/0xb0 [ 1491.954011] SyS_ioctl+0x7f/0xb0 [ 1491.957813] ? do_vfs_ioctl+0xff0/0xff0 [ 1491.961794] do_syscall_64+0x1d5/0x640 [ 1491.965976] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1491.971176] RIP: 0033:0x4665d9 [ 1491.974370] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1491.982081] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1491.989371] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1491.996658] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1492.003948] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1492.011225] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1492.021418] Node 1 active_anon:1092kB inactive_anon:49268kB active_file:4kB inactive_file:88kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44096kB dirty:8kB writeback:0kB shmem:49588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1492.046141] / mems_allowed=0-1 [ 1492.050956] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1492.051758] CPU: 0 PID: 11526 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 1492.080895] lowmem_reserve[]: [ 1492.086813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1492.086818] Call Trace: [ 1492.086841] dump_stack+0x1b2/0x281 [ 1492.086855] warn_alloc.cold+0x96/0x1cc [ 1492.086866] ? zone_watermark_ok_safe+0x220/0x220 [ 1492.086875] ? usleep_range+0x130/0x130 [ 1492.086884] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 1492.086899] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1492.089996] 0 [ 1492.099361] ? run_timer_softirq+0x5a0/0x5a0 [ 1492.099378] __alloc_pages_nodemask+0x2127/0x2720 [ 1492.099394] ? lock_acquire+0x170/0x3f0 [ 1492.099408] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1492.099418] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1492.099433] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1492.099446] ? retint_kernel+0x2d/0x2d [ 1492.099460] alloc_pages_current+0x155/0x260 [ 1492.104259] 2717 [ 1492.105664] ion_page_pool_alloc+0x118/0x1b0 [ 1492.105675] ion_system_heap_allocate+0x133/0x8c0 [ 1492.105687] ? _raw_spin_unlock+0x29/0x40 [ 1492.105696] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1492.105705] ? ion_system_contig_heap_create+0x130/0x130 [ 1492.105718] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1492.109684] 2718 [ 1492.114533] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1492.120801] 2718 [ 1492.123596] ion_alloc+0x27a/0x810 [ 1492.128810] 2718 [ 1492.130399] ? ion_dma_buf_release+0x40/0x40 [ 1492.139762] ? __might_fault+0x177/0x1b0 [ 1492.143710] Node 0 [ 1492.148553] ion_ioctl+0xea/0x1f0 [ 1492.148564] ? ion_query_heaps+0x360/0x360 [ 1492.148574] ? ion_query_heaps+0x360/0x360 [ 1492.148584] do_vfs_ioctl+0x75a/0xff0 [ 1492.148595] ? ioctl_preallocate+0x1a0/0x1a0 [ 1492.148604] ? lock_downgrade+0x740/0x740 [ 1492.148616] ? __fget+0x225/0x360 [ 1492.148624] ? do_vfs_ioctl+0xff0/0xff0 [ 1492.148636] ? security_file_ioctl+0x83/0xb0 [ 1492.148652] SyS_ioctl+0x7f/0xb0 [ 1492.153717] DMA32 free:19508kB min:36200kB low:45248kB high:54296kB active_anon:50380kB inactive_anon:67036kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:32kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2116kB bounce:0kB free_pcp:40kB local_pcp:28kB free_cma:0kB [ 1492.158590] ? do_vfs_ioctl+0xff0/0xff0 [ 1492.158603] do_syscall_64+0x1d5/0x640 [ 1492.158617] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1492.158625] RIP: 0033:0x4665d9 [ 1492.158630] RSP: 002b:00007fc3b5878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1492.158639] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1492.158650] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1492.158655] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1492.158660] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1492.158664] R13: 00007ffdbfddd1af R14: 00007fc3b5878300 R15: 0000000000022000 [ 1492.177278] warn_alloc_show_mem: 1 callbacks suppressed [ 1492.177282] Mem-Info: [ 1492.180413] lowmem_reserve[]: [ 1492.182511] active_anon:12868 inactive_anon:29076 isolated_anon:0 [ 1492.182511] active_file:14 inactive_file:13 isolated_file:0 [ 1492.182511] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1492.182511] slab_reclaimable:12930 slab_unreclaimable:120050 [ 1492.182511] mapped:35356 shmem:29453 pagetables:674 bounce:0 [ 1492.182511] free:14416 free_pcp:40 free_cma:0 [ 1492.187481] 0 0 0 0 0 [ 1492.187501] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1492.187523] lowmem_reserve[]: 0 0 0 0 0 [ 1492.187544] Node 1 Normal free:26800kB min:53696kB low:67120kB high:80544kB active_anon:1092kB inactive_anon:49268kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:448kB pagetables:580kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1492.187565] lowmem_reserve[]: 0 0 0 0 0 [ 1492.187584] Node 0 DMA: 1*4kB [ 1492.207214] Node 0 active_anon:50380kB inactive_anon:67036kB active_file:48kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:97408kB dirty:0kB writeback:0kB shmem:68224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1492.209333] (E) [ 1492.210878] Node 1 active_anon:1092kB inactive_anon:49268kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44016kB dirty:0kB writeback:0kB shmem:49588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1492.212909] 20*8kB [ 1492.230315] Node 0 [ 1492.233637] (U) [ 1492.245099] DMA free:10980kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1492.250340] 18*16kB [ 1492.251732] lowmem_reserve[]: [ 1492.255810] (UE) 9*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 1*512kB (E) [ 1492.275230] 0 [ 1492.295412] 1*1024kB [ 1492.310685] 2717 [ 1492.318346] (E) [ 1492.331661] 2718 [ 1492.340434] 2*2048kB [ 1492.359373] 2718 [ 1492.363090] (ME) [ 1492.363934] 2718 [ 1492.402268] 1*4096kB [ 1492.556890] (U) [ 1492.624930] Node 0 DMA32 free:26348kB min:36200kB low:45248kB high:54296kB active_anon:50380kB inactive_anon:67036kB active_file:48kB inactive_file:44kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2116kB bounce:0kB free_pcp:64kB local_pcp:36kB free_cma:0kB [ 1492.637068] = 10980kB [ 1492.708958] Node 0 DMA32: 381*4kB (UME) 324*8kB (UME) 179*16kB (UME) 42*32kB (UME) 353*64kB (U) 102*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43972kB [ 1492.757055] lowmem_reserve[]: 0 0 0 0 0 [ 1492.768772] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1492.784966] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1492.854973] Node 1 Normal: 2*4kB (UM) 0*8kB 0*16kB 2*32kB (ME) 2818*64kB (U) 1099*128kB (U) 419*256kB (UM) 48*512kB (U) 201*1024kB (UM) 33*2048kB (U) 0*4096kB = 726344kB [ 1492.858226] lowmem_reserve[]: [ 1492.905222] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1492.921648] 0 0 0 0 0 [ 1492.935589] Node 1 Normal free:780588kB min:53696kB low:67120kB high:80544kB active_anon:1192kB inactive_anon:49268kB active_file:208kB inactive_file:10408kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:416kB pagetables:580kB bounce:0kB free_pcp:916kB local_pcp:196kB free_cma:0kB [ 1492.955008] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1492.969195] lowmem_reserve[]: 0 0 0 0 0 [ 1492.978626] Node 0 DMA: 1*4kB (E) 23*8kB (U) 18*16kB (UE) 9*32kB (UE) 9*64kB (UE) 3*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 12220kB [ 1493.006477] Node 0 DMA32: 1821*4kB (UE) 640*8kB (UE) 166*16kB (UME) 70*32kB (UME) 1139*64kB (UM) 286*128kB (UM) 8*256kB (U) 0*512kB 3*1024kB (U) 0*2048kB 0*4096kB = 131924kB [ 1493.024986] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1493.025761] Node 0 [ 1493.033928] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1493.033931] Normal: 0*4kB [ 1493.049758] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1493.061083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1493.075722] 32568 total pagecache pages [ 1493.079735] 0 pages in swap cache [ 1493.080443] 0*8kB [ 1493.083178] Swap cache stats: add 0, delete 0, find 0/0 [ 1493.083186] 0*16kB [ 1493.095156] Free swap = 0kB [ 1493.099160] 0*32kB [ 1493.100548] Total swap = 0kB [ 1493.100550] 0*64kB 0*128kB [ 1493.102883] 2097051 pages RAM [ 1493.108155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1493.134946] 0 pages HighMem/MovableOnly [ 1493.136361] 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1493.138976] 363849 pages reserved [ 1493.144761] Node 1 [ 1493.150617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1493.164975] 0 pages cma reserved [ 1493.168387] Out of memory (oom_kill_allocating_task): Kill process 11620 (syz-executor.2) score 0 or sacrifice child [ 1493.174938] Normal: 10656*4kB (UM) 4171*8kB (UM) 1030*16kB (UM) 838*32kB (UME) 3134*64kB (U) 1112*128kB (UM) 429*256kB (UM) 48*512kB (U) 199*1024kB (UM) 41*2048kB (U) 0*4096kB = 884344kB [ 1493.201733] device bridge_slave_1 left promiscuous mode [ 1493.207459] Killed process 11620 (syz-executor.2) total-vm:93516kB, anon-rss:156kB, file-rss:34880kB, shmem-rss:0kB [ 1493.215385] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.229123] device bridge_slave_0 left promiscuous mode [ 1493.234774] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.253771] oom_reaper: reaped process 11620 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1493.274944] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1493.283813] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1493.295458] device veth1_macvtap left promiscuous mode [ 1493.300774] device veth0_macvtap left promiscuous mode [ 1493.319745] device veth1_vlan left promiscuous mode [ 1493.324830] device veth0_vlan left promiscuous mode [ 1493.344467] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1493.355380] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1493.385096] 32851 total pagecache pages [ 1493.389105] 0 pages in swap cache [ 1493.392570] Swap cache stats: add 0, delete 0, find 0/0 [ 1493.415068] Free swap = 0kB [ 1493.418128] Total swap = 0kB [ 1493.421161] 2097051 pages RAM [ 1493.424264] 0 pages HighMem/MovableOnly [ 1493.438324] 363849 pages reserved [ 1493.441809] 0 pages cma reserved [ 1493.546880] device hsr_slave_1 left promiscuous mode [ 1493.555820] device hsr_slave_0 left promiscuous mode [ 1493.572073] team0 (unregistering): Port device team_slave_1 removed [ 1493.598258] team0 (unregistering): Port device team_slave_0 removed [ 1493.614986] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1493.630073] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1493.703780] bond0 (unregistering): Released all slaves 00:42:13 executing program 3: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) 00:42:13 executing program 2: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:42:13 executing program 0: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) socket$can_bcm(0x1d, 0x2, 0x2) 00:42:13 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) [ 1494.977487] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1495.010304] syz-executor.2 cpuset=/ mems_allowed=0-1 [ 1495.026523] CPU: 0 PID: 11638 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1495.034432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1495.043883] Call Trace: [ 1495.046477] dump_stack+0x1b2/0x281 [ 1495.050109] warn_alloc.cold+0x96/0x1cc [ 1495.054084] ? zone_watermark_ok_safe+0x220/0x220 [ 1495.058945] __alloc_pages_nodemask+0x2127/0x2720 [ 1495.063789] ? __schedule+0x893/0x1de0 [ 1495.067704] ? lock_acquire+0x170/0x3f0 [ 1495.071705] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1495.076641] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1495.082094] ? __mutex_unlock_slowpath+0x75/0x770 [ 1495.086945] alloc_pages_current+0x155/0x260 [ 1495.091378] ion_page_pool_alloc+0x118/0x1b0 [ 1495.095792] ion_system_heap_allocate+0x133/0x8c0 [ 1495.100635] ? ion_alloc+0x187/0x810 [ 1495.104352] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1495.109835] ? ion_system_contig_heap_create+0x130/0x130 [ 1495.115290] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1495.120325] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1495.125287] ion_alloc+0x204/0x810 [ 1495.128833] ? ion_dma_buf_release+0x40/0x40 [ 1495.133258] ? __might_fault+0x177/0x1b0 [ 1495.137324] ion_ioctl+0xea/0x1f0 [ 1495.140811] ? ion_query_heaps+0x360/0x360 [ 1495.145049] ? ion_query_heaps+0x360/0x360 [ 1495.149417] do_vfs_ioctl+0x75a/0xff0 [ 1495.153224] ? ioctl_preallocate+0x1a0/0x1a0 [ 1495.157636] ? lock_downgrade+0x740/0x740 [ 1495.161874] ? __fget+0x225/0x360 [ 1495.165335] ? do_vfs_ioctl+0xff0/0xff0 [ 1495.169332] ? security_file_ioctl+0x83/0xb0 [ 1495.173743] SyS_ioctl+0x7f/0xb0 [ 1495.177123] ? do_vfs_ioctl+0xff0/0xff0 [ 1495.181140] do_syscall_64+0x1d5/0x640 [ 1495.185138] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1495.190335] RIP: 0033:0x4665d9 [ 1495.193549] RSP: 002b:00007f59476ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1495.201264] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1495.208535] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1495.215803] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1495.223072] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1495.230346] R13: 00007ffe53b5751f R14: 00007f59476ef300 R15: 0000000000022000 [ 1495.239289] warn_alloc_show_mem: 1 callbacks suppressed [ 1495.239998] Mem-Info: [ 1495.259621] active_anon:12875 inactive_anon:29076 isolated_anon:12 [ 1495.259621] active_file:1579 inactive_file:5342 isolated_file:0 [ 1495.259621] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1495.259621] slab_reclaimable:12911 slab_unreclaimable:117967 [ 1495.259621] mapped:40000 shmem:29453 pagetables:669 bounce:0 [ 1495.259621] free:140698 free_pcp:711 free_cma:0 [ 1495.330266] Node 0 active_anon:50504kB inactive_anon:67036kB active_file:2056kB inactive_file:15012kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:105268kB dirty:16kB writeback:0kB shmem:68224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1495.389161] Node 1 active_anon:996kB inactive_anon:49268kB active_file:4260kB inactive_file:6356kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:54732kB dirty:0kB writeback:0kB shmem:49588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1495.446464] Node 0 DMA free:11092kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1495.481383] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1495.486567] Node 0 DMA32 free:245820kB min:36200kB low:45248kB high:54296kB active_anon:50504kB inactive_anon:67036kB active_file:2056kB inactive_file:15012kB unevictable:0kB writepending:16kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2288kB bounce:0kB free_pcp:656kB local_pcp:0kB free_cma:0kB [ 1495.487794] IPVS: ftp: loaded support on port[0] = 21 [ 1495.521153] lowmem_reserve[]: 0 0 0 0 0 [ 1495.529604] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1495.558681] lowmem_reserve[]: 0 0 0 0 0 [ 1495.564105] Node 1 Normal free:389068kB min:53696kB low:67120kB high:80544kB active_anon:996kB inactive_anon:49268kB active_file:4260kB inactive_file:6356kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:388kB bounce:0kB free_pcp:668kB local_pcp:668kB free_cma:0kB [ 1495.600986] lowmem_reserve[]: 0 0 0 0 0 [ 1495.603365] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1495.606551] Node 0 DMA: 89*4kB (UE) 36*8kB (U) 23*16kB (UE) 9*32kB (UE) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11092kB [ 1495.641906] Node 0 DMA32: 27532*4kB (UE) 10646*8kB (UME) 3679*16kB (UE) 1453*32kB (UME) 1*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 300720kB [ 1495.662005] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1495.672906] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 1495.674178] Node 1 Normal: 25474*4kB (U) 12584*8kB (U) 5607*16kB (U) 3490*32kB (UE) 14*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 404856kB [ 1495.685076] CPU: 1 PID: 11640 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1495.698959] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1495.704578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1495.704583] Call Trace: [ 1495.704604] dump_stack+0x1b2/0x281 [ 1495.704618] warn_alloc.cold+0x96/0x1cc [ 1495.704631] ? zone_watermark_ok_safe+0x220/0x220 [ 1495.716384] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1495.722855] __alloc_pages_nodemask+0x2127/0x2720 [ 1495.722870] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 1495.722882] ? lock_acquire+0x170/0x3f0 [ 1495.725568] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1495.729080] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1495.729102] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1495.733124] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1495.737890] ? __mutex_unlock_slowpath+0x75/0x770 [ 1495.737906] alloc_pages_current+0x155/0x260 [ 1495.737920] ion_page_pool_alloc+0x118/0x1b0 [ 1495.737929] ion_system_heap_allocate+0x133/0x8c0 [ 1495.737939] ? ion_alloc+0x187/0x810 [ 1495.737949] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1495.737957] ? ion_system_contig_heap_create+0x130/0x130 [ 1495.737970] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1495.753125] 36292 total pagecache pages [ 1495.756866] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1495.756880] ion_alloc+0x204/0x810 [ 1495.756893] ? ion_dma_buf_release+0x40/0x40 [ 1495.756905] ? __might_fault+0x177/0x1b0 [ 1495.756916] ion_ioctl+0xea/0x1f0 [ 1495.756924] ? ion_query_heaps+0x360/0x360 [ 1495.756936] ? ion_query_heaps+0x360/0x360 [ 1495.756948] do_vfs_ioctl+0x75a/0xff0 [ 1495.766228] 0 pages in swap cache [ 1495.770193] ? ioctl_preallocate+0x1a0/0x1a0 [ 1495.770205] ? lock_downgrade+0x740/0x740 [ 1495.770218] ? __fget+0x225/0x360 [ 1495.775631] Swap cache stats: add 0, delete 0, find 0/0 [ 1495.780956] ? do_vfs_ioctl+0xff0/0xff0 [ 1495.780969] ? security_file_ioctl+0x83/0xb0 [ 1495.780980] SyS_ioctl+0x7f/0xb0 [ 1495.780993] ? do_vfs_ioctl+0xff0/0xff0 [ 1495.793482] Free swap = 0kB [ 1495.794406] do_syscall_64+0x1d5/0x640 [ 1495.799938] Total swap = 0kB [ 1495.803378] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1495.803387] RIP: 0033:0x4665d9 [ 1495.803392] RSP: 002b:00007f2e9a53f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1495.810219] 2097051 pages RAM [ 1495.811937] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1495.811943] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1495.811949] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1495.811954] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1495.811961] R13: 00007ffe42256d6f R14: 00007f2e9a53f300 R15: 0000000000022000 [ 1495.968281] 0 pages HighMem/MovableOnly [ 1495.973278] 363849 pages reserved [ 1495.976837] 0 pages cma reserved [ 1496.177936] chnl_net:caif_netlink_parms(): no params data found [ 1496.425193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1496.458918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.466415] device bridge_slave_0 entered promiscuous mode [ 1496.488978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1496.505009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.512580] device bridge_slave_1 entered promiscuous mode [ 1496.515251] Bluetooth: hci1 command 0x0409 tx timeout [ 1496.541624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1496.548646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1496.566623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1496.573371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1496.599831] device bridge_slave_1 left promiscuous mode [ 1496.605448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1496.625780] device bridge_slave_0 left promiscuous mode [ 1496.631570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.660979] device veth1_macvtap left promiscuous mode [ 1496.680232] device veth0_macvtap left promiscuous mode [ 1496.699420] device veth1_vlan left promiscuous mode [ 1496.704713] device veth0_vlan left promiscuous mode [ 1496.940004] device hsr_slave_1 left promiscuous mode [ 1496.956854] device hsr_slave_0 left promiscuous mode [ 1496.988967] team0 (unregistering): Port device team_slave_1 removed [ 1497.016814] team0 (unregistering): Port device team_slave_0 removed [ 1497.048709] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1497.069452] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1497.131423] bond0 (unregistering): Released all slaves [ 1497.197612] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1497.229945] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1497.320475] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1497.345608] team0: Port device team_slave_0 added [ 1497.377638] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1497.398991] team0: Port device team_slave_1 added [ 1497.458331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1497.464791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1497.534983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1497.568313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1497.574768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1497.674946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1497.706005] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1497.713749] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1497.781922] device hsr_slave_0 entered promiscuous mode [ 1497.796138] device hsr_slave_1 entered promiscuous mode [ 1497.815781] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1497.835709] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1498.098103] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1498.182188] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1498.208242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1498.228203] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1498.258301] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1498.281288] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1498.290576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1498.299300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1498.312647] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1498.320297] 8021q: adding VLAN 0 to HW filter on device team0 [ 1498.358285] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1498.376620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1498.388316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1498.409988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.416413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1498.438578] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1498.460381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1498.471382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1498.496078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1498.508594] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.514993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1498.550325] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1498.557672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1498.578507] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1498.595045] Bluetooth: hci1 command 0x041b tx timeout [ 1498.607808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1498.618939] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1498.635852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1498.644088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1498.694766] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1498.760382] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1498.785503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1498.799508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1498.822136] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1498.857882] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1498.885740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1498.939058] oom_reaper: reaped process 11638 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1499.052818] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1499.074682] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1499.080769] CPU: 0 PID: 11626 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1499.089379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1499.098999] Call Trace: [ 1499.101600] dump_stack+0x1b2/0x281 [ 1499.105245] dump_header+0x178/0x82f [ 1499.108983] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1499.114088] ? ___ratelimit+0x2cd/0x530 [ 1499.118066] oom_kill_process.cold+0x10/0xa40 [ 1499.122572] out_of_memory+0xe3e/0x1190 [ 1499.126558] ? oom_killer_disable+0x1c0/0x1c0 [ 1499.131059] ? mutex_trylock+0x152/0x1a0 [ 1499.134993] syz-executor.2: page allocation failure: order:0 [ 1499.135141] __alloc_pages_nodemask+0x23e1/0x2720 [ 1499.135161] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1499.141212] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1499.146061] alloc_pages_current+0x155/0x260 [ 1499.146074] filemap_fault+0x11a1/0x1ad0 [ 1499.146092] ext4_filemap_fault+0x84/0xb0 [ 1499.146101] __do_fault+0xfa/0x380 [ 1499.146110] __handle_mm_fault+0x2497/0x4620 [ 1499.146119] ? vm_insert_page+0x7c0/0x7c0 [ 1499.146136] ? mark_held_locks+0xa6/0xf0 [ 1499.146145] handle_mm_fault+0x455/0x9c0 [ 1499.146158] __do_page_fault+0x549/0xad0 [ 1499.156046] (null) [ 1499.158129] ? spurious_fault+0x640/0x640 [ 1499.162614] syz-executor.2 cpuset= [ 1499.166761] ? do_page_fault+0x60/0x500 [ 1499.166771] ? page_fault+0x2f/0x50 [ 1499.166777] page_fault+0x45/0x50 [ 1499.166785] RIP: 14a4370:0x3 [ 1499.166788] RSP: 14a4320:0000000000000000 EFLAGS: 00000000 [ 1499.181772] Mem-Info: [ 1499.187805] / [ 1499.202456] active_anon:12916 inactive_anon:29076 isolated_anon:0 [ 1499.202456] active_file:38 inactive_file:0 isolated_file:0 [ 1499.202456] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1499.202456] slab_reclaimable:12902 slab_unreclaimable:114361 [ 1499.202456] mapped:44147 shmem:29453 pagetables:713 bounce:0 [ 1499.202456] free:13914 free_pcp:0 free_cma:0 [ 1499.211634] mems_allowed=0-1 [ 1499.225228] Node 0 active_anon:50628kB inactive_anon:67036kB active_file:64kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130092kB dirty:0kB writeback:0kB shmem:68224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1499.232420] CPU: 1 PID: 11638 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1499.266141] Node 1 active_anon:1036kB inactive_anon:49268kB active_file:88kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46496kB dirty:0kB writeback:0kB shmem:49588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1499.293833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1499.293840] Call Trace: [ 1499.293862] dump_stack+0x1b2/0x281 [ 1499.293876] warn_alloc.cold+0x96/0x1cc [ 1499.293888] ? zone_watermark_ok_safe+0x220/0x220 [ 1499.293902] ? usleep_range+0x130/0x130 [ 1499.301838] Node 0 [ 1499.328953] ? try_to_free_pages+0x23f/0x6e0 [ 1499.328964] ? _find_next_bit+0xdb/0x100 [ 1499.328974] ? run_timer_softirq+0x5a0/0x5a0 [ 1499.328994] __alloc_pages_nodemask+0x2127/0x2720 [ 1499.338411] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1499.340948] ? lock_acquire+0x170/0x3f0 [ 1499.344537] lowmem_reserve[]: [ 1499.348503] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1499.348512] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1499.348528] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1499.348547] alloc_pages_current+0x155/0x260 [ 1499.353380] 0 [ 1499.357347] ion_page_pool_alloc+0x118/0x1b0 [ 1499.357357] ion_system_heap_allocate+0x133/0x8c0 [ 1499.357365] ? ion_alloc+0x187/0x810 [ 1499.357376] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1499.357386] ? ion_system_contig_heap_create+0x130/0x130 [ 1499.359610] 2717 [ 1499.364014] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1499.364029] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1499.368113] 2718 [ 1499.372492] ion_alloc+0x204/0x810 [ 1499.377356] 2718 [ 1499.404211] ? ion_dma_buf_release+0x40/0x40 [ 1499.404224] ? __might_fault+0x177/0x1b0 [ 1499.404236] ion_ioctl+0xea/0x1f0 [ 1499.404247] ? ion_query_heaps+0x360/0x360 [ 1499.408231] 2718 [ 1499.411301] ? ion_query_heaps+0x360/0x360 [ 1499.420617] do_vfs_ioctl+0x75a/0xff0 [ 1499.426074] Node 0 [ 1499.430439] ? ioctl_preallocate+0x1a0/0x1a0 [ 1499.432223] DMA32 free:18080kB min:36200kB low:45248kB high:54296kB active_anon:50628kB inactive_anon:67036kB active_file:64kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2464kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1499.436691] ? lock_downgrade+0x740/0x740 [ 1499.436704] ? __fget+0x225/0x360 [ 1499.436713] ? do_vfs_ioctl+0xff0/0xff0 [ 1499.436725] ? security_file_ioctl+0x83/0xb0 [ 1499.436735] SyS_ioctl+0x7f/0xb0 [ 1499.441555] lowmem_reserve[]: [ 1499.445259] ? do_vfs_ioctl+0xff0/0xff0 [ 1499.445271] do_syscall_64+0x1d5/0x640 [ 1499.445286] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1499.445295] RIP: 0033:0x4665d9 [ 1499.450725] 0 [ 1499.456518] RSP: 002b:00007f59476ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1499.456528] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1499.456533] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1499.456537] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1499.456542] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1499.456547] R13: 00007ffe53b5751f R14: 00007f59476ef300 R15: 0000000000022000 [ 1499.464933] warn_alloc_show_mem: 1 callbacks suppressed [ 1499.464936] Mem-Info: [ 1499.492323] 0 [ 1499.499149] active_anon:12916 inactive_anon:29076 isolated_anon:0 [ 1499.499149] active_file:38 inactive_file:0 isolated_file:0 [ 1499.499149] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1499.499149] slab_reclaimable:12902 slab_unreclaimable:114361 [ 1499.499149] mapped:44147 shmem:29453 pagetables:713 bounce:0 [ 1499.499149] free:13914 free_pcp:0 free_cma:0 [ 1499.510825] 0 [ 1499.539661] Node 0 active_anon:50628kB inactive_anon:67036kB active_file:64kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130092kB dirty:0kB writeback:0kB shmem:68224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1499.560914] 0 [ 1499.566888] Node 1 active_anon:1036kB inactive_anon:49268kB active_file:88kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46496kB dirty:0kB writeback:0kB shmem:49588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1499.582861] 0 [ 1499.588824] Node 0 [ 1499.625532] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1499.666660] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1499.666680] lowmem_reserve[]: 0 0 0 0 0 [ 1499.666698] Node 1 Normal free:26600kB min:53696kB low:67120kB high:80544kB active_anon:1036kB inactive_anon:49268kB active_file:12kB inactive_file:72kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:388kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1499.666714] lowmem_reserve[]: 0 0 0 0 0 [ 1499.666733] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 23*16kB (UE) 15*32kB (UE) 6*64kB (UE) 2*128kB [ 1499.670763] lowmem_reserve[]: [ 1499.781448] (UE) [ 1499.787764] 0 [ 1499.789216] 1*256kB [ 1499.825158] 2717 2718 2718 2718 [ 1499.861109] Node 0 DMA32 free:17976kB min:36200kB low:45248kB high:54296kB active_anon:50628kB inactive_anon:67036kB active_file:64kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7168kB pagetables:2464kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB [ 1499.884935] (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1499.896744] lowmem_reserve[]: 0 0 0 0 0 [ 1499.901273] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1499.909530] Node 0 DMA32: 479*4kB (ME) 238*8kB (ME) 162*16kB (ME) 34*32kB (UME) 12*64kB (UM) 42*128kB (UM) 15*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17996kB [ 1499.972755] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1499.990465] lowmem_reserve[]: 0 0 0 0 0 [ 1499.994494] Node 1 Normal free:26600kB min:53696kB low:67120kB high:80544kB active_anon:1036kB inactive_anon:49268kB active_file:12kB inactive_file:72kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:320kB pagetables:388kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1500.025493] Node 1 Normal: 40*4kB (UM) 32*8kB (M) 16*16kB (UM) 12*32kB (ME) 7*64kB (M) 5*128kB (UM) 44*256kB (UM) 18*512kB (UM) 2*1024kB (M) 1*2048kB (M) 0*4096kB = 26720kB [ 1500.042693] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1500.053878] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1500.062546] lowmem_reserve[]: 0 0 0 0 0 [ 1500.068882] Node 0 DMA: 2*4kB (UE) 1*8kB (U) 23*16kB (UE) 15*32kB (UE) 6*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10976kB [ 1500.084381] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1500.095458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1500.103411] Node 0 [ 1500.104058] 29478 total pagecache pages [ 1500.104060] DMA32: 479*4kB [ 1500.106801] 0 pages in swap cache [ 1500.119785] Swap cache stats: add 0, delete 0, find 0/0 [ 1500.125220] Free swap = 0kB [ 1500.128571] Total swap = 0kB [ 1500.131598] 2097051 pages RAM [ 1500.133970] (ME) [ 1500.134690] 0 pages HighMem/MovableOnly [ 1500.134699] 238*8kB [ 1500.138965] 363849 pages reserved [ 1500.146780] 0 pages cma reserved [ 1500.150141] Out of memory (oom_kill_allocating_task): Kill process 11626 (syz-executor.4) score 0 or sacrifice child [ 1500.159911] (ME) 162*16kB (ME) 34*32kB (UME) 12*64kB (UM) 42*128kB (UM) 15*256kB (UM) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17996kB [ 1500.162954] Killed process 11626 (syz-executor.4) total-vm:93120kB, anon-rss:84kB, file-rss:34380kB, shmem-rss:0kB [ 1500.185755] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1500.193040] syz-executor.4: page allocation failure: order:0, mode:0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null) [ 1500.216847] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1500.221996] CPU: 0 PID: 11626 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1500.229875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1500.239487] Call Trace: [ 1500.242079] dump_stack+0x1b2/0x281 [ 1500.245881] warn_alloc.cold+0x96/0x1cc [ 1500.249864] ? zone_watermark_ok_safe+0x220/0x220 [ 1500.254724] ? wait_for_completion_io+0x10/0x10 [ 1500.260105] __alloc_pages_nodemask+0x2127/0x2720 [ 1500.264958] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1500.269836] alloc_pages_current+0x155/0x260 [ 1500.274244] filemap_fault+0x11a1/0x1ad0 [ 1500.278314] ext4_filemap_fault+0x84/0xb0 [ 1500.282502] __do_fault+0xfa/0x380 [ 1500.286038] __handle_mm_fault+0x2497/0x4620 [ 1500.292378] ? vm_insert_page+0x7c0/0x7c0 [ 1500.296529] ? mark_held_locks+0xa6/0xf0 [ 1500.300597] handle_mm_fault+0x455/0x9c0 [ 1500.304744] __do_page_fault+0x549/0xad0 [ 1500.308811] ? spurious_fault+0x640/0x640 [ 1500.312953] ? do_page_fault+0x60/0x500 [ 1500.316923] ? page_fault+0x2f/0x50 [ 1500.320555] page_fault+0x45/0x50 [ 1500.323999] RIP: 14a4370:0x3 [ 1500.327003] RSP: 14a4320:0000000000000000 EFLAGS: 00000000 [ 1500.334927] Node 1 Normal: 40*4kB (UM) 32*8kB (M) 16*16kB (UM) 12*32kB (ME) 7*64kB (M) 5*128kB (UM) 44*256kB (UM) 18*512kB (UM) 2*1024kB (M) 1*2048kB (M) 0*4096kB = 26720kB [ 1500.351663] oom_reaper: reaped process 11626 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1500.359681] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1500.378452] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1500.387375] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1500.398784] systemd-udevd invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=-1000 [ 1500.412108] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1500.422720] systemd-udevd cpuset=/ mems_allowed=0-1 [ 1500.432909] 29478 total pagecache pages [ 1500.436974] 0 pages in swap cache [ 1500.440434] Swap cache stats: add 0, delete 0, find 0/0 [ 1500.448336] CPU: 1 PID: 4624 Comm: systemd-udevd Not tainted 4.14.232-syzkaller #0 [ 1500.449569] Free swap = 0kB [ 1500.456158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1500.456163] Call Trace: [ 1500.456182] dump_stack+0x1b2/0x281 [ 1500.456194] dump_header+0x178/0x82f [ 1500.456204] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1500.456220] ? ___ratelimit+0x2cd/0x530 [ 1500.456232] oom_kill_process.cold+0x10/0xa40 [ 1500.456244] ? lock_downgrade+0x740/0x740 [ 1500.456259] out_of_memory+0x2dc/0x1190 [ 1500.465304] Total swap = 0kB [ 1500.468635] ? oom_killer_disable+0x1c0/0x1c0 [ 1500.471236] 2097051 pages RAM [ 1500.474862] ? mutex_trylock+0x152/0x1a0 [ 1500.478617] 0 pages HighMem/MovableOnly [ 1500.483670] __alloc_pages_nodemask+0x23e1/0x2720 [ 1500.487652] 363849 pages reserved [ 1500.492122] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1500.496382] 0 pages cma reserved [ 1500.500331] alloc_pages_current+0x155/0x260 [ 1500.540692] filemap_fault+0x11a1/0x1ad0 [ 1500.547747] ext4_filemap_fault+0x84/0xb0 [ 1500.551901] __do_fault+0xfa/0x380 [ 1500.555465] __handle_mm_fault+0x2497/0x4620 [ 1500.559960] ? vm_insert_page+0x7c0/0x7c0 [ 1500.564237] ? mark_held_locks+0xa6/0xf0 [ 1500.568299] handle_mm_fault+0x455/0x9c0 [ 1500.572369] __do_page_fault+0x549/0xad0 [ 1500.576435] ? spurious_fault+0x640/0x640 [ 1500.580668] ? do_page_fault+0x60/0x500 [ 1500.584640] ? page_fault+0x2f/0x50 [ 1500.588268] page_fault+0x45/0x50 [ 1500.591735] RIP: 0001:0x1 [ 1500.594501] RSP: 3c2c0600:00007ffd64e3d540 EFLAGS: 7ffd64e3d3d0 [ 1500.606702] Mem-Info: [ 1500.626756] active_anon:12916 inactive_anon:29076 isolated_anon:0 [ 1500.626756] active_file:13 inactive_file:887 isolated_file:0 [ 1500.626756] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1500.626756] slab_reclaimable:12900 slab_unreclaimable:114363 [ 1500.626756] mapped:44627 shmem:29453 pagetables:713 bounce:0 [ 1500.626756] free:29792 free_pcp:116 free_cma:0 [ 1500.705170] Node 0 active_anon:50628kB inactive_anon:67036kB active_file:36kB inactive_file:836kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130692kB dirty:0kB writeback:0kB shmem:68224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1500.805731] Node 1 active_anon:1036kB inactive_anon:49268kB active_file:416kB inactive_file:7112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:49016kB dirty:0kB writeback:0kB shmem:49588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 00:42:20 executing program 1: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) 00:42:20 executing program 4: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) 00:42:20 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) [ 1500.865856] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:120kB inactive_file:720kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1500.934979] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1500.940203] Node 0 DMA32 free:113400kB min:36200kB low:45248kB high:54296kB active_anon:50528kB inactive_anon:67036kB active_file:36kB inactive_file:2036kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7136kB pagetables:2316kB bounce:0kB free_pcp:996kB local_pcp:656kB free_cma:0kB [ 1500.989350] lowmem_reserve[]: 0 0 0 0 0 [ 1500.993494] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1501.033484] lowmem_reserve[]: 0 0 0 0 0 [ 1501.039954] Node 1 Normal free:373492kB min:53696kB low:67120kB high:80544kB active_anon:1052kB inactive_anon:49268kB active_file:492kB inactive_file:7152kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:372kB bounce:0kB free_pcp:1280kB local_pcp:624kB free_cma:0kB [ 1501.073554] lowmem_reserve[]: 0 0 0 0 0 [ 1501.081524] Node 0 DMA: 2*4kB (UE) 4*8kB (UM) 21*16kB (UME) 16*32kB (UME) 8*64kB (UME) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11128kB [ 1501.106532] Node 0 DMA32: 5921*4kB (UE) 395*8kB (UME) 453*16kB (UME) 191*32kB (UE) 3*64kB (E) 12*128kB (UM) 16*256kB (U) 9*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 50636kB [ 1501.127781] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 00:42:20 executing program 5: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) [ 1501.139739] Node 1 Normal: 18*4kB (U) 181*8kB (UM) 52*16kB (U) 44*32kB (UME) 3242*64kB (UM) 372*128kB (UM) 118*256kB (U) 24*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 301360kB [ 1501.179332] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 00:42:20 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1}) [ 1501.196757] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1501.232274] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1501.249223] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1501.264777] 35022 total pagecache pages [ 1501.271047] 0 pages in swap cache [ 1501.275955] Swap cache stats: add 0, delete 0, find 0/0 [ 1501.281986] Free swap = 0kB [ 1501.286997] Total swap = 0kB [ 1501.293371] 2097051 pages RAM [ 1501.301091] 0 pages HighMem/MovableOnly [ 1501.309798] 363849 pages reserved [ 1501.318961] 0 pages cma reserved [ 1501.326828] Out of memory: Kill process 11639 (syz-executor.3) score 1004 or sacrifice child [ 1501.342801] Killed process 11640 (syz-executor.3) total-vm:93252kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 1501.358549] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1501.362623] syz-executor.2: [ 1501.370716] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1501.379460] page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1501.380848] CPU: 1 PID: 11856 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1501.397771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1501.404933] syz-executor.2 cpuset= [ 1501.407122] Call Trace: [ 1501.407131] / [ 1501.410884] dump_stack+0x1b2/0x281 [ 1501.413446] mems_allowed=0-1 [ 1501.415174] warn_alloc.cold+0x96/0x1cc [ 1501.415186] ? zone_watermark_ok_safe+0x220/0x220 [ 1501.415211] __alloc_pages_nodemask+0x2127/0x2720 [ 1501.435568] ? _raw_spin_unlock_irq+0x24/0x80 [ 1501.440066] ? lock_acquire+0x170/0x3f0 [ 1501.444040] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1501.449344] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1501.455794] ? __mutex_unlock_slowpath+0x75/0x770 [ 1501.460641] alloc_pages_current+0x155/0x260 [ 1501.465050] ion_page_pool_alloc+0x118/0x1b0 [ 1501.469458] ion_system_heap_allocate+0x133/0x8c0 [ 1501.474907] ? ion_alloc+0x187/0x810 [ 1501.478619] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1501.484066] ? ion_system_contig_heap_create+0x130/0x130 [ 1501.489528] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1501.494568] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1501.499425] ion_alloc+0x204/0x810 [ 1501.502967] ? ion_dma_buf_release+0x40/0x40 [ 1501.507378] ? __might_fault+0x177/0x1b0 [ 1501.511498] ion_ioctl+0xea/0x1f0 [ 1501.514979] ? ion_query_heaps+0x360/0x360 [ 1501.519238] ? ion_query_heaps+0x360/0x360 [ 1501.523475] do_vfs_ioctl+0x75a/0xff0 [ 1501.527306] ? ioctl_preallocate+0x1a0/0x1a0 [ 1501.531718] ? lock_downgrade+0x740/0x740 [ 1501.536401] ? __fget+0x225/0x360 [ 1501.539854] ? do_vfs_ioctl+0xff0/0xff0 [ 1501.543819] ? security_file_ioctl+0x83/0xb0 [ 1501.548224] SyS_ioctl+0x7f/0xb0 [ 1501.551585] ? do_vfs_ioctl+0xff0/0xff0 [ 1501.555756] do_syscall_64+0x1d5/0x640 [ 1501.559647] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1501.564848] RIP: 0033:0x4665d9 [ 1501.568029] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1501.575736] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1501.583002] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1501.590290] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1501.597579] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1501.604851] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1501.613293] CPU: 0 PID: 11638 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1501.621201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1501.630654] Call Trace: [ 1501.633254] dump_stack+0x1b2/0x281 [ 1501.636077] warn_alloc_show_mem: 1 callbacks suppressed [ 1501.636080] Mem-Info: [ 1501.636892] warn_alloc.cold+0x96/0x1cc [ 1501.636906] ? zone_watermark_ok_safe+0x220/0x220 [ 1501.636927] __alloc_pages_nodemask+0x2127/0x2720 [ 1501.642391] active_anon:12870 inactive_anon:29076 isolated_anon:0 [ 1501.642391] active_file:320 inactive_file:5319 isolated_file:12 [ 1501.642391] unevictable:0 dirty:38 writeback:0 unstable:0 [ 1501.642391] slab_reclaimable:12787 slab_unreclaimable:114568 [ 1501.642391] mapped:39411 shmem:29453 pagetables:684 bounce:0 [ 1501.642391] free:86946 free_pcp:466 free_cma:0 [ 1501.644705] ? __schedule+0x893/0x1de0 [ 1501.644723] ? lock_acquire+0x170/0x3f0 [ 1501.644741] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1501.652561] Node 0 active_anon:50548kB inactive_anon:67036kB active_file:556kB inactive_file:14096kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:107328kB dirty:64kB writeback:0kB shmem:68224kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1501.653555] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1501.659593] Node 1 active_anon:932kB inactive_anon:49268kB active_file:724kB inactive_file:7180kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:50316kB dirty:88kB writeback:0kB shmem:49588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1501.692540] ? __mutex_unlock_slowpath+0x75/0x770 [ 1501.692549] ? retint_kernel+0x2d/0x2d [ 1501.692563] alloc_pages_current+0x155/0x260 [ 1501.692577] ion_page_pool_alloc+0x118/0x1b0 [ 1501.692586] ion_system_heap_allocate+0x133/0x8c0 [ 1501.692598] ? _raw_spin_unlock+0x29/0x40 [ 1501.692605] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1501.692614] ? ion_system_contig_heap_create+0x130/0x130 [ 1501.692624] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1501.692634] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1501.692644] ion_alloc+0x27a/0x810 [ 1501.692656] ? ion_dma_buf_release+0x40/0x40 [ 1501.692667] ? __might_fault+0x177/0x1b0 [ 1501.692678] ion_ioctl+0xea/0x1f0 [ 1501.692687] ? ion_query_heaps+0x360/0x360 [ 1501.692698] ? ion_query_heaps+0x360/0x360 [ 1501.692711] do_vfs_ioctl+0x75a/0xff0 [ 1501.703613] Node 0 [ 1501.705438] ? ioctl_preallocate+0x1a0/0x1a0 [ 1501.705449] ? lock_downgrade+0x740/0x740 [ 1501.705461] ? __fget+0x225/0x360 [ 1501.705469] ? do_vfs_ioctl+0xff0/0xff0 [ 1501.705481] ? security_file_ioctl+0x83/0xb0 [ 1501.705491] SyS_ioctl+0x7f/0xb0 [ 1501.705499] ? do_vfs_ioctl+0xff0/0xff0 [ 1501.705510] do_syscall_64+0x1d5/0x640 [ 1501.705524] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1501.705533] RIP: 0033:0x4665d9 [ 1501.705537] RSP: 002b:00007f59476ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1501.739747] DMA free:11348kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:776kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1501.766609] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1501.766616] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1501.766621] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1501.766625] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1501.766630] R13: 00007ffe53b5751f R14: 00007f59476ef300 R15: 0000000000022000 [ 1501.773811] oom_reaper: reaped process 11640 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1501.779679] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1501.972467] Node 0 DMA32 free:342208kB min:36200kB low:45248kB high:54296kB active_anon:50448kB inactive_anon:67036kB active_file:516kB inactive_file:13640kB unevictable:0kB writepending:64kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7200kB pagetables:2364kB bounce:0kB free_pcp:1068kB local_pcp:352kB free_cma:0kB [ 1502.005079] lowmem_reserve[]: 0 0 0 0 0 [ 1502.009169] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1502.036955] lowmem_reserve[]: 0 0 0 0 0 [ 1502.041544] Node 1 Normal free:222252kB min:53696kB low:67120kB high:80544kB active_anon:856kB inactive_anon:49268kB active_file:760kB inactive_file:7232kB unevictable:0kB writepending:88kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:372kB bounce:0kB free_pcp:752kB local_pcp:24kB free_cma:0kB [ 1502.092812] lowmem_reserve[]: 0 0 0 0 0 [ 1502.116334] Node 0 DMA: 52*4kB (UME) 30*8kB (U) 20*16kB (UE) 16*32kB (UME) 7*64kB (UME) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11456kB [ 1502.135116] Node 0 DMA32: 25389*4kB (UE) 11271*8kB (UME) 5380*16kB (UE) 2027*32kB (UE) 293*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 361420kB [ 1502.155727] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1502.173878] Node 1 Normal: 17144*4kB (UM) 6934*8kB (UM) 4620*16kB (UM) 750*32kB (UME) 40*64kB (UM) 2*128kB (UM) 40*256kB (U) 24*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 247312kB [ 1502.200711] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1502.212829] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1502.224278] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1502.253411] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1502.284511] 35510 total pagecache pages [ 1502.295486] 0 pages in swap cache [ 1502.306122] Swap cache stats: add 0, delete 0, find 0/0 [ 1502.311615] Free swap = 0kB [ 1502.314803] Total swap = 0kB [ 1502.344993] 2097051 pages RAM [ 1502.348130] 0 pages HighMem/MovableOnly [ 1502.352118] 363849 pages reserved [ 1502.363649] 0 pages cma reserved [ 1502.657307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1502.689370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1502.715204] device bridge_slave_1 left promiscuous mode [ 1502.728625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.816887] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 1502.845631] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 1502.850803] CPU: 0 PID: 9263 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1502.858617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1502.868087] Call Trace: [ 1502.870688] dump_stack+0x1b2/0x281 [ 1502.874352] dump_header+0x178/0x82f [ 1502.878079] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1502.883801] ? ___ratelimit+0x2cd/0x530 [ 1502.887777] oom_kill_process.cold+0x10/0xa40 [ 1502.892276] out_of_memory+0xe3e/0x1190 [ 1502.896247] ? oom_killer_disable+0x1c0/0x1c0 [ 1502.900739] ? mutex_trylock+0x152/0x1a0 [ 1502.904834] __alloc_pages_nodemask+0x23e1/0x2720 [ 1502.909746] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1502.914604] alloc_pages_current+0x155/0x260 [ 1502.919016] filemap_fault+0x11a1/0x1ad0 [ 1502.923357] ext4_filemap_fault+0x84/0xb0 [ 1502.927509] __do_fault+0xfa/0x380 [ 1502.931309] __handle_mm_fault+0x2497/0x4620 [ 1502.935716] ? vm_insert_page+0x7c0/0x7c0 [ 1502.939948] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1502.944348] ? nanosleep_copyout+0x100/0x100 [ 1502.948759] ? mark_held_locks+0xa6/0xf0 [ 1502.952815] handle_mm_fault+0x455/0x9c0 [ 1502.956877] __do_page_fault+0x549/0xad0 [ 1502.960931] ? spurious_fault+0x640/0x640 [ 1502.965078] ? do_page_fault+0x60/0x500 [ 1502.969043] ? page_fault+0x2f/0x50 [ 1502.972662] page_fault+0x45/0x50 [ 1502.976108] RIP: 16ebc1:0x2 [ 1502.979039] RSP: 001d:00007ffc498727fc EFLAGS: 00000032 [ 1503.014991] Mem-Info: [ 1503.022814] active_anon:12951 inactive_anon:29075 isolated_anon:0 [ 1503.022814] active_file:34 inactive_file:2 isolated_file:0 [ 1503.022814] unevictable:0 dirty:3 writeback:3 unstable:0 [ 1503.022814] slab_reclaimable:12784 slab_unreclaimable:114933 [ 1503.022814] mapped:52889 shmem:29452 pagetables:771 bounce:0 [ 1503.022814] free:13731 free_pcp:30 free_cma:0 [ 1503.064952] Node 0 active_anon:50804kB inactive_anon:67032kB active_file:72kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:167520kB dirty:12kB writeback:0kB shmem:68220kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1503.093320] Node 1 active_anon:1000kB inactive_anon:49268kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44016kB dirty:0kB writeback:0kB shmem:49588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1503.115036] syz-executor.2: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1503.121220] Node 0 [ 1503.133123] syz-executor.3: [ 1503.133230] DMA free:10952kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1503.149699] page allocation failure: order:0 [ 1503.164665] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1503.164702] Node 0 DMA32 free:17880kB min:36200kB low:45248kB high:54296kB active_anon:50828kB inactive_anon:67028kB active_file:52kB inactive_file:52kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2672kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 1503.164723] lowmem_reserve[]: 0 0 0 0 0 [ 1503.164742] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1503.164758] lowmem_reserve[]: 0 0 0 0 0 [ 1503.164778] Node 1 Normal free:26676kB min:53696kB low:67120kB high:80544kB active_anon:1000kB inactive_anon:49268kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:372kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1503.164796] lowmem_reserve[]: 0 0 0 0 0 [ 1503.164814] Node 0 DMA: 2*4kB (UE) 0*8kB 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10952kB [ 1503.165022] Node 0 DMA32: 450*4kB (ME) 222*8kB (UME) 164*16kB (UME) 37*32kB (ME) 140*64kB (UM) 4*128kB (UM) 2*256kB (M) 1*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 17880kB [ 1503.165095] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1503.165142] Node 1 Normal: 47*4kB (UM) 37*8kB (UM) 21*16kB (UM) 14*32kB (ME) 17*64kB (UM) 8*128kB (UM) 27*256kB (UM) 28*512kB (UM) 2*1024kB (M) 0*2048kB 0*4096kB = 26676kB [ 1503.165216] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1503.165220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1503.165225] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1503.165230] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1503.165233] 29479 total pagecache pages [ 1503.165241] 0 pages in swap cache [ 1503.165246] Swap cache stats: add 0, delete 0, find 0/0 [ 1503.165250] Free swap = 0kB [ 1503.165253] Total swap = 0kB [ 1503.165259] 2097051 pages RAM [ 1503.165263] 0 pages HighMem/MovableOnly [ 1503.165266] 363849 pages reserved [ 1503.165269] 0 pages cma reserved [ 1503.165276] Out of memory (oom_kill_allocating_task): Kill process 9263 (syz-executor.5) score 0 or sacrifice child [ 1503.165308] Killed process 11856 (syz-executor.5) total-vm:93252kB, anon-rss:152kB, file-rss:34820kB, shmem-rss:0kB [ 1503.174565] oom_reaper: reaped process 11856 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 1503.201488] syz-executor.2 cpuset= [ 1503.237008] syz-executor.5 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 1503.244451] syz-executor.5: [ 1503.274947] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1503.292582] / [ 1503.307881] (null) [ 1503.317852] page allocation failure: order:0 [ 1503.334019] (null) [ 1503.340092] mems_allowed=0-1 [ 1503.344950] syz-executor.3 cpuset= [ 1503.353733] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 1503.371252] , order=0, oom_score_adj=0 [ 1503.379387] CPU: 1 PID: 11638 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1503.383684] / [ 1503.384612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1503.388747] mems_allowed=0-1 [ 1503.392125] Call Trace: [ 1503.395571] syz-executor.5 cpuset= [ 1503.406089] dump_stack+0x1b2/0x281 [ 1503.406103] warn_alloc.cold+0x96/0x1cc [ 1503.406114] ? zone_watermark_ok_safe+0x220/0x220 [ 1503.406128] ? usleep_range+0x130/0x130 [ 1503.434941] / [ 1503.440251] ? try_to_free_pages+0x23f/0x6e0 [ 1503.443262] mems_allowed=0-1 [ 1503.450359] ? _find_next_bit+0xdb/0x100 [ 1503.450369] ? run_timer_softirq+0x5a0/0x5a0 [ 1503.450386] __alloc_pages_nodemask+0x2127/0x2720 [ 1503.450403] ? lock_acquire+0x170/0x3f0 [ 1503.550004] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1503.554859] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1503.559369] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1503.564840] alloc_pages_current+0x155/0x260 [ 1503.569261] ion_page_pool_alloc+0x118/0x1b0 [ 1503.573698] ion_system_heap_allocate+0x133/0x8c0 [ 1503.578555] ? _raw_spin_unlock+0x29/0x40 [ 1503.582717] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1503.587649] ? ion_system_contig_heap_create+0x130/0x130 [ 1503.596512] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1503.601534] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1503.606403] ion_alloc+0x27a/0x810 [ 1503.609947] ? ion_dma_buf_release+0x40/0x40 [ 1503.614358] ? __might_fault+0x177/0x1b0 [ 1503.618440] ion_ioctl+0xea/0x1f0 [ 1503.621893] ? ion_query_heaps+0x360/0x360 [ 1503.626128] ? ion_query_heaps+0x360/0x360 [ 1503.630362] do_vfs_ioctl+0x75a/0xff0 [ 1503.634187] ? ioctl_preallocate+0x1a0/0x1a0 [ 1503.638625] ? lock_downgrade+0x740/0x740 [ 1503.642790] ? __fget+0x225/0x360 [ 1503.646248] ? do_vfs_ioctl+0xff0/0xff0 [ 1503.650315] ? security_file_ioctl+0x83/0xb0 [ 1503.654798] SyS_ioctl+0x7f/0xb0 [ 1503.658184] ? do_vfs_ioctl+0xff0/0xff0 [ 1503.662186] do_syscall_64+0x1d5/0x640 [ 1503.666078] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1503.671277] RIP: 0033:0x4665d9 [ 1503.674457] RSP: 002b:00007f59476ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1503.682182] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1503.689449] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1503.696719] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1503.703988] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1503.711268] R13: 00007ffe53b5751f R14: 00007f59476ef300 R15: 0000000000022000 [ 1503.718565] CPU: 0 PID: 11640 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1503.726383] (null) [ 1503.726544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1503.728688] syz-executor.5 cpuset= [ 1503.738029] Call Trace: [ 1503.738053] dump_stack+0x1b2/0x281 [ 1503.738066] warn_alloc.cold+0x96/0x1cc [ 1503.738078] ? zone_watermark_ok_safe+0x220/0x220 [ 1503.738087] ? usleep_range+0x130/0x130 [ 1503.738095] ? try_to_free_pages+0x23f/0x6e0 [ 1503.738105] ? _find_next_bit+0xdb/0x100 [ 1503.738115] ? run_timer_softirq+0x5a0/0x5a0 [ 1503.738130] __alloc_pages_nodemask+0x2127/0x2720 [ 1503.738150] ? lock_acquire+0x170/0x3f0 [ 1503.747790] / [ 1503.747866] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1503.751814] mems_allowed=0-1 [ 1503.756644] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1503.756660] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1503.756679] alloc_pages_current+0x155/0x260 [ 1503.756690] ion_page_pool_alloc+0x118/0x1b0 [ 1503.756700] ion_system_heap_allocate+0x133/0x8c0 [ 1503.756710] ? ion_alloc+0x187/0x810 [ 1503.756728] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1503.825107] ? ion_system_contig_heap_create+0x130/0x130 [ 1503.830567] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1503.835595] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1503.840444] ion_alloc+0x204/0x810 [ 1503.843990] ? ion_dma_buf_release+0x40/0x40 [ 1503.848492] ? __might_fault+0x177/0x1b0 [ 1503.852555] ion_ioctl+0xea/0x1f0 [ 1503.856023] ? ion_query_heaps+0x360/0x360 [ 1503.860271] ? ion_query_heaps+0x360/0x360 [ 1503.864502] do_vfs_ioctl+0x75a/0xff0 [ 1503.868303] ? ioctl_preallocate+0x1a0/0x1a0 [ 1503.872816] ? lock_downgrade+0x740/0x740 [ 1503.876984] ? __fget+0x225/0x360 [ 1503.880431] ? do_vfs_ioctl+0xff0/0xff0 [ 1503.884399] ? security_file_ioctl+0x83/0xb0 [ 1503.889675] SyS_ioctl+0x7f/0xb0 [ 1503.894880] ? do_vfs_ioctl+0xff0/0xff0 [ 1503.898940] do_syscall_64+0x1d5/0x640 [ 1503.902847] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1503.908035] RIP: 0033:0x4665d9 [ 1503.911227] RSP: 002b:00007f2e9a53f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1503.918931] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1503.926198] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1503.933474] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1503.940754] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1503.948017] R13: 00007ffe42256d6f R14: 00007f2e9a53f300 R15: 0000000000022000 [ 1503.955298] CPU: 1 PID: 11856 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1503.963191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1503.972566] Call Trace: [ 1503.975189] dump_stack+0x1b2/0x281 [ 1503.978817] warn_alloc.cold+0x96/0x1cc [ 1503.982890] ? zone_watermark_ok_safe+0x220/0x220 [ 1503.987741] ? usleep_range+0x130/0x130 [ 1503.991728] ? try_to_free_pages+0x23f/0x6e0 [ 1503.996136] ? _find_next_bit+0xdb/0x100 [ 1504.000190] ? run_timer_softirq+0x5a0/0x5a0 [ 1504.004603] __alloc_pages_nodemask+0x2127/0x2720 [ 1504.009452] ? lock_acquire+0x170/0x3f0 [ 1504.013430] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1504.018292] ? ion_page_pool_alloc+0x9e/0x1b0 [ 1504.022789] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1504.028259] alloc_pages_current+0x155/0x260 [ 1504.032665] ion_page_pool_alloc+0x118/0x1b0 [ 1504.037069] ion_system_heap_allocate+0x133/0x8c0 [ 1504.041903] ? ion_alloc+0x187/0x810 [ 1504.045608] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1504.051053] ? ion_system_contig_heap_create+0x130/0x130 [ 1504.056508] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1504.061536] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1504.066413] ion_alloc+0x204/0x810 [ 1504.069953] ? ion_dma_buf_release+0x40/0x40 [ 1504.074359] ? __might_fault+0x177/0x1b0 [ 1504.078440] ion_ioctl+0xea/0x1f0 [ 1504.081890] ? ion_query_heaps+0x360/0x360 [ 1504.086144] ? ion_query_heaps+0x360/0x360 [ 1504.090379] do_vfs_ioctl+0x75a/0xff0 [ 1504.094380] ? ioctl_preallocate+0x1a0/0x1a0 [ 1504.098955] ? lock_downgrade+0x740/0x740 [ 1504.103112] ? __fget+0x225/0x360 [ 1504.106581] ? do_vfs_ioctl+0xff0/0xff0 [ 1504.110641] ? security_file_ioctl+0x83/0xb0 [ 1504.115042] SyS_ioctl+0x7f/0xb0 [ 1504.118403] ? do_vfs_ioctl+0xff0/0xff0 [ 1504.122373] do_syscall_64+0x1d5/0x640 [ 1504.126360] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1504.131566] RIP: 0033:0x4665d9 [ 1504.134759] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1504.142468] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1504.149740] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1504.157006] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1504.166179] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1504.173443] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1504.180745] CPU: 0 PID: 9263 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1504.187628] warn_alloc_show_mem: 1 callbacks suppressed [ 1504.187632] Mem-Info: [ 1504.188561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1504.194006] active_anon:12957 inactive_anon:29074 isolated_anon:0 [ 1504.194006] active_file:14 inactive_file:14 isolated_file:0 [ 1504.194006] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1504.194006] slab_reclaimable:12784 slab_unreclaimable:114918 [ 1504.194006] mapped:52866 shmem:29451 pagetables:761 bounce:0 [ 1504.194006] free:13877 free_pcp:53 free_cma:0 [ 1504.196736] Call Trace: [ 1504.196756] dump_stack+0x1b2/0x281 [ 1504.196767] dump_header+0x178/0x82f [ 1504.196791] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1504.196801] ? ___ratelimit+0x2cd/0x530 [ 1504.196810] oom_kill_process.cold+0x10/0xa40 [ 1504.196828] out_of_memory+0xe3e/0x1190 [ 1504.196841] ? oom_killer_disable+0x1c0/0x1c0 [ 1504.212872] Node 0 active_anon:50828kB inactive_anon:67028kB active_file:52kB inactive_file:52kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:167448kB dirty:0kB writeback:0kB shmem:68216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1504.240307] ? mutex_trylock+0x152/0x1a0 [ 1504.240321] __alloc_pages_nodemask+0x23e1/0x2720 [ 1504.240340] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1504.240362] alloc_pages_current+0x155/0x260 [ 1504.240374] filemap_fault+0x11a1/0x1ad0 [ 1504.240391] ext4_filemap_fault+0x84/0xb0 [ 1504.240401] __do_fault+0xfa/0x380 [ 1504.240411] __handle_mm_fault+0x2497/0x4620 [ 1504.240422] ? vm_insert_page+0x7c0/0x7c0 [ 1504.240430] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 1504.240440] ? nanosleep_copyout+0x100/0x100 [ 1504.248911] Node 1 active_anon:1000kB inactive_anon:49268kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44016kB dirty:0kB writeback:0kB shmem:49588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1504.252555] ? mark_held_locks+0xa6/0xf0 [ 1504.275441] Node 0 [ 1504.302755] handle_mm_fault+0x455/0x9c0 [ 1504.302769] __do_page_fault+0x549/0xad0 [ 1504.302780] ? spurious_fault+0x640/0x640 [ 1504.302788] ? do_page_fault+0x60/0x500 [ 1504.302796] ? page_fault+0x2f/0x50 [ 1504.302802] page_fault+0x45/0x50 [ 1504.302809] RIP: 16ebc1:0x2 [ 1504.302813] RSP: 001d:00007ffc498727fc EFLAGS: 00000032 [ 1504.312013] device bridge_slave_0 left promiscuous mode [ 1504.448757] DMA free:10988kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:120kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1504.449008] Mem-Info: [ 1504.478393] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.502130] active_anon:12934 inactive_anon:29074 isolated_anon:0 [ 1504.502130] active_file:14 inactive_file:1292 isolated_file:0 [ 1504.502130] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1504.502130] slab_reclaimable:12784 slab_unreclaimable:114716 [ 1504.502130] mapped:53842 shmem:29451 pagetables:761 bounce:0 [ 1504.502130] free:51854 free_pcp:442 free_cma:0 [ 1504.579237] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1504.602431] Node 0 DMA32 free:56564kB min:36200kB low:45248kB high:54296kB active_anon:51036kB inactive_anon:67028kB active_file:352kB inactive_file:1436kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2820kB bounce:0kB free_pcp:528kB local_pcp:372kB free_cma:0kB [ 1504.755016] Node 0 active_anon:51036kB inactive_anon:67028kB active_file:752kB inactive_file:2336kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:169648kB dirty:100kB writeback:0kB shmem:68216kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1504.756277] lowmem_reserve[]: [ 1504.787934] device hsr_slave_1 left promiscuous mode [ 1504.855592] device hsr_slave_0 left promiscuous mode [ 1504.860788] 0 0 0 0 0 [ 1504.863424] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1504.884946] Node 1 active_anon:1000kB inactive_anon:49268kB active_file:1804kB inactive_file:1812kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47320kB dirty:0kB writeback:0kB shmem:49588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1504.899685] lowmem_reserve[]: [ 1504.920904] team0 (unregistering): Port device team_slave_1 removed [ 1504.938463] 0 0 0 0 0 [ 1504.941015] Node 1 Normal free:54884kB min:53696kB low:67120kB high:80544kB active_anon:1000kB inactive_anon:49268kB active_file:1804kB inactive_file:1812kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:372kB bounce:0kB free_pcp:1344kB local_pcp:720kB free_cma:0kB [ 1504.964936] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:120kB inactive_file:16kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1505.015646] team0 (unregistering): Port device team_slave_0 removed [ 1505.047636] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1505.047900] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1505.054750] lowmem_reserve[]: [ 1505.063412] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1505.073859] 0 0 0 0 0 [ 1505.076847] Node 0 DMA: 79*4kB (UME) 29*8kB (U) 4*16kB (UE) 1*32kB (E) 1*64kB (E) 3*128kB (UME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11076kB [ 1505.092565] Node 0 DMA32 free:242936kB min:36200kB low:45248kB high:54296kB active_anon:50944kB inactive_anon:67048kB active_file:652kB inactive_file:2380kB unevictable:0kB writepending:148kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2684kB bounce:0kB free_pcp:1340kB local_pcp:716kB free_cma:0kB [ 1505.092586] lowmem_reserve[]: 0 0 0 0 0 [ 1505.092604] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1505.092620] lowmem_reserve[]: 0 0 0 0 0 [ 1505.092641] Node 1 Normal free:64460kB min:53696kB low:67120kB high:80544kB active_anon:1004kB inactive_anon:49268kB active_file:1888kB inactive_file:1804kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:372kB bounce:0kB free_pcp:1344kB local_pcp:624kB free_cma:0kB [ 1505.092660] lowmem_reserve[]: 0 0 0 0 0 [ 1505.092678] Node 0 DMA: 79*4kB (UME) 29*8kB (U) 4*16kB (UE) 1*32kB (E) 1*64kB (E) 3*128kB (UME) 3*256kB [ 1505.192360] bond0 (unregistering): Released all slaves [ 1505.259145] Node 0 DMA32: 8165*4kB (UME) 10193*8kB (UME) 4589*16kB (UME) 1614*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 239276kB [ 1505.264960] (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (U) = 11076kB [ 1505.285012] Node 0 DMA32: 8165*4kB (UME) 10183*8kB (UME) 4589*16kB (UME) 1614*32kB (UME) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 239196kB [ 1505.285735] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1505.344981] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1505.345029] Node 1 Normal: 14324*4kB (UM) 8696*8kB (UM) 5131*16kB (UM) 428*32kB (UE) 6*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 223040kB [ 1505.367819] Node 1 Normal: 14324*4kB (UM) 8696*8kB (UM) 5131*16kB (UM) 428*32kB (UE) 6*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 223040kB [ 1505.425037] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1505.433911] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1505.443810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1505.486340] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1505.495005] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1505.495011] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1505.495015] 31154 total pagecache pages [ 1505.495031] 0 pages in swap cache [ 1505.515747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1505.584973] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1505.585011] Swap cache stats: add 0, delete 0, find 0/0 [ 1505.593708] 31154 total pagecache pages [ 1505.625047] Free swap = 0kB [ 1505.628144] Total swap = 0kB [ 1505.631184] 2097051 pages RAM [ 1505.634297] 0 pages HighMem/MovableOnly [ 1505.634995] 0 pages in swap cache [ 1505.640986] 363849 pages reserved [ 1505.641741] Swap cache stats: add 0, delete 0, find 0/0 [ 1505.646466] 0 pages cma reserved [ 1505.676973] Free swap = 0kB [ 1505.680020] Total swap = 0kB [ 1505.683030] 2097051 pages RAM [ 1505.696824] Out of memory (oom_kill_allocating_task): Kill process 9263 (syz-executor.5) score 0 or sacrifice child [ 1505.704993] 0 pages HighMem/MovableOnly [ 1505.711752] 363849 pages reserved [ 1505.744967] 0 pages cma reserved [ 1505.755863] Killed process 9263 (syz-executor.5) total-vm:93120kB, anon-rss:108kB, file-rss:34820kB, shmem-rss:0kB [ 1505.792827] oom_reaper: reaped process 9263 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB 00:42:25 executing program 2: sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x3ff, 0x16}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x80000001, 0x2, 0x1, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000100)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) [ 1506.514968] Bluetooth: hci5 command 0x0409 tx timeout [ 1506.594992] Bluetooth: hci1 command 0x0409 tx timeout [ 1506.998322] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1507.007014] syz-executor.2: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1507.041909] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 1507.042598] syz-executor.3 cpuset= [ 1507.061901] syz-executor.2 cpuset= [ 1507.065882] syz-executor.5 cpuset= [ 1507.069826] / [ 1507.073822] / mems_allowed=0-1 [ 1507.079370] mems_allowed=0-1 [ 1507.082677] CPU: 1 PID: 11856 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 1507.090563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1507.092210] / [ 1507.099933] Call Trace: [ 1507.104251] dump_stack+0x1b2/0x281 [ 1507.107637] mems_allowed=0-1 [ 1507.107877] warn_alloc.cold+0x96/0x1cc [ 1507.114934] ? zone_watermark_ok_safe+0x220/0x220 [ 1507.119823] __alloc_pages_nodemask+0x2127/0x2720 [ 1507.124670] ? lock_acquire+0x170/0x3f0 [ 1507.128669] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1507.133519] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1507.138971] ? __mutex_unlock_slowpath+0x75/0x770 [ 1507.143842] alloc_pages_current+0x155/0x260 [ 1507.148334] ion_page_pool_alloc+0x118/0x1b0 [ 1507.152753] ion_system_heap_allocate+0x133/0x8c0 [ 1507.157593] ? _raw_spin_unlock+0x29/0x40 [ 1507.161834] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1507.166760] ? ion_system_contig_heap_create+0x130/0x130 [ 1507.172207] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1507.177225] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1507.182077] ion_alloc+0x27a/0x810 [ 1507.185614] ? ion_dma_buf_release+0x40/0x40 [ 1507.190037] ? __might_fault+0x177/0x1b0 [ 1507.194093] ion_ioctl+0xea/0x1f0 [ 1507.197541] ? ion_query_heaps+0x360/0x360 [ 1507.201771] ? ion_query_heaps+0x360/0x360 [ 1507.205997] do_vfs_ioctl+0x75a/0xff0 [ 1507.209791] ? ioctl_preallocate+0x1a0/0x1a0 [ 1507.214218] ? lock_downgrade+0x740/0x740 [ 1507.218367] ? __fget+0x225/0x360 [ 1507.221816] ? do_vfs_ioctl+0xff0/0xff0 [ 1507.225786] ? security_file_ioctl+0x83/0xb0 [ 1507.230189] SyS_ioctl+0x7f/0xb0 [ 1507.233568] ? do_vfs_ioctl+0xff0/0xff0 [ 1507.237537] do_syscall_64+0x1d5/0x640 [ 1507.241421] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1507.246619] RIP: 0033:0x4665d9 [ 1507.249812] RSP: 002b:00007f5aca1a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1507.257529] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1507.264790] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1507.272052] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1507.279314] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1507.286580] R13: 00007ffc4987253f R14: 00007f5aca1a6300 R15: 0000000000022000 [ 1507.293866] CPU: 0 PID: 11640 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 1507.301856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1507.311221] Call Trace: [ 1507.313812] dump_stack+0x1b2/0x281 [ 1507.317451] warn_alloc.cold+0x96/0x1cc [ 1507.321443] ? zone_watermark_ok_safe+0x220/0x220 [ 1507.326571] __alloc_pages_nodemask+0x2127/0x2720 [ 1507.331509] ? _raw_spin_unlock_irq+0x24/0x80 [ 1507.336270] ? check_preemption_disabled+0x35/0x240 [ 1507.341292] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1507.346137] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1507.351585] ? __mutex_unlock_slowpath+0x75/0x770 [ 1507.356425] alloc_pages_current+0x155/0x260 [ 1507.360830] ion_page_pool_alloc+0x118/0x1b0 [ 1507.365230] ion_system_heap_allocate+0x133/0x8c0 [ 1507.370084] ? _raw_spin_unlock+0x29/0x40 [ 1507.374238] ? _ion_heap_freelist_drain+0x6e/0x410 [ 1507.379259] ? ion_system_contig_heap_create+0x130/0x130 [ 1507.384800] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1507.390609] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1507.395460] ion_alloc+0x27a/0x810 [ 1507.398998] ? ion_dma_buf_release+0x40/0x40 [ 1507.403405] ? __might_fault+0x177/0x1b0 [ 1507.407467] ion_ioctl+0xea/0x1f0 [ 1507.410936] ? ion_query_heaps+0x360/0x360 [ 1507.415604] ? ion_query_heaps+0x360/0x360 [ 1507.419956] do_vfs_ioctl+0x75a/0xff0 [ 1507.423753] ? ioctl_preallocate+0x1a0/0x1a0 [ 1507.428163] ? lock_downgrade+0x740/0x740 [ 1507.432577] ? __fget+0x225/0x360 [ 1507.436022] ? do_vfs_ioctl+0xff0/0xff0 [ 1507.439987] ? security_file_ioctl+0x83/0xb0 [ 1507.444389] SyS_ioctl+0x7f/0xb0 [ 1507.447751] ? do_vfs_ioctl+0xff0/0xff0 [ 1507.451734] do_syscall_64+0x1d5/0x640 [ 1507.455624] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1507.460894] RIP: 0033:0x4665d9 [ 1507.464078] RSP: 002b:00007f2e9a53f188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1507.471794] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1507.479063] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1507.486495] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1507.493757] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1507.501017] R13: 00007ffe42256d6f R14: 00007f2e9a53f300 R15: 0000000000022000 [ 1507.508456] CPU: 1 PID: 11881 Comm: syz-executor.2 Not tainted 4.14.232-syzkaller #0 [ 1507.516432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1507.525787] Call Trace: [ 1507.528397] dump_stack+0x1b2/0x281 [ 1507.532174] warn_alloc.cold+0x96/0x1cc [ 1507.536187] ? zone_watermark_ok_safe+0x220/0x220 [ 1507.541074] __alloc_pages_nodemask+0x2127/0x2720 [ 1507.545931] ? lock_acquire+0x170/0x3f0 [ 1507.546439] warn_alloc_show_mem: 2 callbacks suppressed [ 1507.546443] Mem-Info: [ 1507.549930] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1507.549948] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 1507.555417] active_anon:12966 inactive_anon:29080 isolated_anon:24 [ 1507.555417] active_file:1428 inactive_file:1166 isolated_file:21 [ 1507.555417] unevictable:0 dirty:45 writeback:0 unstable:0 [ 1507.555417] slab_reclaimable:12776 slab_unreclaimable:113577 [ 1507.555417] mapped:55224 shmem:29459 pagetables:739 bounce:0 [ 1507.555417] free:238636 free_pcp:140 free_cma:0 [ 1507.557739] ? __mutex_unlock_slowpath+0x75/0x770 [ 1507.557750] ? retint_kernel+0x2d/0x2d [ 1507.562717] Node 0 active_anon:50932kB inactive_anon:67052kB active_file:3136kB inactive_file:3732kB unevictable:0kB isolated(anon):48kB isolated(file):84kB mapped:173380kB dirty:176kB writeback:0kB shmem:68248kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1507.568193] alloc_pages_current+0x155/0x260 [ 1507.568208] ion_page_pool_alloc+0x118/0x1b0 [ 1507.568218] ion_system_heap_allocate+0x133/0x8c0 [ 1507.568227] ? ion_alloc+0x187/0x810 [ 1507.568238] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 1507.568246] ? ion_system_contig_heap_create+0x130/0x130 [ 1507.568274] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1507.608500] Node 1 active_anon:932kB inactive_anon:49268kB active_file:2576kB inactive_file:932kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:47516kB dirty:4kB writeback:0kB shmem:49588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1507.611028] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 1507.611042] ion_alloc+0x204/0x810 [ 1507.639470] Node 0 [ 1507.643810] ? ion_dma_buf_release+0x40/0x40 [ 1507.643829] ? __might_fault+0x177/0x1b0 [ 1507.651739] DMA free:10996kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:124kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1507.653107] ion_ioctl+0xea/0x1f0 [ 1507.653118] ? ion_query_heaps+0x360/0x360 [ 1507.658334] lowmem_reserve[]: [ 1507.662420] ? ion_query_heaps+0x360/0x360 [ 1507.662432] do_vfs_ioctl+0x75a/0xff0 [ 1507.662445] ? ioctl_preallocate+0x1a0/0x1a0 [ 1507.669766] 0 [ 1507.673250] ? lock_downgrade+0x740/0x740 [ 1507.673267] ? __fget+0x225/0x360 [ 1507.702368] 2717 [ 1507.705676] ? do_vfs_ioctl+0xff0/0xff0 [ 1507.705690] ? security_file_ioctl+0x83/0xb0 [ 1507.705701] SyS_ioctl+0x7f/0xb0 [ 1507.705709] ? do_vfs_ioctl+0xff0/0xff0 [ 1507.705721] do_syscall_64+0x1d5/0x640 [ 1507.705736] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1507.712033] 2718 [ 1507.715902] RIP: 0033:0x4665d9 [ 1507.715908] RSP: 002b:00007f59476ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1507.715917] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 1507.715923] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1507.715928] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 1507.715933] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1507.715939] R13: 00007ffe53b5751f R14: 00007f59476ef300 R15: 0000000000022000 [ 1508.008274] 2718 2718 [ 1508.012264] Node 0 DMA32 free:414624kB min:36200kB low:45248kB high:54296kB active_anon:50932kB inactive_anon:67052kB active_file:2616kB inactive_file:4104kB unevictable:0kB writepending:176kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2672kB bounce:0kB free_pcp:440kB local_pcp:248kB free_cma:0kB [ 1508.017073] IPVS: ftp: loaded support on port[0] = 21 [ 1508.044423] lowmem_reserve[]: 0 0 0 0 0 [ 1508.053543] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1508.084859] lowmem_reserve[]: 0 0 0 0 0 [ 1508.091943] Node 1 Normal free:265620kB min:53696kB low:67120kB high:80544kB active_anon:932kB inactive_anon:49268kB active_file:2528kB inactive_file:1028kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:284kB bounce:0kB free_pcp:76kB local_pcp:0kB free_cma:0kB [ 1508.160201] lowmem_reserve[]: 0 0 0 0 0 [ 1508.170006] Node 0 DMA: 69*4kB (UME) 40*8kB (U) 20*16kB (UE) 15*32kB (UE) 2*64kB (UE) 2*128kB (ME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10996kB [ 1508.171183] IPVS: ftp: loaded support on port[0] = 21 [ 1508.187053] Node 0 DMA32: 104*4kB (E) 109*8kB (ME) 8024*16kB (UME) 5895*32kB (UME) 32*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 320360kB [ 1508.208443] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1508.220063] Node 1 Normal: 5029*4kB (UM) 5088*8kB (U) 4504*16kB (UM) 4148*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 265620kB [ 1508.235612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1508.245762] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1508.254441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1508.264882] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1508.274094] 32105 total pagecache pages [ 1508.280823] 0 pages in swap cache [ 1508.284355] Swap cache stats: add 0, delete 0, find 0/0 [ 1508.291274] Free swap = 0kB [ 1508.296203] Total swap = 0kB [ 1508.300061] 2097051 pages RAM [ 1508.303228] 0 pages HighMem/MovableOnly [ 1508.309027] 363849 pages reserved [ 1508.313112] 0 pages cma reserved [ 1508.438728] chnl_net:caif_netlink_parms(): no params data found [ 1508.452227] syz-executor.4: page allocation failure: order:5, mode:0x1084020(GFP_ATOMIC|__GFP_COMP), nodemask=(null) [ 1508.462938] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 1508.468057] CPU: 0 PID: 11863 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1508.475932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1508.485425] Call Trace: [ 1508.488027] dump_stack+0x1b2/0x281 [ 1508.491777] warn_alloc.cold+0x96/0x1cc [ 1508.495765] ? zone_watermark_ok_safe+0x220/0x220 [ 1508.500721] ? wake_all_kswapds+0x175/0x360 [ 1508.505155] __alloc_pages_nodemask+0x2127/0x2720 [ 1508.510003] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 1508.515028] ? __alloc_pages_nodemask+0x1a6e/0x2720 [ 1508.520163] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1508.525027] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1508.530064] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1508.535445] ? calc_wheel_index+0xb1/0x1c0 [ 1508.539688] ? cache_alloc_refill+0x2fa/0x350 [ 1508.544180] ? ____cache_alloc_node+0x156/0x1d0 [ 1508.548874] cache_grow_begin+0x91/0x700 [ 1508.552958] fallback_alloc+0x207/0x2c0 [ 1508.556932] __kmalloc+0x213/0x400 [ 1508.560474] ? batadv_hash_new+0xaa/0x270 [ 1508.564627] batadv_hash_new+0xaa/0x270 [ 1508.568604] ? batadv_bla_status_update+0x2b0/0x2b0 [ 1508.573625] batadv_dat_init+0x61/0x170 [ 1508.577696] batadv_mesh_init+0x4a8/0x630 [ 1508.581850] batadv_softif_init_late+0xa26/0xc90 [ 1508.586708] ? batadv_get_strings+0x40/0x40 [ 1508.592795] ? dev_valid_name+0x1a0/0x1a0 [ 1508.596949] ? batadv_get_strings+0x40/0x40 [ 1508.601274] register_netdevice+0x291/0xe40 [ 1508.605602] ? netdev_change_features+0xa0/0xa0 [ 1508.610282] ? rtnl_create_link+0x129/0x890 [ 1508.614641] rtnl_newlink+0x14ff/0x1860 [ 1508.618677] ? rtnl_newlink+0x43d/0x1860 [ 1508.622760] ? __lock_acquire+0x5fc/0x3f20 [ 1508.627027] ? trace_hardirqs_on+0x10/0x10 [ 1508.631264] ? rtnl_dellink+0x6a0/0x6a0 [ 1508.635327] ? trace_hardirqs_on+0x10/0x10 [ 1508.639560] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1508.645448] ? deref_stack_reg+0x124/0x1a0 [ 1508.649726] ? lock_acquire+0x170/0x3f0 [ 1508.653837] ? lock_downgrade+0x740/0x740 [ 1508.658000] ? rtnl_dellink+0x6a0/0x6a0 [ 1508.661978] rtnetlink_rcv_msg+0x3be/0xb10 [ 1508.666223] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1508.670813] ? __netlink_lookup+0x345/0x5d0 [ 1508.675145] netlink_rcv_skb+0x125/0x390 [ 1508.679208] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1508.683705] ? netlink_ack+0x9a0/0x9a0 [ 1508.687601] netlink_unicast+0x437/0x610 [ 1508.691668] ? netlink_sendskb+0xd0/0xd0 [ 1508.695764] ? __check_object_size+0x179/0x230 [ 1508.700360] netlink_sendmsg+0x62e/0xb80 [ 1508.704426] ? nlmsg_notify+0x170/0x170 [ 1508.708418] ? security_socket_sendmsg+0x83/0xb0 [ 1508.713176] ? nlmsg_notify+0x170/0x170 [ 1508.717628] sock_sendmsg+0xb5/0x100 [ 1508.721347] SyS_sendto+0x1c7/0x2c0 [ 1508.724992] ? SyS_getpeername+0x220/0x220 [ 1508.729262] ? sock_poll+0x220/0x220 [ 1508.732980] ? SyS_socket+0x12f/0x1b0 [ 1508.736783] ? move_addr_to_kernel+0x60/0x60 [ 1508.741190] ? __do_page_fault+0x159/0xad0 [ 1508.745426] ? do_syscall_64+0x4c/0x640 [ 1508.749400] ? SyS_getpeername+0x220/0x220 [ 1508.753636] do_syscall_64+0x1d5/0x640 [ 1508.757529] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1508.762722] RIP: 0033:0x41956c [ 1508.766019] RSP: 002b:00007ffe7455a500 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1508.773754] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041956c [ 1508.781072] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1508.788362] RBP: 0000000000000000 R08: 00007ffe7455a554 R09: 000000000000000c [ 1508.795652] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1508.802925] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1508.810290] warn_alloc_show_mem: 2 callbacks suppressed [ 1508.810293] Mem-Info: [ 1508.818064] active_anon:12966 inactive_anon:29080 isolated_anon:0 [ 1508.818064] active_file:1436 inactive_file:1190 isolated_file:0 [ 1508.818064] unevictable:0 dirty:55 writeback:0 unstable:0 [ 1508.818064] slab_reclaimable:12775 slab_unreclaimable:113590 [ 1508.818064] mapped:55238 shmem:29459 pagetables:739 bounce:0 [ 1508.818064] free:25362 free_pcp:109 free_cma:0 [ 1508.851757] Node 0 active_anon:50932kB inactive_anon:67052kB active_file:3316kB inactive_file:3432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:173436kB dirty:216kB writeback:0kB shmem:68248kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1508.880058] Node 1 active_anon:932kB inactive_anon:49268kB active_file:2400kB inactive_file:1028kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:47516kB dirty:4kB writeback:0kB shmem:49588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1508.907484] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:60kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1508.933980] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 1508.939011] Node 0 DMA32 free:18008kB min:36200kB low:45248kB high:54296kB active_anon:50932kB inactive_anon:67052kB active_file:3056kB inactive_file:3096kB unevictable:0kB writepending:216kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7328kB pagetables:2672kB bounce:0kB free_pcp:836kB local_pcp:144kB free_cma:0kB [ 1508.968529] lowmem_reserve[]: 0 0 0 0 0 [ 1508.972535] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1508.998060] lowmem_reserve[]: 0 0 0 0 0 [ 1509.002148] Node 1 Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:932kB inactive_anon:49268kB active_file:1860kB inactive_file:1228kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:288kB pagetables:284kB bounce:0kB free_pcp:524kB local_pcp:0kB free_cma:0kB [ 1509.031221] lowmem_reserve[]: 0 0 0 0 0 [ 1509.035229] Node 0 DMA: 64*4kB (UME) 40*8kB (U) 20*16kB (UE) 15*32kB (UE) 2*64kB (UE) 2*128kB (ME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10976kB [ 1509.050915] Node 0 DMA32: 124*4kB (UME) 109*8kB (ME) 141*16kB (ME) 373*32kB (UME) 39*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18056kB [ 1509.065106] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1509.075816] Node 1 Normal: 6*4kB (M) 0*8kB 3*16kB (M) 836*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 26824kB [ 1509.088097] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1509.096925] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1509.105489] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1509.114330] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1509.122897] 31830 total pagecache pages [ 1509.126872] 0 pages in swap cache [ 1509.130308] Swap cache stats: add 0, delete 0, find 0/0 [ 1509.135855] Free swap = 0kB [ 1509.138857] Total swap = 0kB [ 1509.141875] 2097051 pages RAM [ 1509.144966] 0 pages HighMem/MovableOnly [ 1509.148933] 363849 pages reserved [ 1509.152375] 0 pages cma reserved [ 1509.175286] Bluetooth: hci5 command 0x041b tx timeout [ 1509.203272] oom_reaper: reaped process 11881 (syz-executor.2), now anon-rss:0kB, file-rss:12kB, shmem-rss:0kB [ 1509.221434] Bluetooth: hci1 command 0x041b tx timeout [ 1509.230367] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 1509.243419] systemd-journal cpuset=/ mems_allowed=0-1 [ 1509.249773] CPU: 0 PID: 11528 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 1509.257834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1509.267457] Call Trace: [ 1509.270307] dump_stack+0x1b2/0x281 [ 1509.273927] dump_header+0x178/0x82f [ 1509.277645] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 1509.282749] ? ___ratelimit+0x2cd/0x530 [ 1509.286728] oom_kill_process.cold+0x10/0xa40 [ 1509.291228] out_of_memory+0xe3e/0x1190 [ 1509.295201] ? oom_killer_disable+0x1c0/0x1c0 [ 1509.299689] ? mutex_trylock+0x152/0x1a0 [ 1509.303767] __alloc_pages_nodemask+0x23e1/0x2720 [ 1509.308616] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 1509.313550] ? cache_grow_begin+0x3f/0x700 [ 1509.317774] cache_grow_begin+0x91/0x700 [ 1509.321920] fallback_alloc+0x207/0x2c0 [ 1509.325984] kmem_cache_alloc+0x1e5/0x3c0 [ 1509.330350] getname_flags+0xc8/0x550 [ 1509.334145] do_sys_open+0x1ce/0x410 [ 1509.337874] ? filp_open+0x60/0x60 [ 1509.341409] ? do_syscall_64+0x4c/0x640 [ 1509.345373] ? do_sys_open+0x410/0x410 [ 1509.349255] do_syscall_64+0x1d5/0x640 [ 1509.353148] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1509.358343] RIP: 0033:0x7fb944f80840 [ 1509.362061] RSP: 002b:00007fffbeb15cc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1509.369763] RAX: ffffffffffffffda RBX: 00007fffbeb15fd0 RCX: 00007fb944f80840 [ 1509.377030] RDX: 00000000000001a0 RSI: 0000000000080042 RDI: 000055deac683830 [ 1509.384296] RBP: 000000000000000d R08: 00000000000001c0 R09: 00000000ffffffff [ 1509.391555] R10: 0000000000000069 R11: 0000000000000246 R12: 00000000ffffffff [ 1509.398834] R13: 000055deac67e040 R14: 00007fffbeb15f90 R15: 000055deac683120 [ 1509.444456] Mem-Info: [ 1509.449266] active_anon:12946 inactive_anon:29078 isolated_anon:0 [ 1509.449266] active_file:67 inactive_file:40 isolated_file:0 [ 1509.449266] unevictable:0 dirty:7 writeback:0 unstable:0 [ 1509.449266] slab_reclaimable:12769 slab_unreclaimable:113428 [ 1509.449266] mapped:52953 shmem:29459 pagetables:739 bounce:0 [ 1509.449266] free:14251 free_pcp:0 free_cma:0 [ 1509.462150] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: (null) [ 1509.484686] Node 0 active_anon:50852kB inactive_anon:67044kB active_file:148kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:167728kB dirty:24kB writeback:0kB shmem:68248kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1509.492638] ------------[ cut here ]------------ [ 1509.522489] Node 1 active_anon:932kB inactive_anon:49268kB active_file:120kB inactive_file:148kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:44084kB dirty:4kB writeback:0kB shmem:49588kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1509.525174] WARNING: CPU: 0 PID: 11863 at lib/debugobjects.c:287 debug_print_object.cold+0xa7/0xdb [ 1509.525181] Kernel panic - not syncing: panic_on_warn set ... [ 1509.525181] [ 1509.525189] CPU: 0 PID: 11863 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 1509.525193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1509.525196] Call Trace: [ 1509.525214] dump_stack+0x1b2/0x281 [ 1509.525224] panic+0x1f9/0x42d [ 1509.525234] ? add_taint.cold+0x16/0x16 [ 1509.555830] Node 0 [ 1509.561767] ? debug_print_object.cold+0xa7/0xdb [ 1509.571126] DMA free:11004kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1509.577091] ? debug_print_object.cold+0xa7/0xdb [ 1509.577099] __warn.cold+0x20/0x44 [ 1509.577110] ? ist_end_non_atomic+0x10/0x10 [ 1509.577117] ? debug_print_object.cold+0xa7/0xdb [ 1509.577124] report_bug+0x208/0x250 [ 1509.577134] do_error_trap+0x195/0x2d0 [ 1509.577142] ? math_error+0x2d0/0x2d0 [ 1509.577156] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1509.588502] lowmem_reserve[]: [ 1509.589096] invalid_op+0x1b/0x40 [ 1509.592947] 0 2717 [ 1509.596138] RIP: 0010:debug_print_object.cold+0xa7/0xdb [ 1509.596142] RSP: 0018:ffff8880390df248 EFLAGS: 00010086 [ 1509.596149] RAX: 0000000000000061 RBX: 0000000000000005 RCX: 0000000000000000 [ 1509.596153] RDX: 0000000000000000 RSI: ffffffff878bbbc0 RDI: ffffed100721be3f [ 1509.596157] RBP: ffffffff878b6e80 R08: 0000000000000061 R09: 0000000000000001 [ 1509.596161] R10: 0000000000000000 R11: ffff88801c186540 R12: 0000000000000000 [ 1509.596172] R13: 0000000000000000 R14: ffff888091623070 R15: 1ffff1100721be52 [ 1509.596191] ? debug_print_object.cold+0xa7/0xdb [ 1509.600135] 2718 [ 1509.602366] debug_object_assert_init+0x1d3/0x2d0 [ 1509.609135] 2718 [ 1509.632725] ? debug_object_active_state+0x330/0x330 [ 1509.632734] ? rtnl_newlink+0x14ff/0x1860 [ 1509.632740] ? rtnetlink_rcv_msg+0x3be/0xb10 [ 1509.632748] ? netlink_rcv_skb+0x125/0x390 [ 1509.632757] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1509.632768] del_timer+0x5d/0xe0 [ 1509.632775] ? process_timeout+0x20/0x20 [ 1509.632786] try_to_grab_pending+0x243/0x610 [ 1509.632795] __cancel_work_timer+0x90/0x460 [ 1509.632804] ? work_on_cpu_safe+0x70/0x70 [ 1509.632816] ? batadv_tvlv_handler_get+0x1db/0x2b0 [ 1509.632829] batadv_nc_mesh_free+0x41/0x120 [ 1509.632836] batadv_mesh_free+0x70/0x150 [ 1509.632843] batadv_mesh_init+0x561/0x630 [ 1509.632855] batadv_softif_init_late+0xa26/0xc90 [ 1509.639666] 2718 [ 1509.641149] ? batadv_get_strings+0x40/0x40 [ 1509.657834] ? dev_valid_name+0x1a0/0x1a0 [ 1509.661619] Node 0 [ 1509.666490] ? batadv_get_strings+0x40/0x40 [ 1509.666502] register_netdevice+0x291/0xe40 [ 1509.666512] ? netdev_change_features+0xa0/0xa0 [ 1509.666520] ? rtnl_create_link+0x129/0x890 [ 1509.666529] rtnl_newlink+0x14ff/0x1860 [ 1509.666535] ? rtnl_newlink+0x43d/0x1860 [ 1509.666543] ? __lock_acquire+0x5fc/0x3f20 [ 1509.666556] ? trace_hardirqs_on+0x10/0x10 [ 1509.666563] ? rtnl_dellink+0x6a0/0x6a0 [ 1509.666570] ? trace_hardirqs_on+0x10/0x10 [ 1509.666580] ? __read_once_size_nocheck.constprop.0+0x10/0x10 [ 1509.666587] ? deref_stack_reg+0x124/0x1a0 [ 1509.666625] ? lock_acquire+0x170/0x3f0 [ 1509.674034] DMA32 free:18664kB min:36200kB low:45248kB high:54296kB active_anon:50852kB inactive_anon:67044kB active_file:128kB inactive_file:108kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7296kB pagetables:2672kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1509.675490] ? lock_downgrade+0x740/0x740 [ 1509.675502] ? rtnl_dellink+0x6a0/0x6a0 [ 1509.675509] rtnetlink_rcv_msg+0x3be/0xb10 [ 1509.675520] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1509.675530] ? __netlink_lookup+0x345/0x5d0 [ 1509.675543] netlink_rcv_skb+0x125/0x390 [ 1509.675551] ? rtnl_calcit.isra.0+0x3a0/0x3a0 [ 1509.675563] ? netlink_ack+0x9a0/0x9a0 [ 1509.682450] lowmem_reserve[]: [ 1509.686322] netlink_unicast+0x437/0x610 [ 1509.686335] ? netlink_sendskb+0xd0/0xd0 [ 1509.686344] ? __check_object_size+0x179/0x230 [ 1509.686353] netlink_sendmsg+0x62e/0xb80 [ 1509.686364] ? nlmsg_notify+0x170/0x170 [ 1509.686377] ? security_socket_sendmsg+0x83/0xb0 [ 1509.686385] ? nlmsg_notify+0x170/0x170 [ 1509.686393] sock_sendmsg+0xb5/0x100 [ 1509.686402] SyS_sendto+0x1c7/0x2c0 [ 1509.686409] ? SyS_getpeername+0x220/0x220 [ 1509.686426] ? sock_poll+0x220/0x220 [ 1509.686439] ? SyS_socket+0x12f/0x1b0 [ 1509.699312] 0 [ 1509.700990] ? move_addr_to_kernel+0x60/0x60 [ 1509.708397] 0 [ 1509.715607] ? __do_page_fault+0x159/0xad0 [ 1509.715618] ? do_syscall_64+0x4c/0x640 [ 1509.715627] ? SyS_getpeername+0x220/0x220 [ 1509.715634] do_syscall_64+0x1d5/0x640 [ 1509.715649] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1509.715656] RIP: 0033:0x41956c [ 1509.715661] RSP: 002b:00007ffe7455a500 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1509.715669] RAX: ffffffffffffffda RBX: 00000000014a4320 RCX: 000000000041956c [ 1509.715674] RDX: 000000000000003c RSI: 00000000014a4370 RDI: 0000000000000003 [ 1509.715678] RBP: 0000000000000000 R08: 00007ffe7455a554 R09: 000000000000000c [ 1509.715682] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1509.715685] R13: 00000000014a4370 R14: 0000000000000003 R15: 0000000000000000 [ 1509.723659] Kernel Offset: disabled [ 1510.066549] Rebooting in 86400 seconds..